Bitcoin self-custody is all about getting to grips with the concept of “air-gapping”, which is the gold standard for security—keeping your seed in complete physical and wireless isolation from potentially compromised systems.
While many hardware wallets offer air-gap capabilities through QR codes, Blockstream’s JadeLink takes this concept further, offering a specialised tool that transforms the Jade Plus into one of the most secure and versatile Bitcoin custody solutions available today.
If you’ve invested in a Jade Plus hardware wallet or are considering one, the JadeLink offers an essential companion device that could be the difference between good security and truly exceptional security. This isn’t just another accessory—it’s a purpose-built security tool that unlocks capabilities most hardware wallet users don’t even know exist.
What Is the Blockstream JadeLink?
The Blockstream JadeLink is a premium, low-profile USB-C storage drive specifically engineered to work with the Jade Plus hardware wallet. Unlike generic USB drives, the JadeLink is purpose-built for secure Bitcoin operations, with a design philosophy centred on one goal: enabling completely air-gapped workflows for firmware updates and transaction signing.
The Physical Design
The JadeLink features a sleek, minimalist design that prioritises both functionality and durability. Its low-profile USB-C connector ensures it fits securely into the Jade Plus without adding bulk or creating mechanical stress on the port. The compact form factor makes it easy to store alongside your hardware wallet, whether in a safe, security box, or travel case.
The device comes formatted to FAT32 out of the box, ready to work immediately with Jade Plus. While Blockstream doesn’t publish detailed internal specifications, the JadeLink is designed for reliable, long-term data storage in offline environments—exactly what you need for security-critical Bitcoin operations.
How It Differs from a Regular USB Drive
You might be wondering:
“Can’t I just use any USB-C drive or SD card?”
Technically, yes—Blockstream explicitly states that you can use most generic USB drives or SD cards formatted to FAT32 for the same functionality.
However, the JadeLink offers several advantages:
- Purpose-Built Optimisation: JadeLink is specifically designed and tested to work seamlessly with Jade Plus, ensuring compatibility and reliability without the trial-and-error of generic drives.
- Guaranteed Security: Generic USB drives may include firmware, controllers, or features (like automatic cloud syncing or malware protection software) that could compromise security. JadeLink contains no unexpected features that might create vulnerabilities.
- Professional Integration: Using Blockstream’s official accessory ensures you’re following their tested workflows and security models, reducing the risk of implementation errors that could compromise your setup.
- Quality Assurance: Generic drives vary wildly in quality, data retention, and reliability. JadeLink is manufactured to Blockstream’s specifications for long-term Bitcoin custody operations.
- Psychological Peace of Mind: When securing significant Bitcoin holdings, knowing you’re using tested, purpose-built tools rather than improvised solutions provides confidence in your security setup.
For serious Bitcoin custody—especially for large holdings or institutional use—the modest additional cost of an official JadeLink is worthwhile insurance against compatibility issues or unforeseen vulnerabilities with generic drives.
The Two Core Functions of JadeLink
JadeLink enables two critical capabilities that transform how you interact with your Jade Plus hardware wallet:
1. Air-Gapped Firmware Updates
Firmware updates are one of the most vulnerable moments in hardware wallet security. Traditional approaches require connecting your device via USB or Bluetooth to an internet-connected computer—creating a brief but real attack surface where sophisticated malware could potentially compromise your device.
The Traditional Firmware Update Problem:
- Must connect the hardware wallet to an internet-enabled device
- Trust that the computer isn’t compromised
- Hope no malware intercepts or modifies the firmware
- Rely on USB port security (which has known vulnerabilities)
- Accept brief exposure to network-connected systems
The JadeLink Air-Gapped Solution:
With JadeLink, firmware updates become completely isolated from internet-connected systems:
- Download firmware on a separate device: Use any computer to download the latest Blockstream-signed firmware binary and hash files from Blockstream’s official website.
- Transfer to JadeLink: Copy the firmware files onto the JadeLink USB drive. This can be done on any computer—it doesn’t need to be air-gapped since you’re only copying publicly available, cryptographically signed files.
- Disconnect from all networks: Take your JadeLink and Jade Plus to your secure, offline environment—a room with no internet access, no Wi-Fi, no Bluetooth, completely isolated.
