SafePal S1 Pro

The SafePal S1 Pro is SafePal’s air-gapped hardware wallet: it passes transactions to and from the SafePal app as QR codes read by its own camera, and its product page lists “No Bluetooth, WiFi or NFC”. SafePal launched it alongside the X1 in September 2023, according to a November 2023 SafePal post. It has a 1.3-inch IPS color screen (320 x 320) operated with a D-pad, a 500 mAh battery charged over USB-C, an aluminum-alloy body with a tempered-glass panel, and a chip SafePal lists as CC EAL6+. SafePal’s store listed it at $89.99, VAT and duty excluded, on 14 October 2026, above the original S1 at $49.99 and the Bluetooth X1 at $69.99.

Who is the SafePal S1 Pro for?

It fits people who:

• want no cable or radio link between the signing device and their phone while they sign;
• plan to use the SafePal app or browser extension, the companions SafePal lists;
• want a color screen at a list price under $100.

It fits less well if you want:

• firmware you can read in full: SafePal says only parts of the code are public (see below);
• Shamir (SLIP-39) backups or multisig: we found no SafePal documentation of either for this model;
• no battery to look after: SafePal rates the cell at “Up to 25 days battery life with 15 minutes of daily usage”.

Other QR-capable signers with datasheets here include the Keystone 3 Pro, which documents SLIP-39 backups and multisig, and the OneKey Pro. For a USB-only device at a lower list price, see the Trezor Safe 3.

How does QR signing work on the SafePal S1 Pro?

In the QR pattern our air-gapped wallets guide describes, the unsigned transaction reaches the device as a code its camera scans, you check and approve it on the device’s screen, and the signed result goes back as a code on that screen. SafePal’s product page describes the S1 Pro as “Designed for truly offline security with QR scanning”, and lists no NFC, Wi-Fi, Bluetooth or USB connection under that heading.

Two caveats come from SafePal’s own pages:

• Firmware updates use a cable. The product page lists “No USB connection” under offline security, but SafePal’s S1 Pro upgrade page says “Plug your SafePal S1 Pro into the PC, start the device and enter the upgrade mode,” and that upgrading from a phone is not supported. On 14 October 2026 it listed version V1.0.82, dated 12 October 2026. The page also describes checking a downloaded firmware file against the SHA-256 ID SafePal tags to each version; downloads require the device’s serial number, so we did not see the ID for V1.0.82.
• Chain coverage over QR. SafePal advertises “200+ blockchains” for the device. We have not verified which of them sign over QR.

Is the SafePal S1 Pro secure?

SafePal lists an EAL6+ chip, a true random number generator, “Multiple layers of security sensors” and an “Anti-tampering self-destruct mechanism”. The pages we checked do not name the chip or link a certificate.

An August 2026 SafePal post, written after a randomness flaw was reported in another maker’s firmware, describes a secure element and an application chip, each with its own hardware random number generator, whose output is mixed when the recovery phrase is created. SafePal says phrases from the S1, S1 Pro and X1 were not affected. We found no independent evaluation of the S1 Pro.

Is the SafePal S1 Pro open source?

Partly. The product page says “Essential aspects of the code for private key generation and other important features are open source”, which is narrower than publishing the whole firmware. SafePal’s GitHub account has GPL-3.0 repositories named safepal-s1 and safepal-x1, with commits labelled by firmware version for those models; we found none named for the S1 Pro. We have not checked whether any published code builds to the firmware SafePal ships.

Has the SafePal S1 Pro been hacked?

We found no published attack on the S1 Pro itself. Two events involve the brand:

• February 2021, original S1. Kraken Security Labs found the S1’s tamper detection “at best, ineffective” and loaded older firmware without the device detecting it, but wrote that it was “not able to steal cryptocurrency from the wallet.” SafePal disputed that the findings were exploitable and said firmware V1.0.24 patched the downgrade. This research concerns the earlier S1, not the S1 Pro.
• August 2026, customer order data. SafePal reported an authorization flaw in an order-tracking plug-in that exposed names, email and shipping addresses, phone numbers and purchase details for about 39,798 customers who ordered between 2 March 2025 and 11 April 2026. It said seed phrases, private keys and wallet passwords were not part of the data, fixed the flaw, notified customers and took down over 30 phishing sites and links. SafePal says it will never ask for a seed phrase.

How do you back up and recover a SafePal S1 Pro?

SafePal’s August 2026 post says its devices create a 12- or 24-word recovery phrase under the BIP39 standard, and the store lists “PIN & Passphrase” among the features. SafePal’s help center says that if the device is lost, “your asset can still be recovered with the correct mnemonic phrase on any other BIP39/44 compatible wallet.” We have not tested that. Recovery needs a compatible wallet and, if you set one, the original passphrase: under BIP39 every passphrase produces a valid but different wallet, so only the correct one opens your funds. We found no SLIP-39 support. See our seed phrase guide.

Which coins and apps work with the SafePal S1 Pro?

SafePal names the SafePal App and SafePal Extension as compatible and claims “200+ blockchains”. We found no Bitcoin-only edition and no model-specific multisig documentation.

What we could not verify

• The secure element’s part number and certificate.
• Which chains can be signed over QR.
• Dimensions, weight and country of manufacture.
• How much of the S1 Pro firmware is public, and whether builds are reproducible.
• Multisig and SLIP-39 support.

Read how we compile each datasheet in our methodology.