Blockstream Jade Plus Review 2026: Open-Source Bitcoin Wallet Tested

Rating: 7.8 / 10

The Blockstream Jade Plus is one of the most polarizing hardware wallets you can buy. It does things no other wallet in its price range attempts: fully open-source hardware and firmware, air-gapped transaction signing via QR codes, and a security model that throws out the traditional playbook entirely.

At $149 for the standard model ($169 for the metal edition), the Jade Plus sits in the mid-range of Bitcoin hardware wallets. It replaced the original Jade ($79) as Blockstream's flagship in January 2025, bringing a larger screen, better buttons, and an upgraded processor. The original Jade is still available, but the Plus is clearly where Blockstream's focus has shifted.

The defining trade-off? No dedicated secure element chip. Instead, Blockstream uses a "blind oracle" system that splits your encryption key between the device and an external server. Whether that bothers you depends on your threat model and how much bitcoin you plan to store.

Quick Specs: Jade Plus at a Glance

What We Like: Pros of the Jade Plus

1. Fully open-source hardware and firmware

This is the Jade Plus's defining feature. Both the hardware schematics and the firmware are publicly available on GitHub. Anyone with the skills can inspect exactly what this device runs, build their own from scratch, or verify that no backdoors exist.

Why does this matter? Most hardware wallets ask you to trust the manufacturer. Ledger's firmware is completely closed-source. The Trezor Safe 3 and Safe 5 introduced a closed-source secure element. Even the Coldcard Mk4, which is partially open-source, keeps some components proprietary.

The Jade Plus is transparent all the way down. For privacy-focused Bitcoiners, that transparency is a security feature in itself.

2. Air-gapped transactions via built-in camera

The Jade Plus has a built-in camera for signing transactions via QR codes. No USB, no Bluetooth, no physical connection to any internet-connected device. Display a QR code on your computer, the Jade Plus scans it, signs offline, then shows a signed QR for your computer to scan back.

This "air-gapped" workflow (the signing device never touches the internet) is the gold standard for security. Pair it with Sparrow Wallet on desktop, keep the device permanently offline, and handle everything through QR codes.

The Jade Plus also supports air-gapped firmware updates via external storage, something the original Jade could not do.

3. Mid-range price for premium features

At $149, the Jade Plus costs less than a Coldcard Mk4 (~$178), a Trezor Safe 5 (~$169), and significantly less than a Foundation Passport (~$259). You get air-gapped signing, Bluetooth, USB-C, a color screen, and full open-source transparency. That feature set usually costs more from competitors.

If budget is tight, the original Jade at $79 still works and shares the same firmware. But the Plus is the better long-term investment.

4. Bitcoin-only focus reduces attack surface

The Jade Plus only supports Bitcoin and Liquid Network assets. No Ethereum, no altcoins, no DeFi integrations, no token swaps. This is deliberate. Every additional blockchain, token standard, and protocol integration adds code, and more code means more potential vulnerabilities.

If you hold bitcoin and nothing else, a Bitcoin-only wallet gives you a smaller, more auditable codebase. Fewer things can go wrong.

5. Backed by serious Bitcoin infrastructure builders

Blockstream is not a startup chasing crypto trends. Founded in 2014 by Adam Back (inventor of Hashcash, cited in Bitcoin's whitepaper), the company has raised $651 million at a $3.2 billion valuation. They employ multiple Bitcoin Core developers and build the Liquid Network, Blockstream Satellite, and Core Lightning.

In 2024, they closed a $210 million round led by Fulgur Ventures. In 2025, they opened their European headquarters in Lugano, Switzerland. This company is deeply rooted in Bitcoin's future.

6. Strong wallet compatibility

You are not locked into Blockstream's own Green app. The Jade Plus works with Sparrow, Electrum, Nunchuk, BlueWallet, and Specter Desktop. Many power users pair it with Sparrow for better coin control (choosing which specific bitcoin outputs to spend). That flexibility is a genuine strength.

What Could Be Better: Cons of the Jade Plus

1. No dedicated secure element chip

This is the central debate around every Jade product. Most competitors, including the Coldcard Mk4, Trezor Safe 3, and BitBox02, use a dedicated secure element. That is a tamper-resistant chip specifically designed to protect private keys even if someone physically opens the device and connects probes to the circuitry.

