Security advisory (5 November 2026): a flaw in the Linux kernel, CVE-2026-98432, affects home Lightning nodes running on Linux. The demonstrated attack needs a Multipath TCP listener, which LND 0.20.x and 0.21.x, Lightning Terminal, Loop and Alby Hub opened by default. Update LND to 0.21.6 or 0.20.7, and Lightning Terminal, Loop or Alby Hub if you run them; on Umbrel, update umbrelOS to 2.0.1 and then the Lightning Node app. Install your system’s kernel update now if it is out (Debian and Raspberry Pi OS have it); until then, turn Multipath TCP off. LND says the kernel patch is the only fix. The fixed versions and the exact commands are in the steps of our Lightning node advisory.
Affiliate disclosure: the Umbrel Home link in the hardware recommendation below is an affiliate link (we may earn a commission). No other link on this page is. The commission does not change our verdict, which still puts a used mini-PC ahead of the Umbrel Home for most readers.
Umbrel is node-in-a-box software that turns commodity hardware into a Bitcoin and Lightning full node with a graphical interface. Since its launch in 2020, it has become the most popular home node platform, primarily because it made running Bitcoin Core, LND, and supporting applications accessible to people who don’t live in a terminal.
This review covers Umbrel as of early 2026, with the hardware, installation and licensing facts re-checked on 3 November 2026, after umbrelOS 2.0 shipped. It covers the hardware requirements, the installation process, the app ecosystem, Lightning integration, and an honest assessment of its strengths and limitations compared to alternatives like Start9 and RaspiBlitz.
What Is Umbrel
Umbrel is a Linux-based operating system with a web dashboard that manages Docker containers. Each “app” on Umbrel runs as its own group of one or more Docker containers. Bitcoin Core runs in one container, LND in another, and each additional service (Electrs, BTCPay, Mempool) gets its own isolated environment.
The core value proposition: you flash an SD card (or install on x86 hardware), plug in your device, open a browser, and you have a running Bitcoin node with a point-and-click app store. No command line required for basic operation.
Umbrel is not fully open source. umbrelOS, dashboard included, is source-available under the PolyForm Noncommercial License 1.0.0: free for personal and noncommercial use, while commercial use needs Umbrel’s permission. Many of the individual apps it packages are open source projects. This is a meaningful distinction that matters for sovereignty-minded users — your node software’s source code is inspectable but not freely licensed.
Key specs:
- Web-based dashboard accessible from your local network
- Docker-based app architecture with one-click installs
- One-click updates for umbrelOS and each app, which you install yourself: nothing updates on its own
- Built-in Tor support for remote access
- Runs Bitcoin Core + LND as the default Bitcoin/Lightning stack
- Supports both ARM (Raspberry Pi) and x86 (PC/server) hardware
Hardware Options
Umbrel runs on three main hardware tiers. Your choice determines sync time, reliability, and performance.
Raspberry Pi 4 / 5
The Raspberry Pi is what put Umbrel on the map. Minimum specs:
- RPi 4: 4GB or 8GB RAM model; skip the 2GB model, because Bitcoin Core’s memory use during IBD (Initial Block Download) would strain it. Umbrel’s guide calls the Pi 4 fine for tinkering or if you already have one; for a node that will hold Lightning money, choose a Pi 5 or a mini-PC.
- RPi 5: 4GB or 8GB; our node lesson uses the 8 GB model. Noticeably faster IBD and app performance over the RPi 4 thanks to the improved CPU and I/O. Umbrel recommends the Pi 5. It says USB drives can make a Pi 4 crash, and many Pi 4 boards need a bootloader update before umbrelOS 2.0 will start.
- Storage: a 2 TB SSD for the blockchain, which took about 780 GB on 28 October 2026 and grows about 80 GB a year. Do not use an HDD — the random I/O requirements of Bitcoin Core and Electrs will make it unusable. On a Pi, umbrelOS keeps apps on the microSD card by default and treats an SSD you plug in as external storage, so you move Bitcoin Node onto the SSD after setup (see Installation below).
- Power: Official USB-C power supply. Underpowered Pi units cause database corruption on unexpected shutdowns.
