BitBox02 review 2026: Nova vs original, price, security, countries, who it fits

BitBox02 is worth it if you want an open-source hardware wallet with a simple microSD backup, and the Bitcoin-only edition suits miners who are paid in BTC. The Nova costs about $196 and adds Bluetooth for iPhone, while the original costs about $167. Skip it if you need air-gapped signing or guaranteed delivery to Russia.

POOL BTC is an independent comparison site. We are not Shift Crypto, we do not make or sell wallets, and nothing here is investment advice. Facts come from the official BitBox product pages, datasheet, shop, support center and blog, checked on 2026-10-13, plus the press coverage named in the text. Where the official site is silent, we say so.

What is the BitBox02?

The BitBox02 is a hardware wallet from Shift Crypto AG, a company based in Adliswil, Switzerland. It keeps your private keys on the device and signs transactions there, while the BitBoxApp on your computer or phone shows balances and prepares payments. The shop lists it as made in Switzerland, with a two-year warranty.

The device is a small polycarbonate stick, 54.5 x 25.4 x 9.6 mm, with a 128x64 white OLED screen, capacitive touch controls and a USB-C plug. The spec sheet does not list a battery.

The BitBoxApp runs on Windows 10 and later, macOS, Linux, Android and iOS 16 and later. It has coin control, Tor, a full node connection, WalletConnect, Lightning on mobile and in-app buy, sell and swap, and the interface is available in Russian and Spanish among other languages. If you prefer other software, the Bitcoin-only edition also works with Electrum, Sparrow, Specter and Wasabi, and with Umbrel, myNode, RaspiBlitz and Electrs through HWI.

Which BitBox02 should you buy, and how much does it cost?

There are two devices, the original BitBox02 and the newer BitBox02 Nova, and each comes as Bitcoin-only or Multi. On 2026-10-13 the official shop showed $167 for the original and $196 for the Nova. An earlier check the same day showed $173 and $203, because the shop converts prices from euros, so trust the checkout total.

Both work with Android. The edition matters more than it looks: the Bitcoin-only firmware is locked at the factory, and you cannot turn that device into a Multi later. The Multi edition supports BTC, ETH with more than 1,500 ERC20 tokens, LTC, ADA, Chainlink and BAT, and doubles as a FIDO U2F security key. The full Multi coin list is not on the product page.

For someone who only stores mining payouts, Bitcoin-only is the natural pick. Its firmware does less, and one of the bugs fixed in August 2026 affected only the Multi edition.

How does the BitBox02 protect your keys?

The BitBox02 splits security across two chips. An open-source microcontroller runs the wallet, and a secure chip protects the encrypted seed together with a password you enter on the device itself. A monotonic counter and password stretching slow down guessing, and the bootloader accepts only firmware signed by BitBox.

According to the datasheet, the app and the device talk over a channel encrypted with the Noise protocol. Firmware downgrades are blocked, the device shows the firmware hash so you can check it, and device attestation helps detect counterfeits. A nonce protection closes a covert channel through which key data could leak in signatures. The seed comes from several entropy sources, and you can add dice rolls.

On the Nova, Bluetooth runs on a separate chip that has no memory and no access to secrets. The link is end-to-end encrypted, and you can switch Bluetooth off.

There is one gap the vendor does not frame as a limitation. The BitBox02 always signs while connected over USB or Bluetooth. It has no air-gapped mode where a transaction travels by QR code or microSD card, so if you need that, look at Coldcard.

Is the BitBox02 open source and audited?

The firmware and the BitBoxApp are fully open source, and the builds are reproducible, so anyone can check that the published code matches the firmware on the device. The site says the code was independently audited, but bitbox.swiss names no auditor and publishes no report or date (checked 2026-10-13).

