SafePal S1
The SafePal S1 is a budget air-gapped hardware wallet with a 1.3-inch color display, built-in camera for QR code scanning, and CC EAL5+ secure element. It supports over 30,000 coins and tokens across 100+ blockchains. Communication is exclusively via QR codes — no USB data, no Bluetooth, no WiFi. It delivers the Keystone's air-gap philosophy at a significantly lower price point.
Best budget air-gapped hardware wallet with broad coin support, skip if you need third-party wallet integration or open-source firmware.
Where to Buy
Pros
- 100% air-gapped — QR code only communication, no USB data, no Bluetooth, no WiFi
- 1.3-inch color display with D-pad navigation for transaction verification
- Supports 30,000+ coins and tokens across 100+ blockchains
- Built-in camera for QR code scanning — no external reader needed
- Significantly cheaper than the Keystone 3 Pro while offering the same air-gap approach
Cons
- Closed-source firmware — not auditable like Trezor or Keystone
- 1.3-inch screen is small for verifying long addresses — easy to miss character differences
- CC EAL5+ certification is one tier below Ledger and Trezor's EAL6+
- QR code scanning is slower than USB or Bluetooth for transaction signing
- SafePal app required — limited third-party wallet support compared to Ledger or Trezor
Air-Gap Security on a Budget
The SafePal S1 achieves true air-gap isolation using the same approach as the Keystone 3 Pro — QR codes for all communication. The USB-C port charges the battery but transmits no data. There is no Bluetooth, no WiFi, and no NFC. Your phone's SafePal app displays an unsigned transaction as a QR code, the S1's camera scans it, you verify and approve on the S1's screen, and the S1 displays a signed QR code for your phone to scan and broadcast.
This eliminates every remote attack vector. Malware on your computer cannot reach the S1 because there is no connection to exploit. The security model matches the Keystone 3 Pro's at a lower price point, though with a single secure element (EAL5+) instead of the Keystone's triple EAL5+ chips.
The trade-off versus USB wallets like Ledger and Trezor is speed. Each transaction requires two QR scans — phone to device and device to phone. This adds 15-30 seconds per transaction compared to USB signing. For cold storage and occasional transactions, this is acceptable. For daily DeFi activity, it is frustrating.
Air-Gapped Security Model
The SafePal S1's air-gap implementation deserves a closer look because it fundamentally differs from how Ledger and Trezor handle transaction signing. When you initiate a transaction on the SafePal mobile app, the app constructs the unsigned transaction and renders it as a QR code on your phone screen. You then point the S1's built-in camera at that QR code. The device's processor — isolated behind the D-EAL5+ secure element — parses the transaction data, displays it on the 1.3-inch screen for your review, and waits for physical button confirmation.
Once you approve, the S1 signs the transaction entirely offline using the private key stored in the secure element, then displays the signed transaction as a new QR code on its own screen. Your phone scans this QR code and broadcasts the signed transaction to the blockchain. At no point does any electronic data channel exist between the S1 and any other device. The USB-C port has its data lines physically disconnected from the processor — it charges the 400mAh battery and nothing else.
Compare this to Ledger's Nano X, which uses Bluetooth Low Energy for wireless signing. BLE is encrypted, but it still represents a wireless attack surface — firmware vulnerabilities, protocol downgrade attacks, and Bluetooth sniffing are all theoretical vectors. The S1 eliminates these entirely. There is no radio to exploit, no firmware update channel to hijack over the air, and no pairing process to intercept.
The trade-off is tangible: QR code scanning adds 15-30 seconds per transaction. Each signing cycle requires two scans — phone-to-device and device-to-phone. In low light, the camera can struggle with QR codes on dimmed phone screens. And complex DeFi transactions with large data payloads generate dense QR codes that occasionally require multiple scans. For cold storage with infrequent transactions, this friction is worth the security gain. For daily DeFi trading with dozens of contract interactions, it becomes a genuine productivity bottleneck.
Display and Verification Experience
The 1.3-inch color display is adequate but not generous. It shows transaction details including recipient address, amount, network, and gas fees. Navigation uses a D-pad with four directional buttons and a confirm button — no touchscreen.
The screen size means long blockchain addresses wrap across multiple lines, making character-by-character verification tedious. The Keystone 3 Pro's 4-inch touchscreen displays entire addresses on one line with room to spare. The Trezor Safe 3's 0.66-inch monochrome OLED is even smaller, but Trezor compensates with desktop Trezor Suite for full verification.
For basic send transactions, the S1's display is sufficient. For complex DeFi interactions with contract calls and multiple parameters, the small screen makes full verification challenging. This is a meaningful usability difference from the Keystone 3 Pro's large touchscreen.
SafePal vs Ledger vs Trezor: Budget Positioning
At roughly $50, the SafePal S1 is the cheapest hardware wallet that combines a color display, a secure element, and a genuine air-gapped signing mechanism. The Ledger Nano S Plus at approximately $80 offers EAL6+ certification (one tier above the S1's EAL5+), USB signing, and deep third-party wallet integration with MetaMask, Rabby, and dozens of DeFi platforms — but it has no air gap. The Trezor Safe 3 at approximately $80 provides open-source firmware that anyone can audit, USB signing, and a strong track record in the security research community — but again, no air gap and a smaller 0.66-inch monochrome OLED.
What you give up with the S1 compared to these established players is meaningful. Coin support breadth looks impressive on paper (30,000+ tokens), but the SafePal app is the primary interface — third-party wallet integrations are limited compared to Ledger Live's 500+ DApp catalog or Trezor Suite's broad ecosystem. The company behind SafePal is newer and less battle-tested than Ledger (founded 2014) or SatoshiLabs (Trezor, founded 2013). Community trust accumulates over years of security audits, responsible disclosure handling, and transparent incident response — SafePal has a shorter track record on all three fronts.
