Arculus Wallet Review

Arculus fits a phone-first holder of major-chain coins who wants certified cold storage at half the flagship price and accepts the phone as the verification screen.

Good fit:

• Holders of BTC, ETH, SOL, and major-chain tokens wanting keys off the phone for $99
• Buyers who weigh a named, publicly traded US maker over an anonymous vendor
• Anyone who wants tap-to-sign convenience with no cables, batteries, or firmware rituals

Wrong fit:

• Anyone moving amounts large enough to demand on-device address verification — get a screen wallet
• Transparency-first buyers who require open, auditable firmware
• Holders of a niche chain outside its 31-network list — check the coin list first
• Users who need multiple wallets, multisig, or a desktop workflow

Arculus is a metal NFC card that holds your private keys in a certified secure element. There is no screen, no battery, no charging port, and no Bluetooth — the card is passive and wakes only when tapped against your phone, where the companion app (iOS and Android, no desktop version) builds transactions for the card to sign.

The maker is the single biggest thing separating Arculus from the no-name card wallets it superficially resembles. CompoSecure is a publicly traded, SEC-reporting US company and the world's largest manufacturer of metal payment cards — its production lines make the Amex Centurion, the JPMorgan Reserve, and the Apple Card. For a product whose entire job is holding your money, a named, NASDAQ-listed, US-domiciled maker that files public accounts is a materially different risk than an anonymous vendor shipping from an unknown jurisdiction. If CompoSecure mishandles customer funds or ships a defective device, there is a company to hold accountable, a stock price that reacts, and a regulator with jurisdiction.

One product note: CompoSecure now also sells the same card technology as Arculus Authenticate, a FIDO2 passkey for enterprise logins. The consumer crypto wallet remains actively sold at $99 — the passkey line is an expansion, and it signals the hardware platform has a business case beyond crypto.

Arculus is genuinely non-custodial. Keys are generated on the card, stay on the card, and back up to a standard 12- or 24-word BIP39 phrase that restores into any compatible wallet — you are never locked into Arculus to recover your funds.

The secure element is the headline. CC EAL6+ is a top-tier Common Criteria certification, the same class as the ST33K1M5 chip in the Ledger Flex, and it means an independent lab has attacked the chip's key isolation and certified it. Unlocking the wallet takes three factors: the physical card tapped via NFC, a 6-digit PIN, and optionally Face ID or a fingerprint. Losing the card alone does not expose funds.

The record is clean. Arculus has had no public hack, breach, or fund-loss incident since launching in 2021 — five years without an entry in the incident column, during a period when Ledger, Trezor, and Tangem all disclosed breaches or lab-demonstrated physical attacks.

Now the flaw that defines the product. The card has no display, so the transaction you approve is the one your phone shows you. A hardware wallet with its own screen — any Ledger or Trezor — lets you verify the destination address on the device itself, independent of the computer or phone building the transaction. Arculus cannot. If malware controls your phone, it can display the address you intended while handing the card a transaction paying the attacker, and the card will sign it. Your keys never leave the secure element, and that still defeats remote key theft — but the send-verification step, the specific attack the screen on a Ledger exists to stop, runs on the least trusted device you own. That is the mechanism that keeps Arculus out of the 7–8 tier, and it applies equally to every no-screen card wallet, Tangem included.

The firmware and app are closed-source, with no reproducible builds. Trezor publishes its firmware on GitHub, so a transparency-first buyer has open alternatives at a similar price. The EAL6+ certification is a partial offset — it is independent third-party assurance of the chip even where the code is unpublished — but it certifies the silicon, not the app you approve transactions in.

Native support runs to 31 chains on Arculus's own supported list — Bitcoin, Ethereum, Solana, Cardano, XRP, Polkadot, Cosmos, Litecoin, Stellar, Hedera, Dogecoin, Bitcoin Cash, TON, and the major EVM L2s (Arbitrum, Base, Optimism, Polygon) among them — plus custom token additions on Ethereum, Polygon, and BSC, which opens the ERC-20 long tail. CompoSecure markets it as covering 95% of crypto assets by market cap, and the coin list backs that up: coverage is broad for a card wallet.

Coverage is genuinely wide for a card device: the major L1s, the top EVM L2s, plus XRP, Cardano, Polkadot, and Cosmos are all on the list, so most portfolios are handled natively. It still trails the largest ecosystems — Ledger supports around 500 coins and Trezor's reaches further still — and NFT and staking support is limited to a subset of chains rather than all 31. Check the coin list before buying if you hold something niche, since there is no workaround for a chain Arculus has not added.

Setup is tap-based: install the app, tap the card, set the PIN, write down the seed. There is no cable, no firmware-update ritual to start, and no battery to die — the card is as durable as the payment cards CompoSecure builds for banks, and it fits in a wallet slot.

Three structural limits sit behind the convenience:

1. Phone-only. The app is the wallet's entire interface. No desktop app, no browser extension of its own — a dead or lost phone means no access until you restore the app elsewhere.
2. One wallet per card. A card pairs with a single wallet. Separate accounts mean buying separate cards, and there is no multisig.
3. Recovery is the seed, full stop. The BIP39 phrase alone restores your funds — into a replacement Arculus or into any compatible wallet. The card is the signing device, not a second recovery factor, so losing the card costs you $99 and an afternoon, while losing the seed with the card costs you everything. Standard seed discipline applies unchanged.

For web3, Arculus connects through MetaMask and WalletConnect, which gets the card into dApps and DeFi front-ends — with every approval still displayed by the phone.

The app includes an in-app swap, a fiat on-ramp for buying crypto directly, and limited staking. These run through third-party providers and their fees, and the vendor does not disclose spreads up front — treat them as convenience rails, and price any large swap against an exchange before using them. The MetaMask and WalletConnect integrations are the more consequential features, since they extend a $99 card into the Ethereum dApp ecosystem that no-screen rivals without such hooks cannot reach.

$99, once. No subscription, no app fee, and the price has not moved since the 2021 launch. That is $150 less than the Ledger Flex and in the same bracket as Trezor's entry devices — for the same certification class of secure element, minus the screen. The no-screen card format is what buys the discount against screen wallets in this class. The honest total cost includes swap and on-ramp spreads if you use the in-app rails, and a second $99 card if you want a spare or a second wallet.