BitBox02 Nova review: a EUR 175 Swiss hardware wallet with an EAL6 plus NDA-free secure chip, five entropy sources, iPhone support and a 90-day return window.
Reviews
The BitBox02 Nova is the current flagship hardware wallet from Shift Crypto AG, the Swiss company that has been building BitBox devices since 2015. It is the first BitBox that runs on an iPhone, the first with a tempered glass screen, and the first built around a secure chip the company describes as EAL6+ certified and free of any non-disclosure agreement.
This review reads the device through the company’s own published material rather than through its marketing headline: the specification sheet, the security pages, the shop listing and the three policy documents that govern what happens after you pay. Everything below was read on 2 November 2026 and can be checked the same way. Prices are quoted in euros, the currency the shop was set to when the pages were read.
What the BitBox02 Nova is, and what changed
The BitBox02 Nova sits above the original BitBox02 rather than replacing it; both remain on sale. Three things are new on the BitBox02 Nova, and all three are the kind of change you notice in daily use rather than on a spec sheet alone.
- A tempered glass front over the OLED screen, which the company frames as both tougher and easier to read when you are verifying an address character by character.
- A different secure chip. The company states the BitBox02 Nova Secure Chip is EAL6+ certified and NDA free, which matters because an NDA on a secure element is what normally stops a wallet maker from publishing its firmware in full.
- Platform coverage. The BitBox02 Nova is the first BitBox that works on Windows, macOS, Linux, Android and iOS, which brings iPhone and iPad into scope for the first time.
The published compatibility floor is Windows 10 or later, macOS 10.15 or later, iOS 16 or later, iPadOS 16 or later, Android 9 or later, and Linux on x86_64. Three colours are offered: Midnight Black, Polar White and Bitcoin Orange.
BitBox02 Nova security: two chips, five sources of randomness
BitBox pioneered what it calls the dual chip design on the original BitBox, and it is still the backbone of the BitBox02 Nova. A general-purpose microcontroller does the work; a separate secure chip guards access to it. On the BitBox02 Nova the microcontroller is an ATSAMD51J20A, a 120 MHz 32-bit Cortex-M4F with its own true random number generator, and the secure chip is an OPTIGA Trust M V3.
That last detail is worth holding on to, because the two BitBox models do not share it: the original BitBox02 uses an ATECC608B. “BitBox security” is therefore not one thing, and a claim about the EAL6+ chip applies to the Nova rather than to the whole line. Anyone who wants to check what an assurance level like that actually covers can look up the certificates for secure ICs in the German federal office’s register of certified smart card products.
Three separate secrets are needed to unlock the encrypted wallet seed: a random secret held on the secure chip, a second random secret held on the microcontroller, and your device password, which never lives on the device at all. While the device is in use the seed stays encrypted in RAM and is decrypted only momentarily, for example to sign a transaction.
The seed generation is the part most worth reading closely. Rather than trusting one random number generator, the BitBox02 Nova combines five of them.
| Entropy source | Where it comes from |
|---|---|
| True random number generator | On the secure chip |
| True random number generator | On the microcontroller |
| Static random number | Set at factory installation, unique to each device |
| Host entropy | The app on your computer, for example /dev/urandom |
| Cryptographic hash | Of your device password |
The company states that the sources are combined so that the overall entropy is “at least as strong as the strongest of all, not the weakest of all”, which it says holds even if four of the five are compromised. The last two sources are described as completely independent of the BitBox itself.
Brute force is handled in layers rather than with a single counter. The microcontroller enforces a ten-attempt limit; if that were somehow bypassed, a monotonic counter inside the secure chip caps the total number of password entries over the life of the device; and password stretching makes each individual guess slow. Physically, the microcontroller is covered in epoxy potting, so getting at it tends to leave visible marks on the case.
