The Cryptnox Crypto Hardware Wallet – Dual-Card Set supports wstETH as ERC-20 wstETH on Ethereum Mainnet, and as supported bridged ERC-20 wstETH representations on EVM networks you manually add. wstETH is not pre-programmed on the card. Add it once through Add a Token, or use Add a Network first for another supported EVM route. The token uses an 0x-prefixed 20-byte EVM address, with private keys generated inside the secure element.

The Cryptnox Crypto Hardware Wallet – Dual-Card Set can hold wstETH as an ERC-20 token on Ethereum Mainnet. It can also hold supported bridged ERC-20 wstETH representations on manually added EVM networks such as Arbitrum, Optimism, Base, Linea, BNB Chain and Unichain. The important buying detail is that wstETH is not shipped as an already enabled asset on the card.
wstETH is the wrapped form of stETH described in Lido’s wstETH contract documentation. For a Cryptnox buyer, that means the asset should be treated as a token route, not as a separate blockchain route. Ethereum Mainnet uses the ERC-20 route. Other supported EVM routes use bridged ERC-20 representations that must match the network where your wstETH is held.
The wallet environment needs the correct token or network entry before you manage wstETH. On Ethereum Mainnet, the setup starts with the ERC-20 token. On another supported EVM network, the setup starts with the network if it is not already configured for your intended route, followed by the wstETH token representation for that network.
Because wstETH is manually added, buyers checking other assets around the same EVM address should review the Cryptnox coin and blockchain support page before deciding which token routes to configure after the Dual-Card Set is initialised.
On Ethereum Mainnet, wstETH is held as an ERC-20 token. With Cryptnox, the card protects the private key that controls the EVM account receiving or managing that token. The visible receiving address is not a wstETH-specific address; it is an 0x-prefixed 20-byte EVM address.
wstETH is also bridged or deployed on multiple EVM networks. Lido’s deployed contracts information lists wstETH across networks, which is why the exact token representation matters during manual setup. Cryptnox support for wstETH covers supported bridged ERC-20 representations on EVM networks that are manually added in the wallet, including Arbitrum, Optimism, Base, Linea, BNB Chain and Unichain.
A wstETH balance on Ethereum Mainnet and a bridged wstETH representation on an EVM network are not configured by the same single action when the target network has not been added. Ethereum Mainnet requires the token route. A manually added EVM network requires the network route first, then the token representation. This prevents a buyer from treating every wstETH label as if it were already active in the wallet.
This address format also helps when comparing wstETH to other Cryptnox asset pages. If your buying shortlist includes EVM-oriented holdings beyond wstETH, the Cryptnox hardware wallet page for Polygon is a separate page to review rather than a substitute for adding wstETH on Ethereum, Arbitrum, Optimism, Base, Linea, BNB Chain or Unichain.
wstETH setup is intentionally manual. The Dual-Card Set does not arrive with wstETH pre-programmed, so the buyer chooses the exact route after initialising the cards. For Ethereum Mainnet, use Add a Token for ERC-20 wstETH. For a supported EVM network that needs to be configured first, use Add a Network, then add the bridged ERC-20 wstETH representation for that network.
The correct sequence depends on where the wstETH is held. The wallet should reflect the chain route of the token before you receive or manage it. The same word, wstETH, can refer to the Ethereum ERC-20 token or to a supported bridged ERC-20 representation on another EVM network, so the setup step should match the actual network route.
The Cryptnox hardware wallet tutorials are useful before a wstETH setup because the asset requires a manual token or network decision after card initialisation. A buyer who is moving between Ethereum Mainnet wstETH and a supported EVM representation should treat the tutorial flow as product guidance, then enter the token or network details for the specific wstETH route being used.
The security model for wstETH starts with the private key controlling the EVM address. In the Cryptnox Dual-Card Set, private keys are generated inside the secure element and never leave it. The card uses an EAL6+-certified chip, and that chip is part of the platform protecting the key material tied to your 0x-prefixed wstETH address.
wstETH itself remains an ERC-20 token on Ethereum Mainnet or a supported bridged ERC-20 representation on an added EVM network. The card does not turn wstETH into a native coin. It protects the private key that authorises activity for the EVM account associated with the token.
When a wstETH transaction or Web3 interaction requires signing, the private key is not moved into ordinary phone storage. The card remains the signing device. The phone and app provide the user interface, while the key stays inside the secure element.
The card itself has no fingerprint or face sensor. Unlock uses the phone’s own fingerprint or face unlock through the Cryptnox app. That distinction matters for a buyer choosing a smart-card form factor: the phone provides the unlock flow, and the card protects the private key used for the wstETH EVM address.
The product is a contact and NFC smart card. You can tap it to a phone or insert it into a reader. That dual-interface design applies to the same wstETH key path whether you are holding ERC-20 wstETH on Ethereum Mainnet or a supported bridged ERC-20 representation on a manually added EVM network.
The cards are Swiss-engineered. For a buyer storing wstETH, the practical result is a card-based signing setup where the EVM address remains the public receiving route and the private key remains inside the secure element.
The Cryptnox Crypto Hardware Wallet – Dual-Card Set ships uninitialised. During setup, the seed is generated inside both secure elements, so the second card is the backup. There is no default recovery phrase to write down. For a wstETH buyer, the backup is another smart card created during the same initialisation process.
