NGRAVE ZERO:
the "EAL7 wallet" is real, but the secure element underneath it isn't the highest we've seen.
We tore apart NGRAVE's premium, fully air-gapped hardware wallet across seven weighted categories; from a genuinely rare EAL7-certified custom operating system, titanium construction with IP55 water and dust resistance, and a distinctive fire-and-water-resistant GRAPHENE steel backup system, to a precise technical nuance most coverage glosses over: that EAL7 certification, in one detailed technical breakdown, applies to the operating system, while the underlying secure element chip is certified EAL5+, actually lower than several budget devices we've already reviewed, alongside closed-source firmware and the highest price in this entire series; and landed on a score the marketing page won't show you.
Our take, up front: NGRAVE is a Belgian security company founded in 2018, and the ZERO is genuinely built with real, impressive credentials behind it: development involved Jean-Jacques Quisquater, a cryptographer whose work was cited in Satoshi Nakamoto's original Bitcoin whitepaper, and its EAL7 certification testing was performed at imec, a respected research institute in Leuven. That EAL7 certification is real, and NGRAVE is genuinely the only consumer hardware wallet to hold it. Here's the precise nuance most coverage skips: per the most technically detailed source we found, the EAL7 certification applies specifically to NGRAVE's custom-built operating system, while the secure element chip underneath, the component that actually resists physical key extraction, is certified EAL5+, which is actually lower than the EAL6+ chips found in several budget devices we've already reviewed in this series, including the $59 Trezor Safe 3 and the $49.99 SafePal S1. The device is genuinely, fully air-gapped, with real titanium construction, IP55 water and dust resistance, and a distinctive GRAPHENE steel backup system built to survive fire and water. What we can't ignore: closed-source firmware (consistent across every source), meaningfully narrower coin support than Trezor or Ledger, and the highest price of any wallet in this entire series, with the GRAPHENE backup plates sold separately on top of that. We weighted all of it below.
The ZERO is genuinely the only consumer hardware wallet certified to EAL7, the highest Common Criteria assurance level, with testing performed at imec, a respected research institute. Here's the precise, real nuance that matters: per the most technically detailed source we found, that EAL7 certification applies specifically to NGRAVE's custom-built operating system, developed entirely from scratch rather than derived from any existing embedded or mobile OS. The secure element chip underneath, the component that actually resists physical extraction of your keys, is separately certified EAL5+, meaningfully lower than the EAL6+ chips found in several budget devices we've already reviewed in this series, including the $59 Trezor Safe 3 and the $49.99 SafePal S1. That doesn't make the ZERO insecure, but it does mean the "EAL7 wallet" shorthand repeated across most coverage overstates what that certification actually covers. The device is genuinely, fully air-gapped: no Bluetooth, WiFi, NFC, or 4G at all, with the USB-C port restricted to charging and firmware loading only. A real self-destruct function deletes keys after repeated incorrect PIN attempts or detected tampering, and fingerprint data is used directly in key generation. Consistent across every source we found: the firmware remains closed-source, meaning none of these claims can be independently verified the way open-source competitors' can.
Pros
- Only consumer hardware wallet with an EAL7-certified operating system, tested at a respected research institute
- Fully custom-built OS, not derived from any existing embedded or mobile platform
- Genuine self-destruct function and fingerprint-integrated key generation
- Fully air-gapped; USB-C restricted to charging and firmware loading only
Cons
- Secure element is certified EAL5+, lower than several budget competitors' EAL6+ chips
- Closed-source firmware, consistent across every source we found
Real, notable limitation, consistent across every source regardless of the exact figure cited, ranging from roughly 1,500 to just over 4,000 supported assets: this is meaningfully narrower than Trezor's 8,000-plus or Ledger's 5,500-plus coin support. The companion NGRAVE LIQUID app is independently described as having "basic functionality," requiring a separate, third-party software wallet for full DeFi and Web3 ecosystem access.
Pros
- Covers major assets including Bitcoin, Ethereum, and NFTs
Cons
- Meaningfully narrower coin support than Trezor or Ledger, regardless of exact figure cited
- Companion app has basic functionality; DeFi and Web3 access requires third-party tools
A large 4-inch color touchscreen is independently praised as "the ZERO's most practical advantage in daily use," genuinely one of the largest and most readable in this category. Fingerprint authentication and an 8-digit PIN provide real, layered access control, and users can manage up to 100 accounts directly on-device. But the two-stage QR-code scanning workflow is independently described as tending "to frustrate power users," and the companion app's basic functionality means most DeFi and Web3 interactions require a separate, third-party wallet.
