NGRAVE Review: Is This the Safest End-to-End Cold Wallet for Self-Custody?

• What it is: NGRAVE is a fully air-gapped hardware wallet ecosystem built around three parts: the ZERO device (signing), the GRAPHENE metal backup (seed storage), and the LIQUID mobile app (portfolio view and transaction broadcasting).
• Core value: It aims to remove as many online attack surfaces as possible by using no Wi-Fi, no Bluetooth, no NFC, no USB data connection for signing only QR codes. Keys never leave the device or touch an internet-connected computer.
• Security posture: NGRAVE ZERO is one of the few wallets with EAL7-certified secure element and OS design (one of the highest levels of Common Criteria evaluation), plus tamper-resistant hardware and a unique way of generating entropy.
• End-to-end story: Unlike many wallets that treat backup as an afterthought, NGRAVE ships with GRAPHENE a two-plate stainless-steel backup system designed to resist fire, water, and physical damage while avoiding simple theft of the seed phrase.
• Who it’s for: Long-term holders, high-net-worth users, builders, or security-conscious investors who want an offline, high-assurance self-custody setup and are willing to go through a slightly more involved setup for extra peace of mind.
• Who it’s not for: People who only hold a small amount of crypto, trade daily on centralized exchanges, or want the absolute lowest-friction experience with minimal security overhead.
• Pricing: NGRAVE sits at the premium end of the hardware wallet market. The ZERO + GRAPHENE combo costs more than most mainstream wallets but that price reflects the security focus and materials.
• Biggest strengths: Fully air-gapped design, QR-only signing, robust metal backup, deep security certification, and an ecosystem built for “never lose keys” rather than just signing transactions.
• Main drawbacks: Higher upfront cost, slightly steeper learning curve than simple hot wallets, and fewer “DeFi direct connect” integrations than some competitors.

1) What is NGRAVE and how does the ecosystem work?

NGRAVE is not “just another hardware wallet.” It is a three-part self-custody stack designed to handle every step of owning crypto safely:

• ZERO — a touchscreen hardware wallet that stays completely offline and generates, stores and uses your private keys in a secure element.
• GRAPHENE — a metal backup system that replaces flimsy paper seed phrases with a fire-, water- and shock-resistant engraving system using two plates.
• LIQUID — a mobile app that acts as your online portfolio and transaction interface, without ever seeing your private keys.

Instead of plugging a hardware wallet into your computer or connecting via Bluetooth, NGRAVE’s approach is:

• ZERO generates and stores keys offline.
• ZERO signs transactions internally.
• ZERO and LIQUID communicate via QR codes that encode transaction data and signatures.
• Your phone broadcasts the signed transaction, but never handles the secret keys.

The idea is simple: if the device never connects to the internet, the attack surface shrinks dramatically. You avoid USB malware, Bluetooth exploits, and rogue desktop software asking for permissions it should not have.

2) Security model: air-gapped, EAL7 and QR signing

Before worrying about UX or supported tokens, you need to understand the security story. NGRAVE’s marketing talks a lot about “air-gapped” and “EAL7,” but what does that actually mean in practice?

2.1 Fully air-gapped device

The NGRAVE ZERO is designed to never touch the internet. It has:

• No Wi-Fi or cellular modem.
• No Bluetooth, NFC or other wireless radios.
• No standard USB data link to a computer for network access.

The only ways data goes in or out are:

• The camera (for scanning QR codes from the LIQUID app).
• The screen (for showing QR codes that contain signed transactions, xpubs, or account data).

That dramatically reduces the attack surface compared to wallets that plug directly into potentially infected machines or sync over wireless protocols.

2.2 EAL7 and secure element certification

NGRAVE emphasizes that its operating system / secure element architecture has been evaluated to EAL7, one of the highest Common Criteria assurance levels used in the security industry. In plain language:

• It has undergone formal verification and rigorous testing for both software and hardware aspects.
• Attackers would need specialized lab equipment and significant resources to attempt physical extraction of keys.
• This is the kind of assurance level typically associated with high-security chips in government, banking, or ID systems.

