Vetted tools for serious holders.
Every tool here is something we use or would hand to a client. Some links earn us a small commission at no cost to you — but nothing pays to appear on this list. Free and open-source tools sit alongside paid products. The best tool is the one that fits your threat model.
Some links are affiliate links that help fund OPNorange; those cards are marked AFFILIATE. Free and open-source tools are marked FOSS. Prices are approximate and change often; check the maker's store. Our hardware wallet partner: Trezor Store ↗
Offline signing devices that keep your private keys isolated from the internet. Buy direct from manufacturer only.
Coldcard Q
AdvancedBitcoin-only. Air-gapped via SD, QR, and NFC. Dual secure elements. The security maximalist choice.
Seeds generated on the Q before firmware 1.5.0Q (Mk4 and Mk5: before 5.6.0) carry about 72 bits of entropy instead of 128. A firmware update does not repair an existing seed: update, generate a new seed on the patched device or from 50+ private dice rolls, then move the funds.
Trezor Safe 5
SeriousOpen-source. Color touchscreen. BTC-only firmware available — reduces attack surface. Good balance of security and usability.
Blockstream Jade Plus
StarterAir-gapped via camera. Bitcoin and Liquid. Affordable entry point. Virtual secure element design.
Desktop and mobile apps for managing keys, transactions, and coin control. Pair with a hardware wallet.
Sparrow Wallet
SeriousDesktop. Full coin control, UTXO labeling, PayJoin and STONEWALL, multi-sig. The power-user standard.
Blue Wallet
StarterMobile. Clean interface. Hardware wallet integration and Lightning support. Great starter wallet.
Phoenix Wallet
StarterMobile Lightning wallet. Self-custodial. Automatic channel management. Best entry point to Lightning.
Run your own Bitcoin node to verify transactions independently and keep your financial activity private.
Umbrel
StarterEasiest setup. Polished interface. Large app ecosystem. Best first node for non-technical users.
Start9
SeriousFully open-source. Privacy-first. Tor-native. Encrypted backups. Runs on any hardware.
Bitcoin Core
AdvancedThe reference implementation. Runs on any computer. Maximum sovereignty. Command-line interface.
Seed phrase backup, multi-sig coordination, and inheritance planning. The layer that outlasts you.
Seedplate (Coinkite)
StarterStainless steel. Stamp your words. Fire and flood resistant. Simple and proven.
Casa
Serious2-of-3 or 3-of-5 multi-sig. Built-in inheritance protocol. Mobile-first. No invasive KYC.
AnchorWatch
AdvancedInsured multi-sig vaults. Time-locked recovery. Lloyd’s-backed wrench attack protection.
Password managers and hardware 2FA. The foundation everything else depends on.
YubiKey 5 Series
SeriousHardware 2FA. Phishing-resistant FIDO2/U2F. Use for email, exchanges, and password manager.
Bitwarden
StarterOpen-source password manager. Cross-platform. Third-party audited. Best free option.
KeePassXC
AdvancedOffline password manager. No cloud sync. Local encrypted database. Full control over your vault.
Encrypted messaging, email aliasing, VPNs, and tools to compartmentalize your digital identity.
AnonScore
StarterPaste any Bitcoin address and get a 0-100 privacy score based on the same 10 heuristics chain analysis firms use. Address reuse, dust attacks, unsafe consolidation, fee fingerprinting — every issue ranked by impact with a concrete fix plan. Plain English mode for non-technical users. Built by OPNorange. Open source, nothing stored, no account required.
Proton Mail
SeriousEnd-to-end encrypted email, Swiss jurisdiction, zero-access architecture. Mail Plus covers dedicated crypto accounts. Proton Unlimited bundles Mail + VPN + Drive + Pass + unlimited SimpleLogin aliases in one plan — the best value if you are building a full Proton stack.
Proton VPN
StarterNo-logs VPN, open-source and independently audited, 120+ countries, Swiss jurisdiction. Free tier has no data cap. Included in Proton Unlimited — pair with Proton Mail for a full Swiss-jurisdiction privacy stack.
Faraday bags, privacy operating systems, and tools for maintaining security away from home.
Mission Darkness Faraday Bags
SeriousMilitary-grade RF shielding. Phone, laptop, and key fob sizes. Test quarterly by calling a bagged phone.
GrapheneOS
AdvancedPrivacy-focused Android OS. No Google services. Per-app permissions. Ideal for a dedicated secure phone.
Tails
AdvancedAmnesic live OS. Boots from USB. Routes all traffic through Tor. Leaves no trace on the host machine.
A note on trust: No tool eliminates the need to understand what you're doing. Software can be compromised, companies can change, and services can shut down. Use these tools, but don't outsource your understanding. The best security is knowledge. If you want help building the right setup for your situation, that's what we're here for. Ready to buy? Shop Trezor ↗
The newest reports we tied to this tool. Read one, then come back and use what you learned. 15 reports in the archive.
Tools acquired. Now stay informed.
Intel covers the threats, trends, and developments that affect your security posture — so you know what's coming before it arrives.