Devices / BitBox02

BitBox02 firmware: latest version, update history & security notes

Current firmware

9.27.1
Released Aug 31, 2026 · 58 days ago · release notes
Releases in last 12 months8
…of which security-flagged1
Releases tracked58

Official price

€149
BitBox02 hardware wallet | Swiss-made security for Bitcoin & crypto · official store price, checked Oct 28, 2026. Prices change; confirm at checkout.

Buy from BitBox

Get an email when your device has a firmware or security update

Security incidents

Release history

DateVersionHighlights
Aug 31, 20269.27.1API: include the installed bootloader version in the device info response; Ethereum: display the EIP-712 message type before signingnotes
Aug 24, 20269.27.0betaDisplay long transaction and swap amounts in full instead of truncating them; Bitcoin: allow signing messages with keys in the m/45' application namespacenotes
Aug 17, 20269.26.5securitySecurity improvements; Fixed a crash when listing many backups over Bluetoothnotes
Jul 9, 20269.26.4Ethereum: allow ':' in EIP-712 type names, used by some dapps as a namespace separator; BitBox02 Multi: d9861105695596d9d25a7b19396fbcbd23be150a8c7e2292bfd7efbc836a13cenotes
Jul 8, 20269.26.3Fixed potential out of bounds write; Bitcoin: improve security by disallowing silent payment and payment request addresses in send-to-self transfersnotes
Jul 8, 20269.26.2intermediateIntermediate release to update the bootloader to v1.2.2.; BitBox02 Bitcoin-only: 2b31aac25b05bbbc7ff5898ecf233744dbc9a8de1e68e082c4b94f17f38e05a2notes
Apr 19, 20269.26.1Improve experience of moving back and forth when entering password characters; Ethereum: add data streaming support for transactions and EIP-712 typed messages with large datanotes
Jan 27, 20269.25.1notes
Jan 21, 20269.25.0BitBox02 Nova: improved password stretching algorithm; Fix bug where Bluetooth was turned off when iOS device was unlockednotes
Oct 15, 20259.24.0Change title when entering recovery words to 1 of 24, 2 of 24, etc.; Remove option to restore from 18 recovery wordsnotes
Oct 13, 20259.23.3Bluetooth: fix communication timeout when creating/restoring a walletnotes
Sep 30, 20259.23.2Improve touch sensor reliability when the sdcard is insertednotes
Jul 18, 20259.23.1EVM: add HyperEVM (HYPE) and SONIC (S) to known networks; U2F: fix macos/safari macos/firefox supportnotes
Jun 16, 20259.23.0betaEthereum: add confirmation screen for known networks, change base unit to ETH for Arbitrum and Optimism; Ethereum: add Base and Gnosis Chain to known networksnotes
Feb 17, 20259.22.0Update manufacturer HID descriptor to bitbox.swiss; Ethereum: remove deprecated Goerli networknotes
Sep 26, 20249.21.0Bitcoin: add support for sending to silent payment (BIP-352) addresses; Bitcoin: add support for Taproot wallet policies and Miniscript on Taproot (MiniTapscript)notes
Sep 5, 20249.20.0Bitcoin: UX improvements for payment request confirmations; Ethereum: display the addresses on device in the same case as the user inputnotes
Jun 24, 20249.19.0Display device name on screen before unlock; Bitcoin: add support for payment requestsnotes
Apr 22, 20249.18.0Add support for deriving BIP-39 mnemonics according to BIP-85notes
Apr 22, 20249.17.1intermediateIntermediate release to rotate the root pubkeys in the bootloadernotes
Feb 26, 20249.17.0Add support for deriving mnemonics for Lightning hot wallets according to BIP-85 (using a customnotes
Jan 24, 20249.16.0Disable screensaver when displaying a receive address, confirming a transaction, and other interactive actions (thanks to @cstenglein); Add Sepolia testnet for Ethereumnotes
Aug 23, 20239.15.0Security bugfix: check index of an input's previous output to prevent the fee attack originally reported by Saleem Rashid; Support for Miniscript wallet policies of the form wsh(<miniscript expression>)notes
Jun 13, 20239.14.1Improved security: keep seed encrypted in RAMnotes
Mar 23, 20239.14.0Improved touch button positional accuracy in noisy environments; Increased performance when signing Bitcoin transactionsnotes
Nov 9, 20229.13.1Fix bug introduced in 9.13.0: remove double cancel confirmation in the 'Restore from recovery words' workflow; Bitcoin: allow displaying BTC values in the 'sat' unitnotes
Nov 5, 20229.13.0betaBitcoin: allow displaying BTC values in the 'sat' unit; Bitcoin: Allow arbitrary input sequence numbers (fixes compatibility with Taproot transactions in Sparrow wallet)notes
