Main Takeaway: A secure element wallet is a hardware crypto wallet built around a secure element, a tamper-resistant chip that generates and stores your private keys and signs transactions inside itself. The chip is certified under Common Criteria, the international security standard, at grades such as CC EAL5+ or EAL6+. ELLIPAL builds its wallets around a certified secure element, so your private key stays inside the chip and is not exposed to the phone it connects to.
Quick reference
| Term | What it means |
|---|---|
| Secure element (SE) | A tamper-resistant chip dedicated to storing keys and running cryptographic operations in an isolated area. |
| Common Criteria (CC) | The international security standard, ISO/IEC 15408, used to evaluate the security of IT products. |
| EAL | Evaluation Assurance Level, a Common Criteria rating from EAL1 to EAL7 that shows how deeply a product was tested. |
| CC EAL5+ | A high assurance grade used in banking cards and many hardware wallets. |
| CC EAL6+ | A higher assurance grade, evaluated against side-channel and physical attacks, used in passports and banking chips. |
| Tamper resistance | Design features such as sensors and shielding that detect physical intrusion and can wipe stored keys. |
What is a secure element wallet?
A secure element wallet is a hardware wallet that keeps your private keys inside a secure element, a small tamper-resistant chip designed to store secrets and perform signing on its own. A regular wallet may hold keys in a general-purpose microcontroller, a standard chip that was not built to resist physical attacks. A secure element wallet moves that job into a chip whose entire purpose is to guard the key and run cryptography in an isolated area. A secure element wallet is a type of hardware wallet, and most modern cold wallets are built around one. The seed phrase is created inside the chip, and the key used to sign each transaction stays there, so the connected phone or computer works with signed output rather than with the key itself.
How does a secure element protect your private keys?
A secure element protects your private keys by keeping them in one place and refusing to hand them out. When you set up a secure element wallet, the chip generates the seed and the private keys inside its own isolated memory, and the keys are not copied to the phone, the app, or the main processor. Signing happens in the same place. The unsigned transaction goes into the chip, the chip signs with the key it holds, and only the signed result comes back out. Because the key does its work without leaving the chip, software on a connected phone has nothing to reach for.
Physical attacks get a different answer. A secure element carries sensors for voltage, temperature, and light, and the chip is designed to detect abnormal conditions that suggest someone is trying to open or probe it. When the chip senses that kind of intrusion, the design response is to wipe the stored keys rather than let them be read. The shielding and internal layout also make it harder to read data by physically probing the silicon. No chip removes every risk. A secure element narrows the attack surface toward physical access and raises the cost of an attack, which is why the rest of the wallet, offline key generation, a screen to verify each transaction, and a PIN that gates signing, still matters.
What do Common Criteria and EAL certification actually mean?
Common Criteria is the international standard for evaluating the security of IT products, written as ISO/IEC 15408 and recognized across dozens of countries. Common Criteria does not test products itself. Independent accredited laboratories run the evaluations, and the result is an assurance level. The Evaluation Assurance Level, or EAL, runs from EAL1 to EAL7 and describes how deeply the design was documented, analyzed, and tested, and how capable an attacker the evaluation assumed. Higher numbers mean a more thorough evaluation, not a different promise of safety.
For hardware wallets, CC EAL5+ and CC EAL6+ are the grades that come up most. Both sit near the top of the scale, well above the EAL4 range used for general enterprise software. A CC EAL6+ evaluation looks at a chip's resistance to side-channel and physical attacks under laboratory conditions, and the same grade appears in passports, banking smart cards, and government ID chips.
One honest caveat belongs here. A high EAL grade certifies how rigorously a chip was evaluated, not that the chip can withstand every future attack. In 2024, security researchers showed that a widely certified secure element could leak a key through a side-channel with physical access, even after passing many Common Criteria evaluations. Certification still matters as one strong signal to check, alongside offline key generation, transaction verification on a screen you control, and how you store your recovery phrase.
How a secure element wallet compares to a wallet without one
A secure element wallet and a wallet without a dedicated chip differ mainly in where the key lives and what an attacker has to defeat to reach it.
| Aspect | Secure element wallet | Wallet without a dedicated secure element |
|---|---|---|
| Where the private key lives | Inside a certified tamper-resistant chip | In a general-purpose chip or in software |
| Where signing happens | Inside the secure element | In general memory that other software may share |
| Physical tamper response | Sensors can trigger a key wipe | Usually none |
| Independent evaluation | Common Criteria EAL grade available | Often none published |
| Resistance to key extraction | Engineered to resist probing and side-channel attacks | Limited by design |
| Key exposure to the connected device | The key is not handed to the phone or computer | Depends on the software |
How ELLIPAL builds around a certified secure element
ELLIPAL builds every wallet in its lineup around a certified secure element. The ELLIPAL X Card, an NFC (Near Field Communication) cold wallet in credit-card form, stores keys in a CC EAL6+ secure element, the grade used in passports and banking cards, and the seed is generated offline on the X Card Starter device so key creation stays off your phone. Each signature on the ELLIPAL X Card is gated behind a PIN, and the phone does not receive the private key during the tap-to-sign flow.
