YouBuyBitcoin .com

Wallets & Storage — The Orange Pages

THE ORANGE PAGES / INDEX

Free to list · no ads · no paid placements

Free directory · free to list · submissions welcome · no ads · no paid placements. No cookies, no accounts, no IP logging by us. We count visits anonymously with Cloudflare Web Analytics.

Page

Wallets & Storage · plain version

Hardware wallets, software wallets, cold storage, and multisig custody solutions.

26 listings, grouped Bitcoin first by label. Inside each group: open source first, then the rest, then listings marked Not recommended, each A to Z here (the interactive directory rotates them weekly). Nothing is hidden. This version needs no JavaScript.

Plain list · 26 listings in Wallets & Storage

₿ USE · TOOL · 26

Bitcoin used directly as money, or tools for running, securing and building on it.

  1. BitBox02 ₿ USE

    Swiss minimal Bitcoin hardware wallet.

    Wallets & Storage · Open Source · No-KYC

    Non-Custodial. Only you hold the keys to your bitcoin. BitBox: BitBox02

    Advisory · NEWSLETTER PROVIDER BREACHED — expect phishing (2026-09-30)

    In September 2026 attackers used a security flaw at Brevo, BitBox’s newsletter provider, to export BitBox’s subscriber list and send subscribers a fake “Critical Security Alert: Microcontroller Entropy Bug Identified” email that asked for their recovery words. The same breach hit Trezor’s newsletter. BitBox states that only subscriber email addresses were exposed, that shop orders were not affected, and that its own systems, the BitBoxApp and BitBox devices were not compromised. Never enter your recovery words anywhere except on your BitBox device; if you already did, move your funds to a new wallet.

    Our position: listed, with this notice. This was a breach at a third-party newsletter provider, not a flaw in BitBox devices or firmware. The facts above come from BitBox’s own statement and press coverage — check them yourself.

    Sources: BitBox statement (German) · The Register: Trezor, BitBox users targeted (10 September 2026)

  2. Bitkey ₿ USE

    Bitcoin wallet built by Block, for everyone.

    Wallets & Storage · Open Source · No-KYC

    Shared keys. Bitkey says one of three keys is held on its server and two are needed to sign: “You can always move your money without Bitkey, but Bitkey can’t move your money without you.” Bitkey: How Bitkey works

  3. Blixt Wallet ₿ USE

    Non-custodial Lightning on your phone.

    Wallets & Storage · Open Source · Lightning · No-KYC

    Non-Custodial. Only you hold the keys to your bitcoin. Blixt: Home

  4. Blockstream App ₿ USE

    Secure, beginner-friendly Bitcoin wallet.

    Wallets & Storage · Open Source · Lightning · No-KYC

    Non-Custodial. Blockstream says wallet keys are only stored on your device; its optional 2FA accounts add a second key on Blockstream’s servers, and Liquid accounts run on the federation-operated Liquid network. Blockstream App help: Set up a new wallet

    Advisory · LIQUID PEG-OUTS PAUSED since 6 September 2026 — the reserve is still being restored (2026-10-03)

    Blockstream App can hold L-BTC (bitcoin on the Liquid sidechain) next to on-chain bitcoin and Lightning. On 6 September 2026 an attacker used a bug in Elements, the software Liquid runs on, to create about 4,000 L-BTC with no bitcoin behind it, then withdrew about 4,000 BTC from the Liquid reserve through SideSwap, a federation member that can authorise peg-outs. Blockstream says the reserve fell from about 4,205 BTC to 197 BTC, that 3,400 BTC were returned on 7 September, and that about 602 BTC are still the subject of recovery efforts. The bug was patched within hours, Liquid transactions resumed on 10 September, and Blockstream says other Liquid-issued assets were not affected. Peg-outs (the way to turn L-BTC back into bitcoin through the federation) remain paused while the reserve is restored; liquid.net still said so on 3 October 2026. Blockstream’s report gives no date for reopening and says no recovery stage proceeds until it is independently judged safe.

