Which hardware wallets are open source?

[Outhue]

It's really shocking that I'm just knowing that hardware wallets are of two types just like every other PC and mobile wallets, my thought was every hardware wallets are fully open source until a day ago thanks to this forum still but now which hardware wallet is open source?

[OmegaStarScream]

Here's a list made by dkbit: https://bitcointalk.org/index.php?topic=5288971.0

If you're looking to buy one, then I would recommend you go with Trezor. It's the most reputable one.

[Marvelman]

It's really shocking that I'm just knowing that hardware wallets are of two types just like every other PC and mobile wallets, my thought was every hardware wallets are fully open source until a day ago thanks to this forum still but now which hardware wallet is open source?

I believe Trezor hardware wallet is 100% open source and highly secure, with a similar level of security to hardware wallets such as the Ledger Nano S and other commercial devices. The Trezor Wallet has also been around for years and already has an excellent reputation.

For a complete list, you can check out the post that OmegaStarScream has already recommended:
[ LIST ] Open Source Hardware Wallets

[Charles-Tim]

OmegaStarScream has already provided a link which would be highly helpful.

I believe Trezor hardware wallet is 100% open source and highly secure, with a similar level of security to hardware wallets such as the Ledger Nano S and other commercial devices. The Trezor Wallet has also been around for years and already has an excellent reputation.

Trezor is completely open source but people should be careful of a physical attack that can be used to reveal the seed phrase of Trezor wallet, so people should protect their Trezor wallet from even offline attackers which is very necessary. Using passphrase can be very helpful because different keys and addresses will be generated entirely if passphrase is used while generating keys and addresses. The passphrase is not stored on Trezor, it will only be known to owner, backup the seed phrase and the passphrase differently in different locations.

But for wallet recovery, both seed phrase and passphrase are needed, if the seed phrase or the passphrase is lost, then the coin is lost.

[m2017]

It's really shocking that I'm just knowing that hardware wallets are of two types just like every other PC and mobile wallets, my thought was every hardware wallets are fully open source until a day ago thanks to this forum still but now which hardware wallet is open source?

I believe Trezor hardware wallet is 100% open source and highly secure, with a similar level of security to hardware wallets such as the Ledger Nano S and other commercial devices. The Trezor Wallet has also been around for years and already has an excellent reputation.

For a complete list, you can check out the post that OmegaStarScream has already recommended:
[ LIST ] Open Source Hardware Wallets

Do open source devices give you the feeling that your funds will be safe? Is open source software synonymous with security and reliability? Why is there such 100% trust in the open source?

Could it be that Trezor or other HW brand puts one piece of software on public display, but installs a completely different one on their devices? Is it possible to implement it in such a way that it cann't be verified?

[witcher_sense]

Do open source devices give you the feeling that your funds will be safe? Is open source software synonymous with security and reliability? Why is there such 100% trust in the open source?

Could it be that Trezor or other HW brand puts one piece of software on public display, but installs a completely different one on their devices? Is it possible to implement it in such a way that it cann't be verified?

Being open-source by itself doesn't guarantee perfect security or safety of your funds. Moreover, when it comes to less popular hardware wallets, where code is not well-reviewed and tested, the chances that there are vulnerabilities sitting somewhere are very high. So, it is not recommended to use hardware wallets no one knows about even if open-source is their selling point. Also, there is no such thing as "100% trust in the open-source" unless you're not capable of verifying and testing everything yourself. Then the only option you would have is to trust someone else. Skilled programmers don't trust, they test and verify. Trezor can potentially publish for download the malicious versions of their software, but they can't do that without publishing the source code for this software. A skilled programmer can build software from published source code and compare it to what has been presented for download by Trezor. If it doesn't match the source, then Trezor went closed-source or malicious and therefore cannot be trusted anymore.

[SFR10]

two types just like every other PC and mobile wallets,

Technically, there are also custodial and non-custodial variations... Depending on how you use/keep your funds with certain apps ^{[in HW]}, the former could also apply to your HW ^{[e.g. staking]}!