For most users, the key takeaway is not the label itself but what it represents: independent scrutiny of the security architecture rather than just “trust our marketing.”

2.3 QR-based transaction signing

NGRAVE’s use of QR codes for signing is more than a UX quirk — it’s a security design choice:

1. You construct a transaction using the LIQUID app on your phone.
2. The app encodes unsigned transaction data as a QR code.
3. ZERO scans that QR code with its camera, shows you the transaction details, and asks for confirmation.
4. If you approve, ZERO signs the transaction internally and displays a new QR code containing the signature.
5. The app scans that QR code, reconstructs the signed transaction and broadcasts it to the network.

The result is that your private keys never leave the device or pass through a cable. A compromised phone or laptop can’t directly read or extract them, it only ever sees encrypted or signed data.

[HOW NGRAVE REDUCES ATTACK SURFACES]
• No network interfaces on the signing device → fewer remote attack vectors.
• Secure element with high assurance level → harder physical extraction.
• QR-only flow → keeps private keys away from internet-connected devices.
• Dedicated metal backup → seed is less exposed to fire, water or casual theft.
    

3) NGRAVE ZERO hardware wallet: design and daily use

Let’s zoom into the heart of the ecosystem: the NGRAVE ZERO device itself. This is where you generate keys, confirm transactions, and manage core security tasks.

3.1 Form factor and build quality

The ZERO looks and feels more like a small, rugged smartphone than a USB stick. It typically includes:

• A good-size touchscreen for navigation and transaction confirmation.
• A metallic, tamper-resistant casing designed to make physical attacks harder.
• Side buttons and power controls for basic operations.
• A charging port (for power only, not data transfer).

For many users, this is a step up from tiny-screen wallets where reading an address or amount requires squinting. The bigger screen makes it easier to verify what you’re signing an underrated security benefit.

3.2 Key generation and PIN / passphrase

During setup, ZERO walks you through:

• Creating a PIN code to protect device access.
• Generating your seed phrase (the master recovery key).
• Optionally adding a passphrase (sometimes called a 25th word) to create hidden or extra-secure wallets.

NGRAVE has its own approach to generating entropy for the seed, often involving a mix of hardware randomness, user interaction (like moving your finger across the screen), and environmental factors. The goal is a unique, unpredictable seed that is not pre-generated or known to anyone else.

3.3 Day-to-day signing flow

Once set up, the daily signing flow looks something like this:

1. Open the LIQUID app and choose the wallet/account.
2. Build the transaction (recipient address, amount, fee, network).
3. App shows a QR code → ZERO scans it.
4. ZERO displays all critical details on its own screen (addresses, amounts, fees).
5. You verify and confirm with your PIN.
6. ZERO shows a signature QR code → app scans and broadcasts.

The extra scanning steps take a few seconds, but they are the price you pay for staying offline. After a few uses, the process becomes muscle memory.

3.4 Pros and trade-offs of ZERO

4) GRAPHENE metal backup: protecting your seed in the real world

One of the biggest threats to crypto self-custody is not hackers, it’s losing or damaging your seed phrase. That’s where NGRAVE GRAPHENE comes in.

4.1 Why metal backups matter

Standard wallet setup flows ask you to write a 12–24 word seed phrase on a piece of paper. That paper is:

• Vulnerable to fire, water, mold and physical wear.
• Easy to read if someone finds it, giving them full control of your funds.
• Easy to accidentally throw away during a move or house clean-up.

Metal backups aim to fix this by storing the seed in a durable, corrosion-resistant medium that survives realistic disasters far better than paper.

4.2 How GRAPHENE works

GRAPHENE is a two-layer stainless steel backup system. The idea (simplified) is:

• The top plate has a grid of cut-outs or holes.
• The bottom plate contains text or encoding underneath.
• When combined, the pattern reveals your seed, but neither plate alone fully exposes it.

