เลือกกระเป๋า Bitcoin

The Coldcard is the gold standard for OPSEC-paranoid cold storage. The Mk4 has dual secure elements, an encrypted microSD slot, and a deeply opinionated philosophy: it never talks to anything but a microSD card or a one-way NFC tap. PSBTs in, signed PSBTs out. No USB protocol surface to hijack, no Bluetooth, no cloud accounts. The firmware is open source and reproducibly built — you can compile it yourself and verify the bytes match what’s shipped on the device. The trade-off is UX: you’ll be using Sparrow, Specter, or Nunchuk on the desktop side; the Coldcard refuses to be a one-app experience. Bitcoin-only by design. For people who think “convenience” and “security” are usually opposites, this is the device.

The BitBox02 is the quiet, well-engineered Swiss option. We strongly recommend the Bitcoin-only edition — same hardware, but firmware that refuses anything but Bitcoin, which shrinks the attack surface considerably. The device pairs over USB-C to BitBoxApp, but also works with Sparrow and Electrum. Capacitive touch sliders replace buttons; once you adapt to them, single-handed PIN entry is fast. Multisig is supported, but the UX assumes you’re driving from a coordinator like Sparrow. Firmware is fully open source and reproducibly built. The encrypted microSD backup is a nice middle ground between paper-only and air-gap workflows. A solid choice for users who want a polished hardware wallet without Ledger’s trust baggage.

The Blockstream Jade is the price-conscious open-source pick. Around $80 — half the cost of a Trezor Safe 5 — it gets you a colour screen, a microSD slot in newer revisions, fully open firmware, and tight integration with Sparrow, Specter, and Blockstream’s own Green app. The Jade also natively supports Liquid Network sidechain assets, which matters if you care about confidential transactions or stable-asset settlement. Multisig coordination is straightforward, and the QR-only “air-gap mode” is a clean answer to USB attack surface. The compromises are minor: an unreplaceable battery in early units, and a UX that’s a notch behind Trezor’s polish. For “open-source, multisig-ready, won’t-break-the-bank,” it’s hard to do better.

The Passport feels like the iPhone of hardware wallets — if Apple cared about open-source firmware. The build quality is unmatched in the category: aluminium chassis, full keypad, large colour screen, removable AAA batteries, and a tactile shutter over the camera. The signature workflow is QR-only: animated PSBTs flow back and forth between the device camera and the Envoy companion app on your phone. There’s no USB cable involved at any point during signing, which is a clean answer to entire classes of attack. Firmware is fully open source. The price is the barrier — $259 is roughly 60% more than a BitBox02 — but for users who want best-in-class build, air-gap-by-default, and a polished mobile companion app, the Passport is the picks.

Ledger’s Nano X has the best out-of-the-box UX in the hardware category and a deep app ecosystem — but the trust story is genuinely contested. The firmware is closed-source: you can audit the open-source apps, but the secure element runs proprietary code. In 2020 a customer-data breach leaked names and addresses of Ledger buyers. In 2023 the Ledger Recover service revealed that the firmware can, in principle, encrypt the seed and ship shards to ID-verified custodians — Ledger says only with consent, but the architectural capability exists. None of this means the device is broken; many security-pragmatic users still rely on it daily. But “your keys never leave the device” is more of a policy than a guarantee here. Choose with that context. Pair with Sparrow on desktop, not Ledger Live, if you want maximum self-sovereignty.

The Specter DIY is for people who want to verify the entire stack down to the bare metal — by literally assembling it themselves. It’s an open-hardware reference design built around a Discovery board (around $40-60 in parts), a touchscreen, a QR scanner module, and a microSD slot. The firmware is open source and the device deliberately uses no secure element — the trust model is “I built it, I run audited code, it never sees the network, what could go wrong?” Multisig flows are first-class. The reality is this is a hobbyist tool: there’s no support line, no nice case unless you 3D-print one, and the consumer-grade STM32 chip means side-channel resistance is not at Coldcard’s level. But for sovereignty maximalists who want zero supply-chain trust, it’s the most honest option on this list.

The Trezor Safe 5 is the easiest-to-recommend hardware wallet for someone setting up self-custody for the first time. The colour touchscreen, haptic feedback, and Trezor Suite desktop pair to make the first-receive experience genuinely friendly. Firmware is fully open source and reproducibly built — Trezor pioneered that practice in this category, and it shows in the audit history. CoinJoin support via Wasabi is integrated into Suite directly, which is rare. Multisig works through Sparrow or Electrum. The trade-off versus the Coldcard or Passport is the air-gap story: Trezor talks USB, with no microSD slot for offline PSBT flow. For most people that’s fine; for people defending against very targeted threat models, it’s worth knowing.

Bull Bitcoin is a Canadian-Quebec exchange-and-payments outfit that’s quietly become one of the most Bitcoiner-aligned companies in the space. Their mobile wallet is non-custodial, open-source, and ships a sane default for hybrid use: on-chain savings layer plus Lightning for spending, with built-in submarine swaps to move between layers without a trip to a centralized exchange. Tor is a one-toggle option. The UX leans opinionated — defaults nudge you toward Bull Bitcoin’s own payment processor for invoices — but every flow has manual override. For someone who wants to pay a bill in Lightning today and put long-term savings in cold storage, it’s a clean stack and the affiliated exchange in the same brand makes the on-ramp story coherent.

