DOC//00 Entity profile
SafePal Hardware Wallets and Software Wallets Explained
SafePal is a crypto wallet company that builds both offline signing devices and the software people use to reach them. The SafePal S1, S1 Pro, and X1 are pocket-sized hardware wallets that keep private keys off the internet, while the SafePal App and browser extension handle balances, swaps, staking, and connections to decentralized applications. The company launched in 2018 with early backing from Binance Labs, and it aimed at a specific gap in the market: certified hardware security at a price closer to a pair of headphones than a laptop.
This page covers what SafePal makes, how its air-gapped signing model actually works, where the security boundaries sit, what the SFP token does, and how to set a device up without making the mistakes that cost people their funds. It also covers the honest tradeoffs, because no wallet, SafePal included, removes the responsibility that comes with holding your own keys.
Founded
2018
Category
Self-custody
Devices
S1 / S1 Pro / X1
Token
SFP
SYS//01 What SafePal Is
SafePal sits squarely in the self-custody category. It sells tools for holding crypto yourself rather than an account at a company that holds it for you, and that one decision explains almost everything else about the product.
The company launched in 2018 and shipped its first product, the SafePal S1 hardware wallet, the following year. The pitch was unusual at the time. Instead of connecting a device to a computer over USB or pairing it over Bluetooth, SafePal cut every wire and every radio and moved communication onto QR codes scanned through a small camera. The device never touches a network, and the phone never touches a private key.
That approach was paired with aggressive pricing. Hardware wallets were generally sold as premium security hardware; SafePal pushed the entry price low enough that buying one alongside a modest crypto position stopped feeling disproportionate. Early investment from Binance Labs supplied both funding and distribution, and SafePal is still closely associated with the wider Binance ecosystem, though the wallets themselves are non-custodial and work with assets far beyond BNB Chain.
Today the company presents itself as a full self-custody suite rather than a device maker. The hardware line covers three signing devices and one metal recovery-phrase backup product. The software line covers a mobile app for iOS and Android plus a browser extension, both usable on their own as software wallets or driven by a SafePal hardware device for anyone who wants keys kept offline.
SafePal reports a user base in the millions spread across more than two hundred countries. Figures like that are self-published and hard to audit independently, so treat them as an indication of scale rather than a precise measurement. What is verifiable from the product itself is the breadth: SafePal supports well over a hundred blockchain networks and tens of thousands of tokens, which is wide coverage for a wallet at this price point.
Who it suits
Anyone holding more crypto than they would be comfortable leaving on an exchange, and anyone who interacts with decentralized applications often enough to want transactions reviewed on a second, separate screen. SafePal is also a very common first hardware wallet, largely because of the entry price.
What it is not
SafePal is not an exchange, a bank, or a custodian. There is no account to recover, no password reset, and no support desk that can restore access to funds. If the recovery phrase is lost and the device is gone, so is the money.
Custody model
Keys are generated on your device and stay there. SafePal servers never receive private keys or recovery phrases; the app talks to blockchain nodes and price feeds rather than to an internal ledger of who owns what.
Asset coverage
Bitcoin, Ethereum and its layer twos, BNB Chain, Solana, Tron and a long tail of other networks are handled in one interface, with NFTs and standard token formats listed alongside native coins.
SYS//02 How The Wallets Work
Every SafePal setup comes down to one question: where does the signature happen? Answer that and most other questions about what the device protects, and what it does not, answer themselves.
Key generation and the recovery phrase
When you first power on a SafePal hardware wallet, it generates a random master seed using an onboard random number generator. From that seed it derives every address you will ever use, on every supported chain. The seed is displayed once as a recovery phrase, normally twelve or twenty-four words. That phrase is the wallet. Copy it exactly, store it offline, and never photograph it or type it into anything.
