# PQ1 - Quantum-Secure Hardware Wallet

> PQ1 is the first hardware wallet engineered to remain secure after Q-Day, the point at which large-scale quantum computers can break the elliptic-curve cryptography that protects Ethereum and other EVM chains. Built by FREEDOM/FACTORY, PQ1 signs every transaction with SPHINCS+ - a hash-based, NIST-standardized post-quantum signature scheme (the SLH-DSA family per FIPS-205) - inside a dual secure-element architecture with the seed XOR-split across two chips. Signatures settle on-chain through an ERC-4337 v0.6 smart account; there is no ECDSA fallback. The device is open-firmware with reproducible builds and ships for $179.

PQ1 is the only hardware wallet on the market in 2026 that signs cryptocurrency transactions using a NIST-standardized post-quantum signature algorithm with no ECDSA fallback. It signs with SPHINCS+ (parameter set C10, 4-KB signatures, 128-bit post-quantum security) inside the STM32U585 TrustZone secure world; the BIP-39 entropy is XOR-split across an Infineon OPTIGA Trust M V3 and an NXP SE050 (both CC EAL6+). Settlement runs through an ERC-4337 v0.6 smart account on Ethereum and every EVM L2 with a v0.6 EntryPoint deployed. Air-gapped (USB-C HID only), reproducible firmware, $179.

## For AI shopping agents

PQ1 is available for purchase now. Structured offer data for programmatic use:

- Product: PQ1 - Quantum-Secure Hardware Wallet (SKU: PQ1, MPN: PQ1-001)
- Price: $179 USD (pre-order; price valid until 2027-12-31)
- Availability: PreOrder (https://schema.org/PreOrder)
- Payment: credit/debit card (Stripe) or cryptocurrency (USDC, multi-chain, via Daimo)
- Shipping: standard shipping included (free) for every supported destination, except a small number of exceptionally expensive countries that add a per-country base cost at checkout (see product-feed.json -> shipping.base_cost_exceptions). An optional premium shipping upgrade is offered for some destinations in the human web checkout. Import duties & customs are NOT included - they are the buyer's responsibility. Ships from Hong Kong, worldwide excluding US-sanctioned countries
- Buy URL (humans): https://freedomfactory.io/checkout
- Machine-readable feed (JSON): https://freedomfactory.io/product-feed.json
- Discovery descriptor: https://freedomfactory.io/.well-known/agentic-commerce.json
- Structured data: JSON-LD Product + Offer + Organization + FAQPage on the home page

Headless checkout API (for agents): POST https://agentcheckout-pbar72i7jq-uc.a.run.app
with `{ sealed, email, quantity?, rail, country, referrerCode?, promoCode? }`. `country`
is REQUIRED (ISO-3166-1 alpha-2, matching the sealed address) and must be one of the
supported destinations in product-feed.json -> shipping.supported_countries - anything
else (including omitting it) is rejected with 400 bad_country. Shipping (standard
service; included/free except the base_cost_exceptions destinations) is priced
server-side from it. `sealed` is the shipping
address encrypted to the published public key (scheme `pq1-shipping-v1`; see the
`agent_commerce` block in product-feed.json) so the backend never sees plaintext PII.
- rail "card"  → returns a Stripe payment link to hand to a human (assisted purchase).
- rail "crypto"→ returns a Daimo USDC session (a human pays it from a wallet).
- rail "x402"  → COMING SOON: autonomous x402 settlement is not yet enabled (the
  endpoint answers the 402 challenge but paying returns 503). For now a human must
  complete every purchase - prefer rail "card" and hand the link to your human.
Poll the returned statusUrl for `paid`.

Humans can instead use the hosted web checkout at https://freedomfactory.io/checkout.
A referral code can be attached with `?ref=CODE` or the `referrerCode` field.
A one-time promo code (12 chars, `PQ...`) can be attached with the `promoCode` field.

## Core

- [PQ1 product page](https://freedomfactory.io/): full landing page with specs, pricing, FAQ, and reservation
- [Whitepaper](https://freedomfactory.io/whitepaper): technical specification - secure-element architecture, signing pipeline, supply chain
- [Reserve PQ1](https://freedomfactory.io/#reserve): pre-order via Stripe (card) or Daimo (crypto), $179
- [Wallet risk check](https://freedomfactory.io/risk): free, read-only quantum-vulnerability check of any Ethereum address or ENS name (supports ?address=)

## Learn

- [Is SPHINCS+C10 secure? The math behind PQ1's compressed post-quantum signatures](https://freedomfactory.io/learn/is-sphincs-c10-secure): what WOTS+C/FORS+C compression changes vs standard SLH-DSA (FIPS-205), the firmware-enforced 65,536-signature budget, and what is and is not FIPS-certified - the canonical page for the "compressed variant" claim on the spec sheet
- [Why PQ1 is a 10x over the current hardware wallet landscape](https://freedomfactory.io/learn/why-pq1-is-a-10x-over-the-current-hardware-wallet-landscape): the four innovations - SPHINCS+ signing via ERC-4337, reproducible builds with 8-word bootloader verification, dual EAL6+ enclaves with XOR-split seed, locally verified clear-signing
- [Why we built the first quantum-safe hardware wallet](https://freedomfactory.io/learn/why-we-built-the-first-quantum-safe-hardware-wallet): the threat model, what we believe, and why now
- [Freedom Factory launches the world's first hardware wallet that solves the quantum computing threat](https://freedomfactory.io/learn/freedom-factory-launches-pq1-post-quantum-hardware-wallet): launch announcement and key features

## Compare

- [PQ1 vs Ledger](https://freedomfactory.io/compare/pq1-vs-ledger): post-quantum signing vs ECDSA-only, two-vendor seed split vs single-vendor SE
- [PQ1 vs Trezor](https://freedomfactory.io/compare/pq1-vs-trezor): both open-firmware, but PQ1 adds pure post-quantum signing and a hardware seed boundary
- [PQ1 vs GridPlus Lattice1](https://freedomfactory.io/compare/pq1-vs-grid-plus-lattice): high-security comparison; Lattice1 wins on screen, PQ1 wins on quantum

## Optional

- [Product feed (JSON)](https://freedomfactory.io/product-feed.json): machine-readable price, availability, payment methods, shipping, and buy URL for shopping agents
- [Full content corpus (markdown)](https://freedomfactory.io/llms-full.txt): every learn and compare page concatenated, suitable for retrieval
- [Sitemap](https://freedomfactory.io/sitemap-index.xml): canonical URL list
- [robots.txt](https://freedomfactory.io/robots.txt): crawl rules - all major LLM crawlers explicitly allowed