What does air-gapped mean?

The device has no USB data connection, no Bluetooth and no WiFi. It communicates only through QR codes shown on its screen and scanned by your phone, so there is no connection for an attacker to exploit. The cost is friction: every transaction means scanning in both directions.

Is the free SafePal app as secure as the hardware wallet?

No. The app is a hot wallet with keys on an internet-connected phone, comparable to any other mobile wallet. Only the hardware device is air-gapped. If you installed the app expecting hardware-level protection, you do not have it.

Can I buy a SafePal second-hand?

No. A pre-initialised device means the seller recorded the recovery phrase and can empty the wallet at any point. Seals are reproducible and prove nothing. Buy from safepal.com or an authorised reseller.

How does the wallet work without a cable?

Your phone builds an unsigned transaction and shows it as a QR code. The device scans it, displays the details, signs on your confirmation, and shows the signed transaction as another QR code for the phone to scan and broadcast. No keys ever leave the device.

How to Set Up SafePal Wallet — Hardware Setup Guide

SafePal comes in two forms that are easy to confuse: a free software wallet, and a hardware device that never connects to anything. Only the second gives you the security the brand is known for.

Air-gapped signing

The SafePal hardware wallet has no USB data connection, no Bluetooth and no WiFi. It communicates entirely through QR codes shown on its screen and scanned by your phone.

The phone builds an unsigned transaction and displays a QR code. The device scans it, shows you the details, signs on confirmation, and displays the signed result as another QR code. The phone scans that and broadcasts it.

The security property is absolute in one specific way: there is no connection to attack. No malicious cable, no Bluetooth exploit, no driver vulnerability. The only channel is an image on a screen.

The trade-off is friction. Every transaction involves scanning in both directions, which is slower than plugging in a cable and rules out casual daily use.

Software wallet or hardware

The free SafePal app is a hot wallet — keys on an internet-connected phone, comparable to any other mobile wallet. It is not air-gapped and it does not carry the hardware security model.

If you installed the app expecting hardware-level protection, you do not have it. Know which one you are using.

Setting up the hardware device

Buy from safepal.com or an authorised reseller. Never second-hand — a pre-initialised device means the seller has your phrase and can empty the wallet whenever they choose.

Charge the device and power it on
Choose to create a wallet
Set a PIN, entered on the device
Write down the recovery phrase shown on the device screen
Confirm it when prompted
Pair with the app by scanning the QR code shown

Pairing exchanges no keys. The app learns your public addresses so it can display balances and build transactions; signing stays on the device.

The recovery phrase

Shown on the device screen and never on a connected machine. Paper, two copies, two locations. Never photograph it. SafePal never asks for it — any software requesting those words is an attack.

The device is replaceable; the phrase is the wallet.

Coverage

Bitcoin, Ethereum, BNB Chain and around a hundred other networks. Broad for a hardware wallet at this price, which is the main argument for it over more expensive devices.

Mistakes that cost people money

Using the app and thinking it is the hardware

The most common one. The free app is a hot wallet.

Buying second-hand

Same as every hardware wallet. A pre-initialised device is a trap and a seal proves nothing.

Not reading the device screen

Air-gapping protects the keys, not your judgement. The device shows the destination address and amount, and that display is the one a compromised phone cannot alter. Check it every time.

Where it fits

SafePal rates 7/10 in our wallet rankings. It is the affordable hardware option with the strongest isolation model and the most friction per transaction. For a smoother experience at higher cost, see Ledger or Trezor.