The OneKey Classic 1S is a competitively solid mid-range hardware wallet at $99 with a respectable security stack. Its EAL6+ secure element, open-source firmware with reproducible builds, and 5000+ token support make it a technically credible option. Shamir Secret Sharing is absent, and its plastic build with battery dependency may concern longevity-focused buyers.
The OneKey Classic 1S uses an Infineon SLB 9670 secure element rated EAL6+ — one of the highest certification levels available in consumer hardware wallets. For context, the Ledger Nano X uses an ST33K1M5 at EAL5+, and the Trezor Model T uses no dedicated secure element at all, relying instead on software-only protections. EAL6+ means the chip has undergone formal mathematical verification of its security properties, not just functional testing.
Firmware is fully open source and supports reproducible builds, meaning any technically capable user can verify that the binary running on the device matches the published source code. This is a meaningful advantage over Ledger, whose firmware remains closed source despite years of community requests. Firmware updates are signed and verified on-device via secure boot, preventing unauthorized code from loading.
For supply chain authenticity, the device performs a genuine check at first boot — vendor claims this cryptographically verifies the device hasn't been tampered with in transit. The mechanism uses the secure element to attest device integrity. Independent verification of this specific implementation has not been published by third-party researchers as of this writing.
Secure element: EAL6+ (vs EAL5+ on Ledger Nano X, none on Trezor Model T)
Open source firmware with reproducible builds
Secure boot enabled
Genuine check at initialization — vendor-claimed, not independently audited publicly
No publicly disclosed critical vulnerabilities specific to the Classic 1S hardware have been documented at time of writing.
SecurityKey Factor
Seed generation happens entirely on-device using the secure element's hardware random number generator, producing a 24-word BIP39 mnemonic. The 24-word standard provides 256 bits of entropy, which is the same as the Coldcard Mk4 and Ledger Nano X, and stronger than devices defaulting to 12-word (128-bit) seeds.
Passphrase support (BIP39 extension) is included, enabling hidden wallets behind an additional user-defined word or phrase. This is correctly implemented as a 25th word that never touches the secure element storage — standard behavior, but worth confirming on any device.
Backup options are limited to standard seed phrase on paper or metal. There is no Shamir Secret Sharing (SLIP39), no multi-card split backup, and no proprietary encrypted backup scheme. Coldcard Mk4 supports Shamir backups natively; Foundation Passport does not either, so OneKey is not alone in this omission, but it is a gap for users wanting threshold-based recovery.
Restoring to a new device is straightforward: enter the 24-word seed on any BIP39-compatible wallet (hardware or software). You are not locked into OneKey's own ecosystem for recovery, which is a meaningful interoperability point. If the device is lost or destroyed, any BIP39-compatible hardware wallet — Trezor, Ledger, Coldcard — can restore your funds from the same seed phrase.
24-word BIP39 — on-device generation
Passphrase (hidden wallet) supported
No Shamir/SLIP39 support
Full BIP39 interoperability for recovery
Recovery & backups
Initial setup takes approximately 5–10 minutes: power on, generate or restore a seed, set a PIN, and pair with the companion app. The process is guided on-device via the 1.3-inch OLED display, which is larger than the Ledger Nano S Plus (1.0-inch) but smaller than the Trezor Model T's 2.4-inch color touchscreen. Navigation uses physical buttons rather than touch, which some users find more reliable for confirmation actions.
Daily use for sending involves connecting via USB or Bluetooth, reviewing transaction details on the OLED screen, and confirming with the physical button. The QR code signing capability is available for air-gapped operation — a workflow the Trezor Model One does not support. Bluetooth connectivity adds convenience for mobile use but introduces a wireless attack surface that purely USB devices like Coldcard avoid entirely.
The OneKey companion app runs on iOS, Android, Windows, macOS, and Linux — full platform coverage. App quality is generally rated positively in community forums, though it lacks the maturity of Ledger Live's feature set (Ledger Live has integrated staking, lending, and swap aggregation that OneKey's app does not match in breadth).
The learning curve is moderate. Crypto-native users will find setup intuitive. Complete beginners may struggle with the seed backup step and passphrase concepts, but no more so than with a Ledger Nano X. The physical button interface is less intimidating than Coldcard's numeric keypad layout.
Usability / UX
The OneKey Classic 1S supports over 5,000 tokens across multiple networks. Key L1 chains include Bitcoin, Ethereum, Solana, BNB Chain, Avalanche, Polygon, and Tron — covering the majority of assets held by retail users. This breadth is comparable to Ledger Nano X and exceeds Foundation Passport, which is Bitcoin-only.
