SafePal X1:
the convenience option, trading away the S1's air gap, chip tier, and firmware verifiability.
We tore apart SafePal's Bluetooth-enabled hardware wallet across seven weighted categories; from genuinely broad asset support and a real plug-and-play alternative to the S1's QR-scanning workflow, to real, independently-confirmed downgrades: a lower-certified EAL5+ secure element instead of the S1's EAL6+, no air-gapped isolation since Bluetooth handles signing directly, confirmed lack of reproducible-build support, and no Shamir backup; and landed on a score the marketing page won't show you.
Our take, up front: the X1 is SafePal's answer to the biggest real complaint about the S1 we reviewed earlier in this series: the QR-code signing workflow feels intimidating to some users. Bluetooth 5.0 makes this a genuine plug-and-play alternative, and the SafePal app is independently praised as user-friendly for beginners and advanced holders alike. But that convenience is a real, deliberate trade, not a free upgrade. Multiple sources confirm the X1 uses a lower-certified EAL5+ secure element instead of the S1's EAL6+ chip, and Bluetooth signing means there's no air gap at all, several sources are explicit that this "eliminates the air gap" the S1 is built around; one source even states plainly that "offline signing is not available" on this device. We also found a real, specific, confirmed gap: reproducible builds, a key firmware-verification mechanism, are not supported on the X1, and Shamir Secret Sharing is absent entirely. Worth noting honestly: one source we found describes the X1 as "air-gapped" in a way that directly contradicts the clear majority of more detailed sources, an internal inconsistency we're flagging rather than resolving in the X1's favor. We weighted all of it below.
The X1 uses an EAL5+ certified secure element, confirmed by multiple independent sources as the same certification tier as the Ledger Nano X and notably lower than the S1's EAL6+ chip. Real, genuine tamper-detection sensors with a self-destruct mechanism, triggered by forced-opening attempts or abnormal voltage fluctuations, carry over from SafePal's broader security architecture. But unlike the S1, the X1 is not air-gapped: it connects via Bluetooth Low Energy for management and transaction signing, and at least one detailed source states plainly that "offline signing is not available," requiring an active connection during use. Multiple sources are explicit that this "eliminates the air gap" the S1 is built around. We also found a real, specific, independently-confirmed gap: reproducible builds, a mechanism that lets anyone verify published firmware matches what actually ships, are not supported on this device. Worth flagging honestly: one source we found describes the X1 as "air-gapped" in a way that directly contradicts the clear majority of more detailed, technical sources; we've treated the majority, more specific position as authoritative here. The same real, unresolved company-level concerns from our review of the S1, the 2021 Kraken Security Labs disclosure and the apparently-unresolved GPL licensing issue, remain relevant company context.
Pros
- Real tamper-detection sensors with a genuine self-destruct mechanism
- EAL5+ certification remains a meaningful security bar on its own
Cons
- No air-gapped isolation; Bluetooth handles signing directly, with offline signing unavailable
- Lower-certified secure element (EAL5+) than SafePal's own S1 (EAL6+)
- Reproducible builds not supported, a confirmed firmware-verification gap
- Same unresolved company-level concerns (2021 Kraken disclosure, GPL licensing issue) as the S1
Support is described as effectively unlimited across 100-plus blockchains, with NFT, staking, DeFi, and DApp access through the SafePal app via WalletConnect. At least one detailed source describes this coverage as "on par with industry leaders like Ledger and Trezor."
Pros
- Effectively unlimited asset support across 100-plus blockchains
- Real NFT, staking, DeFi, and WalletConnect DApp access
Cons
- None significant found in our research
Bluetooth 5.0 connectivity makes this a genuine plug-and-play alternative for users who found the S1's QR-code workflow intimidating or tedious, independently described as ideal for people who "want something closer to plug-and-play." The SafePal app itself is independently described as user-friendly for both beginners and advanced holders.
Pros
- Genuine plug-and-play Bluetooth workflow, easier than QR scanning for many users
- User-friendly companion app for both beginners and advanced holders
Cons
- At least one source flags real "approval fatigue" risk from frequent Bluetooth-based signing prompts
The X1 uses a basic plastic casing, explicitly noted as offering no water resistance, unlike metal-bodied competitors in this category. No independently-documented durability complaints turned up beyond the plastic material itself.
