Open-source wallets
Source code status of every wallet in the comparison, with the licence and a link to the licence file or the maker's statement.
Source code status of 22 wallets
13 open-source licence · 3 source published, restricted licence · 3 partly published · 3 not verified. 19 of 22 verified.
Open-source licence
Source published under an open-source licence.| Wallet | Status | Licence | Repository | Reproducible build |
|---|---|---|---|---|
| Open source source | Apache-2.0 | BitBoxSwiss/bitbox02-firmware | not verified | |
| Open source source | MIT | BlueWallet/BlueWallet | not verified | |
| Open source source | MIT | spesmilo/electrum | not verified | |
| Open source source | MIT | Blockstream/Jade | not verified | |
| Open source source | MIT | Blockstream/Jade | not verified | |
| Open source source | MIT | KeystoneHQ/keystone3-firmware | not verified | |
| Open source source | GPLv3 (core), LGPLv3, MIT | OneKeyHQ/firmware-pro | Documented source | |
| Open source source | GPL-3.0-or-later | Foundation-Devices/passport2 | Documented source | |
| Open source source | MIT | SeedSigner/seedsigner | not verified | |
| Open source source | Apache-2.0 | sparrowwallet/sparrow | Documented source | |
| Open source source | GPLv3 (core), LGPLv3, MIT | trezor/trezor-firmware | not verified | |
| Open source source | GPLv3 (core), LGPLv3, MIT | trezor/trezor-firmware | not verified | |
| Open source source | GPLv3 (core), LGPLv3, MIT | trezor/trezor-firmware | not verified |
Source published, restricted licence
Readable source; the licence restricts selling or commercial use.| Wallet | Status | Licence | Repository | Reproducible build |
|---|---|---|---|---|
| Source published source | MIT + Commons ClauseSource is published; the Commons Clause forbids selling it, so it is not an OSI open-source licence. | Coldcard/firmware | Documented source | |
| Source published source | MIT + Commons ClauseSource is published; the Commons Clause forbids selling it, so it is not an OSI open-source licence. | Coldcard/firmware | Documented source | |
| Source published source | Consensys licence (non-commercial use)Source is published; the licence reserves all rights and allows non-commercial use only. | MetaMask/metamask-extension | not verified |
Partly published
Some components are open, others are not.| Wallet | Status | Licence | Repository | Reproducible build |
|---|---|---|---|---|
| Partly source | MIT (app)The Ledger Wallet app is open source; the device operating system and secure-element code are not fully published. | LedgerHQ/ledger-live | not verified | |
| Partly source | MIT (app)The Ledger Wallet app is open source; the device operating system and secure-element code are not fully published. | LedgerHQ/ledger-live | not verified | |
| Partly source | MIT (app)The Ledger Wallet app is open source; the device operating system and secure-element code are not fully published. | LedgerHQ/ledger-live | not verified |
Not verified
No statement or repository could be confirmed at the maker's own source.| Wallet | Status | Licence | Repository | Reproducible build |
|---|---|---|---|---|
| not verified | not verified | not verified | not verified | |
| not verified | not verified | not verified | not verified | |
| not verified | not verified | not verified | not verified |
“Not verified” for reproducible builds means the project's own repository was not found to document one on the check date — not that builds cannot be reproduced. See also the open-source list.
FAQ
What counts as open source here?
“Open source” means the firmware or app source is published under an open-source licence such as MIT, Apache-2.0 or GPL. “Source published” means the code can be read but the licence restricts use, for example a Commons Clause or a non-commercial licence. “Partly” means some parts, such as the device operating system, are not published.
What is a reproducible build?
A build is reproducible when anyone can compile the published source and get exactly the same bytes as the official binary. It is listed here only when the project documents it in its own repository.
Does open source mean a wallet is safe?
No. It means the code can be inspected. This page states a fact about publication, not a judgement about quality.