Because the phrase follows widely used derivation standards, a SafePal wallet is not a lock-in. If the device is lost, broken, or simply retired, those same words restore the same accounts in any compatible wallet, whether from SafePal or another vendor. That portability is the practical meaning of self-custody, and it is worth confirming before you commit real funds.
The air-gapped signing loop
Sending a transaction from a SafePal S1 or S1 Pro takes three moves. The SafePal App builds the unsigned transaction and renders it as a QR code. The device camera reads it, shows the destination, amount, and network fee on its own screen, and waits for a physical button press. Once approved, the device signs internally and displays a second QR code containing only the signature, which the app scans and broadcasts to the network.
The point of that loop is compromise tolerance. Assume the phone is already infected. Malware can rewrite an address on the phone screen, but it cannot forge a signature, and the SafePal device shows the real destination on hardware the malware never reached. Reading that screen before confirming is the entire defense. Skipping the check throws away most of what you paid for. The air gap concept comes from high-security computing, where isolated machines are kept off networks entirely.
| Data | Direction | Crosses |
|---|---|---|
| Unsigned transaction | App to device | Yes, as a scanned code |
| Signature | Device to app | Yes, as a scanned code |
| Public addresses | Device to app | Yes, at pairing |
| Private keys | None | Never |
| Recovery phrase | None | Never |
Bluetooth and software-only modes
SafePal X1 replaces the camera loop with a Bluetooth link. The core security model is unchanged: keys stay in the device, transactions are still approved on the device screen, and the connection carries only unsigned data and signatures. What changes is the attack surface, since a radio is a live interface in a way a camera is not, and the convenience, since scanning two codes for every step of a long DeFi session gets tedious fast.
The SafePal App can also run as a standalone software wallet with no device attached at all. Keys then live in the phone's secure storage, protected by the phone's own defenses. That is reasonable for small, active balances and convenient for on-chain experimentation, but it is a different risk tier from hardware signing and worth keeping mentally separate. Plenty of people run both inside the same SafePal App: a hot wallet for daily movement, a device-backed wallet for savings.
SYS//03 The Hardware Line
The SafePal hardware range is deliberately small: one air-gapped design in two builds, one Bluetooth device, and one metal backup board. Choosing between them is mostly a question of how you actually use crypto week to week.
SafePal S1
The air-gapped baseline: a small device with a color screen, a camera, and no USB data, no Bluetooth, no Wi-Fi, and no NFC. The port charges the battery and does nothing else. Key material is held in a certified secure element, and every transaction is approved with a button press on the device. It remains the cheapest way into the SafePal ecosystem and the model most people start with.
SafePal S1 Pro
The same air-gapped workflow in a sturdier metal-bodied chassis, with a refreshed interface and support for a passphrase-protected hidden wallet. If the device will sit in a drawer for years, or you want a second wallet layered behind a passphrase, this is the version to buy.
SafePal X1
Trades the QR loop for a Bluetooth connection to the SafePal App. Keys still never leave the device and approvals still happen on its screen, but the flow is faster for people who sign often. It suits active DeFi users who find scanning two codes per transaction a tax on their attention.
Cypher seed board
Not a wallet. A metal board for recording a recovery phrase in a form designed to survive fire, flooding, and decades of storage better than a paper card. It works with a SafePal device or with any other wallet that uses a standard recovery phrase.
| Model | Connection | Key storage | Best for |
|---|---|---|---|
| S1 | QR only, no radio | Secure element | Long-term holding on a budget |
| S1 Pro | QR only, no radio | Secure element | Durability plus hidden wallet |
| X1 | Bluetooth | Secure element | Frequent on-chain activity |
| App only | Phone network | Phone secure storage | Small, everyday balances |
One caution about buying. Hardware wallets are a supply-chain target, so order SafePal devices from the company or an authorized reseller and never from a marketplace listing offering a used or pre-configured unit. A device that arrives with a recovery phrase already printed on a card inside the box is a scam, without exception. Genuine SafePal packaging carries tamper-evident sealing, and a real device generates your phrase in front of you during setup.