What you gain is unique at this price: the QR-only air gap eliminates every wireless and wired attack vector that USB and Bluetooth wallets must defend against. For a user whose threat model prioritizes physical isolation over ecosystem breadth — someone holding Bitcoin and Ethereum long-term in cold storage, not actively trading DeFi — the S1's air gap provides security that the Ledger Nano S Plus and Trezor Safe 3 cannot match architecturally, regardless of their higher certifications. The $30 savings over either competitor makes the S1 a compelling entry point for security-conscious buyers on a budget who are willing to accept the closed-source firmware trade-off.
Full Specifications
Processor
| Specification | Value |
|---|---|
| security_chip | EAL5+ Secure Element [1] |
| certification | CC EAL5+ [1] |
| air_gapped | 100% air-gapped (QR code only) [1] |
Memory
| Specification | Value |
|---|---|
| supported_coins | 30,000+ [1] |
| supported_chains | 100+ blockchains [1] |
Connectivity
| Specification | Value |
|---|---|
| connectivity | QR code only (no USB data, no wireless) [1] |
| bluetooth | No (air-gapped) [1] |
| nfc | No (air-gapped) [1] |
I/O & Interfaces
| Specification | Value |
|---|---|
| Display | 1.3" IPS color display [1] |
| Camera | Built-in camera (QR scanning) [1] |
| USB | USB-C (charging only) [1] |
Power
| Specification | Value |
|---|---|
| battery | 400 mAh (USB-C charging) [1] |
Physical
| Specification | Value |
|---|---|
| Dimensions | 86 x 54 x 6 mm [1] |
| weight_g | 52 g [1] |
| Form Factor | Card-sized (air-gapped) [1] |
Who Should Buy This
The S1 provides genuine air-gap security with QR-only communication, a color display for verification, and 30,000+ coin support at a fraction of the Keystone 3 Pro's price. For someone buying their first hardware wallet who values security over brand recognition, it delivers excellent value.
The air-gap is genuine, but the closed-source firmware cannot be independently audited. The Keystone 3 Pro offers triple secure elements, open-source firmware, a 4-inch touchscreen, and fingerprint authentication for higher-security requirements.
Better alternative: Keystone 3 Pro
QR code scanning for every transaction is too slow for active trading. MetaMask integration requires the SafePal browser extension, which is less polished than Ledger or Trezor integrations. The Trezor Safe 3 offers USB signing with broad third-party wallet support.
Better alternative: Trezor Safe 3
With 30,000+ supported assets across 100+ blockchains, the S1 covers more chains than most hardware wallets. The SafePal app handles cross-chain swaps and DApp access. For portfolios spread across many ecosystems, this breadth is a significant advantage.
SafePal's firmware is closed-source. You cannot independently verify what code runs on the device. The Trezor Safe 3 and Keystone 3 Pro both have fully open-source firmware that security researchers can audit.
Better alternative: Trezor Safe 3
Ecosystem & Community
SafePal's ecosystem centers on the SafePal mobile app with built-in DApp browser and swap aggregator. Air-gapped QR code signing via the S1's camera. Broad chain support (100+ blockchains) but closed-source firmware limits auditability. Budget air-gap for cost-conscious users.
What to Build First
Set up the S1, pair with the SafePal app via QR code (no USB/WiFi ever), and sign your first transaction by scanning the app's QR code with the S1's camera. Display the signed transaction QR back to the phone. Complete air-gap security at a fraction of Keystone's price.
View tutorial →Must-Have Accessories
Video Reviews & Tutorials
Tutorials & Resources
- SafePal DocumentationOfficial user manual, setup guides, and supported chain listdocs
- SafePal DApp IntegrationBuilt-in DApp browser for DeFi access with air-gapped signingtutorial
Frequently Asked Questions
SafePal S1 vs Keystone 3 Pro?
Both are air-gapped QR-only wallets. The Keystone 3 Pro has a 4-inch touchscreen, triple secure elements, fingerprint sensor, and open-source firmware. The SafePal S1 has a 1.3-inch display, single secure element, and closed-source firmware at a much lower price. Choose Keystone for maximum security, SafePal for budget air-gap.
Is the SafePal S1 really air-gapped?
Yes. The USB-C port is charging only with no data lines connected to the processor. There is no Bluetooth, WiFi, or NFC. All transaction data is exchanged via QR codes scanned by the built-in camera and displayed on screen.
SafePal S1 vs Trezor Safe 3?
The SafePal S1 is air-gapped (QR only) with a color display and 30,000+ coins. The Trezor Safe 3 uses USB signing with open-source firmware and broad third-party wallet support. Choose SafePal for air-gap security, Trezor for ecosystem integration and auditability.
How many cryptocurrencies does the SafePal S1 support?
Over 30,000 coins and tokens across 100+ blockchains. This is one of the broadest support ranges in any hardware wallet, covering major chains like Bitcoin, Ethereum, Solana, and many smaller ecosystems.
Is SafePal firmware open source?
No. SafePal's firmware is closed-source, which means independent security researchers cannot audit the code running on the device. This is a significant difference from Trezor and Keystone, which publish their firmware source code.
Can I use the SafePal S1 with MetaMask?
Limited. SafePal offers a browser extension for some DApp interaction, but it is not as seamless as Ledger or Trezor's MetaMask integration. The QR code workflow adds latency to every signing request. For heavy DeFi use, a USB-connected wallet is faster.
How long does the SafePal S1 battery last?
The built-in battery lasts approximately 20 days on standby with regular signing use. It charges via USB-C (charging only, no data). This is a consideration for backup devices stored long-term — the battery will eventually need recharging, unlike the battery-free Tangem card.