SafePal S1 is the cheapest way to buy QR air-gap signing in a box, with a secure element and a companion app that also does swaps. Coldstar is the cheapest way to get it at all. The gap between them is open source and automation.
SafePal for personal mobile holdings; Coldstar for the treasury and agent keys that need policy and scripting.
| Coldstar | SafePal S1 | |
|---|---|---|
| Upfront cost | ~$10 — any USB drive. The software is free and MIT-licensed. | S1 $49.99; S1 Pro $89.99. |
| Where the key lives | AES-256-GCM encrypted keyfile on a drive you own. Plaintext exists only in memory-locked RAM for the ~100 µs it takes to sign, then is zeroized. | CC EAL6+ secure element with anti-tamper self-destruct. |
| How a transaction reaches the key | Build online → QR (or file) to an offline machine → sign → QR back → broadcast. Fully air-gapped; the drive is storage, not a signer. | QR code only. No USB data, Bluetooth, Wi-Fi, or NFC. Fully air-gapped. |
| Source code | Open source (MIT) — every line that touches the key is readable on GitHub. | Partial: QR-scanning mechanisms and X1 signing code were opened in 2023; full S1 firmware open-sourcing was announced as a goal, current status not confirmed on SafePal's pages. |
| What you trust | Code you can read, plus your own offline machine. No vendor silicon, firmware, cloud, or account. | SafePal's largely closed firmware, the SE, and the SafePal app. |
| Recovery | Passphrase + encrypted keyfile. The drive is disposable: lose it and the file is useless without the passphrase; re-flash a new one. | BIP39 12/24 words generated from a hardware TRNG; PIN and passphrase. No cloud recovery. |
| Automation & policy | CLI-first, scriptable, headless. Policy-gated agent signing: limits, allowlists, rate caps, escalation to air-gapped approval. | None. On-device confirmation per transaction. |
| Solana wallets | Coldstar CLI and Seeker app. | SafePal app (iOS/Android) and SafePal browser extension. Not connectable to Phantom or Solflare. |
| Maturity | Beta — independent audit planned before the production release. | Shipping since 2019; large installed base. |
For a personal air-gapped wallet at the lowest price with a warranty, the S1 is hard to argue with. Coldstar is for people who want the code, the scripting, or the scale.
SafePal's S1 keeps the seed in a certified chip and only ever exchanges QR codes with the phone, which is the same air-gap principle Coldstar uses. What you cannot do is read most of the firmware that implements it; SafePal opened parts of its stack in 2023 and stated an intent to open more.
Coldstar publishes everything under MIT and stores only an encrypted keyfile on the drive. The plaintext key lives in memory-locked RAM on an offline machine for about a hundred microseconds per signature.
SafePal is a mature consumer product. Coldstar is beta and awaiting its independent audit.
SafePal is a dedicated device with a secure element and a closed-ish firmware. Coldstar is open-source software on any offline computer. SafePal is simpler to start with; Coldstar is inspectable, scriptable, and free.
Partly. SafePal published its QR-scanning code and X1 signing code in 2023 and said full S1 firmware open-sourcing was a goal. We could not confirm on SafePal's pages that this has happened.
It is a personal wallet; multisig would be handled by an on-chain program such as Squads, with each signer using their own device. Coldstar supports multisig and policy-gated signing natively.
Open source, MIT. macOS, Linux, Windows — and on the Solana Seeker dApp Store.
pip install coldstar
Third-party facts were checked against the vendor's own pages on the date above. Pricing and feature sets change; if something here is out of date, tell us and we will fix it.