Firmware maintenance follows the same logic as signing. Updates for the air-gapped models are delivered through the app rather than a data cable, so the offline property holds even while the device is being serviced. Apply updates when SafePal publishes them, and only from inside the official app.
SYS//04 App And Extension
The SafePal App is where most people actually spend their time. It is the interface, the portfolio view, and the bridge to everything happening on-chain.
The SafePal App runs on iOS and Android and handles the ordinary work of holding crypto: creating and importing wallets, watching balances, sending and receiving across a very large set of networks, and organizing tokens and NFTs in one list. It is free to download, and it does not require a hardware device to be useful, though as noted the security posture changes when it runs alone.
Built-in swapping routes trades through aggregators and cross-chain providers, keeping a token exchange inside the app rather than pushing users back to a centralized platform. Rates and fees come from those providers, so it pays to compare quotes on larger trades. Staking works the same way, letting holders delegate on supported proof-of-stake networks without leaving the interface.
A dApp browser and WalletConnect support let SafePal reach decentralized exchanges, lending markets, and NFT marketplaces. When a hardware wallet is attached, each of those interactions still terminates at the device screen. That matters, because the riskiest action in DeFi is usually not sending coins but approving a contract permission nobody read.
The SafePal Extension Wallet brings the same accounts into a desktop browser for people who prefer a bigger screen when they work. It covers the same self-custody model, and hardware signing remains available so that desktop sessions do not force keys onto a laptop.
Fiat on-ramps inside the app are operated by third-party partners, each with its own identity checks, payment methods, and regional availability. SafePal does not take custody of funds at any point in that flow; a completed purchase settles directly into an address you control.
Watch-only wallets
A public address can be imported for monitoring with no keys present at all, which lets you check cold storage from a phone without exposing it.
Approval hygiene
Old contract allowances stay live until revoked. Any address that regularly touches DeFi deserves a periodic review of what it has authorized.
Several wallets at once
One SafePal App can manage multiple wallets side by side, hardware and software, each labeled for its own purpose.
SYS//05 Security Architecture
Security claims are easy to make and hard to check, so it helps to separate three things: what SafePal hardware does at the chip level, what the air gap contributes on top of it, and what remains entirely the user's problem.
Private keys on SafePal devices are held in a dedicated secure element, a tamper-resistant chip certified at the Common Criteria EAL5+ assurance level. Secure elements are designed to resist physical extraction: probing, side-channel measurement, and fault injection. Certification is not a promise of invulnerability, but an independent evaluation against defined attack classes is more meaningful than an unverified marketing claim.
The seed itself is produced by a true random number generator on the device rather than derived from software entropy. Randomness quality is foundational here; a predictable seed would render every other protection decorative.
The air gap is the architectural centerpiece of the S1 and S1 Pro. With no radio and no data-carrying port, remote compromise would require a path that simply does not exist. An attacker who fully owns your phone still cannot reach key material inside a SafePal device; the only remaining move is convincing you to approve something on the device screen yourself.
SafePal devices also include an anti-tampering mechanism that erases key material if the hardware detects that it has been physically opened or attacked. The right mental model is that the device destroys the secret rather than defending it indefinitely, which is precisely why the written recovery phrase matters more than the plastic and metal around it.
Access is gated by a PIN, and supported models add an optional passphrase that derives a separate hidden wallet from the same seed. A passphrase defends against someone who finds your written words, but it is one more secret with no backup: forget it, and the funds behind it are locked permanently.
What SafePal cannot protect against is the human layer. Approving a malicious contract, typing a recovery phrase into a phishing page that imitates SafePal support, or sending to an address you never verified are all perfectly authorized actions as far as the blockchain is concerned. No hardware refuses a signature you instructed it to produce.
There is one tradeoff worth stating plainly. SafePal does not publish its device firmware in full, so outside researchers cannot audit it line by line the way they can with certain open-source competitors. Buyers who weight verifiability above everything will care about that; buyers who weight certified hardware, price, and chain coverage often accept it. It is a genuine difference, and worth deciding on consciously rather than by default.
