The short answerColdcard Mk4 is the strongest device available for Bitcoin cold storage: two secure elements from different manufacturers, air-gapped signing over microSD so it never needs to touch a computer, and duress and brick PINs for physical coercion scenarios. It supports Bitcoin only and expects real technical competence.
Best forBitcoin-only cold storage taken seriously
Key isolationweight 25%
10.0avg 8.6
Firmware opennessweight 20%
9.0avg 7.8
Recovery designweight 20%
9.5avg 8.1
Asset coverageweight 15%
4.0avg 7.3
Vendor conductweight 10%
9.0avg 7.9
Usabilityweight 10%
6.0avg 8.1
this service category average across 15Score = Σ mark × weight. Recommendable to most readers, with stated caveats. Methodology.
| Criterion | Mark | What we found | Source | Checked |
|---|
| Key isolation | 10.0 | not sourced yet | not sourced yet | — |
| Firmware openness | 9.0 | not sourced yet | not sourced yet | — |
| Recovery design | 9.5 | not sourced yet | not sourced yet | — |
| Asset coverage | 4.0 | not sourced yet | not sourced yet | — |
| Vendor conduct | 9.0 | not sourced yet | not sourced yet | — |
| Usability | 6.0 | not sourced yet | not sourced yet | — |
What we liked, and what fell short
Liked- Two independent secure elements from different vendors
- Fully air-gapped operation via microSD, with no need to ever plug in
- Duress PINs, brick PINs and deep passphrase support
Fell short- Bitcoin only, with no support for anything else
- Setup and PSBT workflow will defeat casual users
Why the marks landed where they did
Coldcard is designed around a threat model most wallets ignore: someone has your device, or your computer is compromised, or you are being forced to open it. Dual secure elements from independent vendors mean compromising one chip is not enough. Air-gapped operation over microSD means the device need never connect to anything.
The features that matter
Duress PINs open a decoy wallet with a small balance; brick PINs destroy the device's secure elements permanently. Passphrase support allows hidden wallets that leave no trace on the device. Partially signed bitcoin transactions are constructed on a watch-only wallet such as Sparrow, moved by microSD, signed offline and moved back. Nothing about that flow requires trusting a cable, a USB stack or a host computer.
What you give up
Bitcoin only. No Ethereum, no tokens, no NFTs. The workflow requires understanding UTXOs and PSBTs, and the interface is a small screen with physical keys rather than anything friendly. If you would find that frustrating, the device will not protect you from the mistakes frustration causes.
Who should use it
Bitcoin holders storing meaningful value long term, particularly anyone building a multisig quorum where geographic and vendor diversity matter. Pair it with Sparrow Wallet. For multi-chain use, a BitBox02 or Keystone will serve better.
FAQ
Does Coldcard support Ethereum?+
No. It is a Bitcoin-only device by design, which is part of why its firmware surface and attack surface are smaller than multi-chain competitors'.
What is a duress PIN?+
A second PIN that opens a decoy wallet containing a small balance, so a coerced unlock does not reveal your main holdings. Coldcard also supports a brick PIN that permanently destroys the device.
Do I need a computer to use Coldcard?+
You need one to build transactions in a watch-only wallet, but the Coldcard itself can stay entirely air-gapped, exchanging files by microSD.
Is Coldcard beginner-friendly?+
No. It assumes familiarity with UTXOs, PSBTs and air-gapped workflows. Beginners are better served by a BitBox02 or Trezor Safe 3.