- MicroSD: 32 GB or bigger, from a known brand. umbrelOS runs from it.
Total cost: we don’t quote prices for this build: they moved a lot in 2026, and Raspberry Pi raised the price of its boards several times as memory got more expensive. Check current prices for the board, a 2 TB SSD, the case and the official power supply.
Pros: Cheap, low power consumption (about 5–10 W with its SSD), small form factor, quiet.
Cons: Initial Block Download takes roughly two to four days on an RPi 5 and longer on an RPi 4, the slowest hardware option. In the setup Umbrel recommends, Electrs can’t run on a Pi for now: umbrelOS can’t move it to the SSD, and its index won’t fit on the microSD card, so wallets connect straight to Bitcoin Core (see Electrs below). USB-SSD adapter reliability varies — some adapters have firmware bugs that cause disconnections under heavy I/O.
Repurposed Laptop or Desktop
Any x86_64 machine with at least 4GB RAM and a 2 TB SSD works. This is the best value option if you have old hardware sitting around.
- CPU: Any 64-bit Intel or AMD processor from the last 10 years is more than sufficient
- RAM: 4GB minimum, 8GB+ recommended if you plan to run many apps
- Storage: a 2 TB NVMe or SATA SSD, installed inside the machine, because umbrelOS only uses internal SATA and NVMe drives as main storage. Drives plugged in over USB show up as external storage.
- Network: Ethernet strongly recommended over Wi-Fi for node stability
Total cost: little or nothing if you already have the computer, plus a 2 TB SSD if it doesn’t have one.
Pros: IBD completes in 1-3 days. More RAM means better performance across all apps. Easier to upgrade storage. Reliable power management.
Cons: Draws more power than a Pi, especially a desktop; potentially louder; takes more physical space.
Dedicated Mini-PC or Server
Purpose-built options like Intel NUC, Beelink mini PCs, or Umbrel’s own Home device (a pre-built Umbrel hardware unit).
- Umbrel Home: Umbrel’s official hardware — Intel N150 quad-core CPU, 16 GB RAM, 1, 2 or 4 TB NVMe SSD. Ships with umbrelOS pre-installed. From $499 (November 2026). Choose 2 TB or more: on Umbrel, 1 TB is already too small for Bitcoin Node and its indexes.
- Intel NUC / Beelink: Similar specs; you install umbrelOS yourself.
- Used enterprise mini-PCs: Dell OptiPlex Micro, HP ProDesk Mini, Lenovo ThinkCentre Tiny, usually the cheapest way to a capable node. Check current prices, and budget for a 2 TB SSD inside.
Pros: Fast IBD (about a day or two with an NVMe drive), reliable, purpose-built. The Umbrel Home offers a premium plug-and-play experience.
Cons: Higher upfront cost. The Umbrel Home specifically is premium-priced for what is relatively standard hardware.
Hardware Recommendation
For most users: a used mini-PC (Dell OptiPlex Micro or equivalent) with 8GB RAM and a 2 TB NVMe SSD provides the best balance of cost, performance, and reliability. If you value simplicity and don’t mind the price, the Umbrel Home[#aff] works out of the box. The RPi 5 with a 2 TB SSD on USB 3 remains a viable budget option, but it syncs more slowly and can’t run Electrs on Umbrel for now.
Why 2 TB: the blocks took about 780 GB on 28 October 2026 and grow about 80 GB a year. With its undo data and chainstate, Bitcoin Core 32.1 asks for about 900 GB, and Umbrel’s Bitcoin Node also builds a transaction index and a block-filter index by default, so on Umbrel a 1 TB drive is already too small.
Installation Process
Raspberry Pi Installation
These steps follow Umbrel’s Raspberry Pi guide as of November 2026.
