With everything going on lately around hardware wallet seed generation, a lot of people are asking the right question for the first time: where does my seed phrase actually come from? Your entire wallet security reduces to that one moment of randomness. If entropy is weak or predictable, nothing else the device does can save you.
Here's how Blockstream Jade handles it.
Multiple independent entropy sources, not one chip
Jade gathers randomness from many independent sources: user button and wheel input, CPU counters, battery state, ambient temperature, a boot-time camera image, a hardware random number generator, and entropy from the companion app. No single point of failure. If any one source is somehow weak or compromised, the others still contribute real randomness.
A Bitcoin Core style entropy accumulator
Jade uses an accumulator similar to the design in Bitcoin Core, storing a 32-byte state generated by SHA512 hashing of its previous state along with all the entropy sources above, then feeds the result into the standard BIP39 function to produce your 12 or 24 word phrase. This directly addresses the attack class where attackers grind private keys searching for weakly generated ones. And you can verify it yourself: the implementation is published in random.c on GitHub, documented in the Jade Entropy wiki, and explained in plain English in Blockstream's Help Center.
Don't trust the device at all? Roll dice.
The Jade supports generating a recovery phrase with physical dice or any manual method, so your randomness never depends on any chip. You generate the phrase offline, enter the first 11 or 23 words, and the Jade calculates the valid BIP39 checksum word for you. Maximum sovereignty, zero trust in silicon.
No proprietary secure element to blindly trust
Jade secures your recovery phrase with a blind oracle (a "virtual secure element") instead of a proprietary secure-element chip, so an attacker would have to compromise both the device and the oracle to extract keys. The oracle stores only a PIN hash and a nonce and knows nothing about your addresses, private keys, or actual PIN. You can run Jade fully air-gapped via QR or host your own oracle instance.
Fully open source, top to bottom
Firmware, hardware schematics, and companion app code are all published for public audit. You don't have to take anyone's word on how your seed is generated. Read it, build it, verify it.
Back in stock at Solo Satoshi:
Jade Classic, black plastic: $79
Jade Plus, black plastic: $149
Jade Plus, Lunar Silver metal: $169
All sourced directly from Blockstream, sealed, with same-day shipping. Jade Plus models also support Genuine Check to cryptographically verify your device is authentic hardware.
https://www.solosatoshi.com/product/blockstream-jade-bitcoin-hardware-wallet/