Blockstream Jade stores no decryption key on the device. Its PIN is enforced by a blind oracle server that holds one of three secrets, so the hardware on its own cannot be squeezed for your seed. Three wrong PINs and both sides wipe, leaving only your recovery phrase.
Listen to this article, about 12 minutes. A synthetic voice reads the article and announces each section title as it begins; tables are read row by row and the questions at the end are left out.
Recorded 4 October 2026 from the article as published that day. Press a chapter to jump there; the highlighted line is what is playing. A play button sits beside every section heading, and once you scroll past this player a bar at the bottom of the screen keeps the controls in reach. Tap or click any sentence to hear the reading start from there.
On this page: what the Blockstream store actually listed on 4 October 2026 against what the marketing pages say, the three secrets behind the blind oracle quoted from Blockstream’s own documentation, the December 2025 advisory and the firmware that fixed it, and five dated accounts from the public issue tracker and Trustpilot.
Think you already know this? Five questions, one minute.
Every answer is on this page. Answer from what you know now; the page fills in the rest.
-
1. Which Jade model can be run as a QR only air gapped signer?
Per Blockstream’s product pages, the original Jade and Jade Core carry USB-C and Bluetooth but no camera. The security model is identical across the range; the connection is what differs. Read the section
-
2. How many secrets are needed to decrypt the recovery phrase and spend?
Per Blockstream’s documentation on oracle enforced PIN protection, all three are required, which is why the device alone cannot be squeezed for the seed. Read the section
-
3. How many wrong PIN entries before Jade and the oracle delete their keys?
Per the same documentation, both sides delete their keys on the third wrong attempt and the device must then be restored from the recovery phrase. There is no timer and no fourth try. Read the section
-
4. What does the secure version increment in firmware 1.0.41 do?
Per the published changelog, 1.0.41 dated 22 August 2026 increments the secure version to prevent downgrades, which matters because the December 2025 advisory named phishing sites pushing owners to downgrade. Read the section
-
5. Which Coldcard devices did Coinkite’s 30 July 2026 advisory name as affected by the seed generation flaw?
Per Coinkite’s own advisory, updated 1 August 2026, which puts the affected Mk4, Mk5 and Q seeds at about 72 bits of entropy rather than 128. Updating the firmware does not repair a seed already generated. Read the section
Checked on 4 October 2026 against Blockstream’s own store, its security documentation, the public firmware changelog and its December 2025 advisory. Almost every page ranking for this search earns a commission on the click, which is why they all list the same five features and none of them leads with the thing that actually decides whether this device suits you: part of Jade’s security lives on somebody else’s server.
What is Blockstream Jade, and which models are on sale today?
Jade is Blockstream’s Bitcoin only signing device. It is open source, it supports the Liquid Network alongside Bitcoin, and since 2 June 2026 it has shipped as three concurrent models rather than one. Blockstream’s blog calls the original device Jade Classic at $79. Worth knowing, because the store does not use that name and did not show that price on 4 October 2026:
| Model | Price on 4 Oct 2026 | Stock | Air gap method |
|---|---|---|---|
| Blockstream Jade (the original, listed without a suffix) | $67, reduced from $79 | In stock | None, USB-C and Bluetooth only |
| Jade Core | $99 | Sold out | None, USB-C and Bluetooth only |
| Jade Plus | $149 plastic, up to $169 aluminium | In stock | QR by camera, plus microSD or USB drive |
Two things fall out of that table. The entry level model Blockstream launched on 28 April 2026 as the simple five minute path off an exchange was unavailable on the day this was written, and the oldest device in the range is now the cheapest way into the same security model. Only Jade Plus has the camera and the card slot, so only Jade Plus can be run as a QR only cold storage device. The other two are USB and Bluetooth signers.
How does the blind oracle actually protect your PIN?
Most hardware wallets put a dedicated secure element on the board and ask you to trust that the chip resists a physical attack. That chip is also, almost always, closed source. Jade goes the other way: no traditional secure element, and the decryption mechanism held off the device entirely. Per Blockstream’s own documentation, three secrets encrypt the key material and all three are needed to decrypt your recovery phrase and spend: a user generated PIN, a secret held on Jade, and a secret held on the oracle. The opposite approach, three secrets split across a secure chip, a microcontroller and the owner, is set out in our review of the BitBox02 and its dual chip design.