This model is especially relevant for ERC-20 wstETH because the token balance is controlled through the EVM address. The card does not store wstETH as a file. It protects the private key that controls the address holding ERC-20 wstETH on Ethereum Mainnet or the supported bridged ERC-20 representation on an added EVM network.
If you are buying specifically to hold wstETH, the relevant product is the Cryptnox Crypto Hardware Wallet – Dual-Card Set. The two-card configuration is central to the wstETH backup model because the second card is created as the backup during initialisation, before you add Ethereum Mainnet wstETH or a supported EVM-network representation.
The free Cryptnox app is available on iOS and Android. For wstETH, the app is the phone interface used to initialise the Dual-Card Set, unlock through the phone’s fingerprint or face unlock, and add the correct token or network route. The card remains the signing device for the private key controlling the EVM address.
Cryptnox connects to Web3 through WalletConnect and works with MetaMask. That matters for wstETH because the asset is handled as ERC-20 wstETH on Ethereum Mainnet or as a supported bridged ERC-20 representation on an added EVM network. The Web3 route does not change the address format: wstETH is still tied to an 0x-prefixed 20-byte EVM address.
A typical wstETH workflow starts with initialising both cards, then deciding whether the token route is Ethereum Mainnet or a supported EVM network. For Ethereum Mainnet, add wstETH as an ERC-20 token. For Arbitrum, Optimism, Base, Linea, BNB Chain or Unichain, add the relevant EVM network when needed and then add the supported bridged ERC-20 wstETH representation.
After setup, the card protects the private key used for signing. WalletConnect and MetaMask provide Web3 access through the wallet environment, while the Cryptnox app and card keep the signing model tied to the secure element. A buyer using wstETH should therefore separate two tasks: configuring the correct wstETH route in the wallet, and approving activity with the card when signing is required.
wstETH is a token-specific use case for the Cryptnox Dual-Card Set. The asset is not a native chain in the wallet, and it is not enabled on the card before setup. A buyer should choose Cryptnox for wstETH with the expectation that the Ethereum ERC-20 route, or the supported bridged ERC-20 route on a manually added EVM network, will be configured after the cards are initialised.
The Cryptnox hardware wallet collection is useful when wstETH is part of a wider buying decision, because this page’s setup depends on ERC-20 and EVM details rather than on a native wstETH chain. Keep those details separate when comparing wstETH with pages for other assets.
If your purchase plan includes wstETH and non-wstETH holdings, do not copy the wstETH token setup into unrelated asset routes. Review the Cryptnox hardware wallet page for Bitcoin as its own buying page, and review the Cryptnox hardware wallet page for Tron as a separate asset page. wstETH setup remains tied to ERC-20 on Ethereum Mainnet or to supported bridged ERC-20 representations on EVM networks that you add manually.
That separation matters at purchase time. The wstETH part of the setup is precise: initialise both cards, add the Ethereum token route or the supported EVM-network route, confirm the 0x-prefixed address format, and use the card as the signing device for the private key that never leaves the secure element.
No. wstETH is not pre-programmed on the card. After initialising the Dual-Card Set, add ERC-20 wstETH on Ethereum Mainnet through Add a Token. For a supported bridged ERC-20 wstETH representation on another EVM network, add the relevant network first if needed, then add the token.
wstETH uses an 0x-prefixed 20-byte EVM address with Cryptnox. That applies to ERC-20 wstETH on Ethereum Mainnet and to supported bridged ERC-20 wstETH representations on manually added EVM networks such as Arbitrum, Optimism, Base, Linea, BNB Chain and Unichain.
Yes. You can hold supported bridged ERC-20 wstETH representations on EVM networks such as Arbitrum, Optimism, Base, Linea, BNB Chain and Unichain after adding the relevant network and token route manually. The token does not ship enabled by default.
Private keys are generated inside the secure element and never leave it. The Cryptnox card uses an EAL6+-certified chip, and the protected private key controls the 0x-prefixed EVM address used for ERC-20 wstETH on Ethereum or a supported added EVM network.
The Dual-Card Set ships uninitialised. During setup, the seed is generated inside both secure elements, so the second card is the backup. There is no default recovery phrase to write down. Importing an existing BIP39 recovery phrase is an advanced option.
No. The Cryptnox card itself has no fingerprint or face sensor. Unlock uses the phone’s own fingerprint or face unlock through the Cryptnox app, while the card remains the signing device that protects the private key for the wstETH EVM address.
Yes. The free Cryptnox app on iOS and Android connects to Web3 through WalletConnect and works with MetaMask. For wstETH, first add ERC-20 wstETH on Ethereum Mainnet or the supported bridged ERC-20 representation on the relevant manually added EVM network.
No, and on this network that is not a limitation. The Cryptnox wallet uses one address per chain. HD address rotation comes from Bitcoin’s UTXO model and the BIP32/BIP44/BIP49/BIP84 derivation scheme; on account-model networks each account is a single fixed address by design, so the question does not apply in the same way. Cryptnox’s single-address-per-chain behaviour matches how these networks work.
At the cryptography layer the card derives keys along BIP32 and SLIP-10 paths, one path per supported chain, though that is not exposed in the app as multi-address management.
Yes. Cryptnox ships worldwide from the official CRYPTNOX store. Orders to Switzerland, the European Union and the United States are dispatched from stock already held in each of those regions, so the parcel does not cross a customs border into your country and there are no import duties to pay. Orders to other destinations are shipped internationally, and any import duties or local taxes are set by the destination country and are the recipient’s responsibility. Current shipping rates are shown at checkout.