SafePal Review: Costs, Access and Key Trade-offs

SafePal's hardware line runs from a $49.99 entry device up to the model this review covers: the SafePal S1 Pro. Everything below comes from a dated document set, not from a bench test. No device was unboxed, set up or recovered for this page, and the review says so wherever that matters to a decision.

Who this hardware wallet suits

Air-gapped signing is the whole argument for the S1 Pro. The device never pairs and never plugs in for transfers: it displays a QR code, the phone app reads it, and the signed payload travels back the same way. Bluetooth is documented as absent on this model as of the 2026-09-26 check 56. That removes a wireless attack surface and adds a camera to every single transaction.

The recovery side is where the trade-off lands. Backup rests on a single written phrase, and the record shows no multisig option on the device: a Help Center search for "multisig" returned no matching articles at the 2026-09-26 check, and the independent comparison used here does not mention one either 1025. One phrase, one point of failure.

Device model, cost and availability

The S1 Pro lists at $89.99 with VAT and duty excluded, a figure that matches between the official store and the Cryptonews review 56. The cheaper siblings sit at $49.99 (S1) and $69.99 (X1), and the X1 is the model that carries Bluetooth and USB-C, so paying more here buys you less connectivity by design 56. Nothing in the record states shipping cost or a landed total for a US address, so treat $89.99 as a floor rather than a checkout figure.

SafePal was founded in 2018, and both the PitchBook profile and the official LinkedIn page give an address in Mahe, Seychelles 14. The brand holder's legal entity is not named anywhere in this document set, and other listings point at Shenzhen and at a Singapore-based team, so identity here is an address, not a corporate record.

Shipping reaches 51 of 62 US states and territories per the official support page, with Hawaii (HI) and American Samoa (AS) among the exclusions 22. New York is not on the exclusion list. That is a logistics scope only: it rests on the shipping page, not on any registration or state authorization.

Signing, connectivity and compatibility

Input is physical. The S1 Pro uses a 1.3-inch color display at 320 by 320 pixels with D-pad navigation rather than a touchscreen, which makes address verification on-device slow but legible 56. Data moves by QR only: USB-C is not used for transfers on this model, and NFC is not mentioned for any of the three devices in the sources checked.

Chain coverage is stated by the official store at 200 blockchains and above across the line, checked 2026-09-26 6. Older references give 48 and 20, which reads as coverage growing over time rather than a contradiction, and the current store figure is what this review carries. The companion app ships for iOS and Android with a browser extension alongside it.

Clear signing is the gap worth knowing about. Whether the S1 Pro renders human-readable transaction details before you approve is not settled by this evidence record: the two official pages that would answer it returned HTTP 404 at the check, and the Help Center search surfaced only adjacent articles about air-gapped signing. If you sign contract interactions rather than plain transfers, test what the screen actually shows you on a small amount first.

Documented item	Dated value and scope	What it means for you
Flagship model and price	SafePal S1 Pro, $89.99, VAT and duty excluded, store listing as of 2026-09-26 56	Budget above the sticker; tax and shipping are not in that number
Connectivity	QR codes only; Bluetooth not present on this model, 2026-09-26 56	Every signature needs the phone camera, with no pairing or cable step
Chains supported	200+ across the device line, official store claim as of 2026-09-26 6	Wide coverage, but confirm your specific chain in the app before buying
Screen and input	1.3-inch 320x320 color display with D-pad buttons, 2026-09-26 56	Addresses are readable on-device; expect slow manual entry
US shipping scope	51 of 62 US states and territories; HI and AS among the exclusions, 2026-09-26 22	Delivery eligibility only, not a license or state registration
Store data breach	Disclosed 2026-08-16, about 39,798 customers affected, compensation: none documented 1314	Treat SafePal-branded email and phone contact as a phishing vector

Recovery model and security history

Recovery runs on a standard word list. The independent Cypherock comparison describes setup generating a 12, 18 or 24-word recovery phrase, which matches BIP-39 lengths rather than the 20 or 33-word shares used by SLIP-39, and that is the basis for the BIP-39 label here 10. SafePal's own pages do not print the standard's name. Practical upshot: the phrase should restore into other BIP-39 wallets, though you will need to match the derivation path for each chain.

Hardware protection is a certified secure element at CC EAL6+ with a tamper self-destruct mechanism, per the official store and independent reviews 611. Source code is a mixed picture, which is why this record carries open source as partial: a 2026 Coin Bureau review describes it as "Partial, verify current scope" 11, while WalletScrutiny records that the 2021 promise to publish S1 firmware source was still unfulfilled as of 2022-05-27, alongside a GPLv2 complaint over U-Boot and Linux kernel sources 12. You cannot rebuild and compare this firmware yourself. A claim of monthly audits by two named security firms appears in one low-credibility blog and is not echoed on safepal.com or by the firms, so this review does not carry it.

Then the August incident. On 2026-08-16 SafePal disclosed a leak affecting roughly 39,798 store customers: names, physical addresses, phone numbers and order details for orders placed between 2025-03-02 and 2026-04-11, exposed through an IDOR/BOLA flaw in a third-party order-tracking plugin on the shop site. Seed phrases, private keys, wallet passwords, banking and payment data and government IDs were not affected 1314. No compensation is documented in the record, only email notification and an order lookup tool. The residual risk is targeted phishing against known device owners at a known home address, and one outlet reports user complaints about suspicious calls and mail as early as May 2026, without a company-confirmed link to this leak 20.

