The original Bitkey shipped in March 2024 to a critical problem it never quite solved: customers had to approve transactions on their phone, with no way to verify on the hardware wallet itself that the address and amount they were about to authorize actually matched what they intended to send. Clipboard malware, man-in-the-middle attacks, or any other compromise of the smartphone app could silently change the destination address or amount before the transaction hit the Bitkey hardware to be signed. Block knew this was a problem. Security researchers knew it was a problem. Users knew it was a problem. And for two years, Block kept shipping Bitkey anyway, betting that ease of use was worth the tradeoff.
On April 27, 2026, at Bitcoin Las Vegas, Block announced it was no longer willing to make that bet. The new Bitkey has a secure touchscreen. The screen is not just for transaction verification, that would be table stakes, what every competing hardware wallet already does. The screen is the hardware-enforced authorization surface for every operation that matters: who gets notified if someone tries to recover the wallet, where those notifications are routed, who qualifies as a recovery contact, how much can be spent without hardware approval, and who the funds go to after the owner dies. These are settings that the original Bitkey forced users to configure in their phone app and then trust that app to enforce. Now they are verified and authorized on the device itself.
This matters because it collapses a category of attack that security-conscious users have had to live with since Bitkey launched. If your phone is compromised, the original Bitkey's app could lie to you about what recovery contact you had set, or which beneficiary was configured for inheritance, or how much you had authorized to be spent without hardware approval. The attacker could not steal your bitcoin directly, the hardware wallet still holds the keys and still requires its approval to sign transactions, but they could change the rules under which your bitcoin would move after your death, or lock you out of recovery by pointing notifications to an attacker-controlled email, or raise your spending limits without your knowledge. These are not theoretical vulnerabilities. They are the kinds of attacks that matter when you are running a self-custodied balance of any real size.
Block also did not launch this in a vacuum. The on-chain fee environment at the time of announcement is 5 sat/vB for fastest confirmation, which means that multisig UTXO management, the operation most users hate in self-custody because it requires on-chain consolidation and splitting, is materially cheaper to perform right now than it was even six months ago. The company also rolled out higher withdrawal limits on Cash App (10,000 per day, 25,000 per week for eligible users), automatic bitcoin conversion on peer-to-peer payments, and Bitcoin Back, a 5% rewards program at Square merchants. These are not peripheral features. They are the stack that makes it possible for a user to accumulate bitcoin, secure it in hardware, and then spend it back into the Lightning Network or on-chain without touching a custodian. Block also demonstrated NFC tap-to-pay for Square merchants, routing payments through Lightning with zero processing fees through 2026. The screen matters, but it is one piece of a deliberately integrated ecosystem.
Who benefits? Self-custody users who wanted the simplicity of Bitkey's no-seed-phrase multisig design but who were uncomfortable with the phone-as-security-arbiter model. Security researchers who have spent two years explaining why a hardware wallet without a display is a category error. Enterprise users and high-net-worth individuals who need inheritance planning they can actually trust, not just hope that the app settings stick around. And Block itself: Bitkey has shipped since March 2024, which means Block has two years of real usage data on what breaks, what confuses users, and what attacks actually occur in production. They did not add a screen because it was fashionable. They added it because the data said they had to.
Who does not benefit, or loses ground? Hardware wallet manufacturers who have been using a screen as a competitive moat, a feature they assumed Bitkey would never match because Bitkey's whole design philosophy was "simplicity by removing the screen." Blockstream's Jade, Coldcard, and other single-sig hardware wallets have more features and more customization, but they also require users to understand seed phrases, recovery, and UTXO management. Bitkey remains 2-of-3 multisig with inheritance built in. The trade-off between feature depth and usability just shifted, and it shifted in Block's favor. Users who have already bought the original Bitkey are not stranded, the hardware itself remains secure, and the app has been updated with inheritance and recovery features, but they are now carrying a device that lacks the screen protection the new model offers. That is a slow exodus story, not a fast one, but it is real.
Here is what actually matters: the screen is not the innovation. The innovation is that Block has finally admitted that hardware wallet security is not just about key management, it is about the entire attack surface, including the settings and policies that govern how keys are used. For two years, Bitkey shipped with a structural flaw and defended it as a usability feature. Now it does not. That shift is more important than the device itself. It means that Block believes the market has matured to the point where users will not accept that tradeoff anymore, and they are betting that those users are right. Whether that bet pays off depends on whether the new Bitkey ships on time, whether the screen is actually tamper-evident in real usage, and whether users actually trust a 2-of-3 design where two of the three signers are not fully under their control (the second signer is Block's custody service, the third is the user's phone). Those are non-trivial open questions. But the fact that Block is asking them at all is the real news.
Watch three things: First, the shipping date and early user reports on whether the screen actually prevents the category of attacks it was designed to prevent. A screen that is not tamper-evident, that can be spoofed or bypassed, is theater. Second, whether high-net-worth users and estate planners actually adopt Bitkey's inheritance planning flow, or whether they continue to use cold storage and manual recovery plans. Inheritance is the feature Block is betting on, and it is the feature least likely to get real testing until someone actually dies. Third, whether the 5% Bitcoin Back rewards at Square merchants actually drive transaction volume, or whether it becomes another underused feature. Block is trying to build a closed loop: earn bitcoin, secure it in Bitkey, spend it at Square. That loop only works if all three parts move real money. Right now, only the first part has traction.
Preorders for the new Bitkey are open now, and devices are shipping soon to 95+ countries. For users who have been waiting for Bitkey to close this gap, the wait is over. For users who switched to other hardware wallets because they could not live with the phone-as-arbiter model, Block just gave them a reason to reconsider. For Block, the question is whether they can ship, whether the screen holds up in real attacks, and whether a self-custody product from a publicly traded company can actually drive meaningful adoption beyond the early adopter cohort that already owns bitcoin hardware. That is the story worth watching, and it starts now.