SafePal review 2026: cheap hardware wallets after a data breach
SafePal offers some of the cheapest hardware wallets with a screen, including the air-gapped S1 that signs by QR code, plus a free multichain app. It is good value for beginners with many coins. Its August 2026 customer data breach means buyers should expect phishing and buy only from official channels.
Status (as of October 2026): Active. SafePal was founded in 2018 and received early backing from Binance's investment arm, then called Binance Labs. Recent changes: on 16 Aug 2026 SafePal disclosed that an order-system flaw exposed personal data of 39,798 customers (BleepingComputer, 16 Aug 2026). The latest S1 firmware, V1.0.79, was released on 22 Apr 2026 (Coin Bureau, May 2026).
Verdict
SafePal is a two-part product: a hardware device and a free app that also works on its own as a hot wallet. The S1 and S1 Pro never connect by cable, Bluetooth or Wi-Fi to sign; they pass transactions to the phone by QR code. That keeps the device fully offline for less than half the price of many rivals.
The weak points are transparency and recent trust. SafePal's firmware is only partly open source, and its August 2026 breach exposed names, phone numbers and home addresses. Your coins are not at risk from that leak, but you may be targeted by convincing scams.
At a glance
| Feature | SafePal |
|---|---|
| Type | Hardware wallets (S1, S1 Pro, X1) plus a mobile app and browser extension |
| Custody | Self-custody with a seed phrase |
| Chains | 200+ blockchains, including Bitcoin, Ethereum, BNB Chain, Solana, Polygon and TON |
| Platforms | iOS, Android; extension for Chrome, Firefox and Edge. No desktop app |
| Connection | S1 and S1 Pro: QR code only (air-gapped). X1: Bluetooth |
| Open source | Partly. SafePal describes parts of its lineup as open source; do not treat the S1 as fully open source |
| Chip | CC EAL6+ secure element (Coin Bureau, May 2026) |
| Price | S1 $49.99, X1 $69.99, S1 Pro $89.99; Cypher metal seed board $44.99 (safepal.com, Oct 2026, excluding VAT and duty) |
Fees
| Action | Cost |
|---|---|
| In-app swaps | A 0.2% surcharge, plus provider and network fees built into the rate (Cryptonews, Jan 2026). SafePal does not publish a fee schedule we could confirm |
| Swapping directly on a DEX through the app's browser | No SafePal surcharge; DEX and network fees apply |
| Buying crypto | Third parties such as Binance, Simplex and MoonPay, at their rates |
| Send and receive | Network fee only |
As of October 2026. Compare with other wallets on our wallet fees page.
Is SafePal safe?
Security model
The device generates and stores your keys on a secure element and shows transaction details on its own screen. With the S1 and S1 Pro, the phone builds a transaction, you scan its QR code with the device, check it on the screen, and scan the signed QR code back. USB is used only for charging and firmware updates. The X1 uses Bluetooth for convenience, which adds a wireless link but not access to the keys. Without the device, the SafePal app is a normal hot wallet whose keys live on your phone.
Incident history
| Date | What happened | Response |
|---|---|---|
| Feb 2021 | Kraken Security Labs reported that S1 firmware could be downgraded from v1.0.18 to v1.0.17, an attack that needs physical access. | Patched in firmware V1.0.24, released 16 Feb 2021 (Coin Bureau, May 2026). |
| 16 Aug 2026 | An authorization flaw in an order-tracking plug-in on SafePal's web shop let outsiders view other customers' orders. Names, emails, phone numbers, shipping addresses and order details for orders placed between 2 Mar 2025 and 11 Apr 2026 were exposed. A threat actor claimed to be selling the data on a cybercrime forum (not verified by BleepingComputer). SafePal had received a report in early May 2026 and first treated it as isolated, and customers reported phishing calls, including fake X1 firmware updates, from May. | SafePal fixed the flaw, hired an outside firm, removed personal data from live servers (keeping an encrypted offline copy for law enforcement), cut data retention in that system to 90 days (ForkLog, Aug 2026) and took down more than 30 phishing sites. It said seed phrases, keys and payment details were not exposed and found no evidence of access to wallets or funds. No reimbursement applies because no funds were lost through the breach. |
Read more in our wallet security incidents tracker.
