The firmware hash is a cryptographic fingerprint of the firmware installed on your BitBox02.

In simple terms:

  • the firmware is the software running on your BitBox02
  • the firmware hash is a fingerprint of that software
  • if the firmware changes, the hash also changes

Advanced users can display the firmware hash during startup and compare it with the officially published firmware hash. This can help independently verify that the firmware running on the BitBox02 matches the official release.


When should I verify the firmware hash?

You may want to verify the firmware hash if:

  • you want to independently confirm which firmware is running on your BitBox02
  • you are following a manual firmware verification process
  • you prefer maximum transparency and auditability
  • you want to compare the installed firmware with the official release

For a detailed explanation of the manual verification process, read our blog article:
How to independently verify the BitBox02 firmware


How to enable or disable the firmware hash display

You can enable or disable the firmware hash display in the BitBoxApp.

  1. Open the BitBoxApp.
  2. Connect and unlock your BitBox02.
  3. Go to Settings → Manage device.
  4. Scroll to Expert settings.
  5. Select Go to startup settings.

  1. Enter bootloader mode when prompted.
  2. Confirm on your BitBox02.

  1. Open Advanced settings.
  2. Enable or disable Show firmware hash on every startup.

  1. Return to the main screen.
  2. Let the device reboot.

What happens when firmware hash display is enabled?

If firmware hash display is enabled, your BitBox02 shows the firmware hash during startup.

The hash is displayed for about 9 seconds. After that, startup continues normally. You can continue with display orientation and unlocking your BitBox02.

If firmware hash display is disabled, startup continues normally without showing the firmware hash.


Why does the BitBox02 use open-source firmware and a secure chip?

The BitBox02 combines two complementary security approaches:

  • a secure chip for physical protection and hardware-level security
  • open-source firmware for transparency, auditability, and independent review

This design allows the hardware to provide strong physical protection while the firmware remains publicly reviewable.

You can learn more about this architecture in our blog article:
Best of both worlds: using a secure chip with open-source firmware

More information about BitBox02 security is available on our official page:
BitBox02 security features


Related article

If your BitBox02 shows Bootloader during first setup, this is normal. The Bootloader allows the BitBoxApp to install the firmware securely.

Read more here:
BitBox bootloader: what it does and why it matters 


FAQ

What is firmware?

Firmware is the software that runs directly on your BitBox02 and allows the device to operate securely.


What is the firmware hash?

The firmware hash is a cryptographic fingerprint of the firmware installed on your BitBox02.


Do I need to verify the firmware hash?

For most users, manual verification is optional. It is mainly intended for advanced users who want to independently verify firmware authenticity.


Should I enable the firmware hash display?

Only enable it if you want to compare the firmware hash during startup with the officially published firmware hash. For most users, this is optional.


Does disabling the firmware hash display make my BitBox02 insecure?

No. The firmware hash display is an optional advanced feature. Disabling it does not affect normal BitBox02 security or usage.


Why does the firmware hash appear during startup?

If the firmware hash display is enabled, the BitBox02 shows the hash during startup so you can compare it with the official firmware release.


I enabled the firmware hash display and now it appears for about 9 seconds. Is that normal?

Yes. This is expected behavior. After the hash is displayed, the BitBox02 continues normal startup.


Why is the firmware installed during setup?

The BitBox02 is intentionally shipped without pre-installed firmware. During setup, the BitBoxApp securely installs the latest official firmware on the device.

This helps ensure that:

  • no modified firmware is present before first use
  • the firmware is installed directly through the official BitBoxApp
  • the device starts with the latest official firmware version

Why does my BitBox02 show Bootloader during setup?

A new BitBox02 starts in Bootloader mode so the BitBoxApp can install the firmware securely. This is normal during first setup.