- Download
umbrelos-pi.img.zipfrom umbrel.com/downloads. The same file works on the Pi 5 and the Pi 4. On a Pi 4, update the bootloader first, as the guide explains, because many Pi 4 boards will not start umbrelOS 2.0 until you do - Flash it to a microSD card of 32 GB or more using Raspberry Pi Imager or Balena Etcher
- Insert the microSD, connect Ethernet and the official power supply. Leave USB drives unplugged for now
- Wait a few minutes for first boot
- Open
http://umbrel.localin your browser (or find the device’s IP on your router) - Create your account with a strong password
- Plug in your SSD, install Bitcoin Node from the App Store and move it onto the SSD straight away: in the app’s settings, choose Storage, then App storage, then Move. The SSD must be formatted as ext4. If it is not, right-click it under External storage in Files and choose Format (this erases it). Bitcoin Core then syncs on its own
The process is genuinely straightforward. The most common installation issue is the browser not finding umbrel.local — in that case, check your router’s DHCP client list for the device’s IP address and access it directly.
Two things to know about the Pi layout. Apps stored on an external drive are not included in umbrelOS Backups, and the drive must stay connected while the app runs (Umbrel’s external storage guide). Umbrel also lets you try running umbrelOS from a USB drive, or from an NVMe drive on a Pi 5, instead of a card, but says this does not work on every setup yet and recommends the microSD card for now.
x86 Installation
Umbrel offers two ways to run umbrelOS on an Intel or AMD machine (Umbrel’s amd64 guide, checked 8 November 2026):
- Run from a USB drive (what Umbrel suggests for most PCs): flash
umbrelos-amd64.img.xzto a USB drive of 32 GB or more with Balena Etcher, plug it in, connect Ethernet and power on. Leave the drive plugged in. umbrelOS boots from it every time, which keeps every internal drive free for apps and data. When you openhttp://umbrel.localand create your account, umbrelOS lists the internal drives it found and asks how you want to use them. - Install to onboard storage or an internal drive: flash the USB installer (
umbrelos-amd64-usb-installer.iso) to a USB drive of 4 GB or more, boot your machine from it and follow the installer. Umbrel suggests this for PCs with onboard eMMC storage, or if you’d rather not keep a USB drive plugged in. umbrelOS then lives on that drive and shares it with your apps and data.
Important: umbrelOS is a standalone operating system. Since umbrelOS 1.0 it cannot be installed on top of an existing Ubuntu or Debian system, and the old umbrel.sh install script now only prints that notice. Drives plugged in over USB show up as external storage. Only internal SATA and NVMe drives become main storage.
Initial Sync Times
After installation, Bitcoin Core needs to download and validate the entire blockchain. On 28 October 2026 the blockchain’s blocks took about 780 GB. Realistic sync times:
| Hardware | IBD Time | With Electrs Indexing |
|---|---|---|
| Raspberry Pi 4 (8GB) | Longer than a Pi 5 | Not available on a Pi 4 for now |
| Raspberry Pi 5 (8GB) | Roughly 2-4 days | Not in the recommended Pi setup for now |
| Old laptop (i5, 8GB) | 1-3 days | Many hours more |
| Mini-PC / NUC (i5+, 16GB, NVMe) | About a day or two | Many hours more |
Don’t rush the sync. Let it complete fully before opening channels or installing Lightning-dependent apps. Interrupting IBD by restarting frequently can slow the process, and a sudden power cut can corrupt the card or Bitcoin Core’s data, so keep the node plugged in.
App Ecosystem
Umbrel’s App Store is its strongest feature. One-click installs for Bitcoin-specific and general self-hosted services. Here’s what matters for Bitcoiners:
Bitcoin Core
Umbrel’s Bitcoin Node app installs from the App Store with one click and configures itself. It runs a full validating node — it downloads the complete blockchain and verifies every transaction — and lets you choose which Bitcoin Core version it runs. A node set to the latest version moved to Bitcoin Core v32.1 with the app’s most recent update (checked 3 November 2026). Advanced users can also reach Bitcoin Core’s RPC, with the details the app shows under Connect → RPC Details. Pruning is off by default, so you run a full archival node, which is why we recommend a 2 TB SSD.
LND (Lightning Network Daemon)
Umbrel uses LND as its Lightning implementation. After installation, you create a Lightning wallet, fund it with an on-chain transaction, and open channels. LND on Umbrel is configured conservatively — default settings prioritize reliability over routing performance. For node operators who want to actively route payments, manual configuration tweaks through lnd.conf may be needed. Refer to our complete Lightning node guide for optimization details.
