Coldcard Mk4

Per the official Coldcard homepage (July 2026): "COLDCARD is a Bitcoin-only hardware wallet by Coinkite — Air-gapped signing options. Verifiable firmware." The Coldcard Mk4 is the previous-generation Coldcard hardware wallet (launched 2022 by Coinkite, Toronto, Canada) and has since been succeeded by the Coldcard Mk5 (~$169.94, 2024) and the Coldcard Q (~$249.21, 2025) — the current Coldcard lineup. The Mk4 remains fully supported with firmware updates (the same firmware runs on Mk4 + Mk5 — the Mk4 has the same core security as the newer Mk5, just with a smaller OLED screen instead of the Mk5's bright OLED + a numeric keypad instead of a full QWERTY keyboard). For users who want the current-generation Coldcard, see our /best-hardware-wallets/coldcard-mk5 (when published) — for users who already own a Mk4 or want to buy one second-hand, this profile covers the Mk4 specifically.

Per the official Coldcard homepage's About section: "COLDCARD is a Bitcoin-only hardware wallet made by Coinkite since 2017. It protects private keys with dual secure elements, supports air-gapped signing, and runs open-source firmware you can verify yourself. It can also generate and vault BIP-39/BIP-85 seeds, recovery phrases, passwords, and private notes for other wallets. Unlike Trezor and Ledger, COLDCARD supports only Bitcoin to reduce the attack surface. No companion app, no cloud account." This is the core Coldcard value proposition: Bitcoin-only + dual secure elements + air-gapped signing + open-source reproducible firmware + no companion app lock-in.

Coldcard has a 9+ year operating track record (since 2017) and is the gold-standard air-gapped Bitcoin hardware wallet — recommended by independent reviewers including WalletScrutiny ("Passed all 10 tests"), Bitcoin Magazine ("may be the most secure way to handle key material at a distance"), BTC Sessions ("one of the most secure Bitcoin hardware wallets ever built"), Coin Bureau ("one of the strongest Bitcoin-only hardware wallets available today"), Bitcoin Verdict ("the most secure Bitcoin wallet you can buy"), and r/Bitcoin ("Best I've used by a country mile"). The Coldcard is consistently recommended by the Bitcoin privacy + self-sovereignty community alongside Foundation Passport and Keystone 3 Pro as one of the three leading air-gapped Bitcoin hardware wallets — see our full hardware wallets directory at /best-hardware-wallets.

Dual secure elements — two independent vendors

Per the official Coldcard homepage (July 2026): "Dual Secure Elements — Two independent secure-element vendors protect the seed, so one chip flaw is not enough." The Coldcard Mk4 has two secure elements from two different vendors (Microchip ATECC608B + Maxim DS28C36B) — the seed is split across both chips, so a vulnerability in one chip (or one vendor's firmware) is not enough to extract the seed. This is materially stronger single-chip-secure-element wallets like Ledger (which uses a single STMicroelectronics ST33J2M1 secure element). Only Foundation Passport + Keystone 3 Pro have similar dual secure element designs (Foundation Passport uses a single secure element but its open-source firmware + air-gapped workflow compensate; Keystone 3 Pro has dual secure elements).

Air-gapped workflow — QR / MicroSD / NFC / USB / Virtual Disk, OFF by default

Per the official Coldcard homepage's connectivity section: "Sign any PSBT, move it your way. QR, MicroSD, NFC, USB, and Virtual Disk are OFF by default." The Coldcard Mk4 supports air-gapped PSBT signing via: (a) MicroSD card ("AirGap SneakerNET — Maximum security when transferring data between devices") — move the unsigned PSBT from the online computer to the Coldcard via MicroSD card, sign on the Coldcard, move the signed PSBT back via MicroSD card; (b) NFC tap ("Secure & very short-range wireless transmission that sends data to your phone easily") — tap the Coldcard against an NFC-enabled phone to transfer PSBTs; (c) USB-C connector ("The industry-standard for transmitting both data and power over a single cable") — used for charging + optional USB-connected signing; (d) Virtual Disk ("COLDCARD can emulate a USB disk drive, so sending PSBT files can be a drag-n-drop") — the Coldcard appears as a USB drive to the online computer, the user drags + drops PSBT files; (e) QR Code (Mk4 has a basic QR code via the OLED display, but the Coldcard Q has the full QR scanner + LED illumination). All connectivity options are OFF by default — the user enables them explicitly per signing session.