Third-party wallet compatibility includes MetaMask (via USB connection), and the device supports WalletConnect for DeFi interaction. Bitcoin-specific integrations with Sparrow Wallet and Electrum are supported, enabling coin control and PSBT-based workflows for advanced Bitcoin users.
NFT display and management is available through the companion app. DeFi signing works through MetaMask and WalletConnect-compatible interfaces, though blind signing risks apply as with any hardware wallet used with complex smart contract interactions.
Limitations: no native Shamir-based multisig coordination tool, and multisig support is described as basic — functional but without the dedicated multisig coordination interface that Coldcard's SD card workflow or Specter Desktop integration provides. Users running complex Bitcoin multisig setups will find Coldcard Mk4 better suited. Trezor Model T also offers more mature third-party integration documentation for power users.
Ecosystem & integrations
No account registration is required to use the OneKey Classic 1S — the device functions without creating a OneKey account, which is the correct baseline for a hardware wallet. However, using the OneKey companion app for network queries (balance checks, transaction broadcasting) will route data through OneKey's servers by default, exposing your IP address and address data to the vendor.
Tor and VPN compatibility depends on the companion app's network settings. The app does not have a built-in Tor option as of current versions — unlike Wasabi Wallet or Sparrow Wallet, which offer native Tor routing. Using the device with Sparrow Wallet over Tor for Bitcoin transactions is technically possible and recommended for privacy-conscious users.
Telemetry behavior in the companion app is not fully documented in public-facing materials — whether opt-out is available or what data is collected is vendor-stated and not independently audited. CoinJoin support is not natively integrated, though Whirlpool-compatible signing via external tools may be possible.
Compared to Coldcard Mk4 (fully air-gapped, no companion app required, Tor-friendly via Bitcoin Core) or Foundation Passport (open source, no cloud dependency), the OneKey Classic 1S is less privacy-hardened out of the box. It is adequate for average users but not the choice for adversarial threat models.
Privacy
The OneKey Classic 1S retails at $99 USD. Direct competitors in the same price band:
Ledger Nano X — $149. More mature ecosystem and app, but closed-source firmware and EAL5+ secure element vs EAL6+ here.
Trezor Model T — $179. Touchscreen, open source, but no secure element — a meaningful security architecture difference.
Foundation Passport Batch 2 — $199. Bitcoin-only, fully open source hardware and software, air-gapped by design. Better for Bitcoin-maximalist privacy use cases.
Coldcard Mk4 — $149. Bitcoin-only, best-in-class for advanced Bitcoin security, but steep learning curve and no multi-asset support.
At $99, the Classic 1S offers EAL6+ secure element, open source reproducible firmware, QR air-gap capability, and 5,000+ token support — a combination that no competitor matches at this price point. The Ledger Nano S Plus at $79 is cheaper but has EAL5+ and closed firmware. The Trezor Model One at $69 has no secure element at all.
Best value for: multi-chain users who want open source firmware and a high-grade secure element without paying $150+. Least suited for: dedicated Bitcoin-only users (Coldcard is better) or users needing advanced multisig coordination workflows. The $99 price point is competitive given the hardware certification level.
Price & value
The OneKey Classic 1S is a well-rounded, security-focused hardware wallet that punches above its $99 price point, offering an impressive combination of open-source firmware, a certified EAL6+ secure element, and broad connectivity options that few competitors match at this tier.
Buy this wallet if:
You are a transparency-minded user who demands fully open-source, reproducible firmware builds and wants to verify every line of code protecting your assets.
You manage a diverse portfolio spanning thousands of tokens and need broad chain support — with over 5,000 supported tokens, it covers virtually every mainstream and long-tail asset.
You want flexible connectivity in a lightweight 20.5g device, valuing the ability to sign transactions via USB, Bluetooth, or QR code depending on your setup.
Skip this wallet if:
You require Shamir Secret Sharing for advanced backup redundancy — the OneKey Classic 1S only supports standard BIP39 seed phrases; consider the Trezor Model T (~$219) instead, which natively supports SLIP39 Shamir backups.
You need NFC tap-to-sign functionality for a streamlined mobile workflow — the Coldcard Mk4 ($149) or Foundation Passport ($199) offer more advanced air-gapped and NFC options for power users with stricter security rituals.
You are a complete beginner uncomfortable with slightly more technical setup processes; the Ledger Nano X ($149) offers a more polished, hand-holding onboarding experience.
If choosing between the OneKey Classic 1S and the Trezor Model T: The Trezor Model T costs roughly twice as much at ~$219 and adds Shamir backups and a color touchscreen, but the OneKey Classic 1S matches it on open-source credentials and surpasses it with Bluetooth and a higher-grade EAL6+ secure element — making it the stronger value pick for most users.