- Connect JadeLink to Jade Plus: Insert the JadeLink directly into your Jade Plus via USB-C. The Jade Plus reads the firmware from the JadeLink.
- Verify and update: Jade Plus automatically verifies the cryptographic signature on the firmware (ensuring it’s authentic Blockstream firmware, not modified), then performs the update in seconds—all while completely offline.
- Complete the update: Once finished, disconnect the JadeLink. Your Jade Plus firmware is now updated without ever connecting to an internet-enabled device.
This workflow ensures that your Jade Plus never touches a potentially compromised system during updates, eliminating an entire class of supply chain and malware attacks.
2. Air-Gapped Transaction Signing with PSBTs
The second critical function of JadeLink is enabling completely offline transaction signing using Partially Signed Bitcoin Transactions (PSBTs)—a powerful Bitcoin standard that makes air-gapped operations practical and reliable.
Understanding PSBTs: The Foundation of Secure Transaction Signing
To appreciate what JadeLink enables, you need to understand PSBTs and why they’re revolutionary for Bitcoin security.
What Are PSBTs?
A Partially Signed Bitcoin Transaction (PSBT) is a standardised format introduced in BIP 174 that allows Bitcoin transactions to be created, signed, and broadcast in stages by different devices and software without exposing private keys.
Think of a PSBT as a transaction proposal that contains:
- All the transaction details (inputs, outputs, amounts, addresses)
- Additional metadata needed for signing (previous transaction info, script details, witness data)
- Space for signatures to be added incrementally
- A structure that remains valid as it moves between devices
The Problem PSBTs Solve:
Before PSBTs, signing transactions on air-gapped hardware wallets was complicated and error-prone. Different wallets used proprietary formats, making interoperability difficult. PSBTs provide a universal format that includes everything a signer needs to verify and sign a transaction—even if completely offline and without access to the blockchain or UTXO set.
The PSBT Workflow with JadeLink
Here’s how JadeLink enables secure, air-gapped transaction signing:
Step 1: Create Transaction on Watch-Only Wallet
On your online computer running wallet software (Sparrow, Electrum, Specter, Nunchuk, BlueWallet, or Blockstream Green), create an unsigned transaction:
- Specify the recipient address
- Choose which UTXOs to spend
- Set the transaction fee
- Review all transaction details
The wallet creates a PSBT file containing all this information, but no signatures (since it doesn’t have your private keys).
Step 2: Export PSBT to JadeLink
Save the PSBT file from your wallet software directly to the JadeLink USB drive. This file is just transaction data—it contains no secrets and poses no security risk even if intercepted.
Step 3: Move to Air-Gapped Environment
Take your JadeLink and Jade Plus to your secure, offline location. This could be:
- A dedicated air-gapped computer room
- A Faraday cage or RF-shielded space
- Any location with no network connectivity
- Even just a room where you’ve disabled all wireless devices
Step 4: Connect JadeLink to Jade Plus
Insert the JadeLink into your Jade Plus. The Jade Plus automatically detects the PSBT file and loads it for review.
Step 5: Verify Transaction Details
The Jade Plus’s 1.9-inch display shows you all transaction details:
- Recipient address (verify character by character)
- Amount being sent (confirm exact satoshi amount)
- Transaction fee (ensure it’s reasonable)
- Change address (verify it belongs to your wallet)
- Total output (confirm mathematics are correct)
This verification step is critical—it’s your last chance to catch address spoofing, fee manipulation, or other attacks. The Jade Plus’s larger screen makes this verification process significantly easier than on smaller-screen competitors.
Step 6: Sign the Transaction
After verifying everything is correct, unlock your Jade Plus (via PIN or SeedQR), and authorize the signature. The Jade Plus uses your private keys (which never leave the device) to create a valid signature and adds it to the PSBT.
Step 7: Export Signed PSBT
The signed PSBT is written back to the JadeLink. The transaction is now fully signed and ready to broadcast, but still on the offline device.
Step 8: Return to Online Environment
Take the JadeLink back to your online computer (leaving your Jade Plus in the secure offline location).
Step 9: Broadcast Transaction
Load the signed PSBT from JadeLink into your wallet software and broadcast it to the Bitcoin network. The transaction is now submitted for confirmation in the blockchain.
