Last updated: October 2026
The Cypherock X1 is a hardware wallet that tries to remove the paper seed phrase from your life. Instead of writing down 24 words, it splits each wallet’s private key into five Shamir shares: one stays on the X1 Vault (the screen device) and one goes on each of four NFC cards. Any two shares rebuild the key. This review draws on Cypherock’s documentation, store listings and audit commentary as of October 2026, not on owning one, and asks one question: does card-based backup hold up when things go wrong?
Key takeaways
- Cypherock’s docs describe a 2-of-5 Shamir scheme: the Vault plus any one card, or any two cards, can recover a wallet.
- The cards use an EAL6+ secure element with proprietary code; the Vault uses a Microchip ATECC608-series chip and runs open-source code, per Cypherock’s own feature documentation.
- Cypherock says the device can display a standard BIP39 seed phrase on request, so you are not locked in, but only while you still have a working Vault, one card and your PIN.
- Its promised phone-based recovery app (tap two cards on an NFC phone) was still described as “coming soon” in the docs as of October 2026.
- Store listings showed three kits (Basic, Standard, Pro) at $99, $179 and $249 in October 2026, discounted from higher list prices; check the live store before relying on those figures.
How the Cypherock X1 replaces the seed phrase
A conventional hardware wallet generates a 12- or 24-word recovery phrase and asks you to copy it onto paper or steel. Whoever finds that sheet owns the funds, and if it burns with your house, the device is your only remaining copy. Our guide to seed phrase storage options covers the usual fixes: metal plates, split storage, safe-deposit boxes.
Cypherock takes a different route. When you create a wallet, the X1 derives the key and then applies Shamir Secret Sharing, which turns one secret into pieces where a set number (the threshold) rebuilds it and fewer reveal nothing useful. On the X1 the split is five pieces with a threshold of two. Cypherock’s documentation and the Bitcoin Wiki entry for the device both describe the valid combinations as “one X1 Vault plus one X1 card” or “two X1 cards”.
In daily use, you tap one card against the Vault to approve a transaction. That means a single stolen card is not enough on its own, and a stolen Vault is not enough on its own, but a thief who obtains the Vault and any card together, or any two cards, has the raw material to rebuild the key. A wallet PIN adds a further barrier: Cypherock’s docs say seed viewing and estate recovery both require the PIN where one is set. Treat the PIN as mandatory: without it the shares are the only lock.
Note the trade-off. A seed phrase is one object you must hide very well. X1 gives you five objects you must keep apart, so that no two ever end up in the same drawer, bag or safe. That design sits somewhere between a plain single-key wallet and the approaches covered in our explainers on multisig wallets and MPC wallets: like Shamir backup it splits recovery material, but unlike multisig the key is reassembled in one place whenever you sign.
Five loss scenarios: Cypherock X1 vs a written seed phrase
The table below assumes a sensible layout: the Vault and one card at home, the other three cards at three separate locations (a relative, an office, a bank box). It compares that with a single 24-word phrase on a steel plate at home. The outcomes follow from the 2-of-5 threshold Cypherock documents; they are reasoning from the published design, not the results of trials.
| Scenario | Seed phrase on steel at home | Cypherock X1, cards spread across four places |
|---|---|---|
| House fire destroys home contents | Device lost; steel plate likely survives, but you must find it in the debris | Vault and home card lost; any two of the three remote cards still meet the threshold |
| Burglar takes everything at home | Funds exposed if the plate is found (passphrase helps) | Vault plus home card is a valid pair; a strong PIN is the remaining barrier, so move funds quickly using two remote cards |
| One card lost or damaged | Not applicable | Four shares remain; Cypherock’s store lists Vaults and cards as separate purchases, and you can recreate wallets from a remaining pair |
| Owner dies | Heirs need to know the plate exists and how to use a phrase | Heirs need two shares plus the PIN; Cypherock Cover’s paid estate plan can email nominees |
| Cypherock the company shuts down | No effect; BIP39 works in any wallet | Export the BIP39 phrase from the Vault while it works; the two-card phone recovery app was not released as of October 2026 |
Two rows stand out. The burglary row shows that keeping the Vault with a card is convenient but recreates a single point of failure; keeping the Vault alone at home is stricter. The company-failure row is the X1’s weakest scenario today, covered in its own section below.
Cypherock X1 inheritance: what heirs need
Cypherock sells a service called Cypherock Cover. According to its product pages, the Silver plan offers PIN recovery and the Gold plan adds estate recovery: you name up to two nominees, hand them cards, and the service sends recovery instructions after a trigger, with the second nominee contacted three months after the first. Nominees still need two shares and your PIN. The X1 Pro kit listed one year of the Gold plan in October 2026. The service relies on Cypherock continuing to operate, so a written letter of instruction stored with a lawyer remains the fallback that does not depend on any company.
Secure elements, audits and open firmware
A secure element is a tamper-resistant chip designed to keep secrets from being read out even with physical attacks. Cypherock’s feature documentation, read in October 2026, splits the hardware into two parts:
- X1 cards: an EAL6+ certified secure element (Common Criteria evaluation level 6 augmented), with proprietary card code that cannot be upgraded. Cypherock says it needs a non-disclosure agreement with the chip vendor, which is why that code is closed.
- X1 Vault: a Microchip ATECC608-series secure element that requires no NDA, with open-source Vault firmware published on Cypherock’s GitHub.