Finally, remember that SafePal has no ability to recover an account. No identity is attached to a wallet and there is no administrative override anywhere in the system. Anyone who claims otherwise, in a chat group or an email signed with the company name, is running a scam.
Secure element
EAL5+ certified
Radios on S1
None
Key export
Not possible
THREAT MODEL // SafePal defends the key. You defend the phrase and the confirmation screen.
SYS//06 The SFP Token
SFP is the ecosystem token attached to SafePal. It is optional to the wallet, and it is worth understanding as something separate from the hardware.
SafePal issued SFP as a BEP-20 token on BNB Chain, distributed through a Binance Launchpad sale in early 2021. Supply is capped by the token contract, and it trades on public markets like any other listed asset, with all the volatility that implies.
Inside the product, SFP has been used for discounts on in-app swap fees, promotional redemptions, and participation in ecosystem programs run by SafePal. Utility programs change over time, so check the current terms in the app rather than trusting a description written somewhere else, including this one.
Two things deserve to be stated clearly. Holding SFP is not required to use a SafePal wallet, and the token's price has no bearing whatsoever on whether the device protects your keys. Treat the wallet as a security tool and the token as a separate speculative asset with its own risk profile.
The token is also a popular phishing hook. Fake airdrop announcements, giveaway pages, and impersonated support accounts promising SFP rewards in exchange for a recovery phrase or a wallet connection are among the most frequent attacks aimed at SafePal users. The rule never changes: no legitimate SafePal process asks for your twelve or twenty-four words, ever.
SYS//07 Compared To Alternatives
Choosing a wallet is mostly choosing where the keys live and how much friction you will tolerate. Here is how SafePal lines up against the other options.
Against an exchange account, the difference is custody. On an exchange, a company holds the keys and can freeze an account, suffer a breach, or be compelled by a court; with SafePal, you hold them and take on the matching responsibility. Exchanges remain genuinely useful for trading and fiat conversion. They are not storage.
Against a phone-only software wallet, the difference is the signing surface. Software keys are only as safe as the operating system they sit on. SafePal hardware moves the secret onto a chip with no network path at all, which is a categorical improvement for any balance you could not afford to lose.
Against other hardware wallets, the comparison gets more granular: connection method, firmware transparency, supported chains, and price. SafePal competes hardest on cost and on breadth of network coverage, and on the air-gap design for buyers who specifically do not want a cable or a radio anywhere in the picture. Buyers who prioritize fully auditable open-source firmware may land elsewhere, and that is a defensible choice rather than a mistake.
| Option | Who holds keys | Network exposure | Sensible use |
|---|---|---|---|
| Exchange account | The exchange | Full | Trading, fiat in and out |
| SafePal App alone | You, on the phone | Phone-level | Daily spending amounts |
| SafePal S1 / S1 Pro | You, offline chip | None on the device | Long-term savings |
| SafePal X1 | You, offline chip | Bluetooth link only | Frequent signing |
A layered arrangement is common and sensible: a small hot balance in the SafePal App for everyday activity, the bulk sitting behind a hardware device, and the recovery phrase stored offline in a physical location separate from the device itself.
SYS//08 Getting Started
Setup takes roughly fifteen minutes. The steps that matter most are the boring ones near the end.
-
Step 01 Buy through an official channel
Order a SafePal device from the company or an authorized reseller and inspect the tamper-evident packaging when it arrives. Refuse any unit that comes with a recovery phrase already filled in.
-
Step 02 Install the software
Install the SafePal App from the official Apple App Store or Google Play listing, or the extension from your browser's own store. Check the publisher name carefully, since imitation wallet apps appear regularly.
