Secalot

Secalot was a compact USB hardware token that combined four security functions in one small dongle: a cryptocurrency wallet, an OpenPGP smart card, a U2F authenticator, and a one-time password (OTP) generator. Launched in 2017, the device targeted technically proficient users who wanted a single piece of hardware for both crypto key storage and broader identity and encryption tasks. Secalot’s website is no longer operational and the product is discontinued.

The device used a self-custody model: private keys were generated and stored on the hardware token and never left the device. Communication between the host computer and the dongle was secured via a TLS channel. Without an on-device display, Secalot relied on the connected computer’s screen to show transaction details, which meant users could not verify what they were signing on the device itself. Access was protected by a PIN code, and wallet recovery used a standard 24-word seed phrase.

The cryptocurrency wallet supported Bitcoin, Ethereum, and XRP, plus ERC-20 tokens. Bitcoin required a modified version of Electrum as the desktop interface; Ethereum and tokens worked through compatible software. The OpenPGP application allowed users to encrypt emails and files, sign documents, and authenticate Linux logins. The U2F application provided hardware-backed two-factor authentication for web accounts. Firmware source code was published on the Secalot GitHub organization.

Secalot’s form factor matched a standard USB-A stick (60x15x10mm), with two physical buttons for transaction confirmation and compatibility with Windows, macOS, and Linux. Its combination of crypto signing, GPG, U2F, and OTP in one low-profile device made it a niche option among privacy-focused users, though limited coin support, dependency on third-party wallet software, and the absence of an on-device screen were notable constraints. The product has been discontinued.