Why This Workflow Is Superior
This air-gapped PSBT workflow provides exceptional security advantages:
- Private Keys Never Online: Your Jade Plus and its private keys remain permanently offline, never exposed to internet-connected devices.
- Verify Before Signing: You review all transaction details on the secure device before signing, preventing address spoofing or malware manipulation.
- No Trust in Online Device: Even if your online computer is completely compromised, attackers can’t steal your Bitcoin. They can only see public addresses and unsigned transactions.
- Offline Firmware Updates: Combined with air-gapped firmware updates, your Jade Plus can operate its entire lifecycle without ever connecting to an internet-enabled system.
- Defence in Depth: Multiple layers of security (air-gap, offline signing, transaction verification) protect against sophisticated attacks that might defeat single-layer security.
- Auditability: The PSBT format is transparent and human-readable (if you have the technical skills), allowing independent verification of what you’re signing.
Why You Should Purchase JadeLink with Your Jade Plus
If you’re investing in a Jade Plus hardware wallet, adding the JadeLink to your setup is a strategic decision that significantly enhances your security posture. Here’s why:
1. Future-Proof Your Security Setup
Firmware updates are inevitable—Blockstream regularly releases improvements, bug fixes, and new features. Without JadeLink, you’ll eventually face a choice: either skip critical security updates (dangerous) or connect your Jade Plus to an online device for updates (defeating the air-gap).
With JadeLink, you eliminate this dilemma permanently. Your security setup remains consistent and uncompromised regardless of how many firmware updates are released over the years or decades you hold Bitcoin.
2. Maximum Security for High-Value Holdings
If you’re storing significant Bitcoin wealth (whether that’s $10,000 or $10 million—everyone’s threshold differs), JadeLink’s security advantages justify the investment:
The Cost-Benefit Analysis:
- JadeLink cost: ~$50 USD (varies by retailer and bundle pricing)
- Security improvement: Eliminates an entire category of attack vectors
- Peace of mind: Priceless for significant holdings
Even if JadeLink only reduces your risk of loss by 0.1%, that’s an excellent return on investment for any substantial Bitcoin holding. Insurance against six-figure or seven-figure loss for a $50 accessory is an easy decision.
3. Institutional and Business Requirements
For businesses, investment firms, family offices, or any organisation holding Bitcoin on behalf of others, air-gapped workflows aren’t optional—they’re mandatory for insurance, compliance, and fiduciary duty.
JadeLink enables:
- Formal air-gap policies that auditors can verify
- Documented security procedures for compliance
- Defence against sophisticated, targeted attacks
- Separation of duties (different people handle online vs. offline operations)
- Professional-grade custody that satisfies institutional standards
If you’re managing Bitcoin for a business or clients, JadeLink moves your custody from “consumer-grade” to “institutional-grade.”
4. Operational Simplicity Despite Advanced Security
One of JadeLink’s most impressive features is that it provides maximum security while remaining simple to use. The workflow is straightforward:
- Download firmware or save PSBT to JadeLink
- Connect to Jade Plus
- Perform operation
- Disconnect
No complicated command-line interfaces, no manual file format conversions, no cryptographic signature verification commands to remember. Blockstream has optimized the UX so that even non-technical users can execute enterprise-grade security procedures.
5. Compatibility with Advanced Custody Strategies
JadeLink enables sophisticated custody arrangements that provide additional security:
Multisig with Geographic Distribution: Create a 2-of-3 multisig wallet where:
- One Jade Plus with JadeLink stays in your home safe
- Another Jade Plus with JadeLink stays in a bank safety deposit box
- A third Jade Plus with JadeLink stays at a trusted family member’s location
Using JadeLink, you can sign multisig transactions at each location completely offline, then combine the signatures using PSBT combiners. No single location has enough information to steal funds, and you never need to connect hardware wallets to online devices.
Time-Locked Recovery Schemes: Implement sophisticated inheritance plans where different family members hold different signing devices, all operating air-gapped with JadeLink for maximum security across your entire estate plan.