Some reviews state that the Vault also carries an EAL6+ rating; Cypherock’s own documentation does not say that, so this review follows the documentation. A Keylabs audit published by Cypherock flagged the older ATECC608A part; Cypherock replied that newer production batches use later revisions (608B, then 608C). You cannot tell a unit’s chip revision from the box, so if this matters to you, ask Cypherock support before buying.
WalletScrutiny is an independent project that rebuilds wallet firmware to check whether published code matches what ships; published reviews of the X1 cite it as rating the Vault firmware reproducible, though this review could not confirm the current listing, so check walletscrutiny.com yourself. The cards cannot be verified that way because their code is closed. So the honest summary is “open Vault, closed cards”: you can audit how keys are reassembled and used, but you rely on the chip vendor and Cypherock for how shares are stored.
No confirmed theft of funds caused by an X1 flaw had been reported as of October 2026, based on searches of security news and Cypherock’s channels. A forum summary of a GEEKCON talk by the DarkNavy research team claimed a modified device could still pass authenticity checks; this review could not locate the primary write-up or a Cypherock response, so treat it as unconfirmed and check for an official advisory.
What happens if Cypherock disappears
A proprietary backup is only as durable as the tools that can read it. Cypherock’s docs give two answers.
First, the X1 is BIP39-compliant. With the Vault, any one card and the wallet PIN, you can open a wallet on the device and choose “View Seed” to display a standard recovery phrase, which you can then import into another BIP39 wallet. Cypherock says this works without the cySync app, even with the Vault powered from a USB power bank. Exporting now as an extra backup is possible, but it reintroduces the paper secret the X1 was meant to remove.
Second, for the case where the Vault is also broken, Cypherock says it will release an open-source Android and iOS app that reads two cards over NFC and reconstructs the phrase with your PIN. As of October 2026 its “out of business” FAQ still called that app forthcoming and linked only a prototype video. Until it ships, a dead Vault plus a dead company would leave you with cards that nothing public can read.
cySync, supported coins and current pricing
The X1 pairs with cySync, Cypherock’s companion app, for installing firmware, managing accounts and building transactions. Cypherock’s product pages list macOS, Windows and Linux desktop versions and also Android and iOS. An App Store listing for “Cypherock CySync Crypto Wallet” was live in October 2026; this review could not confirm the Android build’s release date, so check the store listing that Cypherock’s own site links to.
On coins, Cypherock’s homepage claimed support for “18,000+ digital assets” in October 2026. Older materials quoted 1,000+ and 9,000+, so the figure depends on whether tokens on supported chains are counted individually. What matters is chain support: use Cypherock’s coin support page to confirm a specific network and token standard before you send funds.
| Kit (Cypherock store, October 2026) | Listed price | What the listing included |
|---|---|---|
| X1 Basic | $99 (list price $129) | Vault and four cards; no hardcase or card sleeves |
| X1 Standard | $179 (list price $209) | Adds USB kit, four card sleeves, hardcase, three-year extended warranty |
| X1 Pro | $249 (list price $299) | Standard contents plus priority call support and one year of the Cover Gold plan |
The discounted prices were shown without an end date, and one May 2026 Cypherock blog post quoted a different “starter kit” price, so treat these as a dated snapshot.
Anti-phishing note: the official domain is cypherock.com. Type it yourself or use a bookmark, and download cySync only from the link on that site or from the app store listing it names. Fake wallet sites often appear in search ads and social media replies. No genuine support agent needs your PIN, a card tap on someone else’s phone, or an exported phrase.
Who the X1 suits, and who should skip it
Search demand for Cypherock is too small for keyword tools to measure, so weigh it on design rather than popularity. The company behind the X1, HODL Tech Private Limited (trading as Cypherock), is based in India; databases date its founding to 2018 or 2019, and the X1 reached general sale in 2023 after a 2022 beta. CB Insights reports that Cypherock says it has sold more than 15,000 wallets, a company figure that could not be verified independently.
The X1 makes most sense if:
- You have several trusted, physically separate places to keep cards, and the discipline to never carry two of them together.
- Inheritance planning matters and you want heirs to hold something more robust than a sheet of words.
- You already have BIP39 wallets elsewhere and want a second, differently designed backup layer.
It is a weaker fit if:
- You want everything verifiable from source. The card code is closed by design.
- You live alone with one secure location. Five shares in one place are less safe than one hidden phrase.
- You need a mature mobile experience and a shipped company-independent recovery tool today.
For side-by-side context with Ledger, Trezor and others, see our hardware wallet comparison, and for wider custody basics our crypto wallets and security hub.
FAQ
Is the Cypherock wallet safe if someone steals one card?
One card holds a single Shamir share and the threshold is two, so one card alone cannot rebuild the key under the documented scheme. The risk rises if the thief also gets the Vault or a second card, which is why cards should be stored apart and the wallet PIN set.
How does Cypherock Shamir backup differ from a 24-word seed?
A seed phrase is one complete secret. Cypherock’s Shamir backup is five partial secrets, any two of which reconstruct the key. You trade a single hiding place for five that must stay separate, and you rely on Cypherock hardware or its future recovery app to combine them, unless you export the BIP39 phrase.
Can I use the cySync app on my phone?
Cypherock lists iOS and Android alongside desktop versions, and an iOS App Store listing existed in October 2026. Confirm the Android release on Google Play through the link on cypherock.com. The separate NFC card-recovery app was still unreleased at that time.
Which coins does the Cypherock X1 support?
Cypherock claimed more than 18,000 assets in October 2026, a count that includes tokens on supported chains. Check its coin support page for the exact network and token standard before sending any funds, since unsupported deposits may be hard to recover.
Crypto is volatile and risky; this is education, not financial advice. Do your own research.
