BitBox02 Nova Security Model and Tradeoffs
BitBox02 Nova combines fully open-source firmware with an NDA-free EAL6+ Optiga Trust M V3 secure chip. It adds a glass OLED display and iPhone/iPad support over Bluetooth while retaining USB operation and microSD backup. It is available in Bitcoin-only and multi-asset editions, so buyers should choose the firmware scope deliberately.
Key points
- The dual-chip design separates open firmware from the secure chip used for physical protection and unlock-attempt limits.
- Bluetooth is used for iPhone and iPad; BitBox documents USB for desktop and Android workflows.
- The microSD backup is convenient but remains sensitive recovery material that must be protected and tested.
- This profile reports current documentation and does not claim hands-on testing.
Open firmware with a certified secure chip
BitBox documents a dual-chip design using an ATSAMD51 microcontroller for open-source wallet firmware and an Optiga Trust M V3 secure chip for physical protection. The secure chip is EAL6+ certified and documented without requiring a non-disclosure agreement.
BitBox says the secure chip also enforces the device-password attempt limit in hardware. As with any design, certification describes an evaluated component and assurance process; it is not a guarantee that the complete wallet cannot fail.
| Component | Documented role | Operational consideration |
|---|---|---|
| Open-source firmware | Wallet logic and transaction signing | Users still depend on authentic builds and updates |
| Optiga Trust M V3 | Physical protection and unlock-attempt enforcement | A proprietary chip integrated into a documented dual-chip design |
| Glass OLED display | Address and transaction verification | Small display still requires deliberate review |
| Capacitive touch controls | Device input without physical buttons | Practice confirmation and rejection before funding |
iPhone, Android, and desktop connectivity
Nova adds iPhone and iPad support through Bluetooth Low Energy. BitBox says its Whisper protocol layers authenticated and encrypted firmware-to-app communication over the Bluetooth connection. Desktop and Android operation use USB according to current compatibility documentation.
This split matters when planning recovery. An heir or backup device needs a compatible platform and the correct connection method, not only the microSD card or seed words.
MicroSD and recovery-word backups
- MicroSD default: BitBox can create an immediate digital backup on the included microSD card.
- Recovery words: Users can also record recovery words. Understand how the selected backup maps to compatible recovery tools.
- Separate storage: Do not leave the recovery card with the device; theft of both can collapse the physical separation.
- Test before funding: Verify the backup through the supported recovery check and record the wallet fingerprint.
Bitcoin-only versus multi edition
Choose based on what you will actually secure, not theoretical flexibility. A narrower firmware scope can simplify review, while multiple assets can reduce the number of devices and backups a household maintains.
| Edition | Scope | Choose it when |
|---|---|---|
| Bitcoin-only | Bitcoin-focused firmware and app workflow | You want a narrower feature surface for Bitcoin storage |
| Multi edition | Bitcoin plus supported additional assets | You intentionally need one signer for multiple networks |
Who should consider BitBox02 Nova
| Good fit when | Look elsewhere when |
|---|---|
| You want open-source firmware plus a certified secure chip | You want camera-based QR or SD-card PSBT signing |
| You need a hardware wallet that supports iPhone and iPad | You prefer a large touchscreen display |
| You value fast microSD backup and a compact USB form factor | You do not want any digital recovery media in the backup workflow |
Research limitation
BitcoinSafe has not documented hands-on BitBox02 Nova setup, microSD recovery, iPhone pairing, or Anti-Klepto verification in this repository. This page therefore avoids ratings and limits conclusions to sourced design tradeoffs.
Frequently asked questions
Does BitBox02 Nova work with iPhone?
Yes. BitBox documents iPhone and iPad support for Nova through Bluetooth Low Energy and the BitBoxApp. The original BitBox02 does not gain that compatibility.
Is BitBox02 Nova open-source?
BitBox describes the wallet firmware as fully open-source. The design also uses an Optiga secure chip, whose documentation is available without an NDA but whose internal implementation is proprietary.
Does BitBox02 Nova use Bluetooth on desktop?
Current BitBox compatibility documentation describes USB for Windows, macOS, Linux, and Android, with Bluetooth used for iPhone and iPad. Confirm the live support page before choosing a platform-specific workflow.
Sources and methodology
Claims that can change are checked against the sources below. Product pages report documented features and disclosures; they do not claim hands-on testing unless a test method and evidence are published on the page.
Continue your security plan
Bitcoin Hardware Wallet Security and Support Tracker
A dated tracker of current Bitcoin hardware wallets, support status, security architecture, firmware advisories, and actions owners should review.
Cold storageWhat Is a Cold Wallet?
Understand Bitcoin cold wallets, hardware signers, offline backups, hot-wallet differences, and how to build a cold-storage workflow you can recover.
Current wallet researchTrezor Safe 7 Security Model and Tradeoffs
A source-based look at Trezor Safe 7 security, dual secure elements, TROPIC01 disclosure, encrypted Bluetooth, backups, and who should consider it.
Check the complete setup, not one product feature.
Use the local safety audit to review backups, device access, recovery testing, firmware habits, and inheritance without sharing a seed phrase or private key.