Jun 15, 20229.12.0Ethereum: add support for EIP-712 structured data signing; UI: add a 1px padding for left/right-aligned text for better visibilitynotes
May 19, 20229.11.0Add SSD1312 driver for new OLED screensnotes
Mar 10, 20229.10.0Bitcoin: add support for BIP-86: receive to taproot addresses and sign transactions with taproot inputs; Ethereum: add support for the Binance Smart Chain, Optimism, Polygon, Fantom Opera and Arbitrum One networksnotes
Feb 8, 20229.9.1Cardano: support sending to legacy Byron addresses; Cardano: disallow duplicate token keys in an outputnotes
Jan 12, 20229.9.0Support sending to taproot addresses; ListBackups: ported to Rustnotes
Nov 15, 20219.8.0Multi edition: add Cardano support.; Allow recovery words that convert to a zero seed, such as the 12 words abandon abandon .... about.notes
Sep 6, 20219.7.0Display granular error codes when unlock fails unexpectedly; Remove RandomNumber API endpointnotes
May 20, 20219.6.0Add securechip_model to DeviceInfo: ATECCC608A or ATECC608B.; Added reboot purpose for clearer UX: "Proceed to upgrade?" vs. "Go to startup settings?"notes
Mar 10, 20219.5.0Anti-klepto support for ETH transaction signing and for BTC and ETH message signing.; Add Uniswap ERC-20 token.notes
Jan 20, 20219.4.0Protection against the nonce covert channel attack when signing Bitcoin/Litecoin transactions (antiklepto protocol).; Verifiable seed generation: when restoring from 24 recovery words, for the 24th word, show all 8 candinotes
Nov 30, 20209.3.1Fix a bug where the device could freeze and become unresponsivenotes
Nov 24, 20209.3.0betaAllow enter the multisig account name on the device. Useful for downstream integrations.; Allow new keypaths: m/48'/coin'/account' for multisig, to enable compatibility with the Nunchuk wallet.notes
Oct 20, 20209.2.1New features:; Support for legacy segwit multisig. It uses legacy 3... addresses for backwards compatibility with services that do not yet support bech32 bc1... adresses.notes
Oct 14, 20209.2.0betaNew features:; Support for legacy segwit multisig. It uses legacy 3... addresses for backwards compatibility with services that do not yet support bech32 bc1... adresses.notes
Aug 19, 20209.1.1Added support for many ERC-20 tokens.; Renamed 'mnemonic' to 'recovery words'notes
Aug 16, 20209.1.0betaAdded support for many ERC-20 tokens.; Renamed 'mnemonic' to 'recovery words'notes
Jul 4, 20209.0.0Allow single-sig transactions with mixed inputs from different script types (p2wpkh-p2sh and p2wpkh), as long as they have the same bip44 account index.notes
Jun 3, 20208.0.0securityBigger fonts for better readability; Security improvement: validate transaction input amountsnotes
Mar 24, 20207.0.0More robust pairing (fix "Could not pair with app" error); Ability to sign general Ethereum smart contracts and unknown ERC20 tokens (marked with "Unknown data" / "Unknown token").notes
Mar 3, 20206.1.0Add an API call to retrieve the Electrum wallet encryption key at m/4541509'/1112098098'.; Bugfix: correctly handle Ethereum transactions with a large data field.notes
Feb 17, 20206.0.0Multisig (P2WSH / bech32 only in this release) with multisig account registrations on the device; Display of RBF and locktime, if set (not a security feature)notes
Dec 17, 20195.0.0securitySecurity improvement (details); Optional passphrase usability improvement: only enter once instead of twice; instead there is a visual confirmation now.notes
Dec 11, 20194.4.0notes
Nov 27, 20194.3.0notes
Oct 30, 20194.2.2notes
Oct 30, 20194.2.1Added the ability to enter special characters in the optional passphrase. This improves compatibility with other wallets.; More responsive touch interaction.notes
Oct 1, 20194.1.1notes
Sep 25, 20194.1.0When restoring from backup, U2F is now also properly restored, so you can login to your registered sites after restoring from backup [factory reset required when upgrading to this ; Various bug fixesnotes
Aug 13, 20193.0.0All letters visible at once; Enter any visible character by tapping up to three times.notes
Jun 28, 20192.0.0Improved touch sensor calibration; Added ability to perform an attestation checknotes
Jun 28, 20191.0.0notes

Source: the vendor's public GitHub releases (BitBox02 firmware). Dates are as published by the vendor.

Compare

BitBox02 vs Trezor Safe 3