Open source and reproducible: verifying BitBox02 Nova firmware yourself
Both the BitBox02 Nova firmware and the BitBoxApp are published as open source, and the firmware builds are reproducible: the company states that anyone can compile the published source and confirm the binary matches the official release, with instructions on its GitHub. It also gathers signatures from the community asserting that releases are correct, and points to WalletScrutiny’s independent analysis of reproducing the firmware.
Two other checks run quietly in the background. Each BitBox02 Nova is loaded with a secret attestation key during factory setup, so the BitBoxApp, or any wallet that connects to it, can confirm the hardware is genuine every time it is plugged in. And the firmware implements anti-klepto, a countermeasure against a signing device leaking your private key through the signature itself; BitBox says it wrote the original pull request to Bitcoin Core that made this possible. The firmware was audited externally by Census Labs, with consulting from several other security firms.
Backup on the BitBox02 Nova: microSD first, recovery words optional
Most hardware wallets make you write twenty-four words on paper before you can use them. The BitBox02 Nova inverts that: the default backup is written to the microSD card that ships in the box, in seconds, with no words to transcribe and nothing visible to a camera over your shoulder.
The trade-off is a card you have to keep safe rather than a sheet of paper, and the company leans into it by making verification cheap. You can check a backup at any time, make a fresh one onto another card whenever you like, and still display the 24 BIP-39 recovery words after re-entering the device password if you want a paper or metal copy as well. The point the pages make, and it is a fair one, is that a backup you can verify in ten seconds is a backup you will actually verify.
Whisper: using the BitBox02 Nova on iPhone without trusting Bluetooth
iOS support is the headline reason to choose the BitBox02 Nova, and the way it is delivered is the interesting part. The device talks over USB-C, and optionally over Bluetooth Low Energy through what BitBox calls Whisper, described as a custom minimal-trust BLE architecture with end-to-end encryption and the connection under the user’s control.
“Minimal-trust” is doing real work in that sentence: the BitBox threat model already assumes the computer or phone you are plugged into may be compromised, which is why the BitBox02 Nova has its own screen and its own touch confirmation, and why you type the password on the device rather than in the app. A wireless link does not change that assumption; it just adds another untrusted channel to encrypt across. The box also ships a USB-C to Lightning adapter, so older iPhones work over cable without a separate purchase.
Bitcoin-only or Multi: a decision made at the factory
Every BitBox comes in two editions, and the choice is permanent. The Bitcoin-only firmware is flashed at the factory and the company states plainly that it cannot be changed later to support other coins. The argument for it is simple and honest: less code means fewer features, and fewer features mean a smaller attack surface. There is also a cosmetic sweetener, since Bitcoin Orange is offered only on the BitBox02 Nova Bitcoin-only.
The BitBox02 Nova Multi edition goes the other way. It handles Bitcoin, Ethereum with ERC20 tokens, Cardano and Litecoin, plus what the listing describes as 1,500 or more additional tokens, and it adds FIDO U2F so the same device can be a security key for services such as Google, GitHub and Dropbox. Both BitBox02 Nova editions run on the same hardware and cost the same, so this is a question about how you use Bitcoin rather than about budget.
BitBox02 Nova pricing, the box and the specification sheet
In the official shop the BitBox02 Nova is EUR 175.00 and the original BitBox02 is EUR 149.00. That is EUR 26 of difference, or 17.4 per cent, for the glass screen, the EAL6+ chip, iOS support and Bluetooth. The shop offers a currency switcher covering BTC, CHF, EUR, GBP and USD, so check which one you are looking at before comparing.
The BitBox02 Nova box is unusually complete for the category, which is part of why the price gap is easier to justify than it first looks:
- The hardware wallet itself, in the Bitcoin-only or Multi edition
- A microSD card, so the default backup works out of the box
- A USB-C to USB-A adapter and a USB-C to Lightning adapter
- A USB-C extension cable
- Rubber pulls and labelling stickers
The published BitBox02 Nova dimensions are 54.5 by 25.4 by 9.6 mm including the USB-C plug, and the weights are the detail worth noticing: the BitBox02 Nova is 13 g, while the shipped parcel with packaging and accessories is 250 g. Nineteen times the weight of the thing you are buying is packaging, adapters and cable, which tells you how much of the box is the accessory set.