Corporate Treasury Management:
Establish signing workflows where:
- Finance team creates unsigned transactions on online watch-only wallets
- Security team physically transfers JadeLink to offline signing room
- Authorized signers review and sign on air-gapped Jade Plus devices
- Signed transactions return via JadeLink for broadcast
- Complete audit trail of every step without compromising key security
6. Protection Against Supply Chain Attacks
Supply chain attacks—where adversaries compromise devices during manufacturing, shipping, or retail—are a real threat to high-value custody. While no hardware wallet can completely eliminate supply chain risk, JadeLink provides additional protection:
If you receive a Jade Plus that’s been tampered with (firmware modified, hardware compromised), using JadeLink to immediately install fresh, authenticated firmware from Blockstream reduces the window of vulnerability. You can re-flash firmware without ever connecting to an online device, ensuring that even if the device shipped with compromised firmware, you can securely replace it.
For maximum security, some users perform this immediate firmware re-flash as part of their initial setup procedure, treating even brand-new devices as potentially compromised until they’ve loaded clean firmware via JadeLink.
7. Privacy and Opsec Benefits
Beyond security, JadeLink provides privacy advantages:
- No Network Metadata: When you update firmware or sign transactions entirely offline, there’s no network metadata associating your IP address, location, or device identifiers with your Bitcoin activity.
- No Exposure to Companion Apps: Some hardware wallets leak information to companion apps during firmware updates. Air-gapped updates via JadeLink eliminate this information leakage entirely.
- Physical Control: You maintain complete physical control over what data moves to and from your hardware wallet. No data can be transmitted without your explicit action of physically connecting the JadeLink.
For privacy-conscious Bitcoiners, cypherpunks, or anyone concerned about financial surveillance, JadeLink enables truly private Bitcoin custody operations.
Additional Benefits for Regular Self-Custody Management
Beyond the core security advantages, JadeLink improves day-to-day self-custody management in subtle but meaningful ways:
Simplified Backup Procedures
JadeLink can store your firmware files, wallet configuration backups, and other security-critical data in one secure location. This creates a single, organised repository for all your Jade Plus custody materials, making it easier to maintain good security hygiene.
Some users maintain multiple JadeLinks:
- One for operational use (firmware updates, transaction signing)
- One stored in a separate secure location as a backup
- One for travel (if needed), keeping primary devices safely at home
This redundancy ensures you’re never without access to necessary tools for custody operations.
Faster Transaction Workflows
For users who regularly transact but maintain air-gapped security, JadeLink dramatically speeds up the signing process compared to QR code workflows:
QR Code Signing:
- Display unsigned transaction as QR on computer screen
- Use Jade Plus camera to scan QR (can take multiple attempts with large transactions)
- Sign on Jade Plus
- Display signed transaction as QR on Jade Plus
- Scan QR back into computer with webcam or phone camera
- Large transactions may require multiple QR codes in sequence
JadeLink Signing:
- Save PSBT to JadeLink (one second)
- Connect JadeLink to Jade Plus (one second)
- Sign transaction (a few seconds)
- Disconnect JadeLink (one second)
- Load signed PSBT from JadeLink (one second)
The JadeLink workflow is not only faster but also more reliable—no issues with QR code resolution, lighting conditions, camera quality, or large transaction sizes that don’t fit in a single QR code.
Reduced Error Rates
Manual processes (like QR code scanning) introduce opportunities for errors—misread codes, incomplete scans, user mistakes in multi-step procedures. JadeLink’s direct digital transfer eliminates these error sources, making custody operations more reliable and less stressful.
For organisations where multiple staff members may need to execute signing procedures, reducing error rates improves both security (fewer opportunities to make dangerous mistakes) and efficiency (less troubleshooting failed operations).
Testing and Verification
JadeLink makes it easy to test your custody procedures without risk:
- Practice firmware updates with test devices
- Verify your signing workflow with small test transactions
- Train family members or colleagues on procedures without risking funds
- Test disaster recovery procedures to ensure they work when needed
Having a smooth, well-tested workflow builds confidence, so when you need to sign high-value transactions or perform emergency recovery, you can do so calmly and correctly.
Compatibility with Advanced Bitcoin Features
As Bitcoin continues to evolve with new features, JadeLink ensures you can take advantage of them while maintaining air-gap security:
- Taproot and Future Upgrades: As more advanced Bitcoin features are adopted, complex transactions may become larger and more data-intensive. JadeLink handles these without the limitations of QR code size constraints.
