Affiliate disclosure: buying through links on this page may earn us a commission at no extra cost to you (details). Nothing here is investment advice.
Verdict up front: the Cypherock X1 attacks the single scariest thing in self-custody — the seed phrase itself. Instead of 12 or 24 words on paper that can burn, flood, or walk away, your key is cryptographically split into five pieces, and no piece alone is worth anything to a thief. It’s the most genuinely different architecture in this category, it’s open source with reproducible builds, and it costs $159 (frequently discounted). It is not for everyone — we’ll be blunt about who should skip it.
Check current Cypherock X1 price →
Quick specs
| What’s in the box | X1 Vault (the device) + four X1 Cards (NFC smartcards) |
| Key model | Private key split 5 ways via Shamir’s Secret Sharing — 1 share in the vault, 1 in each card. Any 2 of 5 recover the wallet. No seed phrase exists, anywhere. |
| Signing | Tap any one card to the vault, enter PIN, confirm on-device |
| Card security | EAL6+ secure elements (bank-card grade) in every X1 Card |
| Firmware | Open source; reproducible builds verified by WalletScrutiny; audited by Keylabs |
| Coins | Multichain — 18,000+ assets via the cySync desktop app + WalletConnect |
| Extras | Up to 4 independent wallets on one device · passphrase support · can also store seed phrases of your OTHER wallets · inheritance workflow |
| Price | $159 list (checked Aug 2026 — promos as low as ~$99 appear regularly) |
| Our verifiability score | 7.5 / 10 — methodology |
The idea: kill the seed phrase, keep the security
Every wallet we review shares one weakness that has nothing to do with chips: the recovery phrase. Those 12–24 words are a single point of failure in both directions — anyone who finds them owns your coins, and if fire, water, or time takes them, your coins die with them. It’s why we maintain a whole guide to steel backups and seed storage.
Cypherock’s answer is to make sure the complete secret never exists in one place. At setup, the key is generated and mathematically split using Shamir’s Secret Sharing into five shares: one living in the X1 Vault, one in each of four credit-card-sized X1 Cards. Any two components together can rebuild the wallet; any single component alone is cryptographically useless. Day to day you tap one card against the vault to sign — which means a burglar needs to find and defeat two separately-stored, PIN-protected devices, and you can lose any three of the five pieces and still recover everything. Scatter the cards — home safe, bank box, a parent’s house, your office — and you’ve built geographic redundancy that a sheet of steel words can’t match.
The verifiability story (this is why it scores 7.5)
By our methodology, the X1 earns full marks for fully open-source firmware and — rarer — reproducible builds: WalletScrutiny has verified that the binary running on the device can be rebuilt from the public source and matched. That’s a stronger claim than “trust our GitHub.” Keylabs (the researchers with Ledger and Trezor findings to their name) has audited it. It loses ground where most do — the EAL6+ secure elements in the cards are certified but closed silicon (0.5/1), one major audit rather than several (1/2), and a shorter public track record than the decade-old incumbents (1/2). Net: 7.5, above the Coldcard Mk4/Q (6) and below the Trezor Safe line (8–8.5) on our board.
The “what if Cypherock disappears?” question matters more for a young company, and here the open source does real work: the recovery scheme is documented and rebuildable without their servers. Your coins do not depend on the company’s continued existence — a bar some bigger names don’t clear as cleanly.
The honest drawbacks
- It’s plastic. At $159 the vault feels lighter and cheaper in hand than a Trezor Safe 7’s aluminum or a Coldcard’s brick. You’re paying for architecture, not materials.
- Learning curve. The shard model takes a genuine sit-down to understand, and explaining it to a spouse or heir takes another. (Counterpoint: so does explaining why 24 words in a drawer must never be photographed.)
- No Bitcoin-only firmware. The X1 is proudly multichain; there’s no stripped-down build for bitcoin purists the way Trezor and Coldcard offer. If minimal attack surface is your religion, that matters.
- Not air-gapped. The vault talks to the cySync app over USB. Signing confirmations happen on-device, but Coldcard-style air-gap ceremony isn’t on the menu.
- Total loss is still possible — it just requires losing four of five pieces instead of one piece of paper. Distribute the cards or you’ve rebuilt the single point of failure you paid to escape.
The sleeper feature for this site’s readers
Two, actually. First: the X1 can act as a vault for other wallets’ seed phrases — the 24 words from your existing Trezor or Ledger can live as an encrypted entry behind the same 2-of-5 scheme, replacing the steel plate in your sock drawer. Second: that same architecture is a natural fit for inheritance planning — cards distributed among heirs and an executor mean nobody holds your coins today, but the right two people can recover them when it matters. Pair it with our estate planning checklist and it’s the cleanest no-lawyer-required inheritance mechanism we’ve seen in hardware.
Who should buy it — and who shouldn’t
- Buy it if: the seed phrase is the part of self-custody that keeps you up at night; you’re building an inheritance plan; you hold across multiple chains; or you want geographic redundancy without trusting any single hiding spot.
- Skip it if: you’re bitcoin-only and want bitcoin-only firmware (Coldcard Q is your church); you want air-gap ceremony; or you’re starting small — a Safe 3 plus a steel backup costs half as much and is battle-tested.
FAQ
What if I lose the vault?
Any two X1 Cards recover everything onto a replacement. The vault is not special — it holds one share of five, same as each card.
Can a stolen card leak my coins?
One card alone is mathematically useless — it holds a single Shamir share inside an EAL6+ secure element. A thief needs two components plus your PIN.
Can I move my existing wallet onto it?
Yes — import an existing seed phrase and the X1 splits it into shares (after which you can retire the paper). You can also keep other wallets’ seeds stored behind the scheme without importing them as spending wallets.
Bottom line
Most hardware wallets compete on screens and chips while inheriting the same paper-phrase weakness. The X1 is the rare device that redesigns the actual failure mode people suffer — and does it open-source, reproducibly built, and audited. It’s the most interesting wallet under $200, and for inheritance planners it might be the most practical one at any price.
Get the Cypherock X1 at cypherock.com ($159 list) → Always buy direct from the manufacturer — never marketplace resellers.