The NGRAVE Zero makes a maximalist pitch. It is the only hardware wallet whose operating system holds an EAL7 certification, the highest assurance level on the Common Criteria scale, wrapped in a fully air-gapped, biometric, military-styled slab priced to match at around €398. This review looks at what EAL7 means for your keys, where the Zero leads the market, and where the premium buys assurance rather than extra practical safety.
NGRAVE Zero
With $2.1B in crypto stolen, security matters more than ever. See how NGRAVE Zero’s features keep your assets offline and untouchable.
Product Brand: NGRAVE
Product In-Stock: InStock
7.5
Table of contents
What Is the NGRAVE Zero Hardware Wallet?
The Zero is a fully air-gapped hardware wallet from Belgian company NGRAVE. It has a 4-inch color touchscreen and no USB data, no Bluetooth, and no Wi-Fi. Transactions move only as QR codes between the device and the LIQUID mobile app. Its headline feature is ProtectOS, an operating system certified to Common Criteria EAL7, a level above anything Ledger or Trezor carries.
Keys are generated with a distinctive ceremony that combines chip entropy with ambient light readings and your fingerprint. NGRAVE calls the result the Perfect Key: a seed with randomness you provably helped create.
About NGRAVE: Company and Mission
NGRAVE is a Belgian security company founded by engineers with backgrounds in applied cryptography. The Zero was developed with imec and COSIC, the KU Leuven research group behind much of modern cryptography. The pedigree is real. The company is younger than Ledger or Trezor, and its record of no known compromises is strong but, by necessity, shorter.
The NGRAVE Ecosystem: Zero, GRAPHENE, and LIQUID
The system has three parts: the Zero (the wallet), GRAPHENE (a two-plate stainless-steel backup that encodes your key as a punched cryptographic puzzle, where either plate alone is useless), and LIQUID (the companion app that watches balances and broadcasts what the Zero signs). It is a coherent, closed-loop design. It also means committing to NGRAVE’s ecosystem, the way ELLIPAL users commit to theirs.
- NGRAVE Zero: The air-gapped hardware wallet. Your private keys are generated and stored here, entirely offline.
- NGRAVE LIQUID app: A companion mobile app (iOS and Android) that tracks your portfolio, prepares transactions, and broadcasts them via QR codes. Your private keys are never exposed.
- GRAPHENE backup: A two-plate stainless-steel backup that stores your recovery phrase and protects it from fire, corrosion, and physical damage.
Supported Assets and Integrations
Coverage includes Bitcoin, Ethereum, the major EVM chains, and a growing list of networks through LIQUID. That is solid for a mainstream portfolio, but narrower than Ledger’s catalog and with fewer third-party wallet integrations than a Keystone. Check your specific chains on NGRAVE’s list before you buy. Missing coin support is the Zero’s most common dealbreaker.
Pricing and Where to Buy
At roughly €398, or more bundled with GRAPHENE, the Zero sits at the very top of the market alongside the Ledger Stax. The difference is in what the money buys. The Stax spends it on experience; the Zero spends it on certification depth and air-gap discipline.
Where should you buy?
Buy directly from ngrave.io or an authorized reseller, without exception. A tamper-resistant device bought from a marketplace reseller is a contradiction in terms. Ship to a pickup point if you would rather keep your home address off one more database.
Warranty and support
NGRAVE offers a standard warranty and documentation-first support. As with every vendor: no legitimate support flow will ever ask for your recovery key. Any “NGRAVE” contact who asks for it is an attacker.
NGRAVE Zero: Design and Build Quality
The Zero looks and feels like security hardware: a substantial matte body, a sharp 4-inch touchscreen, and a heft that signals intent. It is built to live in a safe, not a pocket, and its looks lean laboratory rather than lifestyle.
- Dimensions: about 12 × 6 × 1 cm;
- Weight: about 130 g;
- Material: aluminum chassis with a matte finish;
- Build: rigid, tamper-evident construction.
Touchscreen and Interface Experience
The 4-inch touchscreen handles everything: PIN entry, passphrase-equivalent codes, and address verification, with full detail readable on one screen. The interface is clean and deliberate. Nothing about it is fast, and nothing about it is confusing. You use it to:
- Set up and configure the wallet;
- Review transactions in full before signing;
- Scan QR codes quickly and accurately.
Battery Life and Offline Operation
A built-in battery charges over USB-C (power only, by design) and easily outlasts any signing session. Between uses it holds a charge for weeks. There is no online mode to worry about: the device is offline the way a stone is offline.