    Our position: listed, with this notice, because Liquid still runs and Blockstream has published what happened. Until peg-outs reopen, L-BTC cannot be turned back into bitcoin through the federation; bitcoin held on-chain is separate and not affected. The facts above come from Blockstream’s incident report, its status page and liquid.net — check them yourself.

    Sources: Blockstream: “Liquid Network Security Incident Assessment” (23 September 2026) · Blockstream status page: Liquid Security Incident (latest update 10 September 2026) · liquid.net (peg-out status, checked 3 October 2026) · The Block: Liquid Network pauses after a withdrawal of about 4,000 BTC (6 September 2026)

  5. Blockstream Jade ₿ USE

    Open-source hardware wallet from Blockstream.

    Wallets & Storage · Open Source · Lightning · No-KYC

    Non-Custodial. Only you hold the keys to your bitcoin. Blockstream: Jade

  6. BlueWallet ₿ USE

    Mobile wallet for Bitcoin and Lightning.

    Wallets & Storage · Open Source · Lightning · No-KYC

    Non-Custodial. Only you hold the keys to your bitcoin. BlueWallet: Home

  7. Cake Wallet ₿ USE

    Self-custody mobile and desktop wallet for Bitcoin, Lightning and Monero.

    Wallets & Storage · Open Source · Lightning · No-KYC

    Non-Custodial. Cake says only you ever hold your keys; in-app swaps run through third-party providers who hold funds during the swap, under their own terms. Cake Wallet: Common questions

  8. Electrum ₿ USE

    The original Bitcoin desktop wallet.

    Wallets & Storage · Open Source · Lightning · No-KYC

    Non-Custodial. Only you hold the keys to your bitcoin. Electrum: Home

  9. Envoy ₿ USE

    Foundation's mobile companion for Passport hardware wallet.

    Wallets & Storage · Open Source · No-KYC

    Non-Custodial. Only you hold the keys to your bitcoin. Foundation: Envoy

  10. Foundation Passport ₿ USE

    Open-source hardware wallets: Passport Prime and Passport Core.

    Wallets & Storage · Open Source · No-KYC

    Non-Custodial. Only you hold the keys to your bitcoin. Foundation: Passport Prime

  11. Keystone ₿ USE

    Open-source air-gapped hardware wallet.

    Wallets & Storage · Open Source · No-KYC

    Non-Custodial. Only you hold the keys to your bitcoin. Keystone: Home

  12. Liana ₿ USE

    Bitcoin wallet with built-in inheritance planning.

    Wallets & Storage · Open Source · No-KYC

    Non-Custodial. Only you hold the keys to your bitcoin. Liana: Home

  13. Phoenix Wallet ₿ USE

    Lightning payments, simplified.

    Wallets & Storage · Open Source · Lightning · No-KYC

    Non-Custodial. Only you hold the keys to your bitcoin. ACINQ: Phoenix splicing update

  14. Proton Wallet ₿ USE

    Bitcoin wallet by the makers of ProtonMail.

    Wallets & Storage · Open Source · No-KYC

    Non-Custodial. Only you hold the keys to your bitcoin. Proton: Wallet

  15. SeedSigner ₿ USE

    DIY air-gapped signing device.

    Wallets & Storage · Open Source · No-KYC

    Non-Custodial. Only you hold the keys to your bitcoin. SeedSigner: README

  16. Sparrow Wallet ₿ USE

    Privacy-focused desktop Bitcoin wallet.

    Wallets & Storage · Open Source · No-KYC

  17. Specter Desktop ₿ USE

    Multisig Bitcoin wallet for your own node.

    Wallets & Storage · Open Source · No-KYC

    Non-Custodial. Only you hold the keys to your bitcoin. Specter: Desktop

  18. Trezor ₿ USE

    The original open-source hardware wallet.