If choosing between the OneKey Classic 1S and the Ledger Nano X: Both sit near the $99–$149 range and offer Bluetooth, but the OneKey Classic 1S wins decisively on open-source firmware and reproducible builds, while Ledger's closed-source approach and past security controversies remain legitimate concerns for privacy-conscious holders.
Overall, the OneKey Classic 1S earns its place as a serious contender in the mid-range hardware wallet market — a transparent, feature-rich device that rewards users who value verifiability without sacrificing everyday usability.
✓ Our Verdict
The OneKey Classic 1S is a well-rounded, security-focused hardware wallet that punches above its $99 price point, offering an impressive combination of open-source firmware, a certified EAL6+ secure element, and broad connectivity options that few competitors match at this tier.
Buy this wallet if:
You are a transparency-minded user who demands fully open-source, reproducible firmware builds and wants to verify every line of code protecting your assets.
You manage a diverse portfolio spanning thousands of tokens and need broad chain support — with over 5,000 supported tokens, it covers virtually every mainstream and long-tail asset.
You want flexible connectivity in a lightweight 20.5g device, valuing the ability to sign transactions via USB, Bluetooth, or QR code depending on your setup.
Skip this wallet if:
You require Shamir Secret Sharing for advanced backup redundancy — the OneKey Classic 1S only supports standard BIP39 seed phrases; consider the Trezor Model T (~$219) instead, which natively supports SLIP39 Shamir backups.
You need NFC tap-to-sign functionality for a streamlined mobile workflow — the Coldcard Mk4 ($149) or Foundation Passport ($199) offer more advanced air-gapped and NFC options for power users with stricter security rituals.
You are a complete beginner uncomfortable with slightly more technical setup processes; the Ledger Nano X ($149) offers a more polished, hand-holding onboarding experience.
If choosing between the OneKey Classic 1S and the Trezor Model T: The Trezor Model T costs roughly twice as much at ~$219 and adds Shamir backups and a color touchscreen, but the OneKey Classic 1S matches it on open-source credentials and surpasses it with Bluetooth and a higher-grade EAL6+ secure element — making it the stronger value pick for most users.
If choosing between the OneKey Classic 1S and the Ledger Nano X: Both sit near the $99–$149 range and offer Bluetooth, but the OneKey Classic 1S wins decisively on open-source firmware and reproducible builds, while Ledger's closed-source approach and past security controversies remain legitimate concerns for privacy-conscious holders.
Overall, the OneKey Classic 1S earns its place as a serious contender in the mid-range hardware wallet market — a transparent, feature-rich device that rewards users who value verifiability without sacrificing everyday usability.
Ready to buyOneKey Classic 1S?
We may earn a commission if you purchase through our links. This doesn't affect our editorial independence.
Impermanent loss happens when asset prices in a liquidity pool diverge from external markets, reducing the value of liquidity providers' holdings compared to simply holding the assets.
EAL Certification (Evaluation Assurance Level) from Common Criteria rates the security of hardware components, like secure chips in crypto hardware wallets. Higher levels, such as EAL5+ or EAL6+, indicate stronger resistance to attacks.
Reproducible Builds refer to the process where the same source code consistently produces identical binary outputs, ensuring verifiable and trustworthy software in blockchain and crypto projects.
Secure Boot is a security feature that ensures only trusted software runs on a device by verifying its integrity during startup, preventing unauthorized code execution in crypto systems.
Firmware Attestation is the process of verifying the authenticity of a device's firmware to ensure it has not been tampered with, commonly used in hardware wallets for security.
Open Source Firmware refers to firmware in hardware devices, like wallets, where the source code is publicly available, allowing transparency, auditability, and customization.
A Random Number Generator (RNG) produces unpredictable numbers essential for cryptographic security in blockchain, such as generating private keys and nonces.
BIP39 is a standard for generating mnemonic seed phrases that are used to create deterministic wallets and securely back up cryptocurrency private keys.
A passphrase is an additional security layer for cryptocurrency wallets, acting as a 25th word in the BIP39 seed phrase, protecting access to hidden wallets.
A backup in cryptocurrency is a secure copy of a wallet's seed phrase or private keys. It enables recovery of funds if the original wallet is lost or damaged.
Shamir Secret Sharing (SSS) divides a secret, like a crypto wallet seed, into multiple shares. A threshold number of shares reconstructs it, enhancing security as in SLIP-39 backups.
Recovery is the process of restoring access to a cryptocurrency wallet using its seed phrase or mnemonic backup if the original wallet is lost or inaccessible.