Durability and Tamper Resistance
Tamper resistance runs through the hardware. Intrusion attempts are designed to be visible and fatal to stored secrets, and the body tolerates rough handling. Like every hardware wallet, the Zero protects keys from extraction. The physical security of your recovery backup is still your job, which is exactly the gap GRAPHENE fills.
- The aluminum shell is tamper-evident and shows visible signs if opened.
- Internal mechanisms can trigger a secure auto-wipe if interference is detected.
- Components are shielded and sealed, which reduces the risk of hardware-level attacks.
NGRAVE Zero: Security Features
1. EAL7 Certification: The Highest Security Standard
Common Criteria EAL7 means the operating system’s security claims were formally verified, mathematically proven against its specification, rather than only tested. It is the highest assurance level in commercial existence and a first for hardware wallets. The honest framing: EAL7 certifies the rigor of the verification, not invulnerability. It narrows the trust you have to extend, which is exactly what good security engineering does.
2. 100% Air-Gapped Architecture
This air-gapped setup makes the Zero one of the few true cold-storage wallets that never exposes your keys to an outside connection. Every interaction happens through QR codes, a one-way data flow in which your private keys never leave the device. Here is how it works:
- The LIQUID app generates a transaction QR code.
- The Zero scans and signs the transaction offline.
- The signed transaction becomes a QR code, which the app scans and broadcasts.
QR codes in, QR codes out, firmware via microSD, charging via power-only USB-C. Combined with the touchscreen’s full-detail rendering, every transaction is verified on hardware no network has ever touched.
3. Biometric and Multi-Layer PIN Protection
Access stacks a fingerprint reader on top of PIN protection, and key operations can require both. Biometrics here add convenience and a second barrier on a device an attacker must first physically hold. That is a sensible use of the technology, not a replacement for the fundamentals.
4. Secure Key Generation and Storage
The Perfect Key ceremony mixes the chip’s hardware randomness with ambient light sensor data and your fingerprint interaction. The seed’s entropy is partly, and provably, yours. Call it cryptographic theater in the best sense: real added entropy, plus a setup that shows you your key was born offline.
The NGRAVE Graphene Backup System
GRAPHENE replaces the paper seed with two stainless-steel plates. Punched holes in the upper plate encode your key against the lower plate’s grid, and either plate alone reveals nothing. Store them separately and a burglar needs two successful break-ins in two places. It is the most thought-through first-party backup we have seen from a wallet maker. It is also a separate purchase, which the pricing section already counted against the Zero.
- Top plate: Punched holes that encode your recovery phrase.
- Bottom plate: The engraved template used to decode those holes.
Secure and Straightforward Backup Process
The backup flow walks you through punching the key into GRAPHENE during setup. It is slower than scribbling words on paper, and permanent in a way paper never is. Verify every punch as you go: the plates forgive nothing, and that is the point.
- During setup, the NGRAVE Zero generates your recovery phrase offline.
- You punch the words into the GRAPHENE plates with the included tools.
- You store the two plates separately, ideally in different secure locations.
Performance and User Experience
1. Setup and Onboarding
Initial setup, including the key ceremony and GRAPHENE punching, takes 30 to 45 minutes. That is the longest onboarding of any hardware wallet we have reviewed, and the most educational. Nothing about it is hard; everything about it is intentional.
2. Daily Use and Navigation
The QR loop with LIQUID (scan, verify on the Zero’s screen, sign, scan back) takes under a minute per transaction once you are used to it. Frequent traders will find it ceremonious. That is the air gap’s tax, and ELLIPAL and Keystone charge the same one.
3. Firmware Updates
Updates arrive by microSD after signature verification, which keeps the no-connections rule intact. Budget a few manual minutes per release. That is the cost of never having an update channel to attack.
Overall User Experience
The through-line is deliberateness. The Zero makes every security-relevant action slightly slower and completely visible. If you want your wallet to be invisible, you will hate it. If you want to watch your security working, you will find it deeply reassuring.
