# Blockstream Jade > Source: https://timechain.wiki/wiki/blockstream-jade · TimechainWiki, the Bitcoin encyclopedia. (note · self-custody) > Blockstream Jade, made by Blockstream (Victoria, BC, Canada), is the hardware wallet most strongly associated with budget-conscious Bitcoin self-custody. At $79 (the base **Jade Core**) it is meaningfully cheaper than every other mainstream hardware wallet while providing fully open-source firmware and native multisig support. Note (2026): the $79 Jade Core has **no on-device camera** (it connects by USB-C/Bluetooth, so it is not air-gapped on its own); the **Jade Plus** ($149, metal body + battery) adds the camera for air-gapped QR signing. Distinguishing features: lowest mainstream price, native integration with Blockstream Green (and as of 2026 with Unchained's collaborative-custody platform), and support for both USB and QR signing modes. The trade-off is Jade's "virtual" secure element implemented in firmware on a general-purpose ESP32 rather than a dedicated chip — a deliberate design choice that some practitioners contest. For substantial holdings the secure-element absence tips many holders toward more expensive devices; for Tier 1 holdings, multi-vendor multisig diversification, or budget-constrained holders, Jade is the only mainstream device under $100 worth recommending. --- ## What this is **Vendor**: Blockstream Corp. (Victoria, BC, Canada). Founded 2014 by Adam Back, Greg Maxwell, Pieter Wuille, and others. Blockstream is among the most influential Bitcoin infrastructure companies — they develop Bitcoin Core (employing many of the principal developers), operate the Liquid sidechain, and run the Blockstream satellite network. The hardware wallet is one product in a deep Bitcoin-focused portfolio. **Product line as of 2026-07-17** _(reconciled to Blockstream's own compare page)_: - **Jade Core** ($79) — the base device (this is the current name for the original "Blockstream Jade"): plastic body, ESP32, virtual secure element. **No on-device camera and no battery** — it connects by USB-C or Bluetooth, so on its own it is **not air-gapped** (QR air-gap needs the Plus's camera, or you relay QRs via the companion app on a phone). - **Jade Plus** ($149) — premium variant: precision-machined aluminium body (six colours), a larger display, a **built-in camera** for air-gapped QR signing, and a **rechargeable battery**. Same virtual-secure-element architecture as the Core (it does **not** add a physical/dedicated secure element). _(The earlier note of a separate "~$99 mid-tier Jade Core" was speculative and is corrected here: the lineup is just Core $79 + Plus $149.)_ **Firmware**: Fully open-source under MIT licence (OSI-approved). Source code on Blockstream's GitHub. **Architecture**: This is the structurally unusual choice. Jade uses an ESP32 microcontroller (a general-purpose chip with WiFi/Bluetooth capability — though the relevant radios are disabled in the firmware for signing operations) and implements a "virtual" secure element entirely in firmware. Blockstream has published the rationale: a transparent open-source firmware on a general-purpose chip is, in their view, a better security trade than an opaque secure element. Some practitioners disagree; the synthesis treats this as a contested design choice worth flagging. **Connectivity**: USB-C for connected workflows; Bluetooth (firmware-disabled by default in signing operations); no NFC. **Camera for QR-based air-gap signing is a Jade Plus feature only** — the Jade Core has no camera (relay QRs via the companion app, or connect over USB/BT). --- ## Who this is for Jade is a strong fit for: - **Budget-conscious first-time hardware-wallet holders** — at $79, the price-to-capability ratio is excellent - **Multi-vendor multisig diversification** — Jade as the fifth device in a 3-of-5 multisig is a clean way to add vendor diversity without spending another $200 - **Unchained users** — as of 2026, Jade is fully integrated with Unchained's collaborative-custody platform; Unchained users can use Jade as one of their personal keys with full coordinator support - **Blockstream ecosystem users** — Liquid sidechain, Blockstream Green