Air-gapped signing
No USB data path, no Bluetooth, no Wi-Fi. Transactions travel in and out as signed payloads you approve on the device, so key material never crosses a network boundary.
Self-custody,
made calm.
Safenode keeps your private keys offline on a device you hold in your hand. The companion app prepares and broadcasts transactions — it never sees a key. Pre-orders open in early 2027.
Safenode wants people to feel fully in control of their assets — as if the vault was designed just for them.
Planned features. Security decided at the design stage.
Secure element, open firmware
Keys are generated and sealed inside a certified secure element. The firmware around it is reproducible and published, so anyone can verify the build running on their unit.
Multi-chain support
Bitcoin, Ethereum and major EVM networks at launch, with more added through signed updates.
Shamir backup
Split recovery into shares held in separate places, with a threshold you choose.
Decoy passphrase
A second passphrase opens a separate wallet, useful under pressure or at a border.
Tamper-evident build
A single milled shell and sealed packaging make interception visible before first use.
Hot wallet
- Keys live on a device that is always online.
- One malicious approval can drain the balance.
- Recovery often depends on a company staying alive.
safenode cold storage
- Keys are generated offline and stay offline for life.
- Every transaction is read and confirmed on the device screen.
- Recovery is an open standard you control, with or without us.
Privacy first. Zero-trust by default.
No telemetry
The device has nothing to report and no channel to report it on. Firmware ships without analytics of any kind.
No tracking
No accounts, no identity checks, no linking of addresses to a person. The companion app works without a login.
No cloud
Nothing is backed up to a server, because there is no server. Recovery lives with you, on paper or metal.
Every private key is generated and stored exclusively on the hardware device — never on a phone, never on a laptop, never in transit.
$3.8 billion stolen from crypto exchanges and hot wallets in 2022.
With safenode, your keys stay offline — and yours.
Built for every crypto user.
Long-term holders
Set a position aside for a decade and check on it without exposing it. Recovery designed for people, not sessions.
DAO treasuries
Split signing across contributors and jurisdictions, with thresholds that survive people leaving.
Business reserves
Hold corporate reserves in custody you can audit yourself, with a paper trail your accountant accepts.
Why join the waitlist now.
First production run
The opening batch is 5,000 units. Waitlist order decides who is invited to buy.
Founder pricing
Early reservations keep the launch price for the lifetime of the pre-order window.
Firmware previews
See the signing flow and recovery model before hardware ships, and comment on both.
Audit reports first
Third-party findings go to the waitlist the day they are finalised, unedited.
A voice in the roadmap
Chain support after launch is ordered by what the waitlist actually holds.
Reserve your spot
No payment required · Q1/Q2 2027
When does safenode ship?
First units are planned for Q1/Q2 2027. Waitlist members are invited to order in the order they joined.
Does joining cost anything?
No. The waitlist takes an email address and nothing else. Payment happens only if you decide to order.
What if the company disappears?
Recovery follows open standards, so any compatible wallet can restore your funds without safenode existing.
Which assets are supported?
Bitcoin, Ethereum and major EVM networks at launch. Additional chains arrive through signed firmware updates.
Is the firmware open?
Yes, and reproducible. You can build it yourself and compare the hash with the one on your device.
What if I lose the device?
Your recovery shares restore the wallet onto a new unit. The lost device is useless without its PIN.
Reserve your spot in the first production run.
Allocation reserved
0001 / 5000