Affiliate disclosure: buying through links on this page may earn us a commission at no extra cost to you (details). Nothing here is investment advice.
Verdict up front: at the $400 summit of hardware wallets live two devices with opposite religions. The NGRAVE ZERO ($398) is the ultimate sealed fortress — the only wallet with an EAL7-certified secure OS, fully air-gapped, biometric, gorgeous — guarding code you mostly can’t read. The GridPlus Lattice1 ($397) is a WiFi-connected 5-inch signing terminal for your desk — permanently powered, hot-swappable SafeCards, tamper mesh — with open, audited firmware. One maximizes isolation, the other maximizes verifiable daily operation. Neither is the right first wallet; both are the right wallet for somebody.
Check NGRAVE ZERO price → · Check Lattice1 price →
Head to head
| NGRAVE ZERO — $398 | GridPlus Lattice1 — $397 | |
|---|---|---|
| Philosophy | Maximum isolation | Maximum verified convenience |
| Connectivity | None — air-gapped QR only | WiFi — always-on, OTA updates |
| Security core | EAL7-certified secure OS (highest rating in the industry) | Secure enclave wrapped in an anti-drill/X-ray tamper mesh |
| Key storage | On device + GRAPHENE steel backup | Swappable PIN-protected SafeCards ($40/2-pack) |
| Firmware | Largely closed (opening “gradually”; secure core stays closed) | Open source, audited |
| Form | Handheld, biometric, 4″ touchscreen | Desk terminal, 5″ touchscreen, needs constant power |
| Our verifiability score | 4 / 10 | 6 / 10 — methodology |
NGRAVE ZERO: the EAL7 fortress
EAL7 is the highest Common Criteria assurance level that exists — formal-methods territory, usually reserved for military systems — and NGRAVE’s custom OS is the only wallet software to earn it. The device honors the rating: no radios, no data ports, QR-only signing, biometric unlock, and the GRAPHENE plates give you a fire-and-flood-proof steel backup out of the box. The build quality embarrasses everything else on our board. And yet — the OS that earned EAL7 is closed, audits are certifications rather than public code review, and our methodology can’t score what it can’t see: 4/10, the same “magnificent fortress, sealed blueprints” tier as the Ellipal Titan. If certification-grade engineering persuades you where published source doesn’t, this is the finest object in the category. Coin support skews narrower than Ledger/Trezor, and power users find the QR ceremony deliberate — which is rather the point.
GridPlus Lattice1: the signing desk
The Lattice1 refuses the portability premise entirely: it’s a powered terminal that lives where you work. The 5-inch screen renders full transaction detail (the best clear-signing display anywhere), firmware updates arrive over the air, and keys live on SafeCards you insert like a debit card — swap between wallets in seconds, stash spares in the safe. The secure chip hides behind a mesh that wipes keys if drilled, X-rayed, or pried. Unlike almost everything at this price, the firmware is open and audited: 6/10 on our board, above every closed premium rival. The tradeoffs are honest ones: it’s WiFi-connected (a networked device, philosophically opposite to an air gap), sized like a desk phone, and its integration ecosystem is thinner than the majors. For the DeFi power user signing daily, or a small fund juggling many keys, nothing else matches the workflow. For cold storage of a stack you touch quarterly — wrong tool entirely.
So… is $400 ever worth it?
- Buy the ZERO if you want the most physically engineered wallet made, EAL7’s formal assurance speaks to you, and closed source doesn’t disqualify (you were fine with Ledger, after all).
- Buy the Lattice1 if you sign constantly, juggle multiple keys, and want open firmware with the best transaction display in the business.
- Buy neither if you’re most readers: a Safe 7 + steel backup costs $280 all-in with more transparency than the ZERO; a Keystone 3 Pro gives the air gap for $149. The $400 tier is for specific believers, not better believers.
NGRAVE ZERO at ngrave.io → · Lattice1 at gridplus.io → Always buy direct from the manufacturer.