Electrs (Electrum Rust Server)
Electrs creates an Electrum-compatible index of the blockchain. This lets you connect wallets like Sparrow, BlueWallet, and Electrum directly to your own node instead of relying on third-party Electrum servers. Electrs requires a full (non-pruned) Bitcoin Core node and takes significant time to build its initial index, about 80 GB. On a mini-PC it sits on the same internal SSD as everything else. On a Raspberry Pi that runs umbrelOS from the microSD card, as Umbrel recommends, it isn’t an option for now: as of November 2026, umbrelOS can move only apps built for it to an external drive, and none of the Electrum servers in the App Store is, so the index would have to fit on the 32 GB card. There, connect Sparrow straight to Bitcoin Core over Tor instead, as our lesson Setting Up Your Bitcoin Node shows. A Pi 5 that runs umbrelOS from a 2 TB SSD instead keeps its apps on that SSD, so Electrs fits, but Umbrel says booting from a drive doesn’t work on every setup yet.
BTCPay Server
A self-hosted payment processor for accepting Bitcoin payments. On Umbrel, BTCPay connects directly to your local Bitcoin Core and LND instances. This is the most sovereign way to accept Bitcoin payments — no third party sees your transactions. Setting up BTCPay on Umbrel is orders of magnitude easier than a manual BTCPay deployment.
Mempool
A local instance of mempool.space — the popular block explorer and mempool visualizer. On Umbrel it needs an Electrum server (Electrs, Fulcrum or ElectrumX) as well as Bitcoin Node, so, like Electrs, it isn’t an option on a Pi set up the way Umbrel recommends, for now. Running it locally means your transaction lookups don’t leak to external servers. Especially useful for checking fee estimates and monitoring your own transactions privately. This pairs well with the privacy principles in our Bitcoin privacy guide.
Lightning Terminal
Lightning Labs’ web-based Lightning management interface. Provides liquidity management via Loop (submarine swaps), Pool (liquidity marketplace), and Faraday (channel analytics). Lightning Terminal is the most powerful Lightning management tool available on Umbrel and makes advanced operations like rebalancing and liquidity acquisition accessible through a GUI.
ThunderHub and Ride The Lightning (RTL)
Both are web-based LND management dashboards. ThunderHub offers a more modern interface; RTL has broader feature coverage. Most operators install one or the other. They provide channel management, payment tracking, forwarding history, and node configuration in a graphical interface.
Non-Bitcoin Apps
Umbrel also hosts non-Bitcoin self-hosted apps: Nextcloud, Gitea, Pi-hole, Home Assistant, Vaultwarden, and dozens more. While useful, be aware that running many apps on limited hardware (especially a Raspberry Pi) competes for resources with Bitcoin Core and LND. Prioritize Bitcoin infrastructure over general-purpose apps if resources are constrained.
Lightning Integration
Umbrel’s Lightning experience works in layers. The base layer is LND running as a system service. On top of that, you choose your management interface.
Getting Started with Lightning on Umbrel
- Wait for Bitcoin Core to fully sync (this is mandatory)
- Install the Lightning Node app from the Umbrel App Store
- Create your Lightning wallet and write down the 24 secret words it shows, on paper or metal, never in a photo or a file. They recover the node’s on-chain money; money in channels also needs the channel backup (see the FAQ below)
- Fund your Lightning wallet by sending on-chain Bitcoin to the generated address
- Wait for the funding transaction to confirm
- Open your first channel to a well-connected peer that stays online around the clock, by pasting its node address (its public key, followed by its network address)
For channel selection strategy and management, our channel management masterclass covers everything from peer selection to rebalancing.
Liquidity Management
Umbrel doesn’t solve Lightning liquidity by itself — that’s an operational challenge regardless of platform. However, having Lightning Terminal available makes liquidity management significantly easier than CLI-only setups. Loop In and Loop Out are one-click operations through the interface.