The Jade Plus uses an ESP32-S3, a general-purpose microcontroller not designed for cryptographic key storage. Blockstream compensates with their blind oracle model (explained below), but the hardware itself offers less physical tamper resistance than a purpose-built secure element.

For moderate bitcoin holdings, this probably does not matter. For life-changing amounts, consider a wallet with a proper secure element.

2. Blind oracle server dependency

To unlock your Jade Plus, the device needs to contact Blockstream's blind oracle server (or your own self-hosted version). The server holds half of the decryption key for your wallet data. If Blockstream's servers go down temporarily, you cannot use the device until they come back online.

Your bitcoin is never at risk. Your seed phrase (the 12 or 24-word recovery backup) works on any compatible wallet regardless of Blockstream's status. But needing an internet connection and an external server for day-to-day unlocking makes some users uncomfortable.

You can self-host the blind oracle server (it is open source, and there are guides for running it on an Umbrel node), but that requires technical knowledge most beginners do not have.

3. QR scanning can be frustrating

Reddit users consistently report that QR code scanning requires good lighting, precise positioning, and patience. The Jade Plus camera improved over the original, but multiple users on r/Bitcoin still describe the experience as slow and finicky, sometimes requiring several attempts to get a successful scan.

This is frustrating because air-gapped QR signing is one of the headline features. If you plan to use the Jade Plus primarily in air-gapped mode, test the QR workflow thoroughly before committing to it as your main setup. Some users report switching to Nunchuk or Sparrow via USB after finding QR mode too cumbersome for regular use.

4. Battery life is mediocre

The 280 mAh battery is small by any standard. Multiple users report that the Jade Plus does not hold a charge well, even with the display dimmed. You will want to charge it before each signing session. This is not a dealbreaker since you only need the device when making transactions, but it adds friction to the experience.

5. Firmware vulnerability history

In December 2025, security researchers at DARKNAVY disclosed a vulnerability in Jade firmware versions 1.0.24 through 1.0.36. The CBOR message processing flaw could potentially allow limited code execution or key extraction in a worst-case scenario. Blockstream released patches (1.0.37 and 1.0.38) promptly, adding anti-rollback protection. No user funds were lost.

In April 2025, an ESP32 chip vulnerability (CVE-2025-27840) made headlines, but Blockstream confirmed Jade devices were unaffected because they do not rely solely on the ESP32's random number generator.

These incidents highlight a trade-off. Open-source code means vulnerabilities get found and patched quickly. But the general-purpose ESP32 chip presents a broader attack surface than a dedicated secure element.

Make sure your firmware is on version 1.0.38 or later. You can update through the Blockstream Green app or via air-gapped file transfer on the Jade Plus.

6. Blockstream Green app gets mixed reviews

The companion app has decent ratings (4.7 on iOS, 4.2 on Android), but Reddit feedback is more polarized. Some users find it clean and beginner-friendly. Others switch to Nunchuk or Sparrow for better coin control.

Basic send/receive works fine. Power users wanting UTXO management (choosing which specific bitcoin outputs to spend) and transaction labeling will outgrow it quickly. The good news: the Jade Plus works well with alternatives.

The Blind Oracle Security Model: Explained Simply

This is the section that matters most. The Jade Plus uses a security approach that is genuinely different from every other hardware wallet.

The traditional approach vs. the Jade Plus

Most wallets store your private keys (the cryptographic secrets that control your bitcoin) inside a secure element, a tamper-resistant chip. Even if someone cracks open the device and probes the circuitry, extracting keys from a secure element is extremely difficult.

The Jade Plus takes a different approach. It stores your recovery phrase in encrypted form on its ESP32-S3 chip, but the decryption key is split into two parts:

Part 1: Stored on the Jade Plus itself. Part 2: Stored on Blockstream's blind oracle server (or your self-hosted server).

When you enter your PIN, the Jade Plus contacts the blind oracle through the companion app. The oracle sends its half of the key to the device. Only when both halves combine can the device decrypt your recovery phrase and sign transactions.

The "blind" part is critical. The oracle processes the request without ever seeing your PIN, your recovery phrase, your wallet balance, or any transaction data. It performs a cryptographic operation without knowing what it is operating on.