Pros
- No specific durability complaints found beyond the plastic material
Cons
- Basic plastic casing with no water resistance, unlike metal-bodied competitors
Real, substantial institutional backing carries over from SafePal's broader company profile, including Binance Labs. The same real, company-level concerns documented in our review of the S1 remain relevant: the 2021 Kraken Security Labs disclosure and the apparently-unresolved GPL licensing concern are unresolved company context, even though the specific technical findings from that disclosure concerned the S1 rather than this device directly.
Pros
- Real institutional backing from Binance Labs
Cons
- Same unresolved GPL licensing concern documented at the company level
At $69.99, this is priced similarly to or slightly above the S1 while delivering a lower-certified chip and no air-gapped isolation, a real, direct value question within SafePal's own lineup. It remains independently described as more affordable than premium competitors like the ELLIPAL Titan and Ledger Nano X. Promotional pricing has reportedly appeared as low as $29 with a discount code, though $69.99 is the standard price.
Pros
- More affordable than premium competitors like ELLIPAL Titan and Ledger Nano X
Cons
- Comparable or higher price than the S1 for a lower-certified chip and no air gap
Real, basic multisig support exists, though it lacks advanced threshold signature options. Coin control lets users manually select UTXOs per transaction. But Shamir Secret Sharing is explicitly absent, a real, notable gap compared to premium competitors offering advanced seed-splitting backup schemes.
Pros
- Basic multisig support and manual coin control
Cons
- Shamir Secret Sharing explicitly absent
Buy only through SafePal's official store, and consider the S1 first.
If security is your priority, the S1's higher-certified chip and genuine air-gapped signing make it the stronger pick from SafePal's own lineup. Choose the X1 specifically if Bluetooth convenience outweighs those trade-offs for you.
A real, honest convenience trade-off, priced like it isn't one.
SafePal is upfront that the X1 exists for a different kind of user than the S1: someone who found QR scanning intimidating and wants Bluetooth simplicity instead. That's a legitimate, real trade-off, and the app experience genuinely delivers on the convenience promise. What we can't gloss over is how many individually small downgrades stack up here: a lower-certified chip, no air gap, no reproducible build support, no Shamir backup, and a similar or higher price than the more secure S1. Any one of these alone might be a reasonable trade for convenience. Together, at this price, they add up to a genuinely weaker security package than what SafePal's own cheaper sibling offers.
The scorecard above is deliberately general. Whether the SafePal X1 is right for you depends heavily on which of these you already are.
The buyer who found QR-code signing intimidating and wants Bluetooth simplicity
A genuine, real plug-and-play alternative to the S1's scanning workflow, with a still-meaningful EAL5+ secure element behind it.
The multi-chain holder who wants broad asset support at a low price
Effectively unlimited support across 100-plus blockchains at $69.99 is genuinely strong coverage for the price point.
The occasional user comfortable with active-connection signing
If you're not holding extremely high-value, high-target assets, Bluetooth-based signing without an air gap may be an acceptable trade-off for daily convenience.
Anyone maximizing security per dollar within SafePal's own lineup
The S1 offers a higher-certified chip and genuine air-gapped signing for a comparable or lower price; choosing the X1 for security specifically doesn't make sense.
The scorecard covers the headline judgment calls. These four tables cover the specifics we didn't want to bury in prose; SafePal's full three-device lineup side by side, the real air-gap contradiction we found across sources, every specific security downgrade versus the S1, and how it compares against the other wallets we've reviewed.
SafePal's full lineup: S1, X1, and S1 Pro
| S1 | X1 | S1 Pro | |
|---|---|---|---|
| Price | $49.99 | $69.99 | $89.99 |
| Signing method | QR code (air-gapped) | Bluetooth (not air-gapped) | QR code (air-gapped) |
| Secure element | EAL6+ | EAL5+ | EAL6+ |
| Build material | Plastic (ABS/PVC) | Plastic | Aluminum alloy + tempered glass |
| Battery | 400 mAh | Not specified | 500 mAh |
Within SafePal's own lineup, the X1 is the only model that trades away both the higher-certified chip and the air-gapped signing method found on its siblings.
The air-gap claim: a real contradiction across sources
| Position | Source pattern |
|---|---|
| Not air-gapped; Bluetooth eliminates it | Majority of detailed, technical sources, including one explicitly stating "offline signing is not available" |
| Described as "air-gapped" | At least one source, in a passage that confusingly also references QR scans, which don't apply to this device |
We've treated the clear, specific, technical majority position as authoritative: the X1 signs over Bluetooth, not a QR-based air gap.