wallet, Blockstream Satellite — the integration is tight - **Holders of Tier 1 holdings** — for $1K–$50K balances, Jade is genuinely sufficient Jade is **less appropriate** for: - **Tier 2+ holdings as the sole signing device** — the virtual-secure-element choice is contested; for substantial holdings, a device with a dedicated secure element (Coldcard, BitBox02, Trezor Safe 5, Passport) is the safer default - **The very privacy-conscious** — Blockstream's broader business interests (Liquid, the satellite, business relationships) sometimes inform their product design in ways the strictly-privacy-focused holder may find suboptimal - **Holders who want strict air-gap workflows** — Jade's QR signing works but the integration is less polished than Foundation Passport's --- ## Features and capabilities ### Jade specifics - **ESP32 microcontroller** — the controversial architectural choice; general-purpose chip with virtual secure element - **Colour display** — small but adequate - **Camera** — for QR code scanning (air-gap signing mode) - **USB-C** — for connected signing and firmware updates - **Buttons** — physical buttons for navigation and confirmation; no touchscreen - **Bluetooth** — present but disabled in default signing operations; some use cases enable it for specific workflows - **Battery** — small rechargeable battery for portable use ### Common to Jade - **Fully open-source firmware** (MIT) - **Bitcoin and Liquid support** — Liquid sidechain is supported (a Blockstream product) as well as standard Bitcoin - **PSBT v2 support** - **BIP-380 output descriptors** - **BIP-39 passphrase support** - **Native multisig** - **QR-based air-gap signing** — supported but the workflow is less polished than Passport's - **Multi-account support** — multiple wallet contexts on one device ### Jade-specific quirks - **The virtual secure element** — the central design choice. The argument: a verifiable open-source firmware on a known chip is better than an opaque secure element. The counter-argument: physical attacks (chip-decapping, fault injection) are harder against a dedicated secure element. The synthesis flags this as contested; different holders will weight the trade differently. - **The "Pin Server" concept** — Jade uses a Blockstream-hosted "PIN server" to enable the rate-limiting and PIN-protection features. Blockstream has published the protocol; the server cannot decrypt the wallet keys, only assist with PIN validation. Some holders object to any reliance on a Blockstream-hosted service; others see it as fine because the structural security argument is sound. - **Liquid integration** — Jade natively supports Liquid (Blockstream's Bitcoin sidechain), which is a feature some Bitcoin holders consider out-of-scope. --- ## Tradeoffs vs alternatives | Dimension | Blockstream Jade | Coldcard Mk4 | BitBox02 BTC-only | Trezor Safe 3 | Foundation Passport | |---|---|---|---|---|---| | Price | $79 | $150 | $137 | $79 | $199 | | Bitcoin-only | No (Bitcoin + Liquid) | Yes | Yes | No (multi-coin) | Yes | | Open-source | Yes (OSI MIT) | Source-available | Yes (OSI) | Yes (GPL) | Yes (OSI) | | Secure element | Virtual (firmware-based) | Yes (physical) | Yes (physical) | Yes (physical) | Yes (physical) | | Air-gap signing | Plus: yes (QR via camera) · Core: no (USB/BT) | MicroSD only | No | No | Yes (strict QR-only) | | Native SLIP-39 | No | No | No | Yes | No | | BIP-85 | Limited | Excellent | Good | Good | Limited | | Lopp 100-input signing | Adequate (slower than top devices) | Fast | Fast | Moderate | Fast | | Unchained integration | Excellent (2026) | Good | Good | Good | Good | The principal differentiator for Jade is price. Other mainstream Bitcoin-only hardware wallets are 2-3× more expensive. For budget-constrained holders or for multi-vendor multisig where Jade fills the fifth slot, the price-to-capability ratio is excellent. The principal trade-off is the virtual secure element. For Tier 2+ holdings where physical-attack resistance becomes relevant, the dedicated-secure-element devices are structurally safer. --- ## Setup and operation The setup flow: 1. **Verify packaging** — tamper-evident packaging from Blockstream 2. **Connect via