Sparrow is the desktop wallet we send everyone to for serious self-custody. It is a hardware-wallet coordinator first and a hot-wallet second: native PSBT support, watch-only descriptor wallets, multisig that’s actually approachable, full coin control with UTXO tagging, and built-in Tor-routed Electrum / Bitcoin Core node connections. The transaction-builder UI shows you fee rates, package size, dust limits, and replace-by-fee mechanics in a way no other wallet bothers to do. It works with every major signer — Coldcard, Trezor, Ledger, BitBox02, Jade, Passport — and the coordinator UX for multisig is the gentlest available. There’s no Lightning support, by design. For on-chain Bitcoin done right on a desktop, it is the answer. Java-based; runs on macOS, Windows, Linux.

Bitcoin Core is the reference implementation — the codebase that defines what Bitcoin is. The wallet that ships inside it is more than a wallet: when you run it, you’re running a full validating node that downloads and verifies every block back to genesis. That gives you the strongest possible “don’t-trust-verify” guarantee: nothing about your balance, the supply cap, or transaction validity comes from a third party. The trade-off is the obvious one: you’re trading hundreds of gigabytes of disk and a few days of initial sync for that guarantee, and the UI looks like 2014. For a savings wallet, paired with a hardware signer in watch-only descriptor mode, it’s the most sovereign choice on this list. For everyday spending, you’ll want a friendlier front-end like Sparrow pointed at your Core node.

Electrum has been around since 2011, which is a small eternity in this category. It earns its slot on this list for being scriptable, fast, and brutally feature-complete. Multisig works, hardware wallet integration works (Ledger, Trezor, Coldcard, BitBox), RBF and CPFP are exposed in the GUI, Lightning support exists (basic), and the entire wallet has a Python plugin API and a JSON-RPC interface — meaning you can integrate it into shell scripts, cron jobs, or your own coordinator software. The trade-off is that fake Electrum websites and trojaned forks have stolen real money for years; always verify the download GPG signature. Electrum servers also see your addresses, so route through Tor or your own server. UI is dated. None of that has stopped it from being the swiss-army wallet of the on-chain Bitcoin power user.

Specter Desktop is Sparrow’s spiritual cousin: another open-source coordinator focused on multisig and air-gapped signing. Where Sparrow is happy talking to a public Electrum server out of the box, Specter is opinionated — it expects you to point it at your own Bitcoin Core full node (or a compatible RPC provider). That’s a feature, not a bug, if you’re building a maximalist sovereign stack: your wallet talks only to your node, and your node validates the chain. Multisig coordination across a Coldcard, Jade, and a Specter DIY is the kind of setup it was built for. The UI is functional rather than pretty — Sparrow is the more polished sibling — but for users who already run a node and want a coordinator that fits cleanly into a self-hosted setup, Specter is the natural choice.

Wasabi was built around one premise: on-chain privacy via CoinJoin should be a default, not a Power User Setting. WabiSabi (the coordination protocol it switched to in v2) lets you mix UTXOs of arbitrary amounts, every Tor-routed transaction by default. Hardware wallet support — Coldcard, Trezor, Ledger — is good, and the UX has improved enough that “ordinary users running CoinJoin” is finally plausible. The complication is the coordinator: zkSNACKs runs the central CoinJoin coordinator and as of 2024 enforces a US-OFAC-style blacklist, refusing to mix coins flagged by chain-analysis vendors. That’s controversial in the privacy-maximalist community. You can run your own coordinator, or use the Bitcoin-only fork Ginger Wallet, which removes those policies. Either way, Wasabi remains the most polished CoinJoin wallet on the market.

Phoenix solved the impossible problem: non-custodial Lightning on a phone that doesn’t suck. ACINQ’s wallet abstracts away channels, on-chain swaps, and liquidity management while keeping the user in control of keys. Receive a payment that’s bigger than your inbound capacity? Phoenix swaps in liquidity automatically (for a small fee, disclosed up-front). Send from on-chain? It splices into your existing channel. The UX is tighter than custodial competitors like Wallet of Satoshi while preserving self-custody. The compromise is that ACINQ is your default Lightning Service Provider — your channels are with them. Bolt12 offers, BIP-353 addresses, and Lightning addresses are all supported. If you want one Lightning wallet on your phone and you’re not running a node, it’s hard to beat.

Mutiny is a browser-first, self-custodial Lightning wallet that runs as a Progressive Web App — install from the website, no app-store gatekeeping. It uses LDK (Lightning Dev Kit) under the hood and includes an Iroh-powered backup story across devices. Federated Cashu support and nostr-zap integration make it interesting to a specific subset of users for whom “Lightning + nostr + browser” is the stack of choice. The browser-PWA model is also a censorship-resistance story: app stores can’t pull it. As of writing, the team has communicated about funding and project-status changes; double-check upstream before depending on Mutiny for serious flows. For exploring browser-Lightning UX patterns, it’s still one of the most interesting wallets in the space.