Every specific downgrade versus the S1
| Feature | S1 | X1 |
|---|---|---|
| Secure element certification | EAL6+ | EAL5+ |
| Air-gapped isolation | Yes | No |
| Reproducible builds | Not confirmed either way in our research | Confirmed not supported |
| Shamir Secret Sharing | Not confirmed either way in our research | Confirmed absent |
| Price | $49.99 | $69.99 |
Every confirmed difference between these two devices points the same direction: less security for a higher price, in exchange for real, genuine convenience.
How it compares to other hardware wallets we've reviewed
| Wallet | Air-gapped? | Secure element | Price | Notable trade-off |
|---|---|---|---|---|
| SafePal X1 | No (Bluetooth) | EAL5+ | $69.99 | Lower cert than SafePal's own S1; no reproducible builds |
| SafePal S1 | Yes (QR) | EAL6+ | $49.99 | Apparently unresolved GPL violation |
| Ledger Nano X | No (Bluetooth) | EAL5+ | $99-$149 | Lower cert than Ledger's own cheaper device |
| Tangem Wallet | N/A (NFC card) | EAL6+ | $54.90-$69.90 | Unpatchable disclosed laser attack |
The X1 shares a real, notable pattern with the Ledger Nano X: both are the Bluetooth-convenience option within their respective lineups, and both carry a lower-certified chip than their maker's cheaper, wired sibling.
We don't just want to hand you our number; we want to show you how it sits next to what other review desks and comparison sites have published. This includes one real, cited numeric score. Most sources present the Bluetooth trade-off as a simple convenience choice without stacking together the individual downgrades (lower certification, no reproducible builds, no Shamir backup) the way our own scoring does.
Our score lands meaningfully below the aggregated industry average; most coverage treats the Bluetooth-for-security trade as a neutral convenience choice rather than weighting the cumulative effect of several specific, confirmed downgrades relative to SafePal's own cheaper S1.
| Source | Score | Type |
|---|
Scores compiled by our editorial team from publicly available reviews as of August 2026. "Editorial estimate" means the outlet didn't publish a single numeric score, so we converted their published verdict and sentiment into a comparable 100-point figure. Verify current figures directly with each source before citing them elsewhere.
No, per the clear majority of detailed, technical sources we found. The X1 uses Bluetooth for both management and signing, and at least one source states plainly that offline signing is not available on this device. One source we found describes it as "air-gapped" in a way that's internally inconsistent with how the device actually works; we've treated the more specific, technical majority as authoritative.
We don't have a confirmed explanation from SafePal directly, but multiple independent sources consistently confirm the X1 uses an EAL5+ secure element (the same tier as the Ledger Nano X) versus the S1's EAL6+ chip.
No, this is explicitly confirmed as not supported by at least one detailed source, limiting independent firmware verification for this specific device.
If security is your priority, the S1 offers a higher-certified chip and genuine air-gapped signing for a lower price. Choose the X1 specifically if Bluetooth convenience and avoiding the QR-scanning workflow matter more to you.
No, this is explicitly confirmed as absent, a real gap compared to premium competitors offering advanced, split-based seed backup schemes.
We can't confirm this applies identically to the X1's specific codebase, since the original 2021 Kraken Security Labs finding concerned the S1. We've noted it as relevant company-level context rather than a device-specific finding.
$69.99 standard, though promotional pricing has reportedly appeared as low as $29 with a discount code.
Only through SafePal's own official store. Third-party marketplace listings are a real, documented risk for tampered devices across this entire category.
More Reviews
BitBox02 – Hardware Wallet Review
Score: 71/100. Swiss-made, open-source, and genuinely clever, but sources disagree on whether multisig still works.
Read MoreLedger Flex – Hardware Wallet Review
Score: 76/100. Best chip Ledger makes, but closed-source firmware, the Recover controversy, and two breaches still linger.
Read MoreNGrave Zero – Hardware Wallet Review
Score: 62/100. The "EAL7 wallet" is real, but the actual secure element underneath is a lower EAL5+ chip.
Read MoreTrezor Safe 7 – Hardware Wallet Review
Score: 78/100. Fully auditable TROPIC01 chip, undercut by a real Ledger Donjon laser fault-injection disclosure.
Read More



