Bitkey

Bitkey is Block, Inc.'s Bitcoin hardware wallet — a tactile, NFC-tapping, hexagonal device built around a deliberately different design thesis from traditional hardware wallets. Instead of asking users to memorize and protect a 24-word seed phrase, Bitkey distributes trust across three keys using a built-in 2-of-3 multisig architecture: a hardware key locked inside the device's secure enclave, an app key inside the Bitkey mobile app, and a server key hosted in an AWS Nitro Enclave.

The result is what Bitkey calls seedless sovereignty. Any two of the three keys are required to move money or change critical security settings, so losing any single key — the hardware device, your phone or Bitkey's server — does not lock you out. Recovery for a lost phone, a lost Bitkey and even a lost-both scenario is built into the system, and an integrated inheritance feature lets you leave a plan, not a puzzle for your beneficiaries.

Hardware built to last. The hexagonal body is machined from DuPont Corian Solid Surface, measures just 66 × 60 × 13.6 mm, weighs 79 g and pairs an OLED touchscreen with a biometric fingerprint sensor. The device connects to phones via NFC and gets up to one year of battery life on a single charge through USB-C. There is no seed-phrase handoff, no USB data cable and no buggy Chrome extension.

Bitcoin only. Bitkey stores only Bitcoin — no Ethereum, no altcoins, no NFTs. The product is built for the long-term Bitcoiner who wants robust self-custody without a paper seed phrase, plus an upgrade path for inheritance and recovery events that traditional wallets leave to the user to figure out.

One Wallet, Three Keys — Built-in 2-of-3 Multisig

• Hardware key: generated and stored completely offline in a secure enclave inside the Bitkey device, unlocked only by your fingerprint.
• App key: stored in the Bitkey mobile app, with an encrypted backup copy saved to your personal cloud account (iCloud or Google) for recovery.
• Server key: a third key stored on secure servers in an AWS Nitro Enclave — any code changes require multi-engineer approval with hardware-token authentication.
• Every move of money and every security-setting change requires two of three keys.
• Bitkey can never access your cloud backup — it is encrypted with your hardware key and remains useless to attackers without both your cloud credentials and unlocked hardware.

Recovery Built for Real Life

• Lost phone: use your Bitkey to decrypt the backup key in your personal cloud account and you're back.
• Lost Bitkey: get a new Bitkey and use the app on your phone to recover your wallet.
• Lost 'em both: that's what Recovery Contacts are for — name trusted contacts who can help you recover access when life comes at you fast.

Verify Everything On-Device

• Every transaction and every security-setting change is verified on the device screen — no guesswork.
• Security Hub is a single view of your critical settings to confirm you're always covered.
• Biometrics required: Bitkey requires your fingerprint to unlock — without you, it's just a paperweight.
• Privacy options to keep your balance private from onlookers and from Bitkey's own encrypted servers.

Integrated Inheritance — Leave a Plan, Not a Puzzle

• Setup-in-minutes inheritance feature lets your beneficiaries inherit your Bitcoin if the worst happens.
• Private by design — secure inheritance without exposing your balance or keys to Bitkey.
• Built-in safeguards prevent accidental loss of inheritance documents.

Built to Outlast

• Corian Solid Surface exterior — durable, scratch-resistant, temperature-stable.
• Honest OLED touchscreen and fast fingerprint sensor.
• Hexagonal for the hand, not the factory — 66 × 60 × 13.6 mm, 79 g.
• Up to 1-year battery life on a single charge; USB-C charging cable included.

Built-in 2-of-3 Multisig

• Bitkey generates and stores three keys: a hardware key in a secure enclave, an app key in the Bitkey mobile app, and a server key in an AWS Nitro Enclave.
• Any two of the three keys are required to move money or change critical security settings. No single key — alone — can authorize a transaction.
• The design departs from single-signature hardware wallets where one stolen seed compromises everything.

Hardware Key — Secure Enclave & Fingerprint

• Generated completely offline and stored in the device's secure enclave, never accessible to the phone or network.
• Unlocked only by your fingerprint — the hardware key is useless to anyone else.
• No stepper PIN, no seed phrase on the device handset — the biometric plus the secure enclave do the heavy lifting.

Server Key — AWS Nitro Enclave

• The third key is stored on secure servers in an AWS Nitro Enclave — a hardened, attested compute environment isolated from the rest of AWS.
• Any code changes that touch the server-key codebase require multi-engineer approval with hardware-token authentication, which limits the impact of a single rogue engineer or compromised laptop.
• The server remains in the dark — Bitkey cannot read your balance or transaction history; only the conditional approval infrastructure is exposed.

Verify Everything On-Device

• Every transaction and security-setting change is presented on the Bitkey device screen for you to verify.
• The Security Hub view collects critical settings in one place so you can quickly confirm your posture.
• On-device biometrics remove the social-engineering window that fishable PINs create.

Privacy by Design

• Bitkey's servers cannot read your balance — they receive only narrow approval requests and return signed responses.
• Options let you keep your balance private from onlookers and from Bitkey's encrypted infrastructure.
• The cloud backup of your app key is encrypted with your hardware key, so Bitkey is technically incapable of decrypting it.

Inheritance as a Security Feature

• Integrated Inheritance lets you designate beneficiaries with a setup that takes minutes, not lawyer weeks.
• Private by design — your inheritance documents are private on your device, not published to Bitkey.
• Built-in safeguards prevent accidental inheritance triggers and accidental document loss.

Bitkey is the Bitcoin hardware wallet from Block, Inc., the publicly-traded financial-services company (formerly Square) founded by Jack Dorsey. The Bitkey project was led from Block's hardware division in San Francisco, USA and started shipping devices to customers in 2024.

Bitkey's design philosophy is the opposite of the traditional hardware-wallet playbook. Instead of loading all cryptographic responsibility onto a single seed phrase that the user must memorize and protect, Bitkey distributes signing across three keys using a built-in 2-of-3 multisig system: a hardware key inside the device, an app key inside the Bitkey mobile app, and a server key hosted in an AWS Nitro Enclave. Any two of them are required to move funds or change security settings, so losing a phone or the device alone does not lock you out.

Bitkey is part of Block's broader Bitcoin hardware strategy, which also includes the Block-developed open-source mining pool (formerly 21ai/21 Inc) and a long history of Bitcoin investment. The wallet is sold directly on bitkey.world/product and ships in markets where Block has regulatory footing, including the United States.