Interoperability in blockchain refers to the ability of different blockchain networks to communicate and exchange data or value seamlessly, enabling cross-chain functionality.
Coldcard is an air-gapped hardware wallet for Bitcoin, made by Coinkite, that stores private keys offline and signs transactions without internet exposure.
A hidden wallet conceals a secondary cryptocurrency wallet behind an additional passphrase on the same seed, providing plausible deniability against coercion.
A companion app is a software application used to manage and interact with cryptocurrency wallets or blockchain networks, typically offering features like transactions and security controls.
A block confirmation is the process of verifying a new block in the blockchain network, confirming its validity and preventing double-spending or fraud.
QR Code Signing is a method used in cryptocurrency transactions where a QR code is generated to confirm and sign a transaction, enhancing security and user convenience.
Bluetooth Connectivity enables wireless communication between devices, like hardware wallets and smartphones, using Bluetooth or Bluetooth Low Energy (BLE) for secure data transfer.
Ledger Live is a software application that manages cryptocurrency assets and interacts with Ledger hardware wallets for secure transactions and portfolio management.
In cryptocurrency, a swap is the direct exchange of one token for another on a blockchain, often via decentralized exchanges (DEXs) without intermediaries.
Cryptocurrency is a digital or virtual currency secured by cryptography, operating on decentralized blockchain networks to enable secure, peer-to-peer transactions.
Bitcoin (BTC) is the first decentralized cryptocurrency, launched in 2009. It uses blockchain technology for secure, peer-to-peer digital transactions without intermediaries.
Ethereum is a decentralized blockchain platform that enables smart contracts and decentralized applications (dApps). Its native cryptocurrency is Ether (ETH).
Solana is a high-performance layer-1 blockchain platform that enables fast, low-cost transactions using Proof of History and Proof of Stake. Its native token is SOL.
BNB Chain is a high-performance blockchain network developed by Binance, formerly Binance Smart Chain (BSC). It supports smart contracts, DeFi, and uses BNB as its native token.
Avalanche (AVAX) is a scalable layer-1 blockchain platform that achieves high throughput and sub-second transaction finality using its novel proof-of-stake consensus.
Polygon is a layer-2 scaling solution for Ethereum that enables faster, cheaper transactions via its Proof-of-Stake sidechain. Native token: MATIC (also called Polygon PoS).
TRON is a blockchain platform and cryptocurrency (TRX) designed for high-throughput decentralized applications, especially in content sharing and entertainment.
WalletConnect is a protocol that enables secure communication between decentralized applications (dApps) and mobile wallets through QR code scanning or deep linking.
DeFi (Decentralized Finance) refers to a set of financial services, such as lending and trading, built on blockchain technology without traditional intermediaries like banks.
Electrum is a lightweight Bitcoin wallet that allows users to store, send, and receive Bitcoin securely. It is known for its speed and low resource usage.
Coin Control is a feature that allows users to manually select which unspent transaction outputs (UTXOs) to use in a transaction, giving more control over privacy and fees.
PSBT (Partially Signed Bitcoin Transaction) is a Bitcoin transaction format that allows multiple parties to sign a transaction incrementally before finalizing it.
An NFT (Non-Fungible Token) is a unique digital asset stored on a blockchain, representing ownership of a specific item, such as artwork, music, or virtual goods.
Multisig (multi-signature) is a security feature that requires multiple private keys to authorize a transaction, enhancing protection against unauthorized access in blockchain networks.
Specter is a Bitcoin hardware wallet solution designed for advanced users, offering secure storage through a customizable, self-hosted setup with options like Specter Desktop and Specter DIY.
Telemetry in cryptocurrency and blockchain refers to the automatic collection and transmission of anonymous usage data, metrics, and error reports from wallets or nodes to improve software.
CoinJoin is a privacy technique in cryptocurrency where multiple users combine their transactions, making it harder to trace individual senders and receivers.
NFC Connectivity in cryptocurrency enables contactless transactions using near-field communication, allowing users to sign or authorize actions by tapping their device to a reader.
OneKey Classic 1S uses a certified Secure Element chip to store private keys in tamper-resistant hardware. Even if the device's software were compromised, the Secure Element isolates your keys from extraction. The firmware is open-source, meaning security researchers worldwide can audit the code for vulnerabilities. The device has been independently security audited.
What if OneKey goes out of business?
OneKey's firmware is open-source — even if the company disappears, the community can maintain the software. Your seed phrase works with any BIP39-compatible wallet, so your funds are always recoverable.
What if I lose my OneKey Classic 1S?
