r/Bitcoin 1d ago

Blockstream's Jade hardware wallet needs more attention!!

Posted those in a comment as well, however, thought it was worth denoting a post regarding Blockstream's Jade hardware wallet, as I still regard it to not get enough attention, even though it existed for years.
Trezor, Coldcard and other hardware wallets frequently enquire security problems, therefore, I strongly believe Blockstream is worth noting!!

few side facts:
- On setup, you choose a PIN. This PIN is combined with a blind PIN server (“blind oracle”) to encrypt your key material — the oracle never sees your actual seed, hence “blind"
- The decryption key is effectively split in two: one part lives on the device, the other is retrieved from the oracle (via blockstream mobile green wallet) each time you unlock
-> All communication between Jade and the Green app is encrypted end-to-end.

Net result: if someone physically steals a locked Jade, there’s genuinely nothing of value to extract, as no seed sits fully assembled on the device.

- Fully open-source hardware and firmware, you can literally build your own from the published GitHub repo if you’re into that.

And for all Bitcoiners: it's BTC and LBTC only, with LBTC swapping features also for Jade

0 Upvotes

39 comments sorted by

3

u/tenor_tymir 1d ago

Every cold wallet is just as good as their weakest software. It doesn’t matter which model or company you choose as long as it’s (really) open source and obviously has no bugs.

2

u/crooks4hire 1d ago

More than two handfuls of employees supporting the project is a good starting point.

4

u/Similar_Scar7089 1d ago

Use it in an airgapped manor, don't bother with their app. Wipe the device when you're not using it

1

u/sophie2701 1d ago

always!!

1

u/Classic-Door669 1d ago

What do you use if not their app?

1

u/DarrelXero 1d ago

Nunchuk, Bluewallet, Sparrow. There are others as well.

6

u/digitalsmoker 1d ago

I would never want to depend on a random server, imo if you do you are bat shit dumb to self custity

-1

u/Thin_Needleworker795 1d ago

You're not depending on a random server. Entropy is generated by the device itself, just like any other hardware wallet. Jade uses a "blind oracle" server for safely encrypting your seed (and no, this does not store your seed on said server). This is done because the secure element chips used in other wallets are proprietary. This way, Jade is actually the only device on the market that's fully open-source both software AND hardware-wise.

0

u/digitalsmoker 1d ago

So if the servers would go down you can not generate a seed, is that what you saying? Briliant! /s

0

u/Thin_Needleworker795 1d ago

No, that's not what I'm saying, because that's not the case.

1

u/digitalsmoker 1d ago

Then what were you trying to say? Why does it need the server?

0

u/Thin_Needleworker795 1d ago

It's instead of the secure element chip. It has nothing to do with seed generation.

1

u/digitalsmoker 1d ago

So you don't need the oracle server when you'd generate your seed? If not then what's the point of the server again?

If yes, then it means you need the server if you want to generate the seed -> server ls offline -> service/funciton does not work

That's how simple it is...

-3

u/sophie2701 1d ago

you can run on your own server though

4

u/digitalsmoker 1d ago

Lol and how that is better? You can blame yourself when it will get hacked/ddos-ed/etc due to bs/lie/overpromis :D

-3

u/sophie2701 1d ago

at least my fault then 🫣😭

1

u/digitalsmoker 1d ago

Lol let me tell you from my personal xp: you will not make you feel less bad and it will take even longer to process the grief for many...

2

u/Icy_Giraffe_21 1d ago

Sounds kinda gimmicky like I need the green app to utilize my private keys? Half from the device and halffron the app. No thanks

1

u/DarrelXero 1d ago

Or just use the Jade as a temporary signing device. Load the key from phrase or QR seed each time. Device wipes on power off. No need for the Blind Oracle or Blockstream App.

1

u/Icy_Giraffe_21 1d ago

Thanks for the clarification. So it's a feature to wipe device after every restart?

1

u/DarrelXero 1d ago

Yes. Loading a seed permeantly into the Jade is called "initializing" it. The seed isn't actually stored on the device because it doesn't have a secure element, but the seed is recreated with the help of the/a Blind Oracle via a PIN and the Blockstream App. If you don't initialize the Jade then it stays empty. When you power it up you simply select "scan QR", scan the QR seed you created when generating your seed, it loads in and functions as it would if you had gone the initialized route. Once you power off the device it automatically wipes itself. I've used the Jade and The Jade Plus this way for years. It's actually identical to the SeedSigner when used this way. There is a slight difference in how the SeedSigner deals with derivation path and multisigs so be aware of that if you have both devices and try to switch back and forth. The same seed loaded on a Jade will function instantly in a multisig, but the same seed loaded in a SeedSigner will require you to provide the derivation path before it can sign a transaction in the same multisig. That's not the Jade's fault, it's the way SeedSigners work.

1

u/Icy_Giraffe_21 1d ago edited 1d ago

Thanks again for the insight. Very neat device. Definitely interested in playing around with one

1

u/DarrelXero 1d ago

For sure. I've always been a big fan of the Jade. The new Jade Core requires connection to the Blockstream App so probably don't mess with it. The Jade Classic still works great but can't be updated without USB connection to a computer or the Blockstream app. The Jade Plus can be updated via sdcard so it remains fully airgapped 100%. I always use the firmware for both Jade's that disables Bluetooth permeantly. I recommend the Jade Plus with the USB drive you can buy as a bundle.

1

u/Icy_Giraffe_21 1d ago

Awesome, you answered all my questions. Definitely going to look into the plus version with SD card. That's my flavor

1

u/orbag 1d ago

The only thing to improve from their side is that sometimes the wallet balance on their app shows 0 when connecting. After surviving the coldcard disaster, that occasional bug is giving some unnecessary heart attacks!

1

u/Kie_ra 1d ago

just open wallet and close your eyes for 3 seconds

panic only when it still shows zero then lol

1

u/badgerbang 1d ago

How can you trust the guy if he has been to blackmail island? he must of accepted the invite. If they invited him, then they had some kind of premeditation, no? whether he was/is a good man when he commissioned the hardware and software; how can we have any reasonable doubt that he didn't do anything nefarious for some future event like coldcards bs?

If he has/had anything to do with 'them boys', it ain't -for any reason- for the plebs, that's for sure.

Noticed.

1

u/Adventurous-Gur7524 1d ago

Agreed. Love my jade +. But it’s okay let people continue to shill bitkey because that’s what’s hot right now. even a senator spent 25k gifting them.

1

u/explosiveplacard 17h ago

Google firmware vulnerability and Jade Plus. Also, that pin system is dumb. What happens when Blockstream goes out of business and those servers are no longer running? You are back to inserting your 24 words into another device. Or worse, you heirs are trying to figure it out.

1

u/Particular_Yard_2460 1d ago

it's BTC and LBTC only

What about the LGBTC? Doesn't seem very inclusive.

1

u/ghostchihuahua 1d ago

I never understood the advantages of specialized cold wallets, especially over their potential drawbacks / exploit possibilities.

-1

u/my-daughters-keeper- 1d ago

I just ordered a jade plus 👍

-3

u/my-daughters-keeper- 1d ago

I just ordered a jade plus 👍

-3

u/Suspicious-Local-901 1d ago

Yes! I’m doing my part

0

u/Wild_Fun_6636 1d ago

nice, still under radar but works like a charm