On sanctions screening as of 2026-09-26, the brand, domain and associated parties produced no match against the UK Sanctions List (report dated 21 September 2026), the EU consolidated financial sanctions file (generated 22 September 2026) or OFAC designations 1314202324. Absence from a sampled list on one date is a clean screen, not regulatory approval of the product.

What remains outside this review

Nobody here unboxed the device. Setup time, enclosure durability, battery behavior over months, and whether a written phrase actually restores a wallet on a second unit are all untested on this page, and none of them can be read off a document. The clear signing question stays open for the reason given above. App Store and Google Play ratings were not collected into this record, the brand's legal entity is unnamed, and no published audit sits in the file.

One thing to keep straight: an empty field in this record means the evidence does not cover it, not that the feature is missing. If you find official documentation that closes one of these gaps, the method behind these pages is described in how CoinReckon assesses services.

How to choose for your custody needs

The S1 Pro makes sense if your threat model is wireless and physical interception and you are comfortable scanning codes for every transaction. If you want quorum control over a treasury or a shared household stash, this model does not document it, and a device with multisig or a different cheap air-gapped unit such as a related service profile deserves a look first.

Before you buy, work through this:

• Identity and geography: confirm your state is not among the shipping exclusions (HI and AS are on that list as of 2026-09-26), and remember New York inclusion is a shipping fact only.
• Intended operation: list the chains and the apps you will actually sign with, then check them against the app's current support, not the 200+ headline.
• Documented cost limit: $89.99 excludes VAT and duty, so get your real total at checkout before comparing against a $49.99 S1.
• Custody and provider boundary: keys stay with you and so does recovery. There is no issuer to restore a lost phrase, and no multisig fallback in the record.
• Next step consistent with the evidence: if you buy, enter a false phone number nowhere but keep your delivery details minimal, and treat any SafePal-branded contact after purchase as unverified until you confirm it in the app.

Quick questions

Which SafePal model does this review cover? The SafePal S1 Pro, the top device in the current line at $89.99. The S1 and X1 differ in price, certification level and connectivity, so their specifications do not transfer.

What recovery and connection options are documented? A 12, 18 or 24-word recovery phrase matching BIP-39 lengths, with no multisig in the record. Connection is QR only, with Bluetooth documented as absent on this model.

Was a recovery test performed for this review? No. The assessment rests on dated documents and published reviews, so restoring a wallet from the phrase is something you should verify yourself on a small balance.

Your next step

Price the S1 Pro against one air-gapped alternative and one multisig-capable device before you commit, using the category hub for the shortlist and all crypto service reviews for the broader picture. Spotted a document that changes a figure on this page? Send an editorial correction and we will date the update.

Evidence dates: underlying record updated 2026-09-26, snapshot imported 2026-10-20. Dated values above are original check or event dates, not re-verification dates.

Sources

• [6] SafePal, Store (S1 / X1 / S1 Pro) - https://www.safepal.com/store
• [22] SafePal Help Center, "Countries and Regions Available for Shipping" - https://safepalsupport.zendesk.com/hc/en-us/articles/20151246730011-Countries-and-Regions-Available-for-Shipping
• [13] CoinDesk, "Safepal security vulnerability exposes data of 39,798 customers" - https://www.coindesk.com/tech/2026/08/16/crypto-wallet-safepal-reveals-a-data-breach-exposing-nearly-40-000-customers-order-info
• [12] WalletScrutiny, "SafePal S1 hardware wallet" - https://walletscrutiny.com/hardware/safepals1

Also cited: [1] PitchBook, SafePal company profile - https://pitchbook.com/profiles/company/494609-59 · [4] LinkedIn, SafePal company page - https://sc.linkedin.com/company/safepal · [5] Cryptonews, "SafePal Wallet Review 2026" - https://cryptonews.com/reviews/safepal-wallet-review · [10] Cypherock, "Ellipal vs Safepal vs Cypherock" - https://www.cypherock.com/blogs/ellipal-vs-safepal-vs-cypherock-a-head-to-head-comparison-of-hardware-wallets · [11] Coin Bureau, "SafePal S1 Review 2026" - https://coinbureau.com/review/safepal-s1-review · [14] SecurityWeek, "40,000 Impacted by SafePal Data Breach" - https://www.securityweek.com/40000-impacted-by-safepal-data-breach · [20] CryptoTicker, "SafePal Data Breach: 39,798 Customers Exposed" - https://cryptoticker.io/en/safepal-data-breach-customer-order-data · [23] UK Government (FCDO/OFSI), The UK Sanctions List - https://www.gov.uk/government/publications/the-uk-sanctions-list · [24] European Commission (DG FISMA), EU Financial Sanctions Files - https://webgate.ec.europa.eu/fsd/fsf · [25] SafePal Help Center, search results for "multisig" - https://safepalsupport.zendesk.com/hc/en-us/search?query=multisig

General educational information only, not personal investment, legal or tax advice. Crypto assets can lose value, and documentary analysis is not a guarantee of safety, access or recovery. CoinReckon uses no affiliate links or purchase incentives on this page.