NGRAVE ZERO review: setup, GRAPHENE backup and security

The first thing I noticed about the NGRAVE ZERO, in CryptoSnake's August 15, 2025 walkthrough, is how little it trusts the internet. It is a fully air-gapped hardware wallet with a 4-inch touchscreen, a fingerprint sensor and an operating system the creator describes as EAL7 certified. At $398, it is also one of the most expensive hardware wallets on the market, and the creator calls it one of the most secure. I think the security story holds up better than the price story.

A hardware wallet is a small device that keeps your private keys offline. The private key is the string of characters that proves ownership of your coins; anyone who has it can move them. The ZERO's pitch is that the key never touches a computer or a phone, and that the backup is a piece of stainless steel rather than a sheet of paper. I think that is the right thing to focus on, because most people who lose crypto lose it to a bad backup or a phishing page, not to a broken chip.

What the NGRAVE ZERO is

The ZERO is a handheld signing device with a 4-inch touchscreen and a body made from an alloy of zinc, aluminium, magnesium and copper. That mix was chosen for durability, protection, weight and feel, and the body carries an IP55 rating, which means it is built to keep out dust and water spray. On the back there is a fingerprint sensor and a camera for scanning QR codes. The power button sits on the side and a USB-C charging port on the bottom.

That USB-C port is for charging only. The ZERO is fully air-gapped, which means it has no USB data connection, no Wi-Fi, no Bluetooth and no NFC. Data moves in and out by QR code: the phone app shows a code, the ZERO's camera reads it, and the ZERO shows a code back for the phone to scan. It sounds clumsy next to a cable, and it is slower, but it removes a whole class of attack where malware on a computer tries to swap the address you are paying.

The device is made in Belgium, and the creator says it is the only wallet with an EAL7 certified operating system. EAL7 is the top assurance level in the Common Criteria scheme, a standard for testing how thoroughly a product's security has been designed and checked. I would treat the "only wallet" part as the creator's claim rather than a fact I can verify, but the certification itself is the kind of thing you can look up.

NGRAVE puts the average wallet size at €100k, and the creator says the ZERO is designed for billionaires. That is marketing, and it tells you who NGRAVE is selling to: people holding enough that a $398 device is a rounding error.

What comes in the box

The combo pack pairs the ZERO with the GRAPHENE backup plate. The box is matte black with a textured finish and a magnetic clasp, and the inside of the lid carries the line "Start Truly Owning What Is Yours." Under the final layer of packaging there is a hidden message.

Alongside the wallet you get:

• A punch pen, the tool used to mark the GRAPHENE plate
• A USB to USB-C charging cable
• A setup guide with step-by-step instructions
• A use and care guide for the GRAPHENE backup
• A guide for the NGRAVE LIQUID phone app
• An important notice asking you to read the documentation carefully
• A sticker with the NGRAVE logo
• A recovery sheet that can hold either a standard 24-word seed phrase or NGRAVE's 64-character Perfect Key
• The GRAPHENE, a two-part stainless steel backup plate

A seed phrase is the human-readable form of your private key, usually 12 or 24 ordinary words. Anyone who reads those words can restore your wallet and take everything in it, which is why paper backups are a weak point: paper burns, gets wet, and gets photographed. The GRAPHENE is NGRAVE's answer to that.

Setting up the ZERO step by step

The setup is guided and the device walks you through each screen. The battery drains quickly, so charge the ZERO fully before you begin. If it dies halfway through key generation you will be starting over.

1. Charge the ZERO fully using the USB-C port on the bottom.
2. Press the power button on the side to turn it on.
3. Select your language.
4. Read and accept the software licence agreement and the terms and conditions.
5. On a computer, open a browser and go to ngrave.io/verify.
6. On the ZERO, scan the QR code shown on the verification page.
7. Enter the security code the ZERO displays on the verification page. In the example, the code is BQ9IWA56. Wait for the message "Your ZERO is safe to use."
8. Choose an eight-digit PIN and enter it a second time to confirm.
9. Choose Create new wallet, or Import wallet if you are restoring an existing one.
10. Choose a backup option: a standard 12- or 24-word seed phrase, or NGRAVE's 64-character Perfect Key.
11. Optionally register a fingerprint. Tap next, rest your finger on the sensor on the back, and follow the prompts until the device confirms the fingerprint can unlock it and sign transactions.
12. Let the device generate a random key in real time, then tap freeze to lock it.
13. Select one or more groups and tap shuffle until you are happy with the key, then tap next and confirm it.
14. Write the recovery code down on paper, one group at a time, swiping to continue.
15. Confirm that you have made a backup, then tap next.

Step 5 is the one I would not skip. The verification page checks that the device in your hands is a genuine NGRAVE unit and has not been tampered with, and it is the difference between buying a wallet and buying a very expensive paperweight that reports your keys to someone else. The same idea applies to any hardware wallet: check the seal, check the device against the maker's site, and never accept a device that arrives with a recovery phrase already written down.

