Self-custody hardware and software wallets

SafePal crypto wallets explained

SafePal is a cryptocurrency wallet company founded in 2018 and based in Singapore, best known for a hardware wallet that never plugs into anything. Instead of a cable, Bluetooth pairing, or a wireless chip, the flagship SafePal S1 talks to your phone by showing and reading QR codes through a small camera and screen. The private keys are generated on the device, stay on the device, and physically cannot travel over a wire that does not exist.

The company sells a system rather than a single gadget. One half is hardware: the S1 and its successors, plus a metal seed backup plate. The other half is software: the SafePal mobile app and browser extension, which handle balances, swaps, NFTs, and dApp connections while the hardware device holds the keys. The software side also works on its own as an ordinary hot wallet, which is how many people first meet SafePal before they buy a device.

This page walks through what SafePal actually is, how its air-gapped signing model works in practice, what sits in the product line, how the SFP token fits in, where the design has real limits, and how to set a wallet up without making the mistakes that cost people their funds. It is written for readers deciding whether this approach to self-custody suits them.

SafePal is a wallet vendor, not an exchange, a bank, or a custodian. Nothing it sells holds your coins on your behalf. What SafePal provides is the equipment for keeping the private keys that control your coins outside the reach of the internet, plus the software that makes those keys usable for everyday activity like sending, receiving, swapping, and connecting to on-chain applications.

The company was founded in 2018 and received investment from Binance Labs, the venture arm of the Binance exchange, which is where much of its early visibility came from. That relationship also explains why SafePal has always leaned toward broad multi-chain coverage and in-app trading rather than the single-asset purism you see in some Bitcoin-only devices. SafePal advertises support for well over a hundred blockchains and a very long list of tokens across them.

The defining design decision came early. Most hardware wallets connect to a computer or phone through USB, Bluetooth, or NFC, and the security argument rests on the idea that the connection carries only signed transactions, never keys. SafePal took a stricter position with the S1: remove the connection entirely. If the device has no radio and no data port, there is no channel for malware on the host machine to probe, no driver to exploit, and no wireless protocol to attack from across the room.

In exchange, SafePal accepts a slightly slower workflow. Every transaction becomes a small choreography of scanning: the app draws a QR code, the device reads it, the device draws a QR code back, the app reads that. It takes a few extra seconds. For people moving savings rather than day-trading, most consider that a fair trade.

Around that core, SafePal built the rest of a wallet business: a mobile app that works with or without a device, a browser extension for desktop dApp use, a metal seed backup product, and newer hardware models aimed at users who want the wireless convenience the original S1 deliberately refused. Understanding SafePal really means understanding how those pieces divide the job of holding crypto safely.

A blockchain transaction is just a message: send this amount, from this address, to that address, with this fee. The message only counts if it carries a valid signature produced by the private key that controls the sending address. Everything a wallet does is arranged around producing that signature without letting the key escape.

In the SafePal model, the phone builds the unsigned message. It knows your balances, the current fees, and the destination address, because it can reach the network. What it does not know, and never learns, is your private key. The SafePal app encodes the unsigned transaction into a QR code on screen.

You point the hardware wallet's camera at that code. The device decodes it, then shows you what it understood: the amount, the destination, the network, the fee. This screen is the whole point of owning the hardware. It is rendered by the device from data the device parsed itself, so a compromised phone that swapped the destination address behind your back would have to display that swapped address on the SafePal screen for you to approve.

If the details match what you intended, you confirm on the device. The secure element signs the transaction internally, and SafePal renders the signature as a second QR code. You scan that back into the app with your phone camera, and the app broadcasts the signed transaction to the network. The key never left the chip, and no byte of data ever moved between the two devices except as pixels on a screen read by a lens.

That optical channel is one-directional by nature and easy to reason about. A QR code carries a fixed, bounded amount of data that a human can at least in principle inspect the effects of. Compare that with a USB link, which is a general-purpose bus with a driver stack on both ends, and you can see why SafePal chose the camera. The concept borrows from air-gapped network isolation used in high-security environments.

The same choreography covers more than plain transfers. Signing a token approval, authorizing a swap, or confirming a message for a dApp login all pass through the same scan-confirm-scan loop, which is why SafePal spends so much design effort on how those requests are summarized on a small screen.

The lineup splits into three jobs: sign transactions offline, back up the recovery phrase in a form that survives accidents, and manage assets day to day. Here is what SafePal offers for each.