Open-source + reproducible firmware — github.com/coldcard/firmware

Per the official Coldcard homepage: "Verifiable Source Code — COLDCARD firmware is open source and reproducible, so advanced users can verify what runs on the device." The Coldcard firmware is 100% open-source at github.com/coldcard/firmware, with reproducible builds — anyone can rebuild the firmware binary from the open-source code and byte-for-byte verify it matches the firmware running on the device. This is the strongest supply-chain-security posture of any hardware wallet in this directory alongside Foundation Passport + Keystone 3 Pro. WalletScrutiny ("Passed all 10 tests") has independently audited the Coldcard firmware.

No companion app lock-in — works with Sparrow, Electrum, BlueWallet, Specter, Nunchuk, Cove

Per the official Coldcard homepage's "No app lock-in" section: "Use Sparrow, Cove, Nunchuk, or Specter. COLDCARD signs; the app only watches and broadcasts." The Coldcard Mk4 works with the broadest set of Bitcoin wallets in this directory — there is no companion app lock-in. Supported watching-only wallets include: Sparrow Wallet (desktop, open-source, the recommended pairing for Coldcard), Electrum (desktop + Android, 15+ year open-source track record), BlueWallet (mobile + newer desktop, open-source, multisig vault support), Specter DIY (desktop, open-source, multisig-focused), Nunchuk (mobile + desktop, open-source, multisig-focused, collaborative custody), Cove (newer open-source wallet), and others. This is the strongest no-app-lock-in posture in this directory — Ledger requires the Ledger Live app (a softer lock-in), Trezor works with Trezor Suite and third-party wallets, Foundation Passport works with Envoy + third-party wallets, Keystone 3 Pro works with the Keystone app + third-party wallets.

Trick PIN features — the strongest duress / coercion defense in this directory

Per the official Coldcard homepage's Trick PIN section: "What happens if someone forces you to unlock your COLDCARD? COLDCARD includes multiple duress countermeasures that protect your Bitcoin even under physical coercion." The Coldcard Mk4 has the strongest duress / coercion defenses of any hardware wallet in this directory: (1) Duress PIN — define an optional duress PIN; if anyone enters the duress PIN instead of the real PIN, the device operates as normal but unlocks a completely separate BIP-39 wallet (not the real wallet); the user should put some plausible Bitcoin in the duress wallet for it to be realistic; the duress wallet is derived from the original BIP-39 words so doesn't need a separate backup; (2) Countdown to Brick PIN — a covert variation of the Brick Me PIN; forces a time delay (minutes / hours / days) when logging in, and after the countdown, covertly bricks the Coldcard (or wipes the seed); provides plausible deniability of a required time delay (similar to bank safes), while denying the attacker a functional device; (3) BIP-39 Passphrases (25th word) — support for BIP-39 passphrases so the user can create an unlimited supply of distraction wallets (each passphrase unlocks a separate wallet); useful for the user's own organization of funds / accounts; unlike the single duress PIN, an unlimited number of related wallets can be created; (4) Brick Me PIN — another PIN can be defined, called the "Brick Me" PIN; entering this PIN at any PIN prompt destroys the dual secure element and renders the Coldcard worthless; (5) Login Countdown — force a time delay when logging into the Coldcard; once enabled, the user must enter the PIN correctly, then wait out a forced delay (minutes / hours / days) while a countdown is shown on-screen, then enter the PIN correctly a second time to get in. These duress features are unique in this directory — only Foundation Passport has comparable (but more limited) duress features.

BIP-39 / BIP-85 seed generation + vault

Per the official Coldcard homepage's About section: "It can also generate and vault BIP-39/BIP-85 seeds, recovery phrases, passwords, and private notes for other wallets." The Coldcard can generate seed phrases (BIP-39 12-word / 24-word seeds + BIP-85 derived seeds for chaining multiple wallets from a master seed) for itself AND for other wallets. The user can use the Coldcard as a cold-storage seed generator + vault — generate the seed for a hot wallet (e.g. a mobile Bitcoin wallet) on the air-gapped Coldcard, transfer the seed to the hot wallet (via QR), and keep the master BIP-39 seed vaulted on the Coldcard. This is a unique feature in this directory — Foundation Passport also supports seed generation, but the Coldcard's BIP-85 seed chaining is uniquely advanced.

PSBT (BIP-174) signing — the gold standard for hardware-wallet signing

The Coldcard Mk4 supports full PSBT (Partially-Signed Bitcoin Transactions, BIP-174) signing. The watching-only wallet (e.g. Sparrow, Electrum, BlueWallet) constructs an unsigned PSBT, transfers it to the Coldcard (via MicroSD, NFC, USB, Virtual Disk, or QR), the Coldcard signs the PSBT with the user's keys (the private keys never leave the device), and the signed PSBT is transferred back to the watching-only wallet which broadcasts it. This is the standard hardware-wallet-cold-storage workflow and ensures the private keys never touch an online computer.