For receiving payments, you need inbound liquidity. Options available on Umbrel:
- Use Lightning Terminal’s Pool to buy inbound channels from liquidity providers
- Open channels from external nodes toward your Umbrel node
- Use Loop Out to push local balance on-chain, creating inbound capacity
Remote Access
By default, Umbrel is reachable only on your home network (Umbrel’s remote access guide, checked 8 November 2026). To reach it from elsewhere, Umbrel recommends Tailscale, an app in its App Store that links your own devices in a private network. Tor is built in too: it is slower, and to open the dashboard over Tor you switch on Settings → Advanced settings → Remote Tor access. To run your Lightning node from your phone, install Zeus: in the Lightning Node app, open the three-dot menu and choose Connect wallet, which shows a QR code that connects over Tor by default. That QR code gives full control of your Lightning node’s funds, so don’t screenshot it or share it.
Pros and Cons
Strengths
- Easiest setup in the space: Flash, plug in, open browser. No other platform matches this simplicity.
- App ecosystem breadth: The largest selection of one-click Bitcoin and self-hosted apps of any node platform.
- Active development: Regular updates, responsive to community feedback, growing app library.
- Community size: The largest user base means more community support, tutorials, and troubleshooting resources.
- Hardware flexibility: Runs on everything from a Pi to a server.
- Clean UI: The dashboard is genuinely well-designed and intuitive.
Weaknesses
- Not fully open source: umbrelOS’s PolyForm Noncommercial license does not allow commercial use without Umbrel’s permission. For sovereignty maximalists, this is a dealbreaker. You’re trusting Umbrel’s code to manage your Bitcoin node.
- Docker overhead: Every app runs in its own Docker containers, often several per app, consuming more RAM and storage than native installs. On a Raspberry Pi with 4GB RAM, running more than 5-6 apps simultaneously becomes problematic.
- Limited advanced configuration: Power users who need fine-grained control over LND or Bitcoin Core configuration must SSH in and edit config files manually. The GUI exposes only basic settings.
- Update dependency: App updates go through Umbrel’s app store pipeline. If an upstream project releases a critical security patch, you’re waiting for Umbrel to package and push it.
- Fragile on Pi hardware: SD card corruption, USB-SSD disconnections, and insufficient power continue to cause data loss on Raspberry Pi setups. These aren’t Umbrel bugs — they’re Pi hardware limitations — but Umbrel doesn’t mitigate them sufficiently.
- LND-centered Lightning tooling: LND, through the Lightning Node app, is Umbrel’s default, and tools covered above such as Lightning Terminal and ThunderHub work only with LND. Correction, 3 November 2026: this point used to say Umbrel supports only LND. Its App Store also lists Core Lightning as a separate app (v26.06.9 on 3 November 2026).
Umbrel vs Start9 vs RaspiBlitz
We’ve published a detailed Umbrel vs Start9 comparison that covers the philosophical and technical differences. Here’s the summary alongside RaspiBlitz:
| Feature | Umbrel | Start9 (StartOS) | RaspiBlitz |
|---|---|---|---|
| License | Source-available (PolyForm Noncommercial) | Open source (MIT) | Open source (MIT) |
| Setup Difficulty | Very easy | Easy | Moderate (CLI-based) |
| App Store Size | Hundreds (largest) | Fewer, curated | Bitcoin and Lightning tools |
| Lightning Impl. | LND (default) + CLN app | LND + CLN | LND + CLN |
| Hardware Support | Pi 5 or Pi 4, x86-64, Umbrel Home | x86-64, ARM64, RISC-V, Pi 4, Server One | RPi primarily |
| Advanced Config | Limited GUI | Good GUI config | Extensive CLI config |
| Backup System | Basic | Comprehensive (built-in) | Comprehensive |
| Target User | Beginners, general users | Privacy-focused, sovereignty maximalists | Technical enthusiasts |
Choose Umbrel if: You want the easiest possible setup, the largest app selection, and a polished UI. You’re comfortable with a source-available, non-commercial license.
Choose Start9 if: Open source licensing matters to you, and you value the built-in backup and dependency management system.
Choose RaspiBlitz if: You’re comfortable with the command line, want maximum configurability, and prefer a community-driven project with deep technical documentation. Our RaspiBlitz setup tutorial walks through the full installation process.