    Wallets & Storage · Open Source · No-KYC

    Non-Custodial. Only you hold the keys to your bitcoin. Trezor: Home

    Advisory · CUSTOMER DATA EXPOSED at two vendors — expect phishing (2026-09-30)

    On 13 August 2026 Trezor disclosed a breach at its shipping provider ShipMonk that exposed the names, email addresses, phone numbers and shipping addresses of 80,689 customers, including about 67,000 US orders from 2019–2021. On 10 September 2026 Trezor disclosed a separate breach at its newsletter provider Brevo: 347,149 email contacts were exported, and a fake “Critical Security Alert: STM32 Entropy Vulnerability” email asked recipients for their wallet backup. Trezor states that its own systems, devices, private keys and wallet backups were not affected. Expect phishing by email, phone and post: never enter your recovery words anywhere except on your Trezor device, and if you already did, move your funds to a new wallet.

    Our position: listed, with this notice. These were data exposures at third-party vendors, not a flaw in Trezor devices or firmware. The facts above come from Trezor’s own announcements — check them yourself.

    Sources: Trezor: shipping provider incident (13 August 2026, updated 4 September) · Trezor: Brevo email provider incident (10 September 2026)

  19. Wasabi Wallet ₿ USE

    Privacy-focused Bitcoin wallet with CoinJoin.

    Wallets & Storage · Open Source · No-KYC

    Non-Custodial. Only you hold the keys to your bitcoin. Wasabi: Docs

  20. Zeus ₿ USE

    Your node, your wallet, your Lightning.

    Wallets & Storage · Open Source · Lightning · No-KYC

    Non-Custodial. ZEUS lists itself as self-custodial; its docs say the optional Cashu ecash feature is custodial, with a risk of the mint stealing your funds. ZEUS docs: About ZEUS

  21. Ledger ₿ USE

    The world's most popular hardware wallet.

    Wallets & Storage · No-KYC

    Non-Custodial. Ledger’s optional paid Ledger Recover splits an encrypted copy of your private key into three fragments held by Coincover, Ledger and EscrowTech; two of the three restore it, according to Ledger. Ledger: Ledger Recover

  22. Muun Wallet ₿ USE

    Simple Bitcoin and Lightning wallet, self-custodial according to Muun.

    Wallets & Storage · Lightning · No-KYC

    Shared keys. Muun describes itself as self-custodial and a 2-of-2 multisig wallet, with one key on your phone and both in your Emergency Kit; its 2021 blog says “you and Muun will cooperate for daily transactions.” Muun: Home

  23. NGRAVE ₿ USE

    The coldest hardware wallet in the world.

    Wallets & Storage · No-KYC

    Non-Custodial. Only you hold the keys to your bitcoin. NGRAVE: Home

  24. Nunchuk ₿ USE

    Multisig Bitcoin wallet with inheritance planning.

    Wallets & Storage · No-KYC

    Non-Custodial. Nunchuk’s FAQ says inheritance claims need its platform key’s signature, yet “your own keys can spend without Nunchuk”; its pricing page lists DIY wallets on the Free plan and assisted multisig wallets on paid plans. Nunchuk: FAQ

  25. Tangem ₿ USE

    Bitcoin in a card — no seed phrase needed.

    Wallets & Storage · No-KYC

    Non-Custodial. Only you hold the keys to your bitcoin. Tangem: Home

  26. Coldcard ₿ USE

    Bitcoin-only, air-gapped hardware wallet.

    Wallets & Storage · Open Source · No-KYC

    Non-Custodial. Only you hold the keys to your bitcoin. Coinkite: COLDCARD

    Not recommended · NOT RECOMMENDED — active security incident (2026-07-30)

    A firmware flaw introduced in March 2021 routed seed generation through a weak software RNG instead of the hardware RNG. Coinkite's advisory states seeds generated on Mk3 firmware 4.0.1–5.0.3 may be compromised. Attackers began draining affected wallets on July 30, 2026 — independent trackers verify 1,367+ BTC stolen from 4,500+ addresses, and sweeps are ongoing. Fixed firmware shipped July 31, 2026, but updating does not repair an existing seed: if your seed was generated on an affected device, create a new seed on patched firmware and move your funds. Coinkite states dice-roll seeds are not at risk from this flaw.

    Our position: not recommended until an independent audit of the entropy path and a full public post-mortem are published. The facts above are verifiable — check them yourself.

    Sources: Coinkite security advisory · Independent drain tracker

    Website: coldcard.com