SafePal hardware wallet review 2026: S1, S1 Pro, X1, security, data breach, who it fits

SafePal can make sense for someone who wants an affordable, QR-code hardware wallet that never connects to a computer, with Bitcoin including Taproot and a wide altcoin list. It fits less well if you want fully open firmware, a spotless security record or phone support, because only parts of the code are open, an August 2026 breach exposed customer order data, and support is ticket-based.

POOL BTC is an independent comparison site. We are not SafePal, we do not sell wallets, and nothing here is investment advice. Facts come from the official SafePal store and help center pages checked on 2026-10-09, plus the third-party sources named in the text and the official pages of the alternatives.

What is the SafePal hardware wallet?

SafePal is a family of non-custodial hardware wallets paired with the SafePal app. The store sells the S1, the S1 Pro and the X1. A steel backup plate called Cypher is sold separately. SafePal states that it does not store or have access to your seed phrase, private keys or passphrase.

The company is operated by SkyGenesis Holdings Limited according to its terms. Binance Labs, now YZi Labs, invested in SafePal in 2018 and the SFP token launched on Binance Launchpad in 2021. Sources describe this as an investment and incubation, not an acquisition, so Binance does not own the wallet.

You use it with the SafePal app on a phone, which builds transactions and shows balances, while the device holds the keys and signs.

How much does SafePal cost, and what is in the box?

Prices on the official store on 2026-10-09 exclude VAT and import duty, which can add a lot in some countries. Shipping of two or more devices with standard delivery is free.

The box includes the device, a USB cable, three mnemonic phrase cards, a manual, an app download card, a cleaning cloth and stickers. The warranty is one year from activation.

The store page of the S1 Pro contradicts itself on the battery: the description says 500 mAh and the comparison table says 400 mAh. We could not tell which is right. The steel Cypher backup costs USD 44.99 separately.

How does SafePal keep your keys safe?

The S1 and S1 Pro are air-gapped: no Bluetooth, WiFi, NFC or data over USB. You build a transaction in the app, which shows it as a QR code, the device scans it with its camera, you check it on the device screen and it shows back a QR code with the signed transaction for the app to scan and broadcast. The private key never leaves the device.

One caveat matters. The X1 signs over Bluetooth 5.0, even though the product page still uses the phrase air-gapped signing. If a fully wireless-free design is the reason you are buying, choose the S1 or the S1 Pro.

All three models use a secure element certified to Common Criteria EAL6+, which SafePal announced as an upgrade from EAL5+. It lists a true random number generator, tamper sensors that wipe data when an attack is detected, an encrypted communication link between the processor and the secure element and a verified boot chain. The chip maker and exact chip model are not stated on the official site. SafePal says that essential parts of the key generation code are open source. This is partial openness, not fully open firmware.

Seed phrases are standard BIP39. The hardware wallet creates 12 or 24 words. A passphrase is supported and creates a hidden wallet, and if you lose it that wallet is gone for good.

Which coins does SafePal support, and what about Bitcoin?

The official pages state support for more than 200 blockchains. For Bitcoin all four address types work: legacy addresses starting with 1, nested SegWit starting with 3, native SegWit starting with bc1q and Taproot starting with bc1p. The help center lists Taproot and BRC-20 support in the S1 Pro firmware history.

The app also offers swaps and bridges, staking and earn products, a DApp browser, a browser extension and fiat gateways. The swap and bridge fee is 0.2% per order, charged by SafePal, plus network fees and third-party provider fees. Sending coins carries no SafePal fee, only the network fee. App swap providers include Binance, which requires KYC, and MEXC, which does not, plus decentralized options.

If you hold Bitcoin only, you do not need most of this. Keep the app for balances and signing, and ignore the exchange features.

Who is SafePal for, and who should skip it?

SafePal fits you if you:

• want an air-gapped QR wallet for under USD 100;
• hold Bitcoin together with many altcoins and tokens;
• like the idea of swaps and staking inside one app;
• live in a country where the official store ships or where a reseller exists.

Look elsewhere, or compare first, if you:

• want fully open source hardware and firmware, as Trezor or Keystone offer;
• want phone support, since help is ticket-based with a stated reply time of 24 to 48 hours;
• are uneasy about the August 2026 data breach;
• plan to hold only Bitcoin and want the simplest tool.

If you are a miner moving payouts into cold storage, our mining calculator shows what a month of mining is worth before you decide how large a wallet you need.

Which countries can buy SafePal?

The official store ships to Russia on standard delivery, according to the help center article updated on 2026-07-27. Belarus, Kazakhstan, Armenia and Ukraine are also on the standard list, with zip code limits for Ukraine. Azerbaijan, Georgia, Uzbekistan, Tajikistan, Kyrgyzstan, Turkmenistan and Moldova are not stated on the official shipping list. Official resellers in Russia include walletz.ru, cryptoro.ru, sunscrypt.ru, safe-wallet.ru, bip-39.ru and mining-center.net.