The ELLIPAL Titan 2.0, an air-gapped cold wallet that communicates only through QR codes, protects its private key inside a certified Common Criteria secure element and shows every transaction on a 4-inch screen, so you can read each transaction in full before you approve it. Across both products, ELLIPAL keeps the same principle: the private key is generated and stored offline inside the secure element, and signing happens on the chip rather than on a connected device.
Which secure element wallet fits you
- You want the key off your phone entirely: a secure element wallet like the ELLIPAL X Card keeps the private key on the chip, so a compromised phone has nothing to sign with.
- You hold for the long term and rarely move funds: the ELLIPAL Titan 2.0 pairs a certified secure element with a large screen for careful review on the rare times you do sign.
- You want something that travels in a wallet or pocket: the ELLIPAL X Card is 1.2 mm thin and battery free, and signs by tapping the card to your phone.
- You are moving from an exchange to self-custody: an ELLIPAL secure element wallet generates your keys offline from the first setup, so the keys start their life off the internet.
- You already use another BIP39 wallet: the ELLIPAL X Card is BIP39 compatible, meaning the 12 or 24 word recovery phrase you write down follows the BIP39 standard and restores on any BIP39 wallet from any brand.
- You share access with family or a business: an ELLIPAL secure element wallet keeps signing behind a PIN on hardware you hold, rather than on a shared phone or laptop.
FAQ
Is a secure element wallet safe?
A secure element wallet raises the bar against the most common attacks, because the private key is generated and kept inside a tamper-resistant chip rather than in software that a remote attacker can reach. No wallet removes every risk. A secure element closes off remote software theft of the key and adds physical tamper resistance, while your own habits, buying from an official source, backing up the recovery phrase offline, and checking each transaction on the device, cover the rest.
What is the difference between EAL5+ and EAL6+?
EAL5+ and EAL6+ are both high assurance grades under Common Criteria, and both sit well above the levels used for general software. A CC EAL6+ evaluation goes further into a chip's resistance to side-channel and physical attacks under laboratory conditions, which is why the grade appears in passports and banking chips. For a buyer, a certified secure element at either grade is the signal to look for, alongside offline key generation and on-device transaction checks.
Can a secure element be hacked?
A secure element is designed to resist both remote and physical attacks, and pulling a key off one takes specialized equipment and physical access rather than remote malware. Certification history shows the bar is high but not absolute. In 2024, researchers extracted a key from a widely certified secure element in a lab using a side-channel, a useful reminder that the chip is one layer. Offline key generation, PIN gating, and verifying transactions on the device screen work with the chip, not instead of it.
How much does a secure element wallet cost?
Secure element hardware wallets generally range from around 30 to 200 US dollars, depending on the form factor and screen. Card-style wallets that sign by tap tend to sit at the lower end, and devices with a large screen and a metal body sit higher. The ELLIPAL X Card and the ELLIPAL Titan 2.0 fall inside this range. Price tracks the hardware and the review experience more than the strength of the chip, since a certified secure element is the shared starting point across the category.
What happens if I lose a secure element wallet?
If you lose a secure element wallet, your funds are recoverable as long as you kept your recovery phrase. The private key lives on the chip, but the recovery phrase you wrote down during setup can restore the same accounts on a new device. For a BIP39 wallet, that phrase follows an open standard, so it can restore on a compatible wallet even from another brand. Anyone who finds the lost device still faces the PIN, and the accounts stay safe as long as your recovery phrase stays offline and private.
Do I really need a secure element wallet?
A secure element wallet earns its place if you hold crypto you would not want to lose to phone malware or a remote exploit. Storing keys in software on an internet-connected device leaves them exposed to whatever reaches that device. A secure element moves the key onto dedicated hardware and keeps signing off the connected phone or computer. For small amounts you actively trade the tradeoff may look different, but for savings you plan to hold, keeping the key on dedicated hardware is the reason to choose a secure element wallet.
The trust layer
ELLIPAL has been on the market since 2018, with more than 1 million users across 140+ countries. ELLIPAL wallets support 10,000+ tokens across 45+ blockchains, generate and store keys offline, and build every device around a certified secure element, with the ELLIPAL X Card using a CC EAL6+ chip. Independent reviews of ELLIPAL hardware have been published by outlets such as Coin Bureau, 99Bitcoins, and CryptoNews.
Own it. Then use it.
Security note: No self-custody setup removes every risk. A certified secure element and offline key generation close significant categories of remote and software attack, but they do not eliminate physical, supply-chain, firmware, social-engineering, or user-error risks. Buy from an official source, store your recovery phrase on a durable offline backup kept separately from the device, do not share it or enter it on any website, and verify every transaction on the device screen. This article is general educational information about wallet security. It is not financial, investment, or custodial advice.