Affiliate disclosure: buying through links on this page may earn us a commission at no extra cost to you (details). Nothing here is investment advice.
Verdict up front: the OneKey Pro is the “yes” wallet — USB-C? Yes. Bluetooth? Yes. NFC? Yes. Air-gapped QR signing with a camera? Also yes. Four EAL6+ secure elements, a fingerprint reader, wireless charging, and — the part our scoring cares about — fully open-source firmware with reproducible builds and SlowMist audits. It costs $278, which is the most honest criticism of it. The $99 Classic 1S brings the same certification to a slim starter. Here’s how to think about both.
Quick specs
| OneKey Pro — $278 | Classic 1S — $99 | |
|---|---|---|
| Screen | 3.5″ IPS touchscreen, 480×800, tempered glass | 1.54″ monochrome OLED |
| Secure elements | Four EAL6+ chips | EAL6+ |
| Connectivity | USB-C · Bluetooth · NFC · air-gap QR mode (built-in camera) | USB-C · Bluetooth |
| Auth | Fingerprint + PIN | PIN |
| Battery | 530mAh, Qi2 wireless charging | 110mAh |
| Firmware | Fully open source, reproducible builds, SlowMist-audited | |
| Coins | 100+ chains, 30,000+ assets; Sparrow, MetaMask, WalletConnect v2 | |
| Our verifiability score | 8 / 10 — methodology | |
The everything approach — and its double edge
Most wallets pick a philosophy: the Keystone 3 Pro is air-gap-or-nothing, the Trezor Safe 7 bets on wireless convenience, the Coldcard bets on paranoia. The OneKey Pro refuses to choose: plug it in at your desk, go Bluetooth from your phone, tap NFC, or flip to air-gapped QR mode when you’re moving serious money and want zero radios in the conversation. That flexibility is genuinely useful — one device covers your hot-ish spending workflow and your cold-storage ceremony.
The double edge: every radio is attack surface, and a wallet that can do everything requires you to decide what it won’t. The security of a OneKey Pro depends more on its owner’s discipline than a Coldcard’s does — if you buy it, decide your rules (e.g., “large wallet only ever signs via QR”) and keep them. To OneKey’s credit, the radios are optional per session, and signing always confirms on-device.
Why it scores 8/10 with us
OneKey does the things this site exists to reward: firmware and apps fully open on GitHub, reproducible builds (the published binaries can be rebuilt from source and matched — rarer than “open source” and worth more), and independent audits by SlowMist. Four secure elements is more redundancy than anything else on our board, though like nearly everyone, the chips themselves are certified-but-closed silicon (the pillar where only the Safe 7’s auditable TROPIC01 breaks new ground). Deduction comes on track record — OneKey is younger than the incumbents, and its Coinbase Ventures/Binance Labs backing cuts both ways: deep pockets and accountability, but an app with an exchange’s instincts (buy, trade, stake buttons everywhere; its scam-detection feature is genuinely good, blocking a claimed million-plus scams a year).
The honest drawbacks
- $278 is flagship-plus money. More than a Safe 7 ($224 at writing), nearly double a Keystone 3 Pro. You’re paying for the connectivity buffet and the fourth chip.
- Discipline required. The all-modes design shifts responsibility to you; purists who want hardware that enforces the rules should look at air-gap-only devices.
- The app sells things. Like SafePal’s, the OneKey App has commerce in its bones. Ignorable, but present.
- Classic 1S screen is tiny. At 1.54″ monochrome, address verification is squint-work — fine as a starter, frustrating as a daily driver.
Who should buy which
- OneKey Pro: multichain users who want one premium device for both convenience and ceremony — and will set rules for themselves. Also the best fingerprint-plus-touchscreen experience in the open-source camp.
- Classic 1S: a $99 slim, EAL6+, open-source starter — a fair rival to the Trezor Safe 3 if Bluetooth matters to you; the Trezor wins on screen and track record otherwise.
- Choose a Keystone 3 Pro instead if: you want the air gap enforced by hardware, not policy, and would rather save $129.
- Choose a Safe 7 instead if: the auditable secure element and Trezor’s decade of incident history matter more than mode count.
FAQ
Can the radios be permanently disabled?
Bluetooth and NFC are off unless you use them, and QR-only workflows never touch them. But “off by settings” is weaker than “absent by design” — that’s the philosophical line between this and a Keystone.
What does “reproducible builds” actually get me?
It means anyone can compile the published source and get byte-identical firmware to what’s shipped — so the code you can read is provably the code you run. It’s the difference between transparency as a promise and transparency as a receipt.
Is four secure elements actually better than one?
Redundancy helps against single-chip flaws, and OneKey splits duties across them. It’s real defense-in-depth — though remember the Cypherock X1 achieves distribution physically across separate cards, which protects against different failure modes entirely.
Bottom line
The OneKey Pro is what happens when an open-source team builds a flagship with no feature budget: every mode, four chips, receipts published. If you’ll bring the discipline, it’s the most versatile serious wallet you can buy. If you’d rather the hardware impose the discipline, spend less on a Keystone and never think about radios again.
Get the OneKey Pro or Classic 1S at onekey.so → Always buy direct from the manufacturer — never marketplace resellers.