BitBox

Shift Crypto, in Zurich, publishes the firmware and offers two editions: multi-coin and Bitcoin-only. The BTC version reduces the code surface, which is a stronger security argument than any slogan. The SE protects the keys; the device remains a USB dongle, so clear signing on a small screen is the real control against PC malware.

The approach is that of an engineers’ product: microSD backups, passphrase, attestation verification. Less flash than Ledger or Trezor, more continuity. Nova updates the hardware without changing the contract.

For someone who wants European open firmware, an SE, and the option to stay Bitcoin-only without going through Coldcard UX, BitBox is often the equilibrium point.