Main Takeaway: Entering the wrong PIN on a hardware wallet does not delete your crypto. After a set number of wrong attempts, the device erases the keys stored on it, so a stranger holding the device cannot keep guessing. Your coins stay on the blockchain. Your seed phrase restores access on a replacement device. On the ELLIPAL X Card, 10 wrong Card-PIN attempts reset the card to factory settings.
Quick Reference
| Term | What it means |
|---|---|
| PIN (Card-PIN) | The short code that unlocks a wallet for use. On the ELLIPAL X Card, the Card-PIN is set on the offline ELLIPAL Starter during wallet creation. |
| Device password | The code that unlocks the ELLIPAL Titan 2.0. A device password controls access to the hardware, and it does not replace the seed phrase. |
| Attempt limit | The number of wrong entries a device accepts before erasing the account data it holds. The ELLIPAL X Card limit is 10. |
| Auto-wipe | The device deleting the keys and accounts it stores, returning to an out-of-box state. Also called a factory reset. |
| Seed phrase | The 12 to 24 word BIP39 backup that recreates your private keys on any BIP39 compatible wallet, from any brand. |
| Passphrase | An optional extra word layered on top of a seed phrase, which produces a separate hidden wallet. |
What Happens If You Enter the Wrong PIN on a Hardware Wallet?
Nothing happens on the first wrong entry beyond an error message. A hardware wallet counts consecutive wrong entries, and once that count reaches the device limit, the wallet erases the private keys and account data held in its secure chip. The wallet returns to an out-of-box state, ready to be set up again.
The erase step is what stops a thief. A four to eight digit code is short enough that anyone holding the hardware could work through the possibilities given unlimited tries. An attempt limit removes the unlimited part, because the guessing window closes long before the code can be worked out.
Your crypto is not stored inside the device. Balances live on their blockchains, and the wallet stores the private keys that authorise spending from those balances. Wiping a wallet removes a copy of those keys from that particular piece of hardware, and your seed phrase backup recreates the same keys elsewhere.
Why Hardware Wallets Erase Themselves Instead of Locking You Out
A permanent lockout would leave your keys sitting on a chip that an attacker keeps, which gives that attacker unlimited time to work on extracting them. Erasing the keys ends that possibility, because there is nothing left on the chip to extract. This is why an attempt limit paired with an auto-wipe is a common design in cold storage hardware.
The tradeoff is real and worth stating plainly. An auto-wipe shifts the burden onto your backup, so the seed phrase you wrote down during setup becomes the thing that matters. A wallet that erases itself protects you from a thief and offers no protection against your own missing backup.
This is also why a wipe is not the emergency it first appears to be. Anyone with a written seed phrase treats a wiped device as an inconvenience of a few minutes. Anyone without one treats it as a permanent loss, which is the same outcome as losing the hardware wallet entirely.
What Happens on the ELLIPAL X Card After 10 Wrong Card-PIN Attempts
The ELLIPAL X Card is an NFC cold wallet in credit-card form, and it signs transactions when you hold the card against your phone. The ELLIPAL X Card is protected by a Card-PIN that you set on the ELLIPAL Starter, an offline device used for setup, so the code is chosen away from your phone.
Anyone who finds an ELLIPAL X Card still needs the Card-PIN to use it, and 10 wrong attempts reset the card to factory settings. The keys and accounts held on the card are erased at that point, and the card behaves like a new one. Recovery works through the seed phrase written down during setup.
A forgotten Card-PIN has a documented path back. The ELLIPAL Starter reinitialises the ELLIPAL X Card using your seed phrase, and you then set a new Card-PIN on the card. The full sequence is covered in the ELLIPAL X Card setup guide. The keys stay inside a CC EAL6+ certified secure element throughout, which is the certification level used for chips in electronic passports and payment cards.
Two practical details follow from the card format. The ELLIPAL X Card has no battery and no screen, so there is no charge state to manage and no way to read the seed phrase off the card itself. Anyone running a second card as a spare keeps the same seed phrase on both, which means a wipe on one card leaves the other untouched.
What Happens on the ELLIPAL Titan 2.0 When the Device Password Is Wrong
The ELLIPAL Titan 2.0 is an air-gapped cold wallet, meaning it has no Wi-Fi, no Bluetooth, no USB data connection, and no NFC. Transactions move in and out through QR codes read by the device camera, so signing happens offline and the private keys stay off any internet-connected device. Access to the ELLIPAL Titan 2.0 itself is controlled by a device password set during account creation.
Repeated wrong password entries cause the ELLIPAL Titan 2.0 to erase the account data it stores, and the seed phrase recovers those accounts afterwards. The device password unlocks the hardware and it is a separate thing from the seed phrase, so knowing one does not reveal the other.
The ELLIPAL Titan 2.0 adds a second erase trigger that has nothing to do with typing. A full metal-sealed body guards the internals, and the device is designed to erase the stored private keys if tampering or disassembly is detected. Someone who opens the case to reach the chip directly finds the keys already gone.
Two optional layers change what a coerced unlock reveals. A passphrase produces a separate hidden wallet on top of the same seed phrase, and a secondary wallet holds a different set of accounts behind its own password. Handing over one password in a pressured situation does not expose what sits behind the other. The mechanics of offline confirmation are covered in air-gapped signing.
