The short answerThe Titan takes air-gapping literally: a sealed metal body with no ports at all, and an anti-tamper mechanism that wipes the device if the case is opened. Its software side is the weakness — closed firmware, a mandatory companion app, and less independent scrutiny than any open competitor.
Best forPhysically rugged air-gapped storage
Key isolationweight 25%
8.0avg 8.6
Firmware opennessweight 20%
4.0avg 7.8
Recovery designweight 20%
7.0avg 8.1
Asset coverageweight 15%
9.0avg 7.3
Vendor conductweight 10%
6.5avg 7.9
Usabilityweight 10%
8.0avg 8.1
this service category average across 15Score = Σ mark × weight. Works well for a specific use case, weaker outside it. Methodology.
| Criterion | Mark | What we found | Source | Checked |
|---|
| Key isolation | 8.0 | not sourced yet | not sourced yet | — |
| Firmware openness | 4.0 | not sourced yet | not sourced yet | — |
| Recovery design | 7.0 | not sourced yet | not sourced yet | — |
| Asset coverage | 9.0 | not sourced yet | not sourced yet | — |
| Vendor conduct | 6.5 | not sourced yet | not sourced yet | — |
| Usability | 8.0 | not sourced yet | not sourced yet | — |
What we liked, and what fell short
Liked- Fully sealed metal body with genuine anti-tamper response
- No USB, Bluetooth or Wi-Fi; QR only
- Broad chain support through its own app
Fell short- Closed firmware with limited independent audit history
- Companion app is required and collects more data than peers
Why the marks landed where they did
As a physical object the Titan is convincing. One-piece metal construction, no USB data port, no Bluetooth, no Wi-Fi, and a tamper response that erases the key if the case is breached. For resisting physical attack it is among the better-designed devices here.
The software trade-off
Firmware is closed and has had limited independent review. The companion app is mandatory for transaction construction and collects more usage data than open alternatives. For a category where the point is eliminating trust, requiring users to trust both an unauditable device and a data-collecting app is a meaningful step backwards from what BitBox or Trezor offer.
Practical use
QR-only workflow, large colour touchscreen, broad chain coverage through the Ellipal app, and firmware updates by microSD. The interface is approachable and the air gap is real.
Who should use it
Users whose primary concern is physical tampering and who accept closed software. Anyone weighing verifiability should choose a Keystone — comparable air gap and coverage, more of the stack open to review.
FAQ
Is the Ellipal Titan really air-gapped?+
Yes. The sealed metal body has no data ports, Bluetooth or Wi-Fi, and all communication happens by QR code.
What happens if someone opens the case?+
The anti-tamper mechanism triggers and the device wipes its stored key, which is why a written backup is essential.
Is Ellipal's firmware open source?+
No, and it has had limited independent review, which is the main reason it scores below comparable air-gapped devices.
Ellipal or Keystone?+
Keystone, in most cases: similar air-gapped workflow and coverage, with more of its stack open to inspection and a stronger secure-element configuration.