What this means in practice

If someone steals your Jade Plus: They cannot extract your keys because half the decryption key lives on the remote server. Physical attacks on the ESP32 chip alone are not enough.

If Blockstream's server is compromised: The attacker only gets half the key. Without your physical device, they cannot reconstruct your recovery phrase.

If you enter the wrong PIN three times: Both the device and the oracle delete their key material. You restore the wallet using your seed phrase, which you stored separately (following our seed phrase safety guide).

If Blockstream disappears entirely: Your seed phrase works on any BIP39-compatible wallet (Sparrow, Electrum, any standard Bitcoin wallet). You can also run your own blind oracle server, since the code is open source.

Our honest take

The blind oracle model is clever and provides real protection against physical theft. In some ways, it is stronger than a basic secure element implementation because an attacker needs both the physical device and server access.

But it introduces a dependency. You need internet connectivity and a functioning oracle server to use your wallet normally. That is a real trade-off compared to wallets like the Coldcard, which works entirely offline.

For beginners and intermediate users, this model provides solid protection. For users who want zero external dependencies, a fully offline wallet like the Coldcard Mk4 or Foundation Passport is a better fit.

Is Blockstream Trustworthy?

Company background

Blockstream was founded in 2014 by cryptographer Adam Back, alongside Bitcoin developers Pieter Wuille and Greg Maxwell. Back invented Hashcash, the proof-of-work concept directly cited in Satoshi Nakamoto's Bitcoin whitepaper.

The company has raised $651 million across multiple funding rounds, reaching a $3.2 billion valuation after its October 2024 Series C round led by Fulgur Ventures. They employ several Bitcoin Core developers and build critical infrastructure including the Liquid sidechain, Blockstream Satellite, and Core Lightning. Their European headquarters opened in Lugano, Switzerland in 2025.

How they handled security issues

Blockstream's response to the December 2025 firmware vulnerability was textbook responsible disclosure: public acknowledgment, prompt patches, and anti-rollback protections. They proactively clarified that Jade devices were unaffected by the April 2025 ESP32 chip vulnerability, and issued public warnings when phishing campaigns targeted Jade users in September 2025.

Every hardware wallet eventually faces security disclosures. What matters is how the company responds, and Blockstream's track record is solid.

Real User Feedback from Reddit and Forums

We searched r/Bitcoin, r/BitcoinBeginners, r/blockstream, and hardware wallet forums for user experiences in 2025 and early 2026.

What users praise

Open-source transparency wins trust. Users consistently cite open-source as a deciding factor, especially those who left Ledger after the "Ledger Recover" controversy or distrust Trezor's closed-source secure element.

Grows with you. Multiple r/BitcoinBeginners users describe the Jade Plus as beginner-friendly with room to grow. Start with the Green app and USB, then graduate to Sparrow and air-gapped QR signing.

Blockstream's reputation matters. Buying from a company led by Adam Back and staffed with Core developers provides confidence that a random hardware startup cannot match.

Big screen upgrade. Users upgrading from the original Jade praise the 66% larger display. Address verification is genuinely easier on the 1.9" screen.

What users criticize

Air-gapped expectations vs. reality. A recurring complaint: users expect the Jade Plus to be "fully air-gapped" for everything, including unlocking the wallet. In reality, the blind oracle PIN verification requires a Bluetooth or USB connection to the companion app (which contacts the server). Only transaction signing can be truly air-gapped via QR codes.

Connectivity headaches. Several users on r/blockstream reported difficulties connecting the Jade Plus to desktop wallets like Electrum and Sparrow on Windows, even after firmware updates and driver installations. Bluetooth pairing with phones also caused issues for some users.

Hardware defects on metal editions. A few users reported jammed buttons on the metal version, leading to frustrating customer service exchanges and replacement requests.

Green app polarizes opinion. Some users find it clean and functional. Others call it frustrating and switch to Nunchuk or Sparrow for a better coin control experience.

Made-in-China discussions. Some Reddit users flag Chinese manufacturing as a concern, comparing unfavorably to Trezor (Czech Republic), Coldcard (Canada), or BitBox02 (Switzerland). Others counter that open-source firmware makes the manufacturing location less relevant since you can verify what the device runs.