The accessory ladder runs well past the wallet, and one line on it is worth a double take.
| Accessory | Price (EUR) |
|---|---|
| Backup card | from 9.00 |
| Connectivity Pack | 13.90 |
| BitBoxBox carry case | 15.00 |
| Tamper-evident bags | from 15.00 |
| microSD backup cards, 2-pack | 25.00 |
| Steelwallet | 65.00 |
| Seedor | from 69.00 |
| Steelwallet Pro | 199.00 |
The Steelwallet Pro at EUR 199.00 costs more than the wallet it backs up, about 1.14 times the price of the BitBox02 Nova. That is not a criticism of either product, but it does reframe the budgeting: the BitBox02 Nova is the cheap part of a serious cold-storage setup, and the metal backup is the expensive one. If you are pricing a full kit, start at the official BitBox shop rather than at the device page alone.
Shipping: Swiss and German warehouses, and where the policies actually live
Shipping a BitBox02 Nova is priced at checkout by weight, destination and speed, shown before you confirm, with an average handling time of one business day from payment. Two warehouses do the work.
| Destination | Carrier and standard transit | Express |
|---|---|---|
| Switzerland and Liechtenstein | Swiss Post, 2-3 business days (larger parcels UPS Standard, 2-3 days) | UPS Express, 1-2 days |
| Germany | DHL Parcel from the German warehouse, 2-3 business days | UPS Express, 1-2 days |
| European Union excluding Germany | UPS Standard from the German warehouse, 2-3 business days | UPS Express, 1-2 days |
| United States | UPS Express Saver from Switzerland, 2-3 business days, duties and taxes paid | UPS Express, 1-2 days |
| Rest of world | UPS Express Saver from Switzerland, 3-4 business days | UPS Express Saver, 2-3 days |
Shipments to the United States go out DDP, meaning duties and taxes are settled by the sender, and the shop sidebar makes the same promise more broadly, saying that on all orders there is no need to worry about surprise import costs. For a 250 g parcel crossing a border, that is a more useful commitment than a headline discount.
One practical note while you are reading the small print. The shop at shop.bitbox.swiss carries a footer block of six policy links, and on the day this review was written all six returned a “Page not found” page in the browser: Refund Policy, Privacy Policy, Terms of Service, Limited Warranty, Shipping Policy and the separate privacy policy link. The documents themselves are perfectly healthy; they simply live on the main site under bitbox.swiss/policies/ instead. If you hit a dead end at the shop, that is where to look rather than assuming the terms are missing.
Returns, warranty and buying a BitBox02 Nova direct
The BitBox02 Nova return window is the most generous number in this review. Unused product in its original, unopened packaging can be returned for a refund within ninety days of order creation, and the refund covers the full price including a proportional share of the shipping you paid. There is no restocking fee. You arrange and pay for the return shipment yourself, and the company reserves the right to deduct any return carrier or import charges billed to it. Orders can also be cancelled before dispatch from your own order page, without contacting support.
The BitBox02 Nova warranty is a two-year one, counted from the date of payment, and the policy page carries an update date of 1 February 2026. A replaced unit is covered for thirty days from replacement or the remainder of the original period, whichever is longer.
Two clauses in that document deserve more attention than they usually get. The warranty is non-transferable: it is enforceable only by the customer who originally bought the product, and only while they still own it, with proof of purchase required. And any unit not bought new from Shift Crypto or an authorised reseller is excluded outright. The shop’s own standing warning that BitBox never offers phone support and never asks for your recovery words is usually read as an anti-phishing notice, but these two clauses make buying direct a warranty question as well as a security one. Ordering from the shop BitBox runs itself is the simplest way to keep both intact.