The oracle is called blind because of how little it holds. It stores a hash of your PIN plus a nonce and a part of the AES256 key, and Blockstream states it is blinded to your wallet’s keys and your PIN, does not know your Bitcoin addresses, and encrypts all data at rest. Jade itself never talks to it; the companion app opens an encrypted channel and relays the server secret back to the device. The security model FAQ makes the claim plainly: holding the decryption mechanism off device “makes Jade alone invulnerable to physical key extraction”.
That is a real property, not marketing. It also means the device as shipped depends on a server Blockstream runs, which is a reasonable thing to be bothered by. Blockstream publishes instructions for running your own blind oracle so the virtual secure element is one you control. Almost nobody will. It still matters that they can, because the alternative is usually a trusted chip you cannot inspect either, and at least a server can be swapped.
What happens when the PIN is wrong, or the oracle is offline?
Three wrong PINs is the whole of it. Per the same documentation, the oracle and Jade both delete their keys on the third wrong attempt and you must restore from your recovery phrase. No lockout timer, no tenth try. If your backup is incomplete or untested, three fumbles at a small screen is all it takes, which is why the real work on this device happens before you load it, in how you record and store the words.
The offline question is the one most reviews skip, and the answer is better than you might expect. The security model FAQ states you can unlock Jade with no companion app and no blind oracle, by scanning a SeedQR or entering the recovery phrase by hand. The oracle is a layer over your PIN, not a gate on your coins. Blockstream also argues it adds no threat, since an attacker would need to compromise both it and the device. That is the vendor assessing its own design, and no independent audit of the oracle protocol was published on Blockstream’s site as of 4 October 2026.
Which Jade firmware should you be running right now?
The current firmware is 1.0.41, released on 22 August 2026. The changelog does not hedge: the release “contains important security updates” and “all users should upgrade immediately”. Its entries include improved stack protection on production devices, additional per device entropy in the initial random seed, better scrubbing of sensitive data from internal memory, and an incremented secure version that blocks downgrades below this release.
That last one exists for a reason. On 5 December 2025 Blockstream disclosed a vulnerability reported by the research group DARKNAVY, affecting select older Jade firmware when the device was paired with malicious third party apps. Firmware 1.0.38 fixed it, the Blockstream app was changed to require 1.0.38 or later, and the company stated it had no reports of users being affected. The attack path it named is worth repeating: phishing emails and fake Blockstream websites trying to talk owners into downgrading. Firmware comes before everything else here, exactly as it does on the Coldcard Q.
Jade setup verification checklist
Eight checks drawn from Blockstream’s own documentation and its December 2025 advisory. Nothing here asks for your recovery phrase, and nothing on any page ever should.
Ticks are saved on this device only. This is a setup check, not advice about what to hold.
How does Jade compare with Coldcard on price and custody?
Prices below came off each vendor’s own store on 4 October 2026, and both ranges were discounted that day, so read them as a snapshot. Coinkite listed the Coldcard Q at $319 reduced from $369, and a Coldcard Mk5 at $219 reduced from $269.
| Jade Plus | Coldcard Q | |
|---|---|---|
| Price on 4 Oct 2026 | $149 to $169 | $319, reduced from $369 |
| Secure element | None, a blind oracle holds one of three secrets | Dedicated secure elements on the board |
| Firmware | Open source, 1.0.41 dated 22 Aug 2026 | Source published, signed builds |
| Air gap | QR by camera, microSD or USB drive | QR by scanner, dual microSD slots |
| Scope | Bitcoin and Liquid only | Bitcoin only |
| Power | 280 mAh battery | 3 x AAA batteries |
The comparison got sharper in the summer of 2026. Per Coinkite’s own advisory, published on 30 July 2026 and updated on 1 August 2026, a logic error left seeds generated across most of the Coldcard range sitting in a reduced search space: Mk2 and Mk3 on versions 4.0.1 through 4.1.9, and Mk4, Mk5 and Q on builds before the fixed releases, which the advisory puts at about 72 bits of entropy rather than the expected 128. Attackers regenerated the keys offline and funds were stolen. The devices were never remotely hacked, and the fixes are 4.2.0 for Mk2 and Mk3, 5.6.0 for Mk4 and Mk5 and 1.5.0Q for the Q. The sentence that matters most is the one owners skip: updating the firmware does not repair a seed that was already generated. We covered that in the Coldcard Q write up and in the Coldcard Mk3 write up.
Blockstream responded on 25 August 2026 with a post arguing Jade is not affected, because it has no degraded fallback for random number generation and mixes multiple entropy sources through SHA512. That is a vendor comparing itself favourably to a rival during the rival’s worst week, so read it as a claim and not a finding. The takeaway both companies now agree on is harder to argue with: the quality of the randomness that made your seed is a property you cannot see, cannot test afterwards, and inherit entirely from a firmware build.