The choice in step 10 matters more than it looks. A 12- or 24-word seed phrase is the industry standard, so you can restore it into another maker's wallet if NGRAVE ever disappears. The Perfect Key is 64 characters and is NGRAVE's own format. The creator picked the Perfect Key, and I understand why: it is longer and it is generated on the device with a shuffle step that lets you mix in your own randomness. The trade-off is that you are tied to NGRAVE's recovery process, and a 64-character string is harder to write down without a mistake.

How the GRAPHENE backup works

The GRAPHENE is two stainless steel plates that are water and fire resistant. The top plate carries an arrangement of hexadecimal characters. The bottom plate has matching holes. To record your key, you line the plates up and punch each character into the hole that matches it, using the punch pen from the box.

1. Take the punch pen, the top plate and the bottom plate.
2. Find the first character of your key on the top plate and punch it into the matching hole in the first column of the bottom plate.
3. Repeat for each remaining character, column by column.
4. Store the two plates in separate places if you want the extra protection.

Without the top plate, the bottom plate is just a grid of punched holes and tells a thief nothing, because the holes only mean something when you know which character sits above each one. Store the plates apart and a single burglary gets an attacker half a backup. NGRAVE also provides an ultimate recovery code that lets you recreate a missing top plate, so losing one plate is recoverable as long as you still have the other and that code.

I like this more than a paper seed phrase, and I would still practise the recovery once before moving real money. A backup you have never restored is a guess. Set the wallet up, send a small amount, wipe the device, restore from the GRAPHENE, and confirm the funds show up. That hour is the best insurance you can buy.

Supported coins and the LIQUID app

The dashboard lets you add coins, and Bitcoin and Solana are two examples. If your portfolio is wider than that, check NGRAVE's own supported-asset list before you buy, because a hardware wallet is only useful for the chains it can sign for.

Adding a coin happens on the ZERO itself:

1. On the dashboard, tap Add a coin.
2. Type the ticker, for example BTC, and tap search.
3. Select the coin to add it.

Then you pair the phone app:

1. Download NGRAVE LIQUID from the Apple App Store or Google Play.
2. Open the app.
3. On the ZERO, go to Settings and tap Sync with app.
4. Scan the QR code on the ZERO with the phone app.

After that the phone holds the watch-only view and the ZERO holds the keys. That split is the point of the whole setup: the phone is convenient and replaceable, the ZERO is the thing you protect.

Sending and receiving

Receiving is straightforward and can be done from either side. In the app, tap Receive and copy or share the address with the sender. On the ZERO, tap the coin you want, hit Receive, and share the QR code. I would still read the first and last few characters of the address out loud to the sender if the amount is large, because address-swapping malware is a real thing and a QR code is not self-explanatory.

Sending is where the air gap shows its value:

1. In the app, tap Send and choose the coin.
2. Enter the recipient's address and the amount.
3. Tap next, then scan the QR code with the ZERO.
4. Check the address and amount on the ZERO's screen and sign the transaction.
5. Use the phone to scan the QR code the ZERO displays.

The transaction is signed on the ZERO and broadcast by the phone. The private key never leaves the device, and the QR handoff means the phone never needs a cable connection to it.

The security model, and where I would push back

The case for the ZERO rests on four things: the air gap, the secure element and certified operating system, the fingerprint sensor, and the GRAPHENE backup. Each one removes a way to lose money. The air gap removes remote attacks. The certification is evidence that the software was built and tested to a high standard. The fingerprint means a shoulder-surfed PIN is not enough on its own. The steel plate means a fire does not end your holdings.

What I would push back on is the framing. The creator calls the ZERO, paired with GRAPHENE, the strongest possible protection for your crypto, and that is a claim about the hardware, not about you. The most common way people lose coins is still a phishing site that asks for a seed phrase, or a fake support agent who talks them through "verifying" their wallet. No device stops that. The rule is simple and it does not bend: your seed phrase and your Perfect Key never go into a website, a chat window, an email or a support form, and no legitimate company will ever ask for them.

The other thing I would weigh is the friction. Every send means scanning two QR codes and confirming on a small screen. That is fine for a long-term holding you touch a few times a year. It is annoying if you trade often, and annoyance is how people end up leaving coins on an exchange instead.

Price and who it suits

At the time, NGRAVE listed the ZERO at $398 and the combo pack at $498. That is accurate against the general run of the market, where entry-level devices sell for a fraction of that.

I would say it suits someone holding a portfolio they would be upset to lose, who plans to hold rather than trade, and who wants the backup problem solved properly. If you hold a small amount, a cheaper wallet and a well-made paper backup will do the same job for less. If you hold a lot and you are clumsy with paper, the combo pack is the version that makes sense, because the GRAPHENE is the part that solves a real problem.

What I would check before buying

Buy the ZERO from NGRAVE directly or from a seller the company lists as authorised. Hardware wallets are a classic target for resellers who open the box, write down the recovery phrase and seal it again, and the verification step exists to catch exactly that. If a device arrives with a phrase already filled in, send it back.

When you set it up, do the verification first, choose your own PIN, and generate the key on the device rather than importing one from somewhere else. Write the recovery code by hand, punch the GRAPHENE, and store the two plates apart. Then test the restore with a small amount before the bulk of your holdings goes anywhere near it.