BitBox02

What it is

BitBox02 is made by BitBox in Switzerland, sold in Multi and Bitcoin-only editions, with fully open-source firmware (bitbox.swiss).

At a glance

Current security status

OK: Recommended (Bitcoin-only edition preferred). Minimum version: 9.26.5+. Checked Oct 16, 2026 on our security watch.

• 9.26.5 fixed a bootloader issue, a memory-corruption issue on unconfigured Multi editions, and a Silent Payments flaw. BitBox reports no exploitation.
• Source: BitBox02 firmware 9.26.5 release
• Source: BitBox blog
• Source: crypto.news

Key features

• Multi and Bitcoin-only editions (bitbox.swiss).
• Open-source firmware (bitbox.swiss).
• Certified secure chip on the Nova (bitbox.swiss).
• Multisig signing in Sparrow, including the m/45h keypath on firmware 9.19.0+ (Sparrow 2.5.5).

Buying and setup

Every brand: Buy only from the maker's own official store. Even listed or authorized resellers have been compromised. In October 2026, implanted Ledger devices that captured recovery phrases during setup were sold through CryptoBilis, a reseller Ledger's own site listed as authorized for Indonesia, Malaysia and the Philippines (Galaxy Research). Never restore an existing seed onto a device you didn't buy direct from the maker. Treat any device that arrives already set up, or with a printed or pre-filled seed, as compromised. Don't use it.

• Buy only from the maker's own official store (bitbox.swiss), not from resellers, even ones it lists as authorized. Never use a device that arrives with a seed already written down.
• Set it up with our hardware wallet module, then pair it with Sparrow as a watch-only wallet.