Wallet of Satoshi is the easiest Lightning wallet in existence — and the trade-off is that you don’t actually own the bitcoin in it. WoS is fully custodial: you create an account, you have a Lightning address, you send and receive sats, and behind the scenes the service holds the funds in their own pooled hot wallet. There are no channels, no on-chain fees, and the UI is two buttons. For onboarding a friend to Lightning at a meetup, or for keeping pocket-money sats you’d otherwise leave on an exchange, it’s perfect. Do not store savings here. The service has US-residency restrictions, has paused KYC-light flows in the past in response to regulation, and like any custodian could be hacked, regulated out of existence, or freeze your account. Use it for what it’s good at: tipping, micro-payments, demo flows. Then move serious money to Phoenix or a self-hosted node.

Zeus is the wallet for people who run their own Lightning node and want a phone-shaped remote control for it. Connect via LND, CLN, or Eclair over Tor or LNDHub, and you get full channel management, on-chain coin control, RBF, custom routing, and direct Bolt12 / Bolt11 / Lightning Address support — all driven from a polished mobile UI. Zeus also ships an “Embedded LND” mode that runs a node directly inside the app, giving you self-custodial Lightning on-device. The depth is the point: there are more features here than any other mobile Lightning wallet on the market. The trade-off is that “first-time user” is not the audience. If you don’t already know what a channel is, Phoenix is the better starting point. If you do, Zeus is the wallet.

MyNode is one of the original “buy a box, plug it in, run a node” distributions and predates both Umbrel and Start9. The core OS is open-source and free; a Premium tier unlocks additional features (LND-Hub, Joinmarket, Whirlpool integration in past versions, advanced LN dashboards) for a one-time license fee. That dual-license model is unusual in this corner of the ecosystem but it has funded steady development. Hardware support is broad — Raspberry Pi, x86 boards, full Ubuntu installs — and the included BTCPay, Mempool, Whirlpool, and Lightning Terminal apps are well-integrated. We list MyNode for users who want a third option to compare against Umbrel and Start9; pick based on app catalog, Premium-tier value to you, and which community feels most aligned with how you want to operate.

Start9’s StartOS is the more sovereignty-leaning cousin of Umbrel. It targets the same outcome — easy self-hosted Bitcoin, Lightning, BTCPay, and adjacent services — but with stricter packaging requirements (each service is signed and reproducibly buildable in their model), a Tor-by-default network architecture, and explicit “you operate this; we don’t” stance about hosted services. You can buy their pre-built Server One appliance or flash StartOS onto your own hardware. The app catalog is smaller than Umbrel’s but every app is more thoroughly vetted, with a Tor onion address provisioned for each service automatically. For users who want their entire stack — node, Lightning, password manager, Nextcloud, BTCPay — running on hardware they own with one consistent operating model, Start9 is the strongest option in the category.

Umbrel turns “running your own node” from a weekend project into a 30-minute setup. Free, open-source software you flash onto a Raspberry Pi (or run on bare-metal Linux); after first boot you have Bitcoin Core, an Electrum server, and an LND Lightning node, all behind a clean web dashboard. An “app store” lets you bolt on Mempool, BTCPay Server, Sphinx, RTL, Specter, and dozens of other community apps. The combination of polish and out-of-box functionality has made it the most-deployed sovereign-stack distribution. The caveats: it runs untrusted third-party app code (only deploy apps you trust), and key custody for the on-board LND wallet sits on the device itself — so it’s a hot-wallet, not cold storage. Pair with a hardware wallet for savings; use Umbrel for spending and routing.

Nunchuk is the answer to “what would multisig look like if it didn’t require a PhD?” The mobile and desktop apps walk you through setting up a 2-of-3 across, say, a Coldcard, a Trezor, and a phone-key — with clear visual diagrams of who holds which key, where the recovery sheets should go, and how the unsigned-transaction passing works. They support collaborative wallets (multiple people coordinating a multisig over an end-to-end-encrypted relay), which is how a couple, a small family, or a small business can share custody without trusting a custodian. The defaults route metadata through Nunchuk’s relay servers — you can self-host that relay or run your own Bitcoin Core backend, which restores the full sovereignty story. For users new to multisig, this is the wallet that makes it feel approachable.

Casa is the white-glove end of the multisig market: a paid subscription service ($250-$10,000+/year depending on tier) that walks you through setting up a 3-of-5 multisig across hardware wallets you own plus a key Casa holds, with a human concierge available when something goes wrong. It’s not non-custodial in the same way the rest of this list is — Casa holds one key, which they argue is a feature (recovery insurance) and skeptics argue is a marketing flourish on a partial-custody product. If a hardware wallet dies, Casa’s key plus your other keys can still spend; if Casa disappears, your remaining keys are still yours and on-chain. For people with significant assets who want a multisig setup but don’t want to drive the coordinator software themselves, the value proposition is real. For sovereignty maximalists, Nunchuk-with-your-own-keys is closer to the spirit.