I believe Trezor hardware wallet is 100% open source and highly secure, with a similar level of security to hardware wallets such as the Ledger Nano S

It's worth noting that both Trezor models don't have "secure elements" while Ledger models aren't "fully" open-source.

Could it be that Trezor or other HW brand puts one piece of software on public display, but installs a completely different one on their devices? Is it possible to implement it in such a way that it cann't be verified?

In addition to @witcher_sense's comment, we have multiple sources that check if they're reproducible or not ^{[SS of the HW section]}:
^{Note: It doesn't mean they're 100% safe, but it's a good start!}

• WalletScrutiny
• BitcoinBinary ^{[it's a bit outdated, but you get to see how they're doing it]}

[Outhue]

It's really shocking that I'm just knowing that hardware wallets are of two types just like every other PC and mobile wallets, my thought was every hardware wallets are fully open source until a day ago thanks to this forum still but now which hardware wallet is open source?

I believe Trezor hardware wallet is 100% open source and highly secure, with a similar level of security to hardware wallets such as the Ledger Nano S and other commercial devices. The Trezor Wallet has also been around for years and already has an excellent reputation.

For a complete list, you can check out the post that OmegaStarScream has already recommended:
[ LIST ] Open Source Hardware Wallets

Do open source devices give you the feeling that your funds will be safe? Is open source software synonymous with security and reliability? Why is there such 100% trust in the open source?

Could it be that Trezor or other HW brand puts one piece of software on public display, but installs a completely different one on their devices? Is it possible to implement it in such a way that it cann't be verified?

It all comes down to one thing though, whichever crypto wallet you decide to use you need to store your recovery phrase in a safe location yourself, no wallet can keep it safe for you not even a hardware wallet.

[Pmalek]

Is open source software synonymous with security and reliability?

No. It's synonymous with transparency and verifiability. Open-source software can still be malicious, badly written, and full of bugs. It just comes down to when those issues will be discovered, reported, and/or fixed. 

Why is there such 100% trust in the open source?

Only because you can check what you are running and what the software does. In reality, most people don't check the code, but they like that others can.

Could it be that Trezor or other HW brand puts one piece of software on public display, but installs a completely different one on their devices? Is it possible to implement it in such a way that it cann't be verified?

You could have the users install one piece of software but make something else public. But if you compared those two codebases and tried to reproduce it, you wouldn't be able to do that. Therefore, it's not the same software. If you are really unlucky, you could install a malicious update and face the consequences before the issues are found and corrected. But the advantage of open-source over closed-source is that experts can find those problems by looking at the code. With closed-source, there is nothing to look for because it's not made public. 

[hugeblack]

It's really shocking that I'm just knowing that hardware wallets are of two types just like every other PC and mobile wallets, my thought was every hardware wallets are fully open source until a day ago thanks to this forum still but now which hardware wallet is open source?

The fact that the wallet is fully open source will not benefit you as a newbie coder, but rather the number of people who have reviewed it and whether you trust their feedback or not, otherwise you will need to do it yourself.

So make sure that the wallet uses the same source code, look for people who review those codes or choose someone you trust otherwise, being an open or closed wallet is one thing for you.

If you don't want to bother your head, follow the tips above, but knowing more things won't hurt you.

[fillippone]

Bitbox02 by ShiftCrypto is open source:

https://shiftcrypto.ch/bitbox02/security-features/

Open-source
Hide nothing by open sourcing everything, including the firmware on the BitBox02, the BitBoxApp, and x rays of the hardware, schematics.

Link to GitHub Repository:
https://github.com/digitalbitbox/

[Marvelman]

Bitbox02 by ShiftCrypto is open source:
/cut/

Yes, the Bitbox hardware wallet is already on the [ LIST] Open Source Hardware Wallets compiled by dkbit98. According to their official website, the BitBox02 firmware was audited by Census Labs along with consulting done by multiple third-party security firms.

[Outhue]

Bitbox02 by ShiftCrypto is open source:
/cut/

Yes, the Bitbox hardware wallet is already on the [ LIST] Open Source Hardware Wallets compiled by dkbit98. According to their official website, the BitBox02 firmware was audited by Census Labs along with consulting done by multiple third-party security firms.