Bitcoin-only by design — reduced attack surface

Per the official Coldcard homepage's About section: "Unlike Trezor and Ledger, COLDCARD supports only Bitcoin to reduce the attack surface." The Coldcard is Bitcoin-only — it does NOT support Ethereum, EVM, Solana, or any altcoins. This reduces the device's attack surface (no EVM-derived code paths / no multi-chain SDK dependencies / no NFT handling) and lets the Coinkite team focus 100% on Bitcoin security. For users who hold Bitcoin only, this is the strongest Bitcoin hardware wallet. For users who hold Bitcoin + altcoins, the recommended alternative is a multi-coin hardware wallet (Ledger Nano X, Trezor Safe 5) which supports both Bitcoin cold-storage and altcoin cold-storage — see our hardware wallets directory at /best-hardware-wallets.

Dual secure elements — two independent vendors (the strongest secure-element design in this directory)

Per the official Coldcard homepage (July 2026): "Dual Secure Elements — Two independent secure-element vendors protect the seed, so one chip flaw is not enough." The Coldcard Mk4 has two secure elements from two different vendors (Microchip ATECC608B + Maxim DS28C36B); the seed is split across both chips, so a vulnerability in one chip (or one vendor's firmware) is not enough to extract the seed. This is materially stronger than single-chip-secure-element wallets like Ledger (which uses a single STMicroelectronics ST33J2M1 secure element). Only Keystone 3 Pro has a similar dual secure element design (Foundation Passport uses a single secure element but compensates with open-source firmware + air-gapped workflow).

Open-source + reproducible firmware — the strongest supply-chain security in this directory

Per the official Coldcard homepage: "Verifiable Source Code — COLDCARD firmware is open source and reproducible, so advanced users can verify what runs on the device." The Coldcard firmware is 100% open-source at github.com/coldcard/firmware, with reproducible builds — anyone can rebuild the firmware binary from the open-source code and byte-for-byte verify it matches the firmware running on the device. This is the strongest supply-chain-security posture in this directory, alongside Foundation Passport + Keystone 3 Pro. WalletScrutiny ("Passed all 10 tests") has independently audited the Coldcard firmware.

Air-gapped signing — USB / MicroSD / NFC / Virtual Disk (all OFF by default)

Per the official Coldcard homepage's connectivity section: "QR, MicroSD, NFC, USB, and Virtual Disk are OFF by default." The Coldcard Mk4 supports air-gapped PSBT signing via MicroSD card + NFC tap + USB-C + Virtual Disk (the Coldcard appears as a USB drive for drag-n-drop PSBT transfer). All connectivity options are OFF by default — the user enables them explicitly per signing session. This is the strongest air-gapped posture in this directory, alongside Foundation Passport (QR only) and Keystone 3 Pro (QR only).

9+ year operating track record — Coinkite since 2017

Per the official Coldcard homepage's About section: "COLDCARD is a Bitcoin-only hardware wallet made by Coinkite since 2017." Coinkite has been making Bitcoin hardware wallets for 9+ years (2017–2026) — the longest Bitcoin hardware wallet track record in this directory (Ledger was founded 2014 but launched the first Nano in 2016; Trezor was founded 2013 with the first Trezor One in 2013, so Trezor's company track record is longer, but the Coldcard product line has been Bitcoin-only since 2017 with no major hack at the device level).

Trick PIN — strongest duress / coercion defense in this directory

Per the official Coldcard homepage: "COLDCARD includes multiple duress countermeasures that protect your Bitcoin even under physical coercion." The Coldcard Mk4 has the strongest duress / coercion defenses of any hardware wallet in this directory: (1) Duress PIN — unlocks a separate BIP-39 wallet (the "duress wallet") while operating as normal; (2) Brick Me PIN — destroys the dual secure element and renders the device worthless; (3) Login Countdown — forces a time delay + a second PIN entry; (4) Countdown to Brick PIN — covertly bricks the device after a countdown; (5) BIP-39 passphrases (25th word) — unlimited distraction wallets. These features are unique in this directory.

BIP-39 / BIP-85 seed generation + vault

The Coldcard can generate BIP-39 seeds (for itself AND for other wallets) + BIP-85 derived seeds (for chaining multiple wallets from a master seed). The user can use the Coldcard as a cold-storage seed generator + vault. This is a unique feature in this directory — only Foundation Passport has comparable seed generation, but the Coldcard's BIP-85 seed chaining is uniquely advanced.