Price Comparison: Bitcoin Hardware Wallets in 2026

At $149, the Jade Plus is the cheapest fully open-source, air-gapped Bitcoin wallet. The Foundation Passport adds a secure element but costs $110 more. The Coldcard Mk4 has dual secure elements but is only partially open-source.

If open-source transparency matters most, the Jade Plus and Passport are your only options. If a secure element is non-negotiable, look at the Coldcard, Passport, or BitBox02.

Head-to-Head Comparisons

Jade Plus vs. Coldcard Mk4

The Coldcard Mk4 has dual secure elements, air-gapped operation via microSD/NFC, and zero server dependencies. But it costs ~$178, has a steep learning curve, and no mobile app.

Choose the Jade Plus for open-source transparency and Bluetooth/QR convenience at a lower price. Choose the [Coldcard](/go/coldcard) if a hardware secure element is non-negotiable.

Jade Plus vs. Trezor Safe 5

The Trezor Safe 5 has a color touchscreen with haptic feedback, multi-coin support, and a secure element. But its secure element is closed-source and it cannot do air-gapped transactions.

Choose the Jade Plus for open-source transparency, air-gapped capability, and a Bitcoin-only focus. Choose the [Trezor](/go/trezor) for multi-coin support and a touchscreen interface.

Jade Plus vs. Foundation Passport

The Foundation Passport is the closest philosophical match: fully open-source, Bitcoin-only, air-gapped via QR codes, plus a secure element. But it costs ~$259 and has zero wireless connectivity.

Choose the Jade Plus for similar principles at $110 less with Bluetooth convenience. Choose the [Passport](/go/foundation) if you want a secure element with full open-source transparency.

Jade Plus vs. BitBox02

The BitBox02 Bitcoin-only edition matches the Jade Plus at ~$149 with a secure element and Swiss engineering. But it is USB-only with no air-gapped operation.

Choose the Jade Plus for air-gapped transactions and fully open-source hardware. Choose the BitBox02 for a secure element and polished USB workflow.

Original Jade vs. Jade Plus

The Jade Plus fixes the original's biggest complaints: 66% larger screen, responsive buttons replacing the scroll wheel, upgraded ESP32-S3 processor, and air-gapped firmware updates. At $79 vs. $149, the original Jade works if budget is your top priority. But the Plus is the better device in every measurable way.

Who Should Buy the Jade Plus?

Buy it if you are:

• A beginner starting [self-custody](/learn/self-custody-guide/). The price is reasonable, the Green app guides you through setup, and you can grow into advanced features like air-gapped signing and multisig as you learn.
• A Bitcoin maximalist who values transparency. If you want to verify every line of code running on your hardware wallet, the Jade Plus and Foundation Passport are your only real options.
• Privacy-focused. The air-gapped QR workflow paired with Sparrow gives you a solid privacy setup without the $259+ price tag of a Foundation Passport.
• Using multisig. The Jade Plus works well as one signer in a multisig setup (where multiple devices must approve a transaction), keeping costs down compared to using three Coldcards.

Skip it if you are:

• Storing significant wealth and want maximum physical security. The lack of a hardware secure element is a real trade-off. For large holdings, look at the Coldcard Mk4 or Foundation Passport.
• Uncomfortable with any server dependency. If the blind oracle model bothers you conceptually, the Coldcard or Passport operate with zero external dependencies.
• Not tech-savvy and want zero friction. The Jade Plus is beginner-friendly, but QR scanning quirks and occasional connectivity issues can frustrate users who just want things to work seamlessly. The BitBox02 or Trezor Safe 5 may offer a smoother plug-and-play experience.
• Needing altcoin support. The Jade Plus does Bitcoin and Liquid only. If you hold other cryptocurrencies, you need a different wallet.

Setup: What to Expect

Setting up takes 10 to 15 minutes:

1. Download the Blockstream Green app (iOS, Android, or desktop).
2. Connect via USB-C or Bluetooth.
3. Update firmware if prompted (always do this first).
4. Set your PIN through the blind oracle system.
5. Write down your 12-word recovery phrase on paper or a metal plate. Never store digitally. See our seed phrase guide.
6. Verify by confirming words when prompted.
7. Receive your first transaction. You are ready.

Air-gapped mode with Sparrow requires separate configuration after initial setup.

Frequently Asked Questions

Is the Blockstream Jade Plus safe to use?