In Latin America, standard shipping covers Brazil, Colombia, Mexico, Peru, Paraguay, Chile, Guatemala and El Salvador. Argentina has Express delivery only, and resellers are listed in Argentina. Delivery to Chile is stated as 40 to 60 business days.

The app interface supports 15 languages, including Russian, Spanish and Portuguese. Always buy from the official store or a listed reseller, and complete the device authentication step during setup, which is designed to catch counterfeits.

How safe is SafePal, and what happened in the breach?

Custody is non-custodial, so SafePal cannot move your funds. The security record has two events worth knowing.

In February 2021 Kraken Security Labs published a report on the S1. The researchers did not extract the seed. They showed that earlier firmware could be flashed back with special equipment, which SafePal patched in firmware 1.0.24, and they said they could get around the tamper detection by removing a shield, which SafePal disputed as not part of the core security logic.

In August 2026 SafePal disclosed a flaw in an order-tracking plugin that exposed other customers' order information between 2025-03-02 and 2026-04-11. About 39,798 customers were affected. Names, email and shipping addresses, phone numbers and purchase details were exposed. Seed phrases, private keys, passwords, payment cards and ID documents were not, and SafePal says no wallets or funds were compromised. It patched the flaw, hired an outside security firm, took down more than 30 fraudulent websites and cut data retention to 90 days. Reuters and CoinDesk reported the same facts. We found no published results of that outside review.

Phishing is the practical risk for affected customers, so never enter your seed phrase anywhere except on the device.

How do you set up SafePal?

These steps follow the official S1 setup guide.

1. Check the box seal and contents, then install the SafePal app on your phone.
2. Power on the device and choose a language.
3. On the authentication screen scan the QR code with the phone browser, not the app, enter the six-digit code the device shows and confirm the result says genuine device, never used.
4. Scan the QR code from the result page with the device to activate it.
5. Create a new wallet, choose the seed length and write every word on the mnemonic card, or recover an existing seed.
6. Set a PIN on the device.
7. In the app choose Add Wallet, then Hardware Wallet, scan the device QR codes and complete the pairing.
8. Send a small test amount first.

What are the risks of using SafePal?

• Customer data breach. About 39,798 customers had contact and order data exposed.
• Partial open source. Only essential code is public, so independent auditing is limited.
• Bluetooth on the X1. It is not air-gapped in the way the S1 is.
• Hidden costs. Prices exclude VAT and import duty, and Chile or Nigeria deliveries take weeks.
• Ticket support only. There is no phone line.
• Exchange dependence. Some app features rely on Binance or MEXC channels.
• Counterfeits. Gray-market sellers exist, so authenticate the device.

How does SafePal compare with Ledger, Trezor and Keystone?

SafePal is the cheapest of the QR-code wallets. Trezor leads on openness, Ledger on third-party app support and Keystone has a larger touchscreen. Ledger had its own customer data leak in 2020. Competitor prices were checked on the official pages in July to October 2026 and can change. See also our reviews of Tangem and Ledger.

FAQ

Is SafePal safe?

Your keys stay on the device, and Kraken's 2021 test did not extract a seed. The August 2026 breach exposed order data, not funds. Buy only from official channels and verify the device during setup.

Does SafePal support Bitcoin and Taproot?

Yes. All four Bitcoin address types work, including Taproot addresses starting with bc1p.

Is SafePal owned by Binance?

No. Binance Labs, now YZi Labs, invested in 2018, but sources describe an investment, not ownership. SafePal is operated by SkyGenesis Holdings Limited.

Which SafePal should I buy, the S1, S1 Pro or X1?

Choose the S1 for the lowest price with QR signing, the S1 Pro for a sturdier build and a bigger battery and the X1 only if you accept Bluetooth.

Can I buy SafePal in Russia or Argentina?

Russia is on the standard shipping list and has official resellers. Argentina has express shipping from the store and local resellers.

What is the SafePal swap fee?

The app charges 0.2% per swap or bridge order, plus network and provider fees. Plain sending has no SafePal fee.

Is SafePal worth it in 2026?

For someone who wants a cheap air-gapped wallet with broad coin support, the S1 is a sensible choice, provided you accept partial open source and the 2026 data incident. If openness or a clean record is your first priority, compare Trezor and Keystone first.

If it fits you, order from the official SafePal store, authenticate the device on first start and send a small test amount before you move your savings.

This article contains a referral link: we may receive a reward if you register through it. It does not change the figures or conclusions.