PrivacyPick

BitBox02 vs Trust Wallet Comparison

Feature
Overview
Rating7.65.6
TypeHardware walletSoftware wallet
PriceBitBox02 Multi edition: $139 one-time; BitBox02 Bitcoin-only edition: $139 one-timeNot specified
Free to useNoYes
Established20152017
Platforms
WindowsmacOSLinuxAndroid
AndroidiOSBrowser extension
Networks
BitcoinLitecoinEthereumCardano (through a third party)Polygon (through a third party)BNB Chain (through a third party)Arbitrum (through a third party)Optimism (through a third party)
BitcoinEthereumBNB ChainSolanaTronXRPCardanoLitecoinBitcoin CashDogecoinZcashPolygonArbitrumOptimismBaseAvalanche
Keys & recovery
Who holds the keysYou hold the keys
Show details

A new wallet gets 24 BIP39 recovery words; the device can also restore 12-word phrases. The default backup is a file with the wallet secret on the included microSD card, which is not encrypted; the 24 words can be shown on the device screen at any time after you re-enter the device password.

You hold the keys
Show details

New wallets get a 12-word phrase; 12- and 24-word phrases can be imported. Addresses on a few networks, such as Wanchain and IoTeX, are derived differently from the Ethereum address of the same phrase, so another wallet may not find them.

Seed formatStandard phrase (BIP39)Standard phrase (BIP39)
Seed portabilityRestores in other walletsRestores in other wallets
PassphraseYesNo
RecoverySeed phraseSeed phrase
MultisigBuilt inNot supported
Network & metadata
Default serverThe vendor's serversThe vendor's servers
Own nodeLimitedLimited
TorThrough a proxy you set upNot supported
Coin controlFullNone
ID for in-app buyingYesYes
Device purchaseTied to your identity
Show details

The BitBox shop ships only to a name and postal address and asks for an email address. You can pay with Bitcoin or Lightning through BitBox's own BTCPay Server instead of a card. BitBox says order data is anonymised after 30 days, but invoices are kept for ten years under Swiss law.

Not applicable
Device
Secure elementIn some modelsNot applicable
Air-gappedNoNot applicable
Firmware codeFully open source
Show details

BitBox says each device receives an attestation key at the factory, which the BitBoxApp checks every time you connect, and that the chips are covered in epoxy and the case halves are glued so that opening them breaks plastic pins. The device ships in a vacuum-sealed bag with a patterned seal. BitBox itself says these checks cannot rule out every physical modification of a genuine device.

Not applicable
Trust & transparency
App codeFully open sourcePartly open source
Server codePartly open sourceClosed source
Reproducible buildsYesNo
Security auditNone on recordCure53 (2023, paid for by the company)
Show details

Browser extension only: source code audit and penetration test; all five findings fixed and the fixes checked by the auditor. No audit of the phone app has been published.

Bug bountyYesYes
JurisdictionSwitzerland
Show details

Shift Crypto AG is registered in the Canton of Zurich, with its address in Adliswil. Its privacy policy follows the Swiss data protection act and the GDPR, and says personal data is stored in the EU.

Bahrain
Show details

The privacy notice names Dapps Platform Bahrain W.L.L., doing business as Trust Wallet, as the company that handles your data. The terms of service are governed by Hong Kong law, with arbitration in Hong Kong. The app stores list DApps Platform Software Services Ltd. and DApps Platform, Inc. as the developer.

OwnerShift Crypto AG
Show details

A privately held Swiss company that sells under the BitBox brand. Its founders started the BitBox line in 2015; the BitBox02 came out in 2019.

Binance
Show details

Founded in 2017 by Viktor Radchenko and bought by Binance in July 2018, its first acquisition; Binance said at the time that Trust Wallet would keep its autonomy. Security reports go through Binance's bug bounty programme. Trust Wallet does not publish its current ownership structure, so Binance is the last documented owner.

TelemetryNo telemetryAlways on
Past incidentYesYes