Benefits and Drawbacks of NGRAVE Zero
Comparison with Other Hardware Wallets
NGRAVE Zero vs Ledger Nano X
NGRAVE Zero |  Ledger Nano X | |
|---|---|---|
| Best For | Security-first users who prioritize complete offline isolation. | Users who prefer Bluetooth convenience and app integration. |
| Connectivity | 100% air-gapped. Transactions are signed via QR codes. | Bluetooth and USB connectivity. Requires connecting to Ledger Live or third-party apps. |
| Security Level | EAL7 Certified, the highest level under the Common Criteria. Fully offline key storage. | EAL5+ Certified, strong security but includes wireless exposure points. |
| Data Transmission | One-way QR code system (no digital connection to other devices). | USB or Bluetooth for syncing and transactions. |
| Firmware Updates | Installed via microSD card, offline only. | Updated online through Ledger Live app. |
| Ease of Use | Touchscreen interface with step-by-step setup. | Uses two physical buttons and a small screen. |
| Supported Assets | Bitcoin, Ethereum, Polygon, BNB, and thousands of ERC-20 tokens. | Over 5,500 coins and tokens supported. |
| Price | ~€398 (or €498 with GRAPHENE backup). | ~$149. |
NGRAVE Zero vs Trezor Model T
NGRAVE Zero |  Trezor Model T | |
|---|---|---|
| Best For | Users who want maximum offline protection and advanced physical security. | Users who prefer open-source transparency and seamless software integrations. |
| Security Design | Fully air-gapped. Operates 100% offline using QR codes. | USB-based hardware wallet, secure but not fully offline. Requires a computer or smartphone connection. |
| Certification | EAL7 Certified, the highest global security standard for hardware and software. | No formal EAL certification, but fully open-source, allowing public code review. |
| Open-Source vs Proprietary | Proprietary firmware, independently audited and verified for security. | Open-source firmware and hardware, trusted by developers and the crypto community. |
| Ease of Use | Large 4-inch color touchscreen with simple, smartphone-like navigation. Intuitive step-by-step setup. | Smaller 1.54-inch touchscreen, responsive but compact. Setup requires a connection to Trezor Suite. |
| Backup Method | GRAPHENE stainless-steel backup, fireproof, and corrosion-resistant. Seed was never exposed online. | 12–24-word seed phrase written on paper or stored using optional metal plates. |
| Software Ecosystem | Works with the LIQUID app for portfolio tracking and QR-based transactions. | Integrates with Trezor Suite, MetaMask, and other third-party wallets. |
| Price | Around €398 (ZERO only) or €498 with GRAPHENE. | ~$129. |
Want more depth on Trezor’s features, security, and performance? Read our detailed Trezor Model T review, or see how the Trezor Model T and Ledger Nano X compare.
FAQ
Are crypto cold wallets traceable?
Cold wallets themselves are not traceable. They stay offline and share no personal or device data. Blockchain transactions are public, though, so anyone can follow the movement of funds between wallet addresses.
Can you stake on NGRAVE?
You cannot stake directly on the NGRAVE Zero, because it never connects to the internet. You can, however, prepare and sign staking transactions offline on the Zero, then broadcast them through the LIQUID app on your phone. Your private keys stay offline while you earn rewards. Note that staking support depends on the blockchain and the third-party tools you use.
What is the difference between air-gapped and non air-gapped?
Air-gapped wallets such as the NGRAVE Zero never connect to the internet. They use QR codes or microSD cards for one-way data transfer, which keeps your private keys isolated from any network. Non-air-gapped wallets connect through USB or Bluetooth. They are faster and easier to use, but slightly more exposed to online attacks.
Can I use NGRAVE Zero on multiple devices or with different wallets?
Yes. You can pair the NGRAVE Zero with multiple devices through the LIQUID app. The wallet stays offline, so all communication happens via QR codes. Install LIQUID on different phones or tablets and you can view your portfolio from any of them. Your private keys never leave the Zero.
Final Verdict: Is the NGRAVE Zero Wallet Worth It?
After a thorough NGRAVE Zero Review, it’s clear that this wallet delivers an exceptional level of security that few competitors can match.
Its EAL7 certification and air-gapped architecture suit users who value
complete offline protection and full control over their assets.
If maximum isolation, long-term durability, and true self-custody are what you’re after, the NGRAVE Zero stands out as one of the most secure wallets in 2026.
Final Verdict
The NGRAVE Zero earns its 7.5/10 as the assurance maximalist’s wallet: an EAL7-certified OS, a total air gap, biometrics, and the best-designed first-party backup we have reviewed. The price buys a Ledger and a Trezor together, and in return you get narrower asset coverage and a younger ecosystem than either. If your holdings and temperament justify paying for formally verified security, nothing else offers it. Most people are fully served for half the money. The Zero’s buyers know exactly why they are not most people.
