ELLIPAL Titan 2.0

The ELLIPAL Titan 2.0 is an air-gapped hardware wallet: it has “no WiFi, no Bluetooth, no USB data”, according to ELLIPAL’s product page, and moves transactions to and from your phone as QR codes read by its camera. It has a 4-inch color IPS touchscreen, a CC EAL5+ secure chip, a 1400 mAh battery and a metal-sealed body (118 x 66 x 9.7 mm, 140 g). ELLIPAL, which its launch release describes as a Hong Kong company, announced a global launch of the Titan 2.0 for 7 November 2023. The product page listed it at $169 on 14 October 2026, or $199 bundled with ELLIPAL’s Seed Phrase Steel and $219 with the ELLIPAL X Card.

Who is the ELLIPAL Titan 2.0 for?

It suits people who:

• want a signer that never connects to a phone or computer by cable or radio;
• want to read the recipient, amount and permissions on a large screen before signing;
• use the ELLIPAL App on Android or iOS; the spec table also lists MetaMask, and WalletConnect for dApps.

It is a weaker fit if you want:

• firmware you can read: we found no published source code for the Titan 2.0;
• multisig, SLIP-39 or a Bitcoin-only edition: we found no ELLIPAL documentation of any of them for this model;
• a light device: at 140 g it weighs more than the Keystone 3 Pro (103 g), another 4-inch touchscreen wallet that Keystone says can sign by QR code, and its battery needs charging.

How does ELLIPAL QR signing work?

The FAQ on ELLIPAL’s product page describes the round trip: the ELLIPAL App “builds a transaction and shows a QR code”, you scan it with the Titan 2.0, check the details on its screen and approve, then scan the signed result back into the app, which broadcasts it.

Firmware is the other way in. The same FAQ says the device has “no SD card slot” and that “firmware updates load through the separate Security Adapter”, which the spec table pairs with a microSD card. An update still carries code into the device, just not over a live connection. See our air-gapped hardware wallets guide for what QR signing does and does not protect against.

Is the ELLIPAL Titan 2.0 safe?

ELLIPAL documents three layers:

• A secure chip listed as “CC EAL5+”, which ELLIPAL says “generates and stores your keys in tamper-resistant hardware”. EAL5 is the fifth of seven evaluation assurance levels in the Common Criteria, and the ”+” marks an augmented evaluation.
• A sealed metal body. ELLIPAL says “Forced opening erases stored private keys”, and its spec table lists a “Self-Destruct Mechanism” with “auto-wipe on physical tampering or disassembly”. We found no independent test of them.
• A device password and a Secondary Wallet, which uses “an alternate unlock pattern to show only selected accounts” while the others stay hidden.

Our dataset records no security incident for the Titan 2.0. ELLIPAL’s December 2019 blog post describes a Ledger Donjon study of its first model, the EC01, and ELLIPAL’s response; we did not attribute that research to this model. An empty record is the result of our search, not proof that no issue exists.

Is ELLIPAL open source?

We could not establish that it is. ELLIPAL’s product page and FAQ do not say whether the Titan 2.0 firmware is open source, and we found no published repository or licence for it. The FAQ answers “Is there a backdoor in the ELLIPAL Titan 2.0?” with “No”, because the device “runs fully offline”. Without published firmware, outside researchers cannot check that answer against the code, as they can with the device software of the Trezor Safe 5.

How do ELLIPAL backup and recovery work?

• Create: a 24-word seed phrase. ELLIPAL says the Titan 2.0 “uses the standard BIP39 seed phrase”, and a store reply on the product page says it follows BIP39 and BIP44 for deriving accounts and addresses.
• Restore: 12, 15, 18, 21 or 24 words. The FAQ says you can restore a wallet you already use, “like MetaMask, Ledger, Trezor, or ELLIPAL X Card”.
• Passphrase: optional. Under the BIP39 design each passphrase opens a different wallet, so losing it means losing the funds behind it.
• Accounts: up to 10, listed as “5 seed-phrase + 5 private key / Keystore import”.

If the device is lost or broken, ELLIPAL’s FAQ says you can restore “to a new ELLIPAL Titan 2.0 or any BIP39-compatible wallet”. We have not tested recovery in other wallets. We found no SLIP-39 (Shamir) support for this model. More in our seed phrase guide.

What coins does the ELLIPAL Titan 2.0 support?

ELLIPAL’s product page lists “10,000+ Tokens” across “45+ Blockchains”, plus NFTs on Ethereum and Polygon. We have not counted that list.

How does the Titan 2.0 compare with other ELLIPAL wallets?

Our dataset has three current ELLIPAL wallets, with ELLIPAL shop prices on 14 October 2026:

• Titan 2.0, $169: 4-inch touchscreen, QR signing, CC EAL5+ chip.
• Titan Mini, $79: a smaller QR signer, 75 x 71 x 10.5 mm and 120 g, also with a CC EAL5+ chip.
• X Card, $59: a card-size wallet that signs by NFC tap, with a CC EAL6+ chip and no battery.

The Mini and the X Card are in our wallet database without datasheets yet. Other QR signers with datasheets include the Keystone 3 Pro, COLDCARD Q, Blockstream Jade Plus and NGRAVE ZERO.

What we could not verify

• The secure chip’s part number.
• Whether any Titan 2.0 firmware source is published, and under what licence.
• Multisig, SLIP-39 backups or a Bitcoin-only edition.
• Screen resolution: the product page gives none, and the launch release says “full HD” without a pixel count.
• Country of manufacture.
• Any independent test of the tamper wipe.

Read how we build each datasheet in our methodology.