When you sell Bitcoin through Pocket Bitcoin in the BitBoxApp, your BitBox helps verify the most important sale details before you confirm the transaction.
Together with Pocket Bitcoin, the BitBox uses digitally signed payment requests. These allow your hardware wallet to independently check that the payment request came from Pocket Bitcoin and was not changed on the way to your device.
Learn more in the BitBox blog article about digitally signed payment requests.
What your BitBox verifies
Before you confirm the sale, your BitBox can verify important details such as:
- the Bitcoin address from Pocket Bitcoin
- the Bitcoin amount you are about to sell
- your bank details, such as the IBAN
This means you do not need to trust your computer or smartphone alone. Even if the host device were compromised, the BitBox can still show the verified sale details directly on its trusted display.
Security benefit
Signed payment requests help your BitBox verify that the Bitcoin address and sale details were provided by Pocket Bitcoin and were not manipulated by the host device.
Why this protects your Bitcoin
Normally, when sending Bitcoin, users must carefully verify the receiving address. This protects against risks such as clipboard malware, manipulated websites, or compromised devices.
With signed payment requests, the BitBox can check the authenticity of the payment request directly. If the request is valid, you can be confident that your Bitcoin will be sent to Pocket Bitcoin for the sale.
This provides an additional layer of protection because the verification happens on the BitBox itself, not only inside the BitBoxApp or on the connected computer.
FAQ
Do I still need to check the details on my BitBox?
Yes. Always review the sale details shown on your BitBox before confirming. The BitBox display is the trusted place to verify what you are about to approve.
Does this mean I do not need to verify the raw Bitcoin address manually?
For signed payment requests, the BitBox verifies that the payment request was correctly signed by the service provider. This gives you stronger assurance than checking only the raw Bitcoin address on your computer or smartphone.
Can my computer change the sale details after they are verified?
If the payment request was manipulated, the BitBox would not be able to verify the signature correctly. This helps protect you from changes made by a compromised host device.