Detailed review

SafePal review: air-gapped cold storage for under $50

Independent publication≈ 10 min read

Binance Labs-backed SafePal sells the cheapest true air-gapped hardware wallet from a major brand: no USB data port, no Bluetooth, no WiFi — just QR codes passed between the device and your phone. We separate the S1/S1 Pro's real air-gap from the Bluetooth-connected X1 that's marketed alongside them, and dig into the 2021 Kraken Security Labs findings.

Visit safepal.com → Referral code: ntexmgu

Referral link — we may earn a commission at no extra cost to you. Our reviews stay editorially independent of commissions.

Disclosure: ColdCompare is an independent blog and is NOT affiliated with, endorsed by or operated by SafePal. All trademarks remain the property of their respective owners. Some links may be referral links — details below every button.

the SafePal S1 — an air-gapped hardware wallet that signs transactions via QR code only.
The SafePal S1 — an air-gapped hardware wallet that signs transactions via QR code only.
01Post 01

Our concise assessment

SafePal makes QR-based air-gapped cold storage available at a low entry price on the S1/S1 Pro. The trade-offs include a small screen and a 2021 Kraken Security Labs review that found tamper-detection and firmware-downgrade weaknesses; SafePal disputed parts of Kraken's interpretation and patched the downgrade path in firmware v1.0.24.

Where it stands out

  • Cheapest true air-gapped hardware wallet from a major brand ($49.99 S1)
  • No USB data path, Bluetooth or WiFi on the S1/S1 Pro — QR codes only
  • EAL6+ certified secure element on the S1 and S1 Pro
  • 200+ blockchains claimed with a feature-rich all-in-one app (swap, stake, DeFi, NFTs)
  • Deep Binance integration for easy fiat on/off-ramps if you're already in that ecosystem
  • Steel 'Cypher Seed Board' available for a fire/water-resistant physical backup

Trade-offs to keep in mind

  • Build quality repeatedly described as feeling cheap relative to the price
  • Small 1.3" screen makes careful transaction verification harder than larger-screen competitors
  • No official desktop app — mobile/browser-extension only
  • Easy to confuse with the S1/S1 Pro; the X1 model is Bluetooth-connected, not air-gapped.
  • A 2021 Kraken Security Labs audit found a tamper-detection bypass and a firmware downgrade flaw (patched); no clear independent audit since
  • Buy only from safepal.com; watch for phishing/lookalike 'SafePal' sites.
SafePal brings QR-based air-gapped signing to a low price point on the S1/S1 Pro, with clear trade-offs in screen size and build feel.
02THE BASICS

What exactly is SafePal?

SafePal offers both software and hardware wallets. On the S1/S1 Pro, transaction data moves between the phone and device via QR codes rather than a USB, Bluetooth or Wi-Fi data connection. The flagship S1 and S1 Pro are genuinely air-gapped: no USB data port, Bluetooth, or WiFi at all. The device and the SafePal mobile app communicate purely by scanning QR codes back and forth.

SafePal also sells the X1, which uses Bluetooth 5.0 and therefore is not air-gapped in the same sense as the QR-only S1/S1 Pro.

03SECURITY

Security & protection model: EAL6+ chip, air-gap, and the 2021 Kraken findings

SafePal's current X1 product page advertises an EAL6+ secure element, while another SafePal comparison/store page still lists the X1 as CC EAL5+. Because SafePal's own current pages conflict, we do not present a single X1 certification level here as settled. The S1 and S1 Pro are advertised as EAL6+. The X1 uses Bluetooth 5.0, so its connectivity model is different from the QR-only S1/S1 Pro regardless of certification wording.

With no USB data, Bluetooth or WiFi, there's simply no wireless or wired data channel for malware to reach the device through. Backup is a standard 12/24-word seed phrase, with an optional BIP39 passphrase and a steel 'Cypher Seed Board' sold separately for physical durability; the core security feature is the air-gapped QR signing on S1/S1 Pro.