- Lightning Channel Management: For advanced users opening Lightning channels using PSBTs, JadeLink provides a reliable workflow for signing funding transactions.
- Covenant Proposals: If Bitcoin eventually adopts covenant proposals or other advanced scripting features, JadeLink’s PSBT workflow will support these sophisticated transaction types.
- Cross-Chain Atomic Swaps: Some atomic swap protocols use PSBTs to coordinate trades across blockchains. JadeLink enables secure participation in these protocols while maintaining air-gap security.
Setting Up Your JadeLink: Practical Considerations
If you decide to purchase JadeLink (and we strongly recommend you do if you’re getting a Jade Plus), here are practical tips for setup and management:
Initial Setup
- Verify Authenticity: Upon receiving your JadeLink, verify that it’s an official Blockstream product. Check for proper packaging, product quality, and compare with official Blockstream product images.
- Format Verification: Confirm that the JadeLink is formatted as FAT32. While it should come pre-formatted, verifying ensures compatibility.
- Test Immediately: Before relying on JadeLink for important operations, test both firmware updates and PSBT signing with small test transactions. This builds familiarity and confidence.
- Document Your Workflow: Write down your step-by-step procedure for both firmware updates and transaction signing. Include:
- How you verify firmware authenticity
- Your transaction verification checklist
- Where you store the JadeLink when not in use
- Emergency procedures if JadeLink is lost or damaged
Storage and Physical Security
Secure Storage Location: Store your JadeLink alongside your Jade Plus in a secure location:
- Home safe or security box
- Bank safety deposit box
- Secure facility with access controls
- Any location where physical access is restricted
Separation from Online Devices: Keep JadeLink physically separate from computers or devices that connect to the internet, reducing risk of accidental compromise.
Backup JadeLink: Consider purchasing a second JadeLink as a backup, storing it in a separate secure location. This provides redundancy if your primary JadeLink fails or is lost.
Tamper-Evident Storage: Some security-conscious users store their JadeLink in tamper-evident bags or containers, making it immediately visible if someone accessed the device without authorisation.
Operational Security Practices
- Minimise Connection to Online Devices: Only connect JadeLink to online devices for the brief moment necessary to transfer firmware or PSBT files. Immediately disconnect and move to your secure air-gapped environment.
- Verify Firmware Hashes: When downloading firmware from Blockstream, always verify the cryptographic hash matches Blockstream’s published hashes. This ensures the firmware hasn’t been tampered with during download.
- Clean Working Environment: When using JadeLink to transfer PSBTs, ensure your air-gapped signing environment is free from cameras, recording devices, or other monitoring equipment that could compromise your security.
- Transaction Amount Verification: Before signing any transaction, carefully verify the exact amounts, recipient addresses, and fees on your Jade Plus display. The larger screen makes this verification process much easier than on competitors.
- Multiple Verification Steps: For high-value transactions, implement a policy of multiple independent verifications—different people checking addresses, amounts, and transaction details before signing.
The Bundle Option: Jade Plus + JadeLink
Blockstream offers a bundle that includes both Jade Plus and JadeLink, typically at a modest discount compared to purchasing separately. This bundle represents the ideal starting point for serious Bitcoin self-custody:
Pricing Considerations:
- Jade Plus alone: ~$149-169 USD depending on model
- JadeLink alone: ~$50 USD
- Jade Plus + JadeLink Bundle: ~$179-199 USD (varies by retailer)
The bundle saves you roughly $20-30 and ensures you have a complete, tested kit for maximum-security self-custody from day one.
But is the price point really the issue when you’re planning to secure generational wealth?
Who Should Get the Bundle:
- Anyone purchasing a Jade Plus for the first time (start with best security practices)
- Users storing more than a few thousand dollars in Bitcoin (security ROI justifies cost)
- Businesses or organisations holding Bitcoin on behalf of others (institutional requirements)
- Privacy-focused users who want to minimise online exposure (opsec considerations)
- Anyone planning to hold Bitcoin for years or decades (long-term custody needs)
- Users who value the highest security tier available (perfectionist mindset)
Essentially, if Bitcoin security matters to you enough that you’re purchasing a hardware wallet, adding JadeLink for an additional $50 (or getting the bundle) is a logical extension of that security investment.