Your cryptocurrency is stored on the blockchain, not on the device. If you lose your OneKey Classic 1S, you can recover full access using your seed phrase on any compatible wallet.
How long will OneKey Classic 1S receive security updates?
Check OneKey's website for the latest firmware update schedule.
Is the OneKey Classic 1S safe to use?
Yes, the OneKey Classic 1S is a highly secure hardware wallet. It features an EAL6+ certified secure element — one of the highest security certifications available for consumer hardware — which protects your private keys from physical and remote attacks. It also includes secure boot and a genuine check mechanism to detect tampering. The firmware is fully open-source with reproducible builds, meaning anyone can independently verify the code running on the device. For most users, this combination of hardware and software security makes it a trustworthy choice for long-term crypto storage.
OneKey Classic 1S vs Ledger Nano X: which is better?
Both are strong hardware wallets, but they differ in key areas:
Open source: OneKey Classic 1S has fully open-source firmware with reproducible builds; Ledger's firmware is partially closed-source.
Secure element: OneKey uses EAL6+; Ledger Nano X uses EAL5+.
Connectivity: Both support Bluetooth and USB; OneKey also supports QR-based offline signing.
Price: Both retail around $99.
Coin support: OneKey supports 5,000+ tokens, comparable to Ledger.
If open-source transparency is a priority, the OneKey Classic 1S has a clear edge. Ledger benefits from a larger ecosystem and broader app support.
How many coins does the OneKey Classic 1S support?
The OneKey Classic 1S supports over 5,000 tokens and cryptocurrencies, covering major blockchains like Bitcoin, Ethereum, Solana, and their associated token standards (ERC-20, BEP-20, SPL, etc.). It is compatible with the OneKey app on Windows, macOS, Linux, iOS, and Android. The device also supports coin control for advanced UTXO management and offline signing via QR code, making it flexible for both everyday users and more technical setups. Multi-signature (basic) is also supported for additional security configurations.
Are there any known vulnerabilities or concerns with the OneKey Classic 1S?
In early 2023, security researchers at Unciphered disclosed a vulnerability in a previous OneKey device that could allow a physical attacker with hardware access to extract the seed phrase. OneKey responded quickly with a firmware patch and noted the attack required physical possession and specialized equipment. The Classic 1S, with its EAL6+ secure element, significantly raises the bar against such physical attacks. As with any hardware wallet, the main ongoing concern is supply chain integrity — always purchase directly from OneKey's official website and verify the device using the built-in genuine check.
Is the OneKey Classic 1S worth the $99 price?
At $99, the OneKey Classic 1S is competitively priced against flagship hardware wallets. For that price you get:
An EAL6+ secure element (higher than most competitors at this price)
Fully open-source firmware with reproducible builds
Bluetooth, USB, and QR connectivity
A 1.3-inch OLED display
Support for 5,000+ tokens
A built-in battery for wireless use
If you value open-source transparency and top-tier secure element certification, the Classic 1S offers strong value. Casual users with smaller portfolios may find cheaper options sufficient, but serious holders will find the price justified.
How do I set up the OneKey Classic 1S for the first time?
Setting up the OneKey Classic 1S takes about 10–15 minutes:
1. Power on the device and verify its authenticity using the built-in genuine check.
2. Download the OneKey app on your preferred platform (Windows, macOS, Linux, iOS, or Android).
3. Follow the on-screen prompts to generate a new wallet, which produces a 24-word BIP39 seed phrase.
4. Write down and securely store your seed phrase offline — never digitally.
5. Optionally, add a BIP39 passphrase for an extra layer of security.
Connect via USB or Bluetooth depending on your device. QR-based air-gapped signing is also available for advanced setups.
Can I trust OneKey as a company?
OneKey is a well-regarded hardware wallet brand backed by notable investors including Coinbase Ventures, Ribbit Capital, and Dragonfly Capital. The company distinguishes itself through a strong commitment to transparency: its firmware is fully open-source, supports reproducible builds, and is publicly auditable on GitHub. OneKey has also demonstrated responsible disclosure practices when past security issues were raised. While no company is without risk, OneKey's open-source approach and institutional backing make it more accountable than many closed-source competitors. Always buy directly from onekey.so to avoid counterfeit devices.
Some links on this page are affiliate links. If you purchase through them, I may earn a commission at no additional cost to you. This helps support the site and allows me to continue creating detailed, independent reviews.
Our testing methodology is evolving. Ratings and assessments will be refined as we improve our scoring framework to reflect the most accurate results.
Ready to get OneKey Classic 1S?
Secure Element • Security audited • Bluetooth • Open source