What do people who actually use Jade report?
We read the 15 reviews on Blockstream’s unclaimed Trustpilot profile, which sits at 1.8 out of 5, and the seven most recent reports on the public Jade issue tracker. The Trustpilot sample is small, self selected and mostly about the Green app and support rather than the hardware, so it is not a product rating and should not be used as one. The tracker is the better record, because every complaint there arrives with a firmware version attached.
On 29 August 2026 a user posting as tokyovyse reported that reinstalling firmware 1.0.41 over itself by air gapped USB on a Jade Plus froze at 4 percent instead of refusing or restarting; it was closed on 24 September 2026. The same person reported that day that a multisig descriptor QR from Sparrow 2.5.4 returned only “Unhandled UR message” on a Jade Plus running 1.0.41, with no hint at what the device objected to.
On 4 August 2026 a user posting as popodai reported that the mnemonic QR export flow left raw entropy and QR icon data readable in freed heap and on the stack after the export finished, against the memory hardening introduced in 1.0.40; it was closed on 25 September 2026, and 1.0.41 lists improved scrubbing of sensitive data from internal memory. On 8 August 2026 a user posting as gsalgado reported a Jade Classic taking about four minutes to be detected by Electrum 4.8.0 over USB when Electrum ran from source, while the Blockstream app was fast; the AppImage build removed the delay, making it a desktop packaging problem rather than a device one. And on 24 June 2025 a Trustpilot reviewer rated Jade Plus one star over QR PIN setup, battery drain and limited app compatibility.
The pattern is worth stating because it is not what the review sites score. Nobody in this sample reports losing coins to Jade’s security model, a bricked device or a PIN lockout. What they report is friction where Jade meets other software: QR interoperability with third party desktop wallets, the air gapped firmware path, USB handshakes with particular builds. One report cuts against even that, a claim the twelve word “calculate final word” tool was broken in 1.0.41, which maintainers marked invalid on 4 September 2026. Five accounts are testimony, not a measurement of how often any of this happens. They are a map of where to be careful, and it points at the companion software rather than the chip, which is roughly the opposite of where air gap marketing points.
Frequently asked questions
Is Blockstream Jade open source?
Yes. Blockstream publishes the firmware source and the changelog, and all three current models run the same open source firmware and the same blind oracle model. The usual caveat applies: published source is auditable, which is not the same as audited, and it says nothing about the firmware physically on the device in your hand until you verify it.
Does Jade support coins other than Bitcoin?
No. Jade is Bitcoin only, with support for the Liquid Network, Blockstream’s own Bitcoin sidechain. It will not sign for assets on other chains. A Bitcoin only firmware is a smaller attack surface by design rather than a missing feature.
Can I use Jade with Sparrow or Electrum instead of the Blockstream app?
Yes, Jade works with several third party wallets, and the public issue tracker is where the rough edges of those integrations surface. As of 4 October 2026 a multisig descriptor QR from Sparrow 2.5.4 was reported failing with an unhelpful error on firmware 1.0.41, so test any new combination with a small amount first.
What happens to my coins if Blockstream shuts down the oracle?
Your coins are controlled by your recovery phrase, not by the oracle. Blockstream’s security model FAQ states Jade can be unlocked with no companion app and no blind oracle, by scanning a SeedQR or entering the recovery phrase on the device. The oracle protects the PIN; the phrase is what restores the wallet, on Jade or on anything else reading the same standard.
Is Jade Plus worth $149 when the original Jade is $67?
That is a question about what you need, and nobody can answer it for you. The security model is identical across the lineup. The extra money buys the camera, the microSD slot and the battery, which together are what make QR only air gapped signing and air gapped firmware updates possible. If you plan to use USB anyway, you are paying for hardware you will not switch on.
How do I check I am running the current Jade firmware?
Compare the version your device reports against the top entry in the published changelog, 1.0.41 dated 22 August 2026 at the time of writing. Install updates only through the official Blockstream app or the official air gapped path. The December 2025 advisory named phishing emails and fake Blockstream websites pushing downgrades, and 1.0.41 increments the secure version so a downgrade below it is refused.
Finished the page? The same five questions from the top, to see what stuck.
This article is educational and is not financial advice. Nothing here is a recommendation to buy, sell or hold anything. You are responsible for your own security decisions.
Leave a Reply