Loki | Relai Edition + Nano S Plus

Almost all wallets! The Loki is compatible with all Ledger, Trezor, Keystone, and many more wallets, as explained below.

To be a bit technical, the Loki enables you to store your BIP39 or SLIP39 seed phrases.

The Loki is compatible with all BIP39 wallets:
The majority of the wallets out there use the BIP39 protocol. The Loki is compatible with all the (BIP39) wallets below:

• All Ledger wallets (Nano X, Nano S Plus, Flex, Stax)
• All Trezor wallets (Model One, Model T, Safe 3, Safe 5)
• Trust Wallet
• Exodus
• MetaMask
• Relai
• Coinbase
• Phantom
• Electrum
• Kraken
• And many more...

The Loki is also compatible with all SLIP39 wallets:

More and more wallets are adopting the SLIP39 protocol for Single-share or Multi-share backups, also known as Shamir Backups.

The SLIP39 protocol was invented by Trezor and quickly after that, Keystone wallets also adopted the backup method. The Loki is compatible with all the (SLIP39) wallets below:

• Trezor wallets (Model T, Safe 3, Safe 5)*
• Keystone wallets
• Rabby
• Electrum
• BlueWallet

The following wallets will adopt the SLIP39 protocol before the end of 2024:

• Wasabi
• Sparrow
• MEW/ Enkrypt
• Ambire
• NuFi
• And more SLIP39 wallets...

*Trezor is gradually transitioning its newly sold wallets from BIP39 (a seed phrase of 12 or 24 words) to SLIP39 (a seed phrase of 20 words). The Loki supports all BIP39 and SLIP39 backups, so the Loki is also compatible with all Trezor wallets.

The BIP39 protocol uses the BIP39 wordlist. The SLIP39 protocol uses the SLIP39 wordlist.

To summarize,  the Loki is compatible with all established wallets. If this is new for you and you want to see how it works with your preferred wallet, please watch the 3-minute tutorial of the Loki.

Great question!

While all our products are made out of high-quality titanium, there are some differences.

Method

• Loki:
  You punch your seed phrase into titanium, using the included automatic center punch tool.
  
  With Loki, you store the first 4 letters of each word in a 3 mm thick titanium plate (which is thicker and stronger than you might think).
• Zeus:
  With Zeus, you will write down your seed words, which are generated from the BIP39 or SLIP39 wordlist. These words all have a corresponding number. After you have written down all the numbers next to the words, you will punch them into the Zeus plates using the included automatic center punch tool. This is very easy and fast to do.
  
  Watch the Zeus tutorial here.
  
  The Zeus consists of 2 titanium plates, which are 6 mm thick in total. Because these titanium plates are placed on top of each other, the words are protected even better.
• Thor:
  The extended model and the first product that Cryptotag launched on the market. Thor brings a magical experience. With the Thor, you hammer the words on the titanium plates with the included hammer, punch letters, and anvil.
  
  The Thor consists, just like the Zeus, of 2 titanium plates (together 6mm thick), and the recovery seed is therefore extra protected. The Thor has the most capacity, see the next point.
• Odin:
  The Odin is a separate product, specifically developed for SLIP39 backups such as Multi-share (also known as Shamir's Secret Sharing). This product is for the advanced user. Click here to read what multi-share is and find out more about Odin here.

Storage capacity

• Loki: up to 24 words (1 plate with 12 words on each side);
• Zeus: up to 24 words (2 plates with 12 words on each plate);
• Thor: up to 48 words (2 plates with 24 words on each plate);
• Odin: 20 words per hexagon (see Odin product page for variations)

BIP39 or SLIP39 compatible?

• All Cryptotag products can be used for wallets that use the BIP39 or SLIP39 wallets. Just make sure to use the correct corresponding wordlist.

Retail price:

• Loki: €89 / $89 / £79
• Zeus: €129 / $129 / £114
• Thor: €350 / $350 / £309
• Odin: From €199 / $199 / £174

For a full comparison, please visit our Compare page.

Good question! A seed word consists of 3 to 8 letters. To reduce the number of punches, you only punch in the first 4 letters.

A back-up word consists of 3 to 8 letters.  The first four letters are unique to each word and are sufficient to recover the full word. That is why you only have to punch the first four letters of each word. Unless a word consists of three letters. Then, of course, you only need to punch three letters in the titanium.

The words below come from the BIP39 wordlist. You can see that in some cases, the first 2 or 3 letters are the same. But if you look at the words that consist of 4 letters or more, the first four letters are always unique.

• act
• action
• actor
• actress

The same example with words from the SLIP39 wordlist:
• salon
• salt
• satisfy
• satoshi

Since your wallet knows the wordlist, it can auto-fill the words or suggest the word when recovering.

Read more about why you only need the first 4 letters of a seed word.

BIP39 is the open-source industry-standard protocol used by cryptocurrency wallets. It is an alphabetical word list of 2048 words. These words are easier to store than a full private key, which can be up to 256 characters. An example is the following bitcoin private key:
79191a3b2992709843e21e2ab4a835b0050e4abe77ce2aa03d16a54c0e991f13

The first word of the BIP39 wordlist is 'Abandon'. The last word is 'Zoo'. The words from your seed phrase come from these wordlists and the order of your seed phrase is randomly generated by your software or hardware wallet.

Check out the BIP39 wordlist here. To find out more about BIP39 seed phrases, click here.

Nope. We are good crypto citizens and use the industry standards BIP39 and SLIP39, just like your software or hardware wallet does.

SLIP39 is the open-source and industry-standard protocol created and used by Trezor/ SatoshiLabs. It is a method of backing up your wallet with multiple shares, called Shamir or Multi-share, and a minimum threshold to recover your wallet. You can also set up a wallet with a Single-share backup.

The SLIP39 wordlist has 1024 words and starts with the word 'Academic'. Check out the list here.

Simply put: a share/ part has 20 words. Your setup, for example, consists of 3 shares, with a minimum of 2 shares needed to recover the wallet. This means you can lose 1 of the 3 shares, and still recover your wallet with the other 2 shares.

When you want to recover your wallet, you insert the 2 shares (with each 20 words) in your wallet during the recovery process.

No, if we all end up under a bus or close down our business, you still can access your funds, because BIP39 and SLIP39 are industry standards that can not be changed by CRYPTOTAG. This means you can always retrieve your recovery seed, with or without CRYPTOTAG, or any other third party needed.

The wordlists of these protocols are also publicly available on many websites since they are open-source.