USB or pair with Blockstream Green mobile app** — initial setup 3. **Generate seed** — 12 or 24 words displayed on device screen 4. **Verify the seed** — on-device flow 5. **Set PIN** — works with Blockstream's PIN server protocol 6. **Optionally set up a passphrase** — entered on device 7. **Pair with a coordinator** — Blockstream Green for single-sig; Sparrow, Specter, Nunchuk for multisig; Unchained app for collaborative-custody as of 2026 The signing flow: - Coordinator builds PSBT - Transfer to Jade via USB (cable) or QR code (camera scan) — Jade supports both - Jade displays transaction details; the holder verifies on the small screen - Holder confirms via buttons - Signed PSBT returns to coordinator via USB or QR - For multisig, the same flow with multiple devices --- ## Security considerations ### Strengths - **Fully open-source firmware** (MIT, OSI-approved) - **Bitcoin-focused vendor with deep Bitcoin Core involvement** — Blockstream employs many of the principal Bitcoin Core developers - **QR-based air-gap option** — workflow is supported even if less polished than Passport's - **Affordable enough to enable vendor diversity** — the $79 price point makes adding a Jade to a multisig setup low-friction - **Unchained integration** — the 2026 partnership makes Jade a first-class option in collaborative custody ### Known concerns - **The virtual secure element** — the central security debate. Blockstream's published rationale is reasonable; many practitioners disagree. For substantial holdings, dedicated-secure-element devices are the safer default. - **The PIN server reliance** — for full PIN-protection functionality, Jade communicates with a Blockstream-hosted server. The protocol is published; the server cannot decrypt keys. Some holders prefer not to rely on a vendor-hosted service for any part of the security model. - **Smaller community than Trezor or Ledger** — fewer third-party reviews, fewer tutorials. Official documentation is good but the broader ecosystem is thinner. - **The ESP32 chip has WiFi/Bluetooth capability** — these are disabled in default signing operations, but the hardware capability exists. For the strictly paranoid, this is a concern. ### Supply-chain integrity Buy directly from blockstream.com. Tamper-evident packaging. Avoid generic marketplaces. The Ledger 2020 leak does not affect Blockstream; the customer database has not had a public leak. --- ## Pricing and acquisition _As of 2026-07-17 (reconciled to blockstream.com/jade; prior review 2026-07-15)_: - **Jade Core**: $79 USD — the base device (plastic; no camera/battery) - **Jade Plus**: $149 USD — aluminium body, larger display, built-in camera + rechargeable battery; retains the virtual secure element **Authorized channels**: blockstream.com directly; authorized Bitcoin-focused resellers. Avoid generic marketplaces. **Bulk pricing**: available for multi-key setups. --- ## Common pitfalls **Buying Jade as the sole device for a Tier 2+ holding.** The virtual secure element is the central concern. For substantial holdings, pair Jade with dedicated-secure-element devices or use a more conservative device as the sole signer. **Treating Jade's Bluetooth as a security non-issue without verifying.** The firmware disables Bluetooth in default signing operations, but holders should verify the configuration matches their threat model. **Skipping the Blockstream PIN server understanding.** The PIN server protocol is published and the cryptographic argument is sound — but holders should engage the question rather than assume. **Buying Jade for Liquid sidechain operations and treating it as Bitcoin-only.** Jade supports Liquid natively; this is a feature for Liquid users but the holder should be aware of what code paths exist in the firmware. **Three Jades in multisig.** Same vendor-diversity pitfall. Pair Jade with Coldcard, BitBox02, Trezor, or Passport. **Treating Jade as inferior across the board.