How PIN Protection Mechanisms Differ
Wallets handle repeated wrong entries in a few distinct ways. The mechanism matters more than the label, because it decides what a thief gets and what you need in order to recover.
| Mechanism | Behaviour after repeated wrong entries | What recovery needs |
|---|---|---|
| Attempt limit with auto-wipe (ELLIPAL X Card, ELLIPAL Titan 2.0) | Erases the keys and accounts held on the device once the limit is reached | Seed phrase, on the same device or a new one |
| Escalating time delay | Adds a longer wait after each wrong entry, and the keys stay on the chip | The correct code, or the seed phrase |
| Lockout without erase | Refuses further entries, and the keys remain on the chip for as long as the attacker holds it | The correct code, or a vendor reset, or the seed phrase |
| Anti-tamper physical erase (ELLIPAL Titan 2.0) | Erases the stored keys when the sealed casing is forced open | Seed phrase |
| Passphrase-only hidden wallet | Reveals the visible wallet, and the hidden wallet stays unreachable without the passphrase | Seed phrase plus the exact passphrase |
The ELLIPAL X Card and the ELLIPAL Titan 2.0 sit in the same row for a reason. Different tools, same mission. One rides in a wallet next to your everyday cards and one stays home holding long-term positions, and both close the guessing window the same way.
Which Situation Matches Yours
- You mistyped once or twice and stopped. The counter resets on a correct entry, so entering the right code clears it and nothing is lost.
- Your card or device was stolen. The attempt limit is working for you. Restore your seed phrase onto new hardware, move the funds to a freshly generated wallet, and treat the old accounts as exposed.
- You forgot the code but still hold the hardware. Reinitialise with your seed phrase and set a new code. On the ELLIPAL X Card, the ELLIPAL Starter handles this step.
- You wrote the seed phrase down but cannot find it. Stop entering guesses. Every wrong attempt spends part of your remaining margin, and finding the backup first costs nothing.
- You skipped the seed phrase backup. Move funds to a wallet you have properly backed up while you still have access, then set the device up again from scratch.
- You are setting up hardware for family or inheritance. Document that repeated wrong entries wipe the device, so a relative testing codes at random does not destroy the only working copy.
- You bought hardware secondhand. Reset it and generate a new wallet before funding it, because a device that arrives already set up may hold someone else's keys.
Frequently Asked Questions
Does entering the wrong PIN delete my crypto?
No. Your crypto stays on its blockchain, and a wallet stores only the private keys that authorise spending. Reaching the attempt limit erases the keys held on that device, and your seed phrase recreates the same keys and the same balances on new hardware. The practical loss is the device setup and the time to restore, not the funds.
How many wrong Card-PIN attempts does the ELLIPAL X Card allow?
Ten. After 10 wrong Card-PIN attempts, the ELLIPAL X Card resets to factory settings and the account data on the card is erased. The counter resets whenever the correct Card-PIN is entered, so occasional mistakes over months of normal use do not accumulate toward the limit.
I forgot my Card-PIN. Can I get back in?
Yes, through your seed phrase rather than through the forgotten code. The ELLIPAL Starter reinitialises the ELLIPAL X Card from your seed phrase, and you then choose a new Card-PIN. The old code cannot be looked up or recovered, because it is not stored anywhere outside the card. Keep the seed phrase reachable before you start.
Is a wallet that erases itself safe to rely on?
An auto-wipe is a deliberate protection rather than a failure mode, and it is common across cold storage hardware. The honest condition attached to it is that your seed phrase backup has to exist and be findable. A wallet that erases itself removes the brute-force path for a thief and puts real weight on your backup, which is the tradeoff you accept with self-custody.
Do I need to buy a new wallet after a PIN wipe?
No. A wipe returns the device to an out-of-box state, and the same hardware sets up again at no cost. The ELLIPAL X Card is reinitialised with the ELLIPAL Starter and your seed phrase, and the ELLIPAL Titan 2.0 restores accounts from a 12, 15, 18, 21, or 24 word seed phrase. Replacement hardware is only needed if the device is lost or physically damaged.
What if I forget the code and lose my seed phrase backup?
That combination is the one case with no recovery path, for any self-custody wallet from any brand. No manufacturer holds a copy of your keys, so there is no reset request that restores access. While you still have a working unlock, move the funds to a wallet whose seed phrase you have written down and stored offline. Guidance on durable backups is in our seed phrase storage guide, and the limits of guessing a phrase are covered in can a seed phrase be guessed.
Trust Layer
ELLIPAL has been on the market since 2018, with more than 1 million users across 140+ countries. The ELLIPAL X Card is an NFC cold wallet built around a CC EAL6+ certified secure element, and the ELLIPAL Titan 2.0 stores keys in a certified secure element inside a full metal-sealed body. Both follow the BIP39 and BIP44 standards, so a seed phrase created on ELLIPAL hardware restores on any BIP39 compatible wallet. Together the range covers 10,000+ tokens across 45+ blockchains.
Own it. Then use it.
Security note: No self-custody setup removes every risk. Attempt limits, auto-wipe, and anti-tamper hardware close significant categories of attack, but they do not eliminate physical, supply-chain, firmware, social-engineering, or user-error risks. Buy from an official source, store your recovery phrase on a durable offline backup kept separately from the device, do not share or digitally enter it, and verify every transaction on the device before approving. This article is general educational information about wallet architecture. It is not financial, investment, or custodial advice. Product information is accurate as of 2026. Product variants may differ.