SafePal S1

The S1 is the device that made the brand. It is a compact, battery-powered unit with a color screen, a camera, and physical buttons, and it has no Bluetooth, no Wi-Fi, no NFC, and no data connection over its USB port, which exists only for charging. Keys are generated on the device by a hardware random number generator and stored in a certified secure element. For most buyers, the SafePal S1 remains the reference product.

Because the S1 is fully self-contained, it can be initialized in a room with no network at all and then stored in a drawer for years. It only needs to wake up when you want to move funds, which suits the long-term holder profile SafePal was built for.

SafePal S1 Pro

The S1 Pro is the refreshed take on the same idea: the identical air-gapped QR workflow, in a device with an updated build and improved internals. Anyone comfortable with the original will be comfortable here, since nothing about the signing model changes. SafePal positions it as the step up for users who want a more premium object without altering the security posture.

Choosing between the two is mostly about budget and build preference rather than protection. Both keep the keys in the secure element, both make you confirm on the device, and both refuse to speak to your phone in any way except through the camera.

SafePal X1

The X1 is the concession to convenience. SafePal describes it as a Bluetooth-connected hardware wallet, which means pairing with the app instead of scanning codes back and forth. Transactions are still built on the phone and still approved with a physical press on the device, so the key stays isolated, but the communication channel is a wireless protocol rather than an optical one.

Whether that matters depends on your threat model. For most users the practical risk is phishing and malicious approvals, not radio attacks, and the faster flow means they actually use the hardware instead of leaving it in a drawer. For users who want zero attack surface on principle, SafePal still sells the air-gapped models.

SafePal Cypher

Cypher is not electronic at all. It is a metal plate system for recording your recovery phrase in a form that survives fire, water, and time better than paper. You stamp or slot the words in and store the plate somewhere secure, separate from the device.

It is worth stating plainly why SafePal bothers to make this: the overwhelming majority of self-custody losses are not hacks. They are lost, damaged, or never-written-down recovery phrases. A metal backup is unglamorous and it addresses the single most common failure mode.

The secure element is a tamper-resistant chip designed to hold secrets and perform cryptography without exposing the secret to the rest of the system. SafePal uses one rated EAL5+ in the S1, a grade from the Common Criteria Evaluation Assurance Level scale, which describes how rigorously a product's security design was tested. The chip resists physical probing, power analysis, and fault injection far better than general-purpose memory.

Randomness matters just as much. A wallet's seed is only as unguessable as the entropy used to create it, so SafePal generates keys on the device with a hardware random source rather than deriving them from anything the phone provides. This is why initialization happens on the hardware, not in the app, and why you should never accept a device that arrives with a seed already written down for you.

SafePal also builds in a self-destruct response to physical tampering: if the device detects that someone is trying to open or attack it, it wipes the sensitive data it holds. That turns a stolen device into a brick rather than a puzzle box, provided you have your recovery phrase safely stored elsewhere.

Access control is layered on top. A PIN gates the device, and repeated wrong entries do not simply slow an attacker down. On the software side, the SafePal app adds its own password and biometric lock, so a snatched phone does not immediately expose the wallet interface.

It helps to be clear about what this architecture cannot fix. SafePal defends the key. It does not defend your judgment. If you sign a malicious token approval that grants a contract permission to drain a balance, the device will faithfully sign it, because from the chip's point of view that is a perfectly valid request that you confirmed. Hardware protects against theft of the secret, not against authorizing the wrong thing.

Nor does it help if the recovery phrase leaves the paper or metal it was written on. Typing a SafePal seed phrase into a website, a note-taking app, a photo, or a cloud backup converts a hardware-secured wallet into a hot wallet in one action, and no chip certification can undo that.

The mobile app is the interface most people spend their time in. It shows balances across chains, builds transactions, tracks NFTs, and provides the swap and dApp browsing features that make a wallet usable rather than merely secure. SafePal supports several account types in the same app, which is a bigger deal than it sounds.

You can run a pure software wallet, where the keys live encrypted on the phone, which is fine for small amounts and for trying things out. You can pair a hardware device, where the app becomes a viewer and transaction builder with no key material at all. And you can import an existing seed phrase from another wallet, since SafePal follows the standard derivation conventions that make recovery phrases portable across vendors.

