Blockstream Jade Plus

[Pmalek]

a very important new feature in my opinion is the genuine check feature that comes with the new hw-wallet.
this uses secure device identity to ensure that the Jade Plus purchased was manufactured by Blockstream and not from a malicious third party.
this can be done both in Blockstream Green and via the web app

Are you sure that the genuine check is exclusive for the Jade Plus? I think a genuine check using Secure Boot v2 also exists for the older Jade airgapped HW. I think I read that the firmware is checked every time you boot the device. Secure Boot v2 verifies if the firmware was signed by the Blockstream team. An exception to this is if you are using a DIY Jade. The secure boot feature won't be on by default then. But you can turn it on and configure it to check if the firmware on the device is the one you signed and installed or if it's something else.

[gregorx]

Hello

I purchased jade plus device and tried to test it. I am not really sure about that device
I installed my local blind oracle  on umbrel. The idea of ​​blind oracle is cool, you can't access wallet if you don't have access to phrase held on the blind oracle. Loosing device itself would be not a problem because noone would decode it. But to use that blind oracle you have to use their app Jade green. You have to use 3rd party software to access the wallet (first alarm). Device also has to be connected all the time(!) via USB to keep device unlocked (second alarm).
If  you enter the pin on device,it connects using jade green app to your local blind oracle to get the rest of the key. If i close my laptop , put into sleep mode and open it again i can still access that wallet because that part of key is still kept in memory. I changed network to be sure i will not have access to blind oracle and i was still able to enter the wallet. Only reboot would remove it from memory  (not good).

Of course we can use remote blind oracle , but what if some day that blind oracle server will failure( 3rd party).
Other option to use seedQR on a piece of paper, so you dont have to trust anyone
I don't know , i think i will put this device to the drawer for now?.  


regards
greg

[Lucius]

I was looking at some reviews of this device and what caught my eye was the ability to choose between three different ways to use the device. If I'm not mistaken, the first one is via USB, and the other two are QR codes or SD card. What I'm wondering is does anyone see an advantage or disadvantage in this, considering that if someone were to use a USB connection, could this device then be considered airgapped even if wallets are created through other options?

I prefer the approach taken by other similar devices, which are essentially fully airgapped, which is the best option for those who want maximum security.

[Pmalek]

I was looking at some reviews of this device and what caught my eye was the ability to choose between three different ways to use the device. If I'm not mistaken, the first one is via USB, and the other two are QR codes or SD card. What I'm wondering is does anyone see an advantage or disadvantage in this, considering that if someone were to use a USB connection, could this device then be considered airgapped even if wallets are created through other options?

The older Blockstream Jade also allows connections via Bluetooth if users installed the Bluetooth-supporting firmware. I guess it's the same with the Jade Plus. The hardware wallet needs to be connected to the computer somehow to transfer the firmware to it. The firmware installation in my case was done via USB. I use my device as stateless signer, so after I turn it off, the Jade's memory gets wiped. The next time I turn it on, I need to scan my seedQR and enter a passphrase before I can work with my wallet. Bluetooth is disabled and can't be turned on. Since it's stateless, there is nothing to leak from it even if the device can leak something if I connected it to a computer.   

[Lucius]

@Pmalek, when we consider some other airgapped devices, their firmware is upgraded through memory cards, which means that you copy the firmware to the memory card, and then you insert it into the hardware wallet and that way you upgrade the firmware. What you wrote makes sense, because until recently I wasn't seriously interested in this device, but it seems like a neat little device that I could perhaps add to my collection.

Given the price of BTC today and in the future, it somehow doesn't seem safe to store everything with one hardware wallet, but rather to have several of them and thus reduce the risk even more. Some will say that it is expensive, but for the price of a solid smartphone you can buy top three hardware wallets.

[Pmalek]

@Pmalek, when we consider some other airgapped devices, their firmware is upgraded through memory cards, which means that you copy the firmware to the memory card, and then you insert it into the hardware wallet and that way you upgrade the firmware.

I know what you mean and I understand the workings of most other airgapped hardware wallets. The difference between them and the first version of the Blockstream Jade is that the Jade doesn't come with a memory card slot. Thus, your only upgrade options are via a USB cable or Bluetooth. The new Jade Plus has added a memory card slot making it slightly safer to perform firmware installations.

Given the price of BTC today and in the future, it somehow doesn't seem safe to store everything with one hardware wallet, but rather to have several of them and thus reduce the risk even more.

That's one way of doing it. You will need better planning and more areas to hide all the copies of your seeds and optional passphrases, but it can be done.

[dkbit98]

Crypto Guide just released a new youtube video of Jade Plus review.
I recommend watching this if you are interested in purchasing this device or see comparison with older brother Jade.
I made few screenshots with size comparison, but it is also possible to load Jade firmware in T-Display S3 Pro if you want to make your own cheaper DIY-Jade.
There are no visible screws like in older Jade device, so it's not going to be that easy to open it and replace the battery.

   

[Cricktor]

I watched the Crypto Guide's video and find the Jade Plus a pretty interesting device based on what it offers for newbies and more experienced users, too. I like the greater screen and sleeker design, but the apparently less easy to open design not so much. It's probably not such a big issue, depending on how often you use and have to recharge it. I dislike designs which are hard to service in general.

The T-Display S3 Pro is a welcome alternative hardware for a DIY version of the Jade Plus. Purchasing it doesn't leave online traces linked to a crypto wallet, which is a bonus to value and it's cheaper, too.

[Mrcl]

 Hello everyone.