The BitBox02 Nova bug bounty, in numbers
BitBox runs a public bug bounty and publishes a credit list for it. Counted on the day of writing, seventeen researchers are credited, holding 8,550 points between them. The distribution is lopsided in the way these lists usually are: the single largest entry is 5,400 points, or 63.2 per cent of everything awarded, while the bottom three sit at 50 points each.
Read charitably, that says one researcher found something substantial and was paid properly for it, and the programme has been running long enough to accumulate a long tail of smaller findings. Read sceptically, it says most of the external scrutiny on this codebase has come from a very small number of people. Both readings are available from the same table, which is more than most vendors let you work out.
What self-custody means for your money
A hardware wallet like the BitBox02 Nova is not a financial service and there is no regulator standing behind it. Nobody licenses Shift Crypto to hold your coins, because it never holds them: the keys are generated on the BitBox02 Nova and stay there. That is the entire point, and it is also the entire risk.
The practical consequences are worth stating plainly before you buy. There is no password reset and no account recovery; if you lose the device and the backup, the funds are gone and no support ticket will bring them back. There is no deposit insurance of any kind. The two-year warranty covers defects in the hardware, not the value of what was stored on it. And the security claims in this review are claims the company makes about its own products, verifiable in the sense that the firmware is open and the chip certifications are public, but still claims rather than independent findings. None of this is investment advice, and nothing here is a view on whether you should hold any particular asset.
Who the BitBox02 Nova fits
- People who want cold storage on an iPhone. This is the first BitBox that does it, and the USB-C to Lightning adapter in the box means it works on older handsets without an extra order.
- Bitcoin-only holders who want the smaller attack surface, and are comfortable that the choice is locked at the factory.
- Anyone who distrusts a wallet they cannot inspect. Open firmware, reproducible builds, a published threat model and an NDA-free secure chip is a rare combination.
- People who hate writing down seed words. The microSD-first backup removes the step most beginners get wrong, while still offering the 24 words if you want them.
- Less of a fit if you only need desktop and Android, in which case the BitBox02 at EUR 149 does the same job for EUR 26 less; or if you want a large colour touchscreen, since this is a 128 by 64 pixel monochrome OLED.
How this review was done
This is a desk review. No BitBox02 Nova was bought, unboxed or used, so nothing here reports on how the hardware feels or how setup goes in practice. What it does report is what Shift Crypto publishes: the product and specification pages, the security features page, the Bitcoin-only page, the live shop listing, and the shipping, refund and warranty policies. Where a statement comes from the company it is attributed to the company. The one thing checked independently was the shop’s six footer policy links, each opened in a browser rather than assumed. Figures were read on 2 November 2026 and prices change.
The short version
The BitBox02 Nova is a careful, conservative product with one genuinely new capability and a lot of unglamorous engineering underneath it. The iPhone support is the reason to pick it over the cheaper BitBox02; the NDA-free EAL6+ chip, the five entropy sources, the reproducible builds and the layered brute-force defence are the reasons to pick a BitBox at all. The commercial terms are unusually friendly, with a ninety-day return window and duties covered on cross-border orders, and unusually strict in one place, since the warranty dies if the unit was not bought new from an official channel.
| What matters | Where it lands |
|---|---|
| Price | EUR 175.00 (BitBox02: EUR 149.00) |
| Secure chip | OPTIGA Trust M V3, stated EAL6+ and NDA free |
| Platforms | Windows, macOS, Linux, Android, iOS and iPadOS |
| Connectivity | USB-C, optional BLE via Whisper |
| Backup | microSD included; 24 BIP-39 words optional |
| Editions | Bitcoin-only or Multi, fixed at the factory |
| Returns | 90 days, unopened, no restocking fee |
| Warranty | 2 years, non-transferable, official purchase required |
| Overall | 4.5 / 5 |
Overall: 4.5 out of 5. If the iPhone support or the Bitcoin-only firmware is what you came for, check the current BitBox02 Nova price and budget for the backup medium at the same time; and if you only ever use a desktop, compare it against the BitBox02 before paying the premium.