Can one purchase this hardware wallet on Amazon store or Newegg? Also can you drop me the official link to this wallet website thank you.

[fillippone]

Where I live, the BitBox02 is available on Amazon trough the official store of the producer.
I am not sure this is the case worldwide.

The link is literally on my previous post.

[Charles-Tim]

Can one purchase this hardware wallet on Amazon store or Newegg? Also can you drop me the official link to this wallet website thank you.

BitBox02 official website: https://shiftcrypto.ch/bitbox02/. You can also buy directly from the official website.

[aysg76]

Where I live, the BitBox02 is available on Amazon trough the official store of the producer.
I am not sure this is the case worldwide.

They have shipping facility for the world but there is policy differentiation depending on the country you want to order for the bitbox02

The majority of our orders are shipped 'Duties & Taxes Paid (DDP)', which means we pay your country's import taxes & duties for you.

If DDP isn't available for your destination country, the order will be shipped DDU which means you will have to pay any applicable import duties & taxes to your local authorities.

During checkout, on the page where you choose your shipping method, our webshop will show you if DDP is available for your destination country.

Check here for your country: shipping policy for Bitbox02

You can have the bitcoin edition or multi edition supporting ETH,litecoin and ERC-20 tokens at the price of €119 if you have no tax duties to be paid for.

The additional combo bundle of protection like stellwallets and backup cards can also be of use in case you need to store your seed phrases but there are much better options to backup them safely.So do the full research for you first of all.

[Pmalek]

They have shipping facility for the world but there is policy differentiation depending on the country you want to order for the bitbox02

The majority of our orders are shipped 'Duties & Taxes Paid (DDP)', which means we pay your country's import taxes & duties for you.

If DDP isn't available for your destination country, the order will be shipped DDU which means you will have to pay any applicable import duties & taxes to your local authorities.

During checkout, on the page where you choose your shipping method, our webshop will show you if DDP is available for your destination country.

Check here for your country: shipping policy for Bitbox02

The shipping information section isn't exactly helpful. Judging by the information they provided, they pay for the duties and taxes if the HW is shipped to the European Union, United States, and the rest of the world. One might think it's all DDP. You have to pay close attention to what it says during checkout so you don't get a surprise call from a customs officer.

Their shipping fees aren't expensive. Depending on where you are in the EU, the standard fees are €4-9.   

[Tibu]

Look like a targeted ads 

[Outhue]

Look like targeted ads

What do you mean by targeted ads?

[DireWolfM14]

It's really shocking that I'm just knowing that hardware wallets are of two types just like every other PC and mobile wallets, my thought was every hardware wallets are fully open source until a day ago thanks to this forum still but now which hardware wallet is open source?

I, myself had some confusion about this until a few months ago when I was doing some research about Coinkite's ColdCard hardware wallet.  The thing to keep in mind is that the term "open source" specifically applies to the licensing of an application.  There are several licensing structures that qualify as "open source" but one of the most common is the MIT License.  Essentially, open source licensing is very permissive, i.e. one can copy the software, change it, redistribute it, even profit from it without fear of legal repercussions.

ColdCard is a good example of a trusted wallet that does not use open source licensing for it's firmware.  The software is still transparent, allowing for the community to review it.  However, ColdCard's firware licensing prohibits redistribution of the software (or firmware, in this case.)  This is designed to protect Coinkite's intellectual property, while allowing for the community to verify it is safe to use.

Ledger is another example; their firmware is not open source, and as far as I know, it's not available for review.  Ledger uses a secure element, and I assume they are concerned that if they disclose the firmware that someone could use for it malicious purposes.  However, Ledger Live, the desktop application, is open source and adheres to the MIT License.

Personally, I'm partial to open source hardware wallets and I also recommend the Trezor, which I own and use regularly.  I do also own and use a ColdCard.  The important thing is to know what you're dealing with and assess your own comfort level with the device you choose.