Eight editions. One image.
Every edition runs the same Bitcoin-only ceremony from the same image with the same published hash. What differs is the shell, and whether the machine can boot from it.
BITCOINkeystick
PCs & Intel Macs · Bootable
The stick boots your computer into a RAM-only environment. Your operating system never runs.
BITCOINkeystick STEALTH
PCs & Intel Macs · Bootable · Unbranded
Identical inside. No label, nothing on the shell that says what it is. For people who would rather it looked like nothing.
BITCOINkeystick read-only
PCs & Intel Macs · Bootable · Write-protect switch
A hardware write-protect slider. The standard stick can in principle be tampered with if it is plugged into an infected running computer between ceremonies; this one cannot.
BITCOINkeystick METALLIC read-only
PCs & Intel Macs · Bootable · Write-protect switch · Special edition
Our most durable stick. Machined metal shell, USB-A and USB-C on one body, hardware write-protect switch.
BITCOINkeystick for Mac
Apple Silicon · Sealed sandbox
Apple Silicon Macs cannot boot from a USB stick at all, so this edition runs the ceremony in a sealed, network-less sandbox inside macOS. macOS keeps running underneath — destruction here is a property of our software, not of the hardware. If you have any PC or Intel Mac, boot the standard edition on that instead.
BITCOINkeystick STEALTH for Mac
Apple Silicon · Sealed sandbox · Unbranded
The Mac edition, unlabelled. Apple Silicon Macs cannot boot from a USB stick at all, so this edition runs the ceremony in a sealed, network-less sandbox inside macOS. macOS keeps running underneath — destruction here is a property of our software, not of the hardware. If you have any PC or Intel Mac, boot the standard edition on that instead.
BITCOINkeystick read-only for Mac
Apple Silicon · Sealed sandbox · Write-protect switch
The write-protect switch still matters here: it protects the stick's contents from tampering between uses, even though the ceremony runs inside macOS.
BITCOINkeystick METALLIC read-only for Mac
Apple Silicon · Sealed sandbox · Write-protect switch · Special edition
The metal-shell stick, run as a sealed sandbox app on Apple Silicon.
Buying more than one
The quantity selector at checkout goes up to 25. Use it rather than checking out several times — international shipping is $25 once per order, not per stick, so one order of three costs $25 in shipping and three orders of one costs $75.
Shipping
United States — free
Free tracked standard shipping, included in the price. Tracking is on every order — an undelivered security device is a trust incident, not a shipping incident. Use the Buy — US button.
International — $25
Flat $25, charged once per order regardless of how many sticks are in it. Use the Buy — international button; it is a separate checkout that carries the shipping rate.
If you are outside the US and use the US button by mistake, the order will not carry shipping and we will have to email you to sort it out. Two buttons is not elegant, but it is the arrangement that charges shipping once rather than once per stick.
What arrives
A stick and a verification card, sealed together in one tamper-evident bag, inside a plain unbranded mailer. Nothing on the outside says what it is or mentions Bitcoin.
The card carries the published SHA-256 and one instruction: if the seal is broken, do not use it. The verify step →
Before you buy
Read this part
There is no recovery. If you lose the phrase, the Bitcoin is gone and there is nothing we or anyone else can do. We never had a copy and we never will. If that sentence makes you uncomfortable, that discomfort is the correct reaction to self-custody and you should sit with it before moving real money.