If you bought from SafePal
- SafePal will never call you or ask for your seed phrase. Hang up on "support" calls.
- Update firmware only from inside the official app, never from a link in an email or text.
- You do not need a new wallet unless you shared your seed phrase. If you did, move your funds to a new one now.
Key features
- Air-gapped QR signing on the S1 and S1 Pro.
- Multichain app with swaps, staking, NFTs and a dapp browser.
- Binance integration for swaps and buying inside the app.
- Browser extension that can work with the hardware device.
- Cypher, a steel board for storing your seed phrase.
Which SafePal device to choose
| Model | Connection | Price (Oct 2026) | Best for |
|---|---|---|---|
| S1 | QR code only | $49.99 | Lowest-cost air-gapped signing |
| X1 | Bluetooth | $69.99 | Faster pairing with the phone |
| S1 Pro | QR code only | $89.99 | Larger battery and an upgraded version of the S1 design |
Prices from safepal.com exclude VAT and import duty. Coin Bureau lists battery sizes of 400 mAh for the S1, 500 mAh for the S1 Pro and 200 mAh for the X1 (May 2026). If you want the strongest isolation, pick a QR model; if convenience matters more, the X1 is simpler day to day.
Seed phrase and recovery
SafePal devices create a standard seed phrase on the device during setup. Write it down offline and store it away from the device; the Cypher steel board is one option, but any durable offline copy works. If the device is lost or broken, you can restore the phrase on a new SafePal or another compatible wallet. SafePal cannot recover your funds for you, and its support staff will never ask for the phrase.
Because the 2026 breach exposed home addresses, keep your backup out of sight and do not label it as crypto. A burglar who knows you bought a hardware wallet may look for one.
Setting up safely
- Buy from
safepal.com, typed by hand or from a bookmark, or an authorised reseller. Do not buy used or "pre-configured" devices. - Check that the packaging is sealed and the device has not been set up before. If it shows an existing wallet or comes with a pre-printed seed phrase, do not use it.
- Install the SafePal app only from the Apple App Store or Google Play.
- Create the seed phrase on the device itself and write it down offline. See seed phrase safety.
- Send a small test transaction first, and check each address on the device screen.
Pros and cons
| Pros | Cons |
|---|---|
| Very low price for a device with a screen | Customer data breach in 2026, with phishing to follow |
| Fully air-gapped QR signing (S1, S1 Pro) | Firmware only partly open source |
| Supports a very wide range of chains | 0.2% surcharge on in-app swaps |
| Free app works with or without the device | No desktop app |
Who it suits
Good for: budget-minded beginners with many different coins, and mobile users who want an offline signing device.
Look elsewhere if: you need fully open-source firmware, desktop software or privacy around your purchase. A Trezor is the usual choice.
Alternatives
- Tangem: a similarly priced card wallet without a seed phrase.
- Ledger: the best-known hardware wallet brand, with wide app support.
- Trezor: open-source firmware.
More options: best hardware wallets and Ledger vs Trezor.
Frequently asked questions
Is SafePal safe?
SafePal devices keep keys offline on a secure element, and the S1 signs only by QR code. The August 2026 breach exposed customer contact details but not keys or funds. The main risk now is phishing aimed at buyers.
Was my SafePal wallet hacked in the 2026 breach?
No funds or keys were exposed, according to SafePal. Names, emails, phone numbers, addresses and order details for orders from March 2025 to April 2026 were. Ignore unexpected calls or firmware update links.
What is the difference between SafePal S1 and X1?
The S1 and S1 Pro sign transactions by QR code and never connect wirelessly. The X1 uses Bluetooth for convenience. As of October 2026 the S1 costs $49.99 and the X1 $69.99 before VAT and duty.
Does SafePal charge fees?
Cryptonews reported a 0.2% surcharge on in-app swaps in January 2026, plus provider and network fees. Sending and receiving cost only the network fee.
Is SafePal owned by Binance?
No. SafePal is an independent company that received early backing from Binance's investment arm. The app integrates Binance services for swaps and buying.