JadeLink vs. Other Air-Gap Solutions
It’s worth comparing JadeLink to other air-gap approaches to understand its advantages:
QR Code Only
Advantages of QR Codes:
- No physical connection required
- Works with any device that has a camera and screen
- Completely wireless (useful in some scenarios)
Disadvantages of QR Codes:
- Large transactions may require multiple QR codes
- Slower than direct digital transfer
- Quality depends on screen resolution, lighting, and camera quality
- Can fail with certain transaction types or sizes
JadeLink Advantage: Faster, more reliable, handles any transaction size without QR limitations, simpler workflow.
SD Cards or Generic USB Drives
Advantages of Generic Drives:
- May already own one
- Potentially less expensive
- Widely available
Disadvantages of Generic Drives:
- Unknown firmware or features that might compromise security
- Untested compatibility with Jade Plus
- May require troubleshooting or configuration
- Inconsistent quality and reliability
JadeLink Advantage: Purpose-built for Jade Plus, guaranteed compatibility, tested and optimised by Blockstream, peace of mind for security-critical operations.
Other Hardware Wallet Air-Gap Solutions
Most hardware wallets don’t offer JadeLink-equivalent functionality. Some high-end devices (like Coldcard) use SD cards, while others rely exclusively on QR codes or don’t support air-gapping at all.
JadeLink’s Value Proposition: It provides enterprise-grade air-gap capabilities at a consumer-friendly price point, with user-friendly workflows that don’t require technical expertise. This combination of security, usability, and affordability is rare in the hardware wallet market.
Common Questions About JadeLink
No. Jade Plus works perfectly well with USB-C or Bluetooth connections for most users. JadeLink is for users who want maximum security through complete air-gap operations.
No, JadeLink is specifically designed for Jade Plus. The original Jade doesn’t support this functionality.
You can continue using Jade Plus with USB/Bluetooth connections, or purchase a replacement JadeLink or use a generic FAT32-formatted USB drive as a substitute (though official JadeLink is recommended).
No. If you can copy files to a USB drive and plug it into your Jade Plus, you have all the skills needed. Blockstream has made the workflow very user-friendly.
Blockstream typically releases firmware updates a few times per year. Updates are optional but recommended for bug fixes, security improvements, and new features.
No, and you should never store your seed phrase on any digital device. Seed phrases should be written on paper or stamped in metal, stored in secure physical locations.
A Small Investment That Maximises Your Security
The Blockstream JadeLink represents a deceptively simple piece of hardware that unlocks extraordinary security capabilities. For approximately $50—the cost of a nice dinner—you can transform your Jade Plus from an excellent hardware wallet into a truly air-gapped custody solution that rivals systems costing ten times more.
The security advantages are clear:
- Complete isolation from online systems during firmware updates
- Air-gapped transaction signing for maximum private key protection
- Professional-grade custody procedures accessible to individual users
- Future-proof security that adapts to evolving threats
- Peace of mind for high-value holdings
The operational benefits are equally compelling:
- Faster transaction signing than QR workflows
- Reduced error rates through direct digital transfer
- Simplified custody procedures that are easier to document and audit
- Compatibility with advanced Bitcoin features and complex custody arrangements
For anyone serious about Bitcoin self-custody—whether you’re securing your personal savings, managing a family’s wealth, or handling institutional holdings—the JadeLink is an essential tool, not an optional accessory.
The question isn’t
“Can I afford to buy JadeLink?”
The real question is
“Can I afford NOT to buy JadeLink?”
When the alternative is accepting unnecessary security compromises, the answer becomes obvious.
If you’re purchasing a Jade Plus, get the bundle with JadeLink. If you already own a Jade Plus without JadeLink, add one to your setup. Your future self—and your Bitcoin—will thank you for taking security seriously enough to invest in the tools that make maximum protection practical.
In Bitcoin, security isn’t about perfection; it’s about eliminating as many attack vectors as possible while maintaining usability. JadeLink eliminates an entire category of attacks while actually improving usability. That combination is rare enough to be remarkable, and valuable enough to be essential.
Ready To Get A Jade Link?
If you would like to purchase the Jade hardware wallet, you can get one directly from the Blockstream store