In-app swapping aggregates routes across decentralized exchanges and, for supported pairs, cross-chain bridges. This is convenience rather than a security feature, and the usual caution applies: check the quoted rate and the fee, because aggregated routing can look effortless while quietly costing more than a direct trade on a liquid pair.

For desktop use, SafePal offers a browser extension, which matters because so much of DeFi and NFT activity happens on desktop sites that expect an injected wallet. The extension connects to sites the way other browser wallets do, while a paired hardware device keeps final approval on physical hardware.

A practical habit worth adopting: keep a small software account inside SafePal for experiments, minting, and unfamiliar dApps, and keep the hardware-backed account for holdings you would be upset to lose. Compartmentalizing by account is the cheapest risk control available, and the app makes it easy because both live side by side.

SFP is the token issued by SafePal on BNB Chain, launched through Binance Launchpad in February 2021 with a total supply of 500 million. It is a utility and ecosystem token tied to the wallet product rather than a separate protocol.

Its main practical uses sit inside the SafePal ecosystem: discounts and benefits on in-app services such as swap fees, participation in membership and reward programs, and a role in community governance decisions the team puts to holders. The exact benefits have evolved over time, as they tend to with wallet tokens.

It is important to separate the two things SafePal sells. The security of a hardware wallet does not depend on the token in any way. You can buy an S1, never touch SFP, and lose nothing in terms of protection. Holding SFP is an optional decision about the company's ecosystem, and like any cryptocurrency it carries price risk that has nothing to do with whether your keys are safe.

If you do hold it, treat SFP like any other asset in your wallet: keep meaningful amounts behind the hardware device, verify contract addresses before adding the token manually, and be skeptical of any airdrop or bonus offer claiming to come from SafePal that requires you to connect a wallet to an unfamiliar site.

SafePal fits people who hold assets across many chains and want one device and one app for all of them. If your portfolio spans an EVM chain or three, a couple of layer twos, and some assets from other ecosystems, the breadth of coverage is the main reason to choose it over a narrower device.

It also fits phone-first users. A lot of hardware wallets assume a desktop computer with a cable and a companion application. SafePal assumes a phone and a camera, which makes it workable for people whose entire crypto life happens on mobile, and for anyone reluctant to plug an unknown device into a work laptop.

It suits security-conscious savers who want a device that spends most of its life switched off. Because the SafePal S1 never needs to connect to anything, it can be stored cold for long stretches and brought out only when needed, which is exactly how a savings wallet should behave.

It is a weaker fit for very high-frequency on-chain traders, who may find the scanning loop tiresome even at a few seconds per signature, and for people who want fully open-source firmware they can build and verify themselves, which is a legitimate requirement that SafePal does not aim to satisfy. Institutional users needing multi-signature policy engines and shared approval workflows will also want purpose-built custody tooling instead.

The useful comparison is not brand against brand but storage model against storage model. Here is how the SafePal options line up against each other and against leaving coins on an exchange.

Read the table top to bottom and the trade-off is obvious: every step toward convenience moves the key closer to the internet, and the bottom row moves it out of your hands entirely. SafePal exists to let you sit at the top of that list without giving up multi-chain usability.

Most people end up using more than one row at once, and that is sensible. An exchange account for buying, a SafePal software account for small on-chain activity, and a SafePal hardware account for the bulk is a reasonable structure that does not require choosing a single answer.

Setting up takes about twenty minutes if you do it properly, and most of that is writing down and checking the recovery phrase. Do not rush that part.

1. 01

   Buy from an official channel and inspect the package

   Order the device from SafePal directly or an authorized reseller, never from a marketplace listing by an unknown seller. Check the tamper-evident packaging before opening. A hardware wallet is one of the few products where supply chain integrity genuinely matters.

2. 02

   Charge the device and install the app

   Get the SafePal app from your platform's official store, confirming the publisher before installing. Fake wallet apps are a recurring problem across the whole category, and the store listing is the moment to be careful.

3. 03

   Create the wallet on the device and set a PIN

   Choose to generate a new wallet on the hardware, not to import one. SafePal will create the seed on the device itself. Set a PIN you can remember but that is not a birthday or a repeated digit.

4. 04

   Write down the recovery phrase offline and verify it

   Copy the words onto paper or a metal plate in order, then complete the confirmation step so you know the copy is correct. Never photograph it, never type it into anything, and store it somewhere separate from the device.