This lets you:

• Store the plates in different physical locations if desired, reducing theft risk.
• Protect against fire and environmental damage thanks to the steel construction.
• Have an easier time transporting or hiding backups without obvious “seed phrase paper” lying around.

4.3 Threats GRAPHENE addresses

Of course, no system is perfect. If an attacker finds both plates and has the time to inspect them, they could reconstruct the seed. Your job is to choose where and how you store each piece so that the risk of that happening is minimized.

5) LIQUID mobile app: portfolio and transaction hub

While ZERO and GRAPHENE live offline, the LIQUID app is your day-to-day window into your portfolio. It runs on your phone and connects to the internet so you can:

• View balances and transaction history.
• Check market prices and basic analytics.
• Construct send / receive operations.
• Interact with ZERO via QR codes for signing.

Crucially, LIQUID is built to be non-custodial and keyless: it doesn’t hold your private keys, and a compromise of your phone alone should not be enough to steal your funds, assuming your ZERO and backups are safe.

5.1 UX and learning curve

If you are used to mobile wallets or exchange apps, LIQUID will feel familiar. The main difference is that when it’s time to sign, you:

• Point your ZERO at the phone screen to scan a QR.
• Then point your phone camera at ZERO to scan the signed QR.

The app handles the rest. It’s a small friction trade-off for the security you gain from keeping keys offline.

5.2 How LIQUID fits into your stack

You can keep using centralized exchanges, DeFi interfaces, and other tools. LIQUID simply becomes:

• Your “vault view” long-term holdings that you only move occasionally.
• A bridge where funds pass through when leaving or entering the vault.
• A monitoring panel for your cold storage, separate from your trading accounts.

6) Supported coins, tokens and networks

Supported assets evolve over time, but in broad strokes, NGRAVE focuses on:

• Major cryptocurrencies: BTC, ETH and other large-cap L1/L2 networks.
• ERC-20 tokens and assets on supported EVM chains.
• Additional networks and tokens progressively rolled out via firmware / app updates.

For long-term investors who mainly hold majors and a curated list of tokens, coverage is generally sufficient. If you are deeply involved in niche altcoins or very new chains, you should:

• Check the latest support list on NGRAVE’s website.
• Decide which subset of your portfolio truly belongs in cold storage vs hot wallets.

7) End-to-end workflow: from setup to first transaction

To make this concrete, here is what a typical first-week workflow looks like with NGRAVE.

1. Unbox and inspect.
   Check tamper-evident seals, compare serial numbers if provided, and ensure the packaging looks intact.
2. Charge ZERO.
   Plug it into power and let it reach a comfortable battery level.
3. Run guided setup.
   Create a PIN, generate your seed, and follow the on-screen steps exactly. Take your time, this is the foundation of everything.
4. Engrave GRAPHENE.
   Carefully transfer your seed into the metal backup system according to NGRAVE’s instructions. Double-check for typos or mistakes.
5. Set storage locations.
   Decide where you will store ZERO, and where you will store each GRAPHENE plate (together or separately).
6. Install LIQUID.
   Download the official app from the recommended store links, not from random web ads or fake sites.
7. Pair ZERO with LIQUID.
   Use the QR pairing flow to sync public account info (never private keys).
8. Receive a small test amount.
   Generate a receive address in LIQUID, send a small transfer from your exchange or existing wallet, and verify it arrives.
9. Test a send transaction.
   Send a small amount back out, going through the full QR signing flow.
10. Scale up.
    Once you are comfortable, move larger amounts or set up multiple accounts for separate strategies or time horizons.

8) Pricing, bundles and how to think about value

NGRAVE is a premium self-custody solution. Exact prices and bundles change over time, but you can expect:

• NGRAVE ZERO — the hardware wallet on its own.
• ZERO + GRAPHENE bundle — wallet plus metal backup (often the most sensible choice for serious users).
• Occasional starter packs or limited-time discount bundles.

Compared to other hardware wallets, you are paying extra for:

• The air-gapped, QR-only design.
• The level of certification and security testing.
• The integrated metal backup experience.