The project's GitHub security page lists no advisories and points to a bug bounty program without stating reward amounts. Known security findings so far:

• CVE-2019-18673. A side channel through the OLED screen's power consumption, rated CVSS 4.6. An attacker needs control of the USB connection and equipment to measure power.
• Nova secure chip settings, October 2025. On 2025-10-26, Andrew Kozlik of Trezor disclosed configuration issues in the Nova's secure chip through the bug bounty. They were rated minor to moderate and need physical access.
• The Dixence update, August 2026. Covered in the next section.

What did the August 2026 Dixence update fix?

Firmware 9.26.5, called Dixence, came out on 2026-08-17 and fixed three flaws found by an internal AI-assisted code review and outside researchers. According to BitBox and press reports, no funds were stolen and no attack in the wild was confirmed. Press coverage also reports that the Nova was not affected.

The three issues, per the official BitBox blog:

1. A bootloader flaw in the original BitBox02 up to firmware 9.26.1. Exploiting it required phishing: the victim would have to run a fake app that installs malicious firmware. Version 9.26.2 fixed it partly, and 9.26.5 fixed it fully.
2. A memory corruption bug in the Multi edition only. The Bitcoin-only firmware was not affected.
3. A Silent Payments flaw in versions 9.21.0 to 9.26.4 that could send funds to an unintended address. BitBox says it did not allow direct theft.

Update to 9.26.5 or newer through the official BitBoxApp, and install firmware only that way. We think BitBox handled this reasonably: it published the details, named the affected versions and shipped a full fix. A bootloader bug is still serious even when it needs phishing, and buyers should know it happened.

How do you back up a BitBox02?

The BitBox02 writes a backup to a microSD card during setup, and the card comes in the box. You can also write down a standard 24-word BIP-39 recovery phrase, which lets you restore into other wallets. An optional BIP-39 passphrase adds a second factor, and BIP-85 is supported for deriving child seeds.

The passphrase is not stored on the device. If you forget it, the funds behind it cannot be recovered, which is how passphrases work on every wallet. Write it down and keep it apart from the seed.

The product page does not say whether the microSD backup is encrypted, so we would store the card as carefully as a written seed. The shop also sells backup accessories: Steelwallet for $73, Steelwallet Pro for $222, Seedor from $77, two microSD cards for $28 and a paper backup card from $10.

Who should buy a BitBox02, and who should not?

The BitBox02 fits a person who wants a small, open-source wallet that works over a cable with a computer or Android phone and makes backup quick. The Nova adds iPhone support. It fits poorly if you need air-gapped signing, a battery, or a confirmed seller in Russia or the CIS.

The BitBox02 fits you if you:

• receive pool payouts in BTC and want them off the exchange and the pool account;
• prefer open firmware with reproducible builds over a closed system;
• want a microSD backup next to, or instead of, 24 words on paper.

Look elsewhere if you:

• want transactions signed fully offline by QR code or microSD;
• hold many altcoins that may not be on the Multi list;
• need a local seller or guaranteed delivery in Russia or the CIS.

If you are still deciding whether mining pays off at all, run the numbers in the mining calculator first. A wallet at $167 to $196 is a one-time cost, and it matters less the larger your stack gets.

Does BitBox ship to Russia, the CIS and Latin America?

Most countries get DDP delivery, which means duties are already in the price. Mexico, Argentina, El Salvador and Spain's Canary Islands get DDU delivery: the shop takes 20% off the price and you pay local duties on arrival. Russia and the CIS are neither listed nor excluded on official pages (checked 2026-10-13).

Per the official shipping page, EU orders leave a warehouse in Germany and take 2 to 3 business days. Orders for the rest of the world ship from Switzerland by UPS Express Saver in 3 to 4 business days. Handling adds about one business day. Business orders are always DDU, and PO boxes work only in Germany (DHL) and Switzerland (Swiss Post).

For Russia and the CIS, we found no authorized reseller and no statement either way. Enter your address at checkout and see whether the shop accepts it, or ask support before paying. Avoid used or unofficial units as a workaround: device attestation exists to catch fakes, but the official shop is still the simplest protection.