5. 05

   Pair with the app and send a test transaction

   Link the device to the SafePal app by scanning, add the coins you hold, and move a small amount in first. Confirm it arrives, then send a small amount back out to prove the signing loop works end to end before committing real funds.

The test transaction is the step people skip and later regret. It costs a few cents in fees and it proves that you can both receive and spend, which is the only real evidence that your SafePal setup is correct.

Back up the seed phrase in more than one place, in more than one building if you can. A single sheet of paper in a desk drawer is a fire and flood risk, and this is precisely what the metal backup plates are for. Two copies in separate secure locations is a good default for most people.

Treat every address you send to as suspect until you have checked it on the device screen. Address-swapping malware and clipboard hijackers are common, and the whole reason SafePal renders the destination on its own display is to give you the chance to catch that. Compare at least the first and last several characters, not just the first two.

Keep firmware and the app updated, but only from official sources, and never through a link someone sends you. Update prompts are a favorite disguise for phishing across the entire hardware wallet category, so start updates yourself from within the SafePal app rather than following a message.

Review token approvals periodically. When you use DeFi, you grant contracts permission to move specific tokens, and those permissions persist long after you stop using the site. Revoking stale approvals for accounts held in SafePal closes off a class of risk that has nothing to do with your keys being stolen.

Never enter your recovery phrase anywhere except into a hardware device you are restoring. No legitimate support agent will ever ask for it. Any site, form, chat, or app requesting a SafePal seed phrase is an attempt to steal your funds, without exception, no matter how convincing the branding looks.

Finally, tell someone. An inheritance plan sounds morbid until you consider that a perfectly secured wallet with an unknown recovery phrase is indistinguishable from a lost one. Decide in advance how a trusted person could reach your SafePal backup if you could not.

The QR workflow is slower. That is the honest cost of the air-gap, and it compounds when a session requires several signatures in a row. If you expect to sign a dozen transactions in an evening, budget patience or consider a wireless model from the SafePal range.

The device screen is small, and complex smart contract calls are hard to summarize on it. SafePal does its best to present what a transaction will do, but blind approval of complicated DeFi interactions remains a real limitation across the whole hardware wallet field, not a quirk of one brand.

Firmware is not fully open source. Some users insist on being able to inspect and rebuild every line of code that touches their keys, and if that is your standard, SafePal will not meet it. What SafePal offers instead is certified silicon, an isolated channel, and a long production track record.

Coverage is broad but not infinite. Chains and token standards appear constantly, and any wallet lags behind some of them. If a specific niche network is essential to you, verify support before buying rather than assuming that a long compatibility list includes it.

And self-custody itself has no undo button. There is no password reset, no support line that can restore access, and no institution to appeal to. Buying a SafePal device means accepting responsibility for a recovery phrase for as long as you hold the assets, which is a genuine commitment and not merely a purchase.

A short chronology of how the company and its products developed.

• 2018

  SafePal is founded in Singapore and receives investment from Binance Labs, becoming one of the first hardware wallet companies in that portfolio.

• 2019

  The SafePal S1 ships to customers, establishing the air-gapped QR signing model that still defines the brand.

• February 2021

  SFP launches through Binance Launchpad with a total supply of 500 million tokens, giving SafePal an ecosystem asset alongside its hardware.

• 2021 onward

  The lineup widens: the S1 Pro, the Cypher metal seed backup, a browser extension for desktop dApps, and steadily expanding chain support in the SafePal app.

• Recent years

  SafePal adds Bluetooth-connected hardware with the X1, serving users who want faster pairing while keeping the air-gapped models in the catalog.

What the timeline shows is a fairly disciplined product story. SafePal picked an unusual technical position early, shipped it, and then expanded outward from it rather than chasing every trend, which is part of why the original S1 is still the device people mean when they talk about the brand.

The questions that come up most often from people evaluating SafePal for the first time.

If one idea is worth carrying away, it is this: SafePal moved the private key somewhere the internet cannot reach and then built a deliberately awkward optical bridge back to the connected world. That awkwardness is the feature. Everything else in the product line, from the Cypher plates to the app, exists to make that arrangement livable for people with assets spread across many chains.

Decide first how much you actually need in cold storage, then pick the model that matches how often you will sign, then spend the real effort on the recovery phrase. Whether you choose SafePal or another approach entirely, that order of operations is what separates a wallet that protects you from one that only looks like it does.