9) NGRAVE vs other hardware wallets

How does NGRAVE stack up against other well-known cold wallets? Without naming specific competitors, here’s the general position:

9.1 Big picture comparison

9.2 When NGRAVE clearly wins

• You want maximum isolation from online devices and are willing to spend more.
• You see value in an integrated backup solution rather than DIY metal plates or paper.
• You are protecting life-changing amounts or funds linked to professional activity (e.g., treasury, DAO, business reserves).

9.3 When a simpler wallet might be fine

• You hold small amounts or are just testing self-custody for now.
• You trade frequently and value fast, plug-and-play connectivity above all else.
• You mainly care about being better than an exchange hot wallet, not necessarily aiming for highest possible assurance.

10) Who NGRAVE is best for (and who it isn’t)

Every tool shines for a particular type of user. Here is a quick mental checklist.

10.1 Ideal users

• Long-term “vault” holders: People who plan to hold BTC, ETH and other majors for years and move them only occasionally.
• High-net-worth individuals: Users whose crypto stack represents a material portion of their net worth and who want institutional-style custody for personal funds.
• Builders and operators: Founders, treasurers and DAO signers who want an extra-secure way to hold treasury or multi-signature keys.
• Security-conscious individuals: Users who read about hacks, malware and exchange collapses and want a stack that can survive those scenarios.

10.2 Not the best fit

• Casual dabblers who hold tiny amounts just to experiment.
• Day traders who mainly work on centralized exchanges and rarely move funds to cold storage.
• People who refuse any UX friction and prefer a fully custodial “one-tap” app, accepting the associated risks.

11) Best practices for using NGRAVE safely

NGRAVE lowers many risks, but good security is still a habit, not just a device purchase. A few practical guidelines:

• Never type your seed phrase into a computer or phone. ZERO and GRAPHENE exist so you never have to do that.
• Buy from official or trusted channels. Avoid second-hand wallets or unknown marketplaces where tampering is possible.
• Test recovery on a small account. Once, on low amounts, go through the process of restoring from GRAPHENE to be sure you know how it works.
• Separate physical locations. If you can, store device and backup plates in different places (e.g., home safe + safety deposit box).
• Keep your PIN and passphrase in your head, not on sticky notes. If you absolutely must store them somewhere, use an encrypted, offline medium separate from your seed backups.
• Watch out for fake apps and phishing. Always double-check URLs and publishers when updating LIQUID or visiting NGRAVE’s site.

[NGRAVE RISK PLAYBOOK]
1. Device compromise is low if ZERO stays offline and PIN-protected.
2. Biggest risks: revealing your seed, losing your backup, or being coerced.
3. Treat your GRAPHENE plates like a house key to your net worth.
4. Your behavior completes the security model — the wallet is just the foundation.
    

12) FAQ: common questions about NGRAVE

13) Verdict: Should you trust NGRAVE with your long-term stack?

NGRAVE is one of the few products in the crypto space that takes security to an extreme and builds the UX around it, rather than starting from convenience and adding protections later.

Its biggest strengths are clear:

• A fully air-gapped signing device with no wireless radios.
• A heavily certified security architecture designed for high-assurance use cases.
• An integrated metal backup system that treats seed storage as a first-class problem.
• A clean, modern mobile app that keeps keys offline but makes portfolio tracking easy.

The trade-offs are also obvious: higher upfront cost, slightly slower transaction flows, and a bit more complexity than just leaving everything on an exchange.

14) Official resources and further reading

To go beyond this review, combine what you have learned here with NGRAVE’s own documentation and your own tests. Useful starting points include:

• The official NGRAVE homepage and product pages for ZERO, GRAPHENE and LIQUID.
• The support and knowledge base explaining setup flows, recovery procedures and security design.
• Any security whitepapers or certification documents published by the team or independent labs.
• Community reviews and long-term user feedback, especially from people holding meaningful amounts on NGRAVE.

Ultimately, the most important question is simple: does this setup help you sleep better at night while staying in control of your keys? If the answer is yes, then NGRAVE is doing its job.