** For Tier 1 holdings and budget-constrained holders, Jade is genuinely good — the price-to-capability ratio is excellent. Dismissing it as "the cheap option" misses where it actually fits. --- ## Tooling and resources **Blockstream documentation** _(as of 2026-05-14)_: - blockstream.com/jade — official site - Blockstream Jade user manual — comprehensive - The Blockstream blog — release notes, security advisories - The Adam Back, Pieter Wuille, and broader Blockstream developer team's writing **Coordinator software supporting Jade**: - Blockstream Green — official, mobile + desktop - Sparrow Wallet — multisig-friendly - Specter Desktop — multisig-focused - Nunchuk — desktop and mobile - Unchained app — 2026 integration; full collaborative-custody support **The synthesis document**: *Bitcoin Self-Custody & Security* (LegacyCipher, April 2026) — Jade treated as the budget-conscious option with the 2026 Unchained integration as a recent development. _As of 2026-07-15_: Jade has been shipping since 2021; firmware is actively updated. The **Jade Plus** (aluminium body, larger display, retaining the virtual secure element) is now shipping at ~$149–$169, and a **Jade Core** (~$99) has joined the lineup. _(Prior review 2026-05-14.)_ --- ## Open questions for further development - The virtual secure element design choice is contested. Has the empirical record validated Blockstream's argument that transparent open-source firmware on a general-purpose chip is competitive with dedicated secure elements? Or have physical attacks against Jade's architecture been demonstrated? - The 2026 Unchained integration meaningfully changes Jade's positioning. Does this make Jade the canonical choice for collaborative-custody users who don't already own hardware wallets? - The rumored Jade Plus (once speculated to add a dedicated secure element) would address the principal concern about the current Jade. When does it ship, and at what price point? _(Update 2026-07-15: the Jade Plus now ships at ~$149–$169, but it retains the virtual secure element — the metal body and larger display are the upgrades, not a physical secure element — so this open question is largely moot.)_ --- ## Related notes **The framing context**: - [Hardware wallets overview](https://timechain.wiki/wiki/hardware-wallets-overview.md) — the framework - [Self-custody configuration ladder](https://timechain.wiki/wiki/self-custody-configuration-ladder.md) — Jade fits well across Configurations 1, 4, 5, particularly as a vendor-diversity component **Per-device alternatives**: - [Coldcard](https://timechain.wiki/wiki/coldcard.md) — the premium alternative - [BitBox](https://timechain.wiki/wiki/bitbox.md) — the comparable open-source Bitcoin-only alternative ($137 vs Jade's $79) - [Trezor](https://timechain.wiki/wiki/trezor.md) — the SLIP-39 alternative - [Foundation Passport](https://timechain.wiki/wiki/foundation-passport.md) — the polished air-gap alternative - [Bitkey](https://timechain.wiki/wiki/bitkey.md) - [Ledger considerations and tradeoffs](https://timechain.wiki/wiki/ledger-considerations-and-tradeoffs.md) **Relevant capabilities**: - [PSBT and wallet descriptors](https://timechain.wiki/wiki/psbt-and-wallet-descriptors.md) - [Passphrases and the 25th word](https://timechain.wiki/wiki/passphrases-and-the-25th-word.md) - [Seed phrases and BIP-39](https://timechain.wiki/wiki/seed-phrases-and-bip-39.md) **Custody configurations**: - [Multisig setups](https://timechain.wiki/wiki/multisig-setups.md) — Jade as a vendor-diversity component - [Collaborative custody services](https://timechain.wiki/wiki/collaborative-custody-services.md) — Unchained integration as of 2026 **Operational practice**: - [Backup strategies for seeds](https://timechain.wiki/wiki/backup-strategies-for-seeds.md) - [Recovery rehearsal practice](https://timechain.wiki/wiki/recovery-rehearsal-practice.md) - [Common attack vectors](https://timechain.wiki/wiki/common-attack-vectors.md) **The principal practitioners**: - [Jameson Lopp](https://timechain.wiki/wiki/jameson-lopp.md) - [Adam Back](https://timechain.wiki/wiki/adam-back.md) — Blockstream founder - [Pieter Wuille](https://timechain.wiki/wiki/pieter-wuille.md) — Blockstream/Bitcoin Core developer - [Greg Maxwell](https://timechain.wiki/wiki/greg-maxwell.md) — Blockstream co-founder **The sub-MOC home**: - [Practical self-custody and sovereignty](https://timechain.wiki/wiki/practical-self-custody-and-sovereignty.md)