Crypto Cold Storage: HyperMate and Sealer2100

Why a hardware wallet changes the threat model

A software wallet keeps private keys on a device that also runs a browser and a mail client. That is a reasonable place for spending money and a poor place for a balance you could not afford to lose, because any code running with the right access can request a signature.

A hardware wallet moves key material onto a dedicated device. Transactions are built on your computer or phone but signed inside the device, and the key never leaves it.

This does not replace self-custody key control; it hardens it. You still hold the keys and the recovery phrase, with the same consequences if it is lost.

HyperMate: everyday cold storage

HyperMate is the everyday tier. It pairs with the HyperPay app over Bluetooth, so signing means confirming on the device rather than plugging in a cable. Keys are generated on the device and stay there.

Bluetooth does not compromise key isolation: the connection carries transaction data, not key material. For most long-term balances HyperMate is the practical tier.

• Keys generated and stored on the device, never on a connected machine
• Bluetooth pairing with the HyperPay app for transaction approval
• On-device confirmation of transaction details before signing

Sealer2100: the open-source flagship

Sealer2100 launched in June 2026 as a limited edition of 2,100 units and takes a stricter position on authentication and transparency. Signing is fully offline via QR codes, with no wireless connection to the host, and access is gated by iris recognition rather than a PIN.

It is also the one open-source product in the HyperPay stack. The full Sealer2100 codebase is published under Apache 2.0 on public GitHub and audited by CertiK and Kudelski Labs. The scope is precise: the wallet app is not open source, and neither is HyperMate.

If closed-source software is your objection to HyperPay, Sealer2100 is the answer: keys sit behind firmware you can read, audit and build yourself, with the wallet app used purely as an interface.

Choosing between the two

Choose HyperMate for strong key isolation with minimal friction if you sign transactions regularly and accept a closed-source device from an audited vendor.

Choose Sealer2100 if verifiable firmware, air-gapped QR signing and biometric access are worth extra steps at signing time — typically for larger, rarely moved holdings.

Setting up safely

Record the recovery phrase on paper or metal, store copies in separate physical locations, and never enter it into any computer, phone or website. If the device is lost or destroyed, that phrase is what restores your funds; if someone else obtains it, the hardware protects nothing. The HyperPay wallet security guide sets out the audit record and key-handling practice in more detail.

Where this fits

Hardware pairs with the app rather than replacing it — the HyperPay crypto wallet overview explains what the software side handles.

Pairing a device starts in the app, so download HyperPay from the official download page before you set up HyperMate. Hardware questions are answered in the HyperPay wallet FAQ, the guide to whether crypto wallets can be traced covers the privacy side, and HyperPay vs. Trust Wallet compares hardware pairing across the two apps.