Yes, for most users. The blind oracle model provides strong protection against physical theft and remote attacks. Your seed phrase ensures you can always recover your bitcoin, even if Blockstream ceases to exist. For holdings under $50,000, the security model is more than adequate. For larger amounts, consider a wallet with a hardware secure element or a multisig setup.

What happens if Blockstream shuts down?

Your bitcoin remains safe. Your recovery phrase works on any BIP39-compatible wallet (Sparrow, Electrum, etc.). You can also self-host the blind oracle server. Blockstream's $3.2 billion valuation makes a sudden shutdown unlikely, but your bitcoin does not depend on their survival.

Can I use the Jade Plus without the Blockstream Green app?

Yes. The Jade Plus works with Sparrow Wallet, Electrum, Nunchuk, BlueWallet, and Specter Desktop. Many experienced users prefer Sparrow for its superior coin control and privacy features.

Does the Jade Plus support multisig?

Yes. You can use the Jade Plus as one key in a multisig setup (for example, 2-of-3 with a Coldcard and a Trezor). This is one of the strongest security configurations available, and the Jade Plus's lower price makes multi-device setups more affordable.

How does the Jade Plus compare to the original Jade?

The Plus has a 66% larger screen (1.9" vs 1.14"), tactile buttons instead of a scroll wheel, an ESP32-S3 processor, air-gapped firmware updates, and optional metal casing. Both share the same firmware and blind oracle security model. The original ($79) still works for budget-conscious users.

Is the virtual secure element as safe as a real secure element?

It depends on your threat model. A hardware secure element provides stronger physical tamper resistance. The blind oracle provides stronger protection against certain physical theft scenarios (because key material is split between two locations). Neither is strictly "better" in all situations. For most users, both approaches are more than sufficient. For the full breakdown, read our security section above.

Can I use the Jade Plus completely air-gapped?

Partially. Transaction signing and firmware updates can be fully air-gapped. But unlocking the wallet requires the blind oracle via Bluetooth or USB. Full air-gap for everything is only possible if you self-host your own oracle server.

Should I buy the plastic or metal Jade Plus?

The plastic model ($149) is functionally identical to the metal ($169). The metal editions (Lunar Silver and Genesis Grey) add a sturdier feel and a premium look. If build quality matters to you and $20 is not a concern, the metal version is a nice upgrade. If you want the cheapest path to a solid Bitcoin wallet, plastic works fine.

What wallets work with the Jade Plus for air-gapped signing?

Sparrow Wallet and Nunchuk are the most popular choices for air-gapped QR code workflows. Both handle PSBT (Partially Signed Bitcoin Transactions) well and have dedicated support for the Jade Plus. BlueWallet and Specter Desktop also support QR-based signing.

Where should I buy the Jade Plus?

Always buy from Blockstream's official store or authorized resellers. Never buy used hardware wallets or from unverified sellers. A tampered device could steal your bitcoin.

Final Verdict

Rating: 7.8 / 10

The Blockstream Jade Plus earns its place as the best fully open-source Bitcoin hardware wallet at its price point. For $149, you get air-gapped transaction signing, complete code transparency, Bitcoin-only focus, and backing from one of the most credible companies in the Bitcoin ecosystem. No other wallet at this price offers that combination.

The blind oracle security model is genuinely clever and provides real-world protection against physical theft. But it introduces a server dependency that purists will not love. The lack of a hardware secure element is a legitimate concern for large holdings. QR scanning, while improved, still frustrates some users. And the firmware vulnerability disclosed in December 2025, while handled well, reminds us that the ESP32 platform carries broader risks than a dedicated secure chip.

Buy the Jade Plus if you value open-source transparency, want air-gapped capability on a budget, and are storing a moderate amount of bitcoin. It is an excellent first hardware wallet that will grow with you.

Consider alternatives if you are securing life-changing wealth (get a Coldcard Mk4 or Foundation Passport), want zero server dependencies, or prefer a plug-and-play experience (try the BitBox02 or Trezor Safe 5).

**Get the Blockstream Jade Plus** and start taking your bitcoin into your own hands.

For more hardware wallet options, check our complete wallet comparison tool or browse the wallets hub.

Last reviewed: March 2026. Prices and specs verified against Blockstream's official store and public documentation. Firmware version 1.0.38+ recommended.