Pros
- Large 4-inch color touchscreen, independently praised as a real practical advantage
- Fingerprint and PIN layered access control, with support for up to 100 on-device accounts
Cons
- Two-stage QR scanning workflow independently described as frustrating for power users
- Basic companion app functionality requires third-party tools for DeFi and Web3
Real, genuinely premium build: titanium structural elements combined with a polycarbonate frame, and IP55 water and dust resistance. At 125x72mm and 122 grams, this is independently described as closer to a small smartphone than a typical hardware wallet, a real, deliberate design choice to accommodate its large screen. The GRAPHENE steel backup system offers real, genuine fire and water resistance for seed storage.
Pros
- Titanium and polycarbonate construction with IP55 water and dust resistance
- GRAPHENE steel backup system offers real fire and water resistance
Cons
- Large, phone-sized form factor is a real trade-off for pocket portability
NGRAVE carries real, genuine scientific credibility: development involved Jean-Jacques Quisquater, a cryptographer whose work was cited in Satoshi Nakamoto's original Bitcoin whitepaper, and EAL7 certification testing was conducted at imec, a respected, real research institute in Belgium. But at least one detailed source explicitly notes "customer support could be improved," and the company has a smaller community and shorter track record than Ledger or Trezor.
Pros
- Real scientific pedigree, including collaboration with a cryptographer cited in the Bitcoin whitepaper
- EAL7 testing conducted at a respected, independent research institute
Cons
- At least one source explicitly notes customer support could be improved
- Smaller community and shorter track record than Ledger or Trezor
At $398, this is consistently described as the most expensive mainstream hardware wallet on the market, with a real, additional cost on top: the GRAPHENE metal backup plates are sold separately. Multiple sources frame this plainly: for the same money, a buyer could purchase a Trezor Safe 5, a Blockstream Jade Plus, and a BitBox02 combined, with change left over. At least one detailed source states the practical security improvement over an $80 Trezor Safe 3 is "debatable for most threat models."
Pros
- No subscription fee
Cons
- Highest price of any wallet in this entire series
- GRAPHENE backup plates sold separately, adding further cost
- At least one source calls the practical security gain over an $80 competitor "debatable"
The GRAPHENE fire-and-water-resistant steel backup system and fingerprint-integrated key generation are genuinely distinctive, real extras. The self-destruct mechanism adds a real, additional layer of tamper response beyond what most competitors offer.
Pros
- Genuinely distinctive GRAPHENE fire-and-water-resistant backup system
- Fingerprint-integrated key generation and a real self-destruct mechanism
Cons
- GRAPHENE plates sold separately from the device itself
Buy only through NGRAVE's official store.
Given the premium price point, third-party marketplace listings are a real, documented risk for tampered devices. Buying direct is the only way to be confident your unit hasn't been modified before it reached you.
A real engineering achievement, marketed one certification louder than the fine print supports.
The ZERO's EAL7 operating system is a genuine, rare achievement, and the titanium build, GRAPHENE backup, and true air-gapped architecture are all real, substantive strengths worth taking seriously. What tempers our score isn't that any of this is fake, it's that the marketing shorthand, "the EAL7 wallet," glosses over a precise, real technical distinction: the secure element actually holding your keys is certified to a lower standard than several budget devices costing a fraction of the price. Layer on closed-source firmware, narrower coin support, and the highest price in this entire series, with the backup plates sold separately, and the math becomes harder to justify for most threat models. If your specific concern is a nation-state-level physical attack on the operating system layer, this may be worth it. For nearly everyone else, several cheaper devices in this series offer comparable practical protection for a fraction of the cost.
The scorecard above is deliberately general. Whether the NGRAVE ZERO is right for you depends heavily on which of these you already are.
The high-net-worth holder whose threat model specifically includes sophisticated OS-level physical attacks
If your risk profile genuinely warrants the highest independently-certified operating system available, this is the only consumer device that offers it.
The buyer who wants a genuinely durable, fire-and-water-resistant backup solution
The GRAPHENE steel backup system is a real, distinctive way to protect a seed phrase long-term, even if the plates cost extra.
The buyer who wants a large, easy-to-read screen and doesn't mind QR-only signing
The 4-inch touchscreen is a genuine daily-use advantage if the two-stage QR workflow doesn't bother you.
Anyone maximizing security per dollar, or who wants broad coin support
Several meaningfully cheaper, open-source devices in this series offer comparable practical protection with broader asset coverage.
The scorecard covers the headline judgment calls. These four tables cover the specifics we didn't want to bury in prose; the precise EAL7 claim broken down, what $398 actually buys versus cheaper alternatives combined, the real build and durability specs, and how it compares against the other wallets we've reviewed.
The EAL7 claim, precisely
| Component | Certification |
|---|---|
| Operating system | EAL7 (highest Common Criteria assurance level; tested at imec) |
| Secure element chip | EAL5+ |
| For comparison: Trezor Safe 3's secure element | EAL6+ |
| For comparison: SafePal S1's secure element | EAL6+ |
"The EAL7 wallet" is shorthand most coverage repeats without this distinction; the precise, real claim is an EAL7-certified OS paired with an EAL5+ secure element, which is lower than the secure elements in several devices costing a fraction of the price.