PSBT (BIP-174) signing — private keys never leave the device

The Coldcard Mk4 supports full PSBT signing. The watching-only wallet (Sparrow, Electrum, BlueWallet, Specter, Nunchuk, Cove) constructs an unsigned PSBT, transfers it to the Coldcard, the Coldcard signs the PSBT with the user's keys (the private keys never leave the device), and the signed PSBT is transferred back to the watching-only wallet which broadcasts it. This is the standard hardware-wallet-cold-storage workflow and ensures the private keys never touch an online computer.

Security advisory — Coldcard Mk3 seed generation (firmware 4.0.1+)

Per the official Coldcard homepage (July 2026): "Seeds generated on firmware 4.0.1 or later may be at risk. Read advisory." Coinkite has published a security advisory (linked to blog.coinkite.com/coldcard-mk3-seed-generation-warning) regarding seeds generated on Coldcard firmware 4.0.1 or later. Users with seeds generated on firmware 4.0.1+ should review the advisory + follow Coinkite's guidance. New seeds generated on the latest firmware (5.x as of 2026) are not affected by this advisory. The user should always run the latest stable firmware + review Coinkite's security advisories before generating a new seed.

Independently audited + praised by independent reviewers

Per the official Coldcard homepage: "Trusted by Bitcoiners, educators, and independent reviewers." The Coldcard has been independently audited by WalletScrutiny ("Passed all 10 tests") + reviewed by Bitcoin Magazine ("may be the most secure way to handle key material at a distance"), BTC Sessions ("one of the most secure Bitcoin hardware wallets ever built"), Coin Bureau ("one of the strongest Bitcoin-only hardware wallets available today"), Bitcoin Verdict ("the most secure Bitcoin wallet you can buy"), and r/Bitcoin ("Best I've used by a country mile"). This is one of the strongest independent-review track records of any hardware wallet in this directory.

Limitations

The Coldcard Mk4 is Bitcoin-only — it does NOT support Ethereum, EVM, Solana, or any altcoins. For users who want a multi-coin hardware wallet, Ledger Nano X + Trezor Safe 5 are the recommended alternatives (see /best-hardware-wallets). The Mk4 has been succeeded by the Coldcard Mk5 ($169.94, 2024) and Coldcard Q ($249.21, 2025) — the current Coldcard lineup; the Mk4 remains fully supported with firmware updates but new buyers should consider the Mk5 or Q for the latest hardware. The Mk4's UI is functional but minimalist (OLED screen + numeric keypad) — for users who want a larger screen + full keyboard, the Coldcard Q is the recommended alternative.

Hardware cost — $148 USD (Mk4 at launch; the Mk4 has been succeeded by the Mk5 at $169.94 + Q at $249.21)

Per the official Coldcard store (coldcard.com): Coldcard Mk5 $169.94 USD (sale from $189) + Coldcard Q $249.21 USD (sale from $289). The Mk4 was previously ~$148 USD at launch and has been succeeded by the Mk5 + Q in the current Coldcard lineup. New buyers should consider the Mk5 + Q — see our /best-hardware-wallets/coldcard-mk5 and /best-hardware-wallets/coldcard-q profiles (when published). For users who already own a Mk4, the device remains fully supported with firmware updates.

Wallet software — free + open-source + no companion app lock-in

The watching-only wallet software (Sparrow, Electrum, BlueWallet, Specter, Nunchuk, Cove) is free + open-source. There is no companion-app subscription, no monthly fees, no in-app purchases. The user pays only the Bitcoin miner fees for on-chain transactions (set by the watching-only wallet with custom sat/vB + RBF + CPFP — the Coldcard doesn't set fees; it only signs the PSBT after the watching-only wallet has chosen the fee).

Bitcoin on-chain transaction fees — paid to Bitcoin miners, not Coinkite

Each on-chain Bitcoin transaction requires a network fee paid to Bitcoin miners. The Coldcard doesn't charge any wallet-side fee on top — it only signs the transaction. The user sets the fee in the watching-only wallet (Sparrow + Electrum + BlueWallet all support custom sat/vB fees + RBF + CPFP). Lightning Network routing fees (if the user uses a Lightning wallet that pairs with the Coldcard's seed) are set by the Lightning channels the user opens.

No subscription + no Cloud account + no in-app purchases

The Coldcard has no subscription, no cloud account, no in-app purchases — per the official homepage: "No companion app, no cloud account." This is the strongest fee model of any hardware wallet in this directory — many competing hardware wallets (Ledger Nano X, Trezor Safe 5) now have optional premium subscription features (Ledger Recover, Trezor Suite premium); the Coldcard has none of these.