-
Step 03 Create the wallet
Power on the device, set a PIN, and let it generate a fresh recovery phrase. Write the words in order on the supplied card or a metal board. Do not photograph them, do not save them to a password manager, and do not type them into any connected screen.
-
Step 04 Pair and test
Pair the device with the SafePal App, then confirm the same receiving address appears on both screens. Send one small test transaction and get it back before you move anything meaningful.
-
Step 05 Store the backup and rehearse recovery
Put the recovery phrase somewhere fireproof and physically separate from the device, and consider a second copy in a second location. Then practice restoring it into an empty wallet, so the process is familiar before you ever have to do it under pressure.
One optional step for larger holdings: enable a passphrase on a SafePal model that supports it, and then treat that extra word with exactly the same care as the recovery phrase, because it is now equally load-bearing.
SYS//09 Practical Guidance
Most losses in self-custody are procedural rather than cryptographic. These are the habits that prevent them.
Verify on the device
Read the destination and amount on the SafePal screen every single time, not on the phone. Compare at least the first and last several characters against the address you meant to use.
Keep the phrase analog
Paper or metal only. Cloud notes, photo libraries, and messaging apps are the most common route by which recovery phrases end up in someone else's hands.
Watch contract approvals
Grant limited allowances where an interface permits it, and revoke stale ones periodically. The SafePal confirmation screen shows you the call being signed; spend the extra second reading it.
Update from the app only
Firmware updates fix real problems, so apply them, but only through the SafePal App itself. Never follow an update link sent by message, email, or a search advertisement.
Assume support is fake
SafePal staff will not message you first, will not ask for your recovery phrase, and will never need remote control of your screen. Any contact doing one of those things is an attack in progress.
Plan for succession
Decide now how someone you trust would recover the funds if you could not. Leave instructions that point to where the backup is kept, not documents containing the words themselves.
The single most common loss pattern with any hardware wallet, SafePal included, is a backup that was never tested. People copy the words in a hurry, transpose two of them or misread a letter, and discover the mistake years later at the exact moment the device stops working.
The second most common is haste. Address-swapping malware and clipboard hijackers depend entirely on users confirming quickly without looking. A SafePal device exists to slow that moment down and give you a trustworthy screen to look at, so let it.
SYS//10 Common Questions
Short answers to the questions that come up most often before and after the first purchase.
Is SafePal free to use?
The SafePal App and browser extension are free to download and use. You still pay blockchain network fees and any spread charged by swap providers. Hardware devices are a one-time purchase with no subscription attached.
Does SafePal support Bitcoin?
Yes. SafePal handles Bitcoin alongside Ethereum and its layer twos, BNB Chain, Solana, Tron, and well over a hundred other networks, plus tens of thousands of tokens issued on them.
What if I lose the device?
Nothing is lost, provided the recovery phrase is safe. Get another compatible wallet, enter the phrase, and the accounts and balances reappear. If both the device and the phrase are gone, no one can recover the funds, including SafePal.
Can SafePal freeze or see my funds?
No. Keys are generated on your device and are never transmitted. SafePal operates no account system tied to your holdings and has no technical ability to move, block, or reverse a transaction you sign.
Is SafePal owned by Binance?
Binance Labs invested in SafePal early and the two ecosystems overlap, which is why the association persists. SafePal operates as its own company, and its wallets are non-custodial and multi-chain rather than tied to a single exchange.
S1 or X1?
Pick the S1 or S1 Pro if you value the air gap and sign infrequently. Pick SafePal X1 if you sign often and want the speed of a Bluetooth connection. Both keep keys inside the device and require on-device approval.
Do I need to hold SFP?
No. The token is entirely optional. A SafePal wallet stores, sends, receives, and signs exactly the same way whether or not you own a single unit of SFP.
Can I use it with other wallets?
Yes. Because SafePal uses standard recovery phrases and derivation paths, its accounts can be restored in other compatible wallets, and phrases created elsewhere can be imported into the SafePal App. Nothing about the setup is proprietary in a way that traps you.