I have a question about the Jade Plus. To transfer bitcoins from the Relai app to the hardware wallet, you have to take an intermediate step with the software from
electrum.org.
I am now failing at the point where the address is signed.
When I copy an address from the electrum.org programme and paste it into the corresponding field for signing and then click on Sign, the following error message appears:

"JadeError: -32602- Failed to extract
message from paramteres (Data: None"

The following message is displayed for a fraction of a second:
"Please confirm the signing of the message with your Jade hardware device"

But nothing happens on the Jade Plus.

Can someone help me with the error code? Thank you.

Regards
Mrcl

[dkbit98]

I have a question about the Jade Plus. To transfer bitcoins from the Relai app to the hardware wallet, you have to take an intermediate step with the software from
electrum.org.
I am now failing at the point where the address is signed.
When I copy an address from the electrum.org programme and paste it into the corresponding field for signing and then click on Sign, the following error message appears

I would suggest using different software wallet connected with Jade Plus.
Green wallet would probably work perfect in combination with your Jade device, since both of them are made by same BLockstream company.
Another great option you can try is Sparrow wallet, that is a great open source alternative to Electrum.
If your issue remains after this than yous should probably contact Jade support directly for help.

[satscraper]

I have a question about the Jade Plus. To transfer bitcoins from the Relai app to the hardware wallet, you have to take an intermediate step with the software from
electrum.org.

Not at all.

There’s no need for any kind of intermediary when transferring BTC from Relai to Jade Plus.

Simply pair your Jade Plus with the compatible software client to generate receiving address. Then, paste that address into the destination field in the Relai app ^{either manually or by scanning the QR code}.

"JadeError: -32602- Failed to extract
message from paramteres (Data: None"

That message may appear if you didn’t sign the PSBT file on the Jade Plus.

But just to clarify once again. You don’t need to sign anything on the Jade to transfer your funds from Relai.

[Pmalek]

There is currently a 15% discount on the Blockstream Jade Plus airgapped hardware wallet in celebration of Bitcoin Pizza Day. I checked and it's still valid.
The discount code "PIZZADAY15" applies automatically during checkout. This offer expires today.

[Pmalek]

Blockstream runs a new promotion until 7 September in which you can get 20% off on the Jade Plus (black) airgapped hardware wallet. This is an exclusive in-app promo. To take advantage of this deal, you will have to download and install the Blockstream App (ex Blockstream Green) wallet. The promo deal is available in the app.

https://x.com/Blockstream/status/1960561946929062136

[Pmalek]

Blockstream has warned owners of Jade hardware wallets that there is an ongoing phishing campaign. Fake emails are being sent claiming there is a new Jade firmware upgrade that users should install. It's supposed to increase the security and performance of Jade hardware wallets.

These emails are, of course, fake and not sent by Blockstream. No one should be downloading anything they receive over email.
The company claims they haven't been hacked and no private data is compromised. But if scammers have gotten their hands on a large number of Jade-connected email addresses, then a database somewhere has been breached. It could belong to Blockstream or a third-party.

If you use Jade and you get a fake email, you know what to do. Ignore and delete.

https://x.com/Blockstream/status/1966586521827368990

[Lucius]

@Pmalek, are we talking about email addresses associated with ordering these devices or do users of this device perhaps have the option to enter their email address into their app wallet?

Some of us have learned a lesson and do not buy such devices in such a way as to put our personal data at risk. However, it is possible that someone is using previously leaked databases and sending random e-mail messages hoping that some of those messages will reach the owner of this device.

I regularly receive spam messages for wallets and CEXs that I have never used, so I am sure it is exactly the tactic I mentioned. They usually end up in the spam folder, from which they are automatically deleted after a while, but if they end up in the main inbox, I make sure to mark them as spam and hopefully help prevent others from receiving them in their main inbox.

[Pmalek]

@Pmalek, are we talking about email addresses associated with ordering these devices or do users of this device perhaps have the option to enter their email address into their app wallet?

I am not sure. I haven't researched or looked for any other information except the X notification I posted previously.
I have never used Blockstream Green (now called Blockstream App) but I doubt it requires an email to work or for any of its features. It's a non-custodial software wallet and one of many companion apps for the Jade HW.

The possibilities include, leaked data from their online shop, leaked data from customer support interactions, or their own/third-party marketing or newsletter subscribers. As you said, perhaps it's just someone who got their hands on a previous list of email addresses. However, those have been around for a long time (I am looking at you Ledger). Why now all of a sudden? I am thinking it's something more connected to Blockstream.

[Lucius]

@Pmalek, I checked the Blockstream App and that app has the option for users to buy Bitcoin directly through the app, and if it has that option, then of course it has certain requirements, one of which is e-mail. Such purchases are made through 3rd party exchanges, now the only question is whether anyone else can see this data, or whether they can connect that email with the fact that its owner is also the owner of Blockstream Jade.

If it was leaked somewhere at Blockstream, then it would be logical for a larger number of their users to come forward, although again, perhaps that database was only partially leaked.

https://help.blockstream.com/hc/en-us/articles/46682922987929-Buy-bitcoin

[Pmalek]

Blockstream has released firmware version 1.0.38 for the Jade Plus.
This update comes with camera optimizations that improve SeedQR recovery during scanning. The new firmware also improves air-gapped transaction signing speeds by over 30%.

I hope they will improve the scanning on the old Jade as well. It could be better when scanning SeedQRs. Sometimes you need to be really still and precise to scan a qr.

More info about the latest firmware upgrade below:
https://blog.blockstream.com/jade-plus-camera-update-faster-sharper-and-more-reliable-qr-scanning/