Engineering
EAL6+ secure element with keys generated in certified silicon, paired with reproducible open firmware you can verify yourself.
Cold-stored sovereignty
Introducing a hardware wallet that transforms the way you hold digital sovereignty. Cold by design, quiet by default.
Custody
should feel
like nothing
Hardware wallets have spent a decade apologising for themselves — a dongle in a drawer, a cable you can never find, a screen too small to read the thing you are about to sign. Cypherframe starts from the opposite premise: the device you trust with everything should be the one object you are happy to leave on the desk.
A machined frame, a display large enough to render a full transaction, and an air gap that is physical rather than promised. Nothing to charge, nothing to pair, nothing that speaks to a network unless you hand it something to sign. Sovereignty as an ordinary daily object, not a ritual.
Engineering, security, and sovereignty
Six commitments across three domains. Every one shipped by the hardware, verifiable in the firmware, and audited before Season One reaches your desk.
Security
Shamir backup across shares and thresholds you define, sealed in a tamper-evident frame that refuses to initialise if broken.
Sovereignty
True air gap — no radio, no USB data — across Bitcoin, Ethereum, and the major L2s, with full transaction rendering on-device.
Hot wallet vs cold storage
Hot wallet
Keys live in software on a networked machine
Signing happens wherever the browser is open
Recovery phrase typed on a keyboard at least once
Approvals rendered by the site asking for them
Compromise is silent until the balance is gone
Cypherframe
Keys never leave certified silicon
Signing happens on a device with no network
Recovery generated and shown on-device only
Approvals rendered in full on your own screen
Physical seal makes tampering evident
What you get
The waitlist is free and does not commit you to a purchase. It only holds your place for Season One.
Season One waitlist
Allocation
A place in line for one of 3,000 serialised units.
Price
Launch price locked if you decide to buy later.
Firmware
Early access to signed builds and audit notes before public release.
Updates
Monthly engineering notes from the people writing the firmware.
Data
One email address. No account, no KYC, no extra follow-up.
$3.8B in digital assets was stolen in a single year.
Nearly all of it was sitting in wallets connected to the internet.
Frequently
asked
Everything about the device, the firmware, and how Season One reaches you.
When does Cypherframe ship?
Season One units are scheduled for Q2 2027. Waitlist members are notified in order of seat number before any public announcement.
Which chains are supported?
Bitcoin, Ethereum and the major L2s at launch. Additional chains arrive through signed firmware updates you install yourself.
Is the firmware really open?
Yes. Sources and reproducible build instructions are published with every release, alongside third-party audit reports.
What happens if I lose the device?
Your recovery shares restore the wallet onto any replacement unit. The lost device holds keys in a secure element that cannot be read without destroying it.
Does joining the waitlist cost anything?
No. The seat is free and non-binding. It holds your place in the queue and locks the launch price if you choose to reserve later.
How does the device reach me?
Units ship sealed and serialised, tracked end to end. The seal is checked against your reservation number on arrival.
No matching questions. Try another search or topic.
Take the seat
3,000 units in Season One. One email, no account, no follow-up you didn't ask for.