Free firmware updates for life

Coinkite provides free firmware updates for the life of the device — the Mk4 (launched 2022) continues to receive firmware updates in 2026 alongside the Mk5 + Q. The latest firmware (v5.x as of 2026) is available for the Mk4 + Mk5 + Q.

Optional accessories — paid

Coinkite sells optional accessories: a metal seed backup (Cryptosteel Capsule, ~$50), a backup metal seed plate (~$40), a compact carrying case, USB cables, MicroSD cards. These are optional — the user can use any BIP-39 metal seed backup (e.g. Cryptosteel Capsule from any vendor). See the official Coinkite store at store.coinkite.com for the full accessories catalog.

The Coldcard Mk4 is Bitcoin-only by design. Per the official Coldcard homepage: "Unlike Trezor and Ledger, COLDCARD supports only Bitcoin to reduce the attack surface." The Coldcard does NOT support Ethereum, EVM, Solana, or any altcoins. This is the deliberate design choice that allows Coinkite to focus 100% on Bitcoin security — the Coldcard is the gold-standard Bitcoin-only hardware wallet in this directory.

Bitcoin (BTC) — on-chain + Lightning (via the watching-only wallet)

• Bitcoin on-chain (BTC) — full support; Coldcard can be the cold-storage key for any Bitcoin address type (Legacy P2PKH, Nested SegWit P2SH-P2WPKH, Native SegWit / Bech32 P2WPKH, Taproot P2TR)
• Bitcoin multisig — Coldcard works as one cosigner in m-of-n multisig wallets via PSBT (e.g. 2-of-3 with 3 separate Coldcards as cosigners, or 2-of-3 with 1 Coldcard + 1 Foundation Passport + 1 Keystone 3 Pro as cosigners); the watching-only wallet (Sparrow, Electrum, BlueWallet, Nunchuk, Specter) coordinates the PSBT signing across cosigners
• Bitcoin Lightning Network — the Coldcard itself does NOT run a Lightning node, but a Lightning-capable watching-only wallet (Electrum has built-in Lightning + Nunchuk has Lightning integration) can use the Coldcard's seed to provide the on-chain UTXOs for Lightning channel funding; for users who want a dedicated Lightning hardware-wallet setup, the Coldcard is paired with the Lightning watchtower / coordinator model

BIP-39 / BIP-85 seed generation — for other wallets

Per the official Coldcard homepage: "It can also generate and vault BIP-39/BIP-85 seeds, recovery phrases, passwords, and private notes for other wallets." The Coldcard can generate BIP-39 seed phrases (12-word / 24-word) + BIP-85 derived seeds for chaining multiple wallets from a master seed. The user can use the Coldcard as a cold-storage seed generator + vault for any Bitcoin wallet (hot wallets, mobile wallets, hardware wallets) — generate the seed on the air-gapped Coldcard, transfer the seed to the hot wallet via QR (e.g. to BlueWallet mobile), and keep the master BIP-39 seed vaulted on the Coldcard. This is a unique feature in this directory.

Hardware-wallet pairing — works with the broadest set of watching-only wallets in this directory

Per the official Coldcard homepage: "No app lock-in — Use Sparrow, Cove, Nunchuk, or Specter. COLDCARD signs; the app only watches and broadcasts." Supported watching-only wallets include: Sparrow Wallet (desktop, open-source — the recommended pairing for Coldcard), Electrum (desktop + Android, 15+ year open-source track record), BlueWallet (mobile + newer desktop, open-source, multisig vault support), Specter DIY (desktop, open-source, multisig-focused), Nunchuk (mobile + desktop, open-source, multisig-focused, collaborative custody), Cove (newer open-source wallet), and others. This is the strongest no-app-lock-in posture in this directory.

NOT supported — Ethereum, EVM, Solana, altcoins

The Coldcard Mk4 does NOT support Ethereum, EVM, Solana, or any altcoins. For users who hold Bitcoin + altcoins, the recommended alternatives are: (a) keep Bitcoin on the Coldcard + altcoins on a separate multi-coin hardware wallet (Ledger Nano X $79, Trezor Safe 5 $169 — see /best-hardware-wallets); (b) use a single multi-coin hardware wallet (Ledger Nano X / Trezor Safe 5) for both Bitcoin + altcoins cold-storage. Both setups are valid — the Coldcard approach has stronger Bitcoin security; the multi-coin approach is simpler. For users who specifically want the strongest Bitcoin cold storage, the Coldcard Mk4 / Mk5 / Q is the recommended pick.