Blockstream on Nostr: Jade doesn’t use a physical secure element. We just published a full post on how ...
Jade doesn’t use a physical secure element.
We just published a full post on how the Virtual Secure Element works:
https://blog.blockstream.com/jade-virtual-secure-element/ 
Your recovery phrase sits encrypted on the device. Unlocking it needs the PIN you type on Jade and a key share from a blind oracle. Neither is enough by itself.
The oracle never sees the real PIN or any wallet data. It only gets a scrambled version that includes a secret unique to that particular Jade.
Three wrong PINs and both sides wipe. Device and oracle. After that the encrypted data is permanently unusable without the recovery phrase.
A locked Jade holds nothing an attacker can use alone.
Everything is open source, firmware, hardware, and the oracle. You can run the oracle yourself, or skip it completely and use SeedQR or type the recovery phrase.
Published at
2026-08-13 23:02:54 UTCEvent JSON
{
"id": "d8ce055289b6ef0efe46a1cc23d4e0adea6a288b48be9efab473d4e57f451bb6",
"pubkey": "922945779f93fd0b3759f1157e3d9fa20f3fd24c4b8f2bcf520cacf649af776d",
"created_at": 1786662174,
"kind": 1,
"tags": [
[
"r",
"wss://premium.primal.net/"
],
[
"r",
"wss://relay.primal.net/"
],
[
"imeta",
"url https://blossom.primal.net/3edfbdcedb57ced1f239e4c2e9e231cdbfb7e0cd6206d72762547ab89643e3b8.png",
"m image/png",
"dim 1920x1080",
"service nip96"
],
[
"client",
"Primal Web"
]
],
"content": "Jade doesn’t use a physical secure element.\n\nWe just published a full post on how the Virtual Secure Element works:\n\nhttps://blog.blockstream.com/jade-virtual-secure-element/\n\n https://blossom.primal.net/3edfbdcedb57ced1f239e4c2e9e231cdbfb7e0cd6206d72762547ab89643e3b8.png \n\nYour recovery phrase sits encrypted on the device. Unlocking it needs the PIN you type on Jade and a key share from a blind oracle. Neither is enough by itself.\n\nThe oracle never sees the real PIN or any wallet data. It only gets a scrambled version that includes a secret unique to that particular Jade.\n\nThree wrong PINs and both sides wipe. Device and oracle. After that the encrypted data is permanently unusable without the recovery phrase.\n\nA locked Jade holds nothing an attacker can use alone.\n\nEverything is open source, firmware, hardware, and the oracle. You can run the oracle yourself, or skip it completely and use SeedQR or type the recovery phrase.",
"sig": "32b7baede051292a36d328921f35aa320a378f81567e4613b9d1a5a30f3a590d2bd60815d2111b0157863233b366e922bf262e764c32dbf6d94d3c283fd1a6fd"
}