What $398 actually buys, compared to alternatives combined
| Option | Price |
|---|---|
| NGRAVE ZERO | $398 |
| Trezor Safe 5 + Blockstream Jade Plus + BitBox02 combined | ~$388 (with change left over) |
This framing, drawn from one detailed source, illustrates just how far a comparable budget stretches across multiple reputable, open-source alternatives.
Real build and durability specs
| Spec | Detail |
|---|---|
| Dimensions | 125 x 72 mm, 122 grams |
| Materials | Titanium structural elements with a polycarbonate frame |
| Water/dust resistance | IP55 rated |
| Battery | 1200 mAh, functions independently of a constant USB connection |
| Backup system | GRAPHENE steel plates (sold separately), fire and water resistant |
These are genuinely premium, verified specs; the durability and battery independence are real strengths regardless of the value debate elsewhere.
How it compares to other hardware wallets we've reviewed
| Wallet | Secure element | Firmware | Price | Notable trade-off |
|---|---|---|---|---|
| NGRAVE ZERO | EAL5+ (EAL7 OS) | Closed-source | $398 | Highest price in this series; narrower coin support |
| Trezor Safe 3 | EAL6+ | Open-source | $59 | Disclosed, unpatchable microcontroller vulnerability |
| SafePal S1 | EAL6+ | Closed-source | $49.99 | Apparently unresolved GPL violation |
| Keystone 3 Pro | 3x Infineon (open-source) | Open-source | $149 | Two-scan QR workflow; no native staking |
This closes a comparison loop from our earlier review of the Ledger Stax, which named the ZERO as the relevant alternative for buyers prioritizing certification level over ecosystem breadth; the certification story turns out to be more nuanced than that comparison implied.
We don't just want to hand you our number; we want to show you how it sits next to what other review desks and comparison sites have published. This includes one real, specifically-cited score. A couple of the more promotional-toned sources we found read closer to affiliate marketing than independent review, which we've weighted down accordingly rather than excluded entirely.
Our score lands meaningfully below the aggregated industry average; most sources repeat the "EAL7 wallet" framing without the precise OS-versus-secure-element distinction, and few weight the value question as harshly as we do given the real, substantially cheaper alternatives available.
| Source | Score | Type |
|---|
Scores compiled by our editorial team from publicly available reviews as of August 2026. "Editorial estimate" means the outlet didn't publish a single numeric score, so we converted their published verdict and sentiment into a comparable 100-point figure. Verify current figures directly with each source before citing them elsewhere.
It has the only EAL7-certified operating system among consumer hardware wallets, which is genuinely rare. But per the most technically detailed source we found, that certification applies to the OS specifically; the secure element chip is EAL5+, lower than several cheaper competitors' chips. "Most secure" depends heavily on which layer of the device you're evaluating.
In the NGRAVE ZERO's case, it certifies the custom-built operating system, tested at imec, a respected research institute. It does not certify the secure element chip, which holds a separate, lower EAL5+ certification.
No, this is consistently confirmed as closed-source across every source we found, meaning its security claims can't be independently verified the way open-source competitors' can.
No. The GRAPHENE metal backup plates, which offer real fire and water resistance for your seed phrase, are sold separately from the $398 device itself.
Sources vary, ranging from roughly 1,500 to just over 4,000 assets. Regardless of the exact figure, this is meaningfully narrower than Trezor's 8,000-plus or Ledger's 5,500-plus.
At least one detailed source calls the practical security improvement over an $80 Trezor Safe 3 "debatable for most threat models." Unless your specific concern involves sophisticated, OS-level physical attacks, several cheaper alternatives offer comparable real-world protection.
Yes, genuinely and fully. There's no Bluetooth, WiFi, NFC, or 4G at all; the USB-C port is restricted to charging and firmware loading only, and all signing happens via QR code.
Only through NGRAVE's own official store. Given the premium price point, third-party marketplace listings are a real, documented risk for tampered devices.
More Reviews
SafePal S1 Pro – Hardware Wallet Review
Score: 64/100. Genuine aluminum-and-glass upgrade over the S1, running the exact same underlying security model.
Read More
Ledger Flex – Hardware Wallet Review
Score: 76/100. Best chip Ledger makes, but closed-source firmware, the Recover controversy, and two breaches still linger.
Read More
BitBox02 – Hardware Wallet Review
Score: 71/100. Swiss-made, open-source, and genuinely clever, but sources disagree on whether multisig still works.
Read More
Trezor Safe 7 – Hardware Wallet Review
Score: 78/100. Fully auditable TROPIC01 chip, undercut by a real Ledger Donjon laser fault-injection disclosure.
Read More