Who Should Use Umbrel in 2026
Umbrel is the right choice for Bitcoiners who want a working node without becoming system administrators. If you want to validate your own transactions, connect your hardware wallet through Electrs, and maybe run BTCPay for a small business — Umbrel gets you there with minimal friction.
It’s less ideal for operators who want to run a serious routing node, require fully open-source infrastructure, or want to customize every aspect of their setup. Those users should look at Start9 or RaspiBlitz.
The ecosystem around home nodes has matured significantly. Running your own node is no longer a niche technical exercise — it’s a practical sovereignty tool. Umbrel’s contribution to making that accessible deserves credit, even with its limitations. For the reasoning behind running your own node in the first place, see our guide on why running your own node matters.
Frequently Asked Questions
Can I migrate from Umbrel to another platform without losing my Lightning channels?
Direct migration of active Lightning channels between platforms is risky and not officially supported. The safest approach: close all Lightning channels cooperatively (funds return on-chain), install the new platform, then reopen channels. You keep your on-chain funds and seed phrase — it’s the channel state that doesn’t transfer. Attempting to copy LND databases between systems risks broadcasting old channel states, which your peers’ watchtowers will punish.
Does Umbrel work with a VPN?
Yes. By default, Umbrel is reachable only on your home network. To reach it from outside, Umbrel recommends Tailscale, and WireGuard is also in its App Store; both are faster than Tor, which is built in but stays off until you switch on Settings → Advanced settings → Remote Tor access. Some users run a VPN for Bitcoin Core’s peer connections to hide their node’s IP from the Bitcoin P2P network while keeping the local interface on the regular network.
How much does it cost to run Umbrel monthly?
Primarily electricity. A Raspberry Pi 5 with its SSD draws about 5–10 W: at $0.20 per kWh, about $0.75–$1.50 a month. A mini-PC draws about 15–30 W, about $2–$4.50 a month. Put in your own price per kWh. Internet bandwidth during initial sync is roughly 780 GB of download (October 2026). After syncing, expect about 20 GB a month of downloads and often 200 GB or more of uploads, which Bitcoin Node’s Max Upload Target setting can limit.
Can I use Umbrel with a hardware wallet?
Not directly through Umbrel’s interface, but through a desktop wallet. On a mini-PC, install Electrs on Umbrel, then connect your desktop wallet (Sparrow, Electrum, Specter) to your Umbrel’s Electrs server. On a Raspberry Pi, connect Sparrow straight to Bitcoin Core over Tor. Either way, your hardware wallet transactions are then checked by your own node. This is the setup most hardware wallet users should target — see our hardware wallet comparison for compatible devices.
What happens if my Umbrel’s SD card fails?
On a Raspberry Pi, umbrelOS runs from the microSD card and keeps apps and data on it unless you moved them. If you moved Bitcoin Node to an SSD, the blockchain lives there, but apps on an external drive are not included in umbrelOS Backups. Umbrel notes that microSD cards are slower than SSDs and wear out over time, and advises backing up your Umbrel regularly, for example to a USB drive. If the card dies, you write umbrelOS to a new one; your blocks wait on the SSD, but your other apps, Lightning included, lived on the card, and your umbrelOS backup is what brings them back. Set up umbrelOS Backups to a USB drive, a NAS or another Umbrel before you need them. Your Lightning channels are the exception: umbrelOS Backups leave out LND’s channel database, which is unsafe to restore from an old copy, so open channels don’t come back. With your 24 words and the channel backup, your node asks each peer to close its channel, and your share of each comes back on-chain. The Lightning Node app uploads an encrypted copy of your channel backup to Umbrel’s backup server by default, and you should also download a fresh channel backup file after every channel you open or close and keep it off the device.
Is Umbrel safe for storing large amounts of Bitcoin?
Umbrel is a hot wallet environment — the Lightning wallet private keys exist on the device. It’s appropriate for Lightning liquidity and day-to-day spending amounts, not long-term savings. Keep the bulk of your Bitcoin in cold storage using a proper cold storage setup and only fund your Lightning node with amounts you’re comfortable having in a hot wallet.