In Argentina the 20% reduction offsets duties you pay yourself, and whether it covers them depends on local customs. We found no regional distributor in Latin America.

How do you set up a BitBox02?

Setup takes a few steps in the BitBoxApp and on the device: buy from an official source, install the app, connect, create the wallet, then make and verify a backup before real money goes in. The order below follows the official setup guide.

1. Buy the device from shop.bitbox.swiss or an authorized reseller.
2. Download the BitBoxApp from bitbox.swiss/app.
3. Connect by USB-C. On a Nova you can also pair an iPhone or iPad over Bluetooth.
4. Follow the setup steps on the device and in the app, and set the device password.
5. Make a backup on the microSD card, write down the 24 words, or do both.
6. Add a passphrase if you want one, and write it down separately.
7. Add dice rolls to the seed entropy if you want extra assurance.
8. Verify the backup, then send a small amount first.

Support works through the contact form and articles at support.bitbox.swiss. A paid one-hour video call is also offered, and its price is not stated on the official site (checked 2026-10-13).

What are the risks of using a BitBox02?

• No air gap. Every signature happens over USB or Bluetooth, and with no battery listed the device needs USB power.
• Locked editions. A Bitcoin-only device can never run the Multi firmware.
• Bluetooth on the Nova. It adds a wireless path, even though it runs on a separate chip and can be disabled.
• Firmware history. The 2026 Dixence fixes and the 2025 Nova chip findings show that bugs do turn up, so keep firmware current.
• Single vendor. The bootloader runs only BitBox-signed firmware, so you depend on Shift Crypto for updates.

How does BitBox02 compare with Ledger Nano X, Trezor Safe 5 and Coldcard?

BitBox02 sits between Trezor and Coldcard: open firmware like Trezor, a microSD backup like Coldcard, but no air-gapped signing. Ledger Nano X has Bluetooth and a battery but closed firmware. Some competitor details below come from a comparison table that BitBox itself publishes, so treat them as vendor claims.

Coldcard is Bitcoin-only and supports BIP-85, like BitBox. It had its own random number generator vulnerability in 2026, and BitBox says its devices were not affected by it. For the alternatives in more depth, read our Ledger review, Trezor review and Keystone 3 Pro review.

FAQ

Is the BitBox02 safe after the Dixence update?

The flaws fixed on 2026-08-17 in firmware 9.26.5 were not confirmed as exploited, and no funds were reported stolen. The bootloader issue needed a fake app plus malicious firmware. Update to 9.26.5 or newer through the official BitBoxApp to get the full fix.

What is the difference between the BitBox02 Nova and the original?

The Nova adds Bluetooth for iPhone and iPad, an EAL6+ certified secure chip, a glass-covered screen, three colors and a Lightning adapter. It costs about $196 against about $167 for the original, based on the shop's euro conversion on 2026-10-13.

Can I switch from Bitcoin-only to Multi later?

No. The Bitcoin-only firmware is locked at the factory, so choose the edition before you buy. If you might ever hold ETH or tokens, take the Multi.

Does BitBox ship to Russia?

The official pages neither list nor exclude Russia, and we found no authorized reseller there (checked 2026-10-13). Try your address at checkout or ask support before paying.

What happens if I lose the device?

You restore on a new BitBox02 from the microSD backup, or on any BIP-39 wallet from the 24 words. If you set a passphrase, you need it too, because the device never stores it.

Is the BitBox02 worth it in 2026?

For a miner or long-term holder who wants open firmware, a quick microSD backup and a small wired device, the BitBox02 is a solid choice, and the Bitcoin-only edition is the cleaner option. Choose the Nova if you use an iPhone, and Coldcard if signing must stay air-gapped.

If it fits your setup, order from the official BitBox shop, check the price in your currency at checkout and update the firmware to 9.26.5 or newer before you move funds.

This article contains a referral link: we may receive a reward if you register through it. It does not change the figures or conclusions.