In February 2021, Kraken Security Labs published findings on the original S1: the tamper-detection could be bypassed with a grounded RF shield clip, and the device was vulnerable to a firmware downgrade attack that could re-expose old bugs. Kraken didn't demonstrate direct fund theft but flagged the weaknesses as enabling future compromise; SafePal patched the downgrade issue in firmware v1.0.24. This is a 2021 finding, not current — we found no independently published, comprehensive 2024–2026 penetration test to say whether newer issues exist or don't, which is worth stating plainly rather than implying a clean record.

[EAL6+]

Certified secure element

S1 and S1 Pro are advertised as EAL6+; SafePal currently publishes conflicting EAL5+/EAL6+ information for the X1.

[QR]

True air-gap (S1/S1 Pro)

No USB data, Bluetooth or WiFi — transactions pass as QR codes only.

[TMP]

Anti-tamper design

Self-destruct mechanism intended to wipe keys on detected physical tampering.

[SEED]

12/24-word backup

Standard seed phrase plus optional BIP39 passphrase; steel backup board sold separately.

[2021]

Kraken audit findings (patched)

No confirmed newer audit found; a 2021 third-party audit found and SafePal patched a tamper-bypass and downgrade flaw.

[!]

X1 is not air-gapped

Don't assume they're equivalent; the Bluetooth-connected X1 is a different security model from the S1/S1 Pro.

04PRICING

Price & costs & product line

SafePal's three current hardware models span air-gapped and Bluetooth-connected designs at different price points.

Most popular
S1
$49.99
Air-gapped, QR-only
EAL6+ chip
no USB data, Bluetooth or WiFi; the cheapest true air-gapped hardware wallet from a major brand.
S1 Pro
$89.99
Air-gapped, QR-only
EAL6+ chip, larger screen
same air-gap security as the S1, with a bigger screen that makes transaction verification easier.
X1
$69.99
Bluetooth-connected
Bluetooth 5.0
pairs over Bluetooth; SafePal currently publishes conflicting EAL5+/EAL6+ certification information for this model.

Prices re-checked on safepal.com on September 11, 2026, excluding VAT/duty. Buy only from the official store or an authorized reseller.

The SafePal device showing its on-device asset list.
The SafePal device showing its on-device asset list.
05THE APP

The app: supported assets & features

SafePal advertises 200+ blockchains and broad token/NFT support. Check the live compatibility list before buying for a specific network or asset.

The SafePal App is available on mobile and as a browser extension, but there is no native desktop client. It includes swap/DEX routing, fiat on/off-ramps, staking/yield features, a dApp browser and NFT management. Deep Binance integration, including Binance Pay, is a differentiator for users already in that ecosystem.

[COIN]

200+ blockchains

~10,000 pre-installed assets claimed, with new chains added regularly.

[SWP]

Built-in swap/DEX

Aggregated liquidity across Uniswap, SushiSwap, PancakeSwap and Binance, ~0.2% fee.

[BNB]

Binance integration

Binance Pay deposits and the SFP token tie the wallet into the Binance ecosystem.

[STK]

Staking / yield

In-app staking and liquid-staking partnerships (e.g. Tonstakers) with variable APY.

[DAPP]

DApp browser

Direct access to DeFi protocols from inside the SafePal app.

[!]

No desktop app

A real limitation for desktop-first users; management is mobile and browser-extension only.

06HEAD TO HEAD

SafePal vs. Ledger vs. Trezor

Ledger and Trezor have longer public security track records. On price, SafePal undercuts both major competitors clearly: $49.99–$89.99 versus roughly $99+ for Ledger and $129+ for Trezor. On connectivity, the S1/S1 Pro's true air-gap gives them a smaller attack surface on paper than Ledger's USB/Bluetooth models or Trezor's USB-first design.

On coin support, SafePal's 200+ chains sit ahead of Trezor's narrower native list but behind Ledger's claimed 15,000+ tokens. On transparency, Trezor is fully open-source (an edge SafePal doesn't match on the S1/S1 Pro), while Ledger's secure-element firmware remains closed-source.

07HONEST TAKE

Honest criticism: where the price cuts show

Build quality is one of the most consistent complaints in third-party reviews. Some reviewers consider the S1 Pro less premium-feeling than its price suggests, despite its aluminum components; if finish and feel matter to you, that is worth considering before buying.

The 1.3-inch screen is a security-usability trade-off. Carefully checking long addresses and transaction details is harder than on larger-screen competitors.

The 2021 Kraken findings remain relevant historical context. SafePal patched the reported downgrade issue, but we did not find a comparably comprehensive independent hardware penetration test published in 2024–2026. That absence is worth stating rather than treating it as proof of a clean bill of health.

Phishing risk around the brand is real. Several low-quality or potentially spoofed SafePal sites appeared during our research, so bookmark safepal.com directly and avoid wallet links from search ads or unsolicited social posts.

08GET STARTED

Getting set up in six steps (≈ 10 minutes)

Buy from safepal.com or an authorized reseller

Never buy a pre-configured device; verify authenticity via the in-app QR scan on unboxing.

Choose create or recover

'Create New Wallet' generates a new seed on-device; 'Recover My Wallet' imports an existing one.

Write down the recovery phrase

Never store it digitally, never photographed; on paper or a steel backup board, from the device screen only.

Install the SafePal App

Set an app password or biometric lock on your phone.

Pair by scanning QR codes

No cables or Bluetooth pairing needed on S1/S1 Pro; device and app mutually scan QR codes to link.

Enable coins and test

BTC/ETH/BNB are pre-enabled; test with a small transaction before moving significant funds.

09FAQ

Frequently asked questions

Is SafePal really air-gapped?

The S1 and S1 Pro communicate by QR codes and have no USB data, Bluetooth or Wi-Fi connection. The X1 is Bluetooth-connected and therefore follows a different connectivity/security model.

Is the 2021 Kraken finding still a concern?

Worth knowing rather than assuming either way; the specific downgrade-attack flaw Kraken found was patched in firmware v1.0.24. We could not find a more recent independent audit confirming or ruling out newer issues.

Does SafePal have a desktop app?

No — management is through the mobile app or a browser extension only, no native desktop application.

How do I know I'm on the real SafePal site?

Several lookalike or low-quality sites using the SafePal name turned up in our own research. Don't trust search ads or social media links; only use safepal.com directly.

S1, S1 Pro, or X1 — which should I get?

Choose the S1 or S1 Pro if air-gapped security is the priority (Pro adds a bigger screen). The X1 if you specifically want Bluetooth convenience and understand it isn't air-gapped.

What's the Cypher Seed Board?

A sturdier alternative to paper for long-term backup storage; a separately sold steel plate for engraving your recovery phrase, resistant to fire and water damage.

Please read

Important risk information

  • Self-custody risk: with a hardware wallet, YOU are responsible for your recovery phrase. Lose it (and the device) and funds are permanently, irrecoverably lost — there is no support line that can restore them.
  • Crypto risk: crypto assets involve risk up to total loss. Always do your own research BEFORE buying any hardware wallet or moving funds onto it.
  • Buy only from the official site or an authorized reseller. A hardware wallet bought second-hand, from a marketplace listing, or pre-configured by a seller should be treated as compromised.
  • Never enter your recovery phrase into a website, app, or anyone claiming to be support staff. No legitimate wallet maker will ever ask for it.
  • Physical-possession attacks are real: several wallets, including some covered on this site, have had documented physical tampering or fault-injection flaws (details in each review). No device is unhackable given enough time, money and access to it.
  • Verify current details on the manufacturer's own site before purchasing; firmware/app updates, pricing, specs and supported assets change over time.
  • This is not financial advice: this blog is an independent editorial publication for information purposes only and is not affiliated with any wallet manufacturer, including SafePal.

Get a SafePal

Never second-hand or pre-configured; the button opens the official store. Always buy directly from the manufacturer or an authorized reseller.

Visit safepal.com → Referral code: ntexmgu

Referral link — we may earn a commission at no extra cost to you. Our reviews stay editorially independent of commissions.