COLDCARD Anti-Phishing Words

Unique device-specific security feature that helps verify device integrity and prevent phishing attacks on hardware wallets.

What are Anti-Phishing Words?

COLDCARD's anti-phishing words are a unique security feature that displays two specific words after you enter the first part of your PIN. These words are unique to your device and PIN prefix combination, serving as a critical verification step to ensure you're using your genuine COLDCARD.

How It Works

Split PIN System: Your PIN is divided into two parts (prefix and suffix)
Unique Words: After entering the prefix, two unique words appear on screen
Device Verification: These words are specific to your COLDCARD and PIN prefix
Tamper Detection: If the words don't match, your device may have been compromised

Security Benefits

Device Integrity: Confirms your COLDCARD hasn't been tampered with or replaced
Phishing Protection: Prevents attacks from lookalike devices attempting to steal your PIN
Immediate Detection: Provides instant visual feedback if something is wrong
No External Dependencies: Works entirely offline and doesn't require internet connectivity

Best Practices

Memorize your anti-phishing words and keep them secure
Never share your anti-phishing words with anyone
Check the words every time you use your COLDCARD
If the words change unexpectedly, do not enter your PIN suffix
Back up your anti-phishing words with your PIN information

Important Security Warning

If your anti-phishing words have changed after entering your PIN prefix, DO NOT enter your PIN suffix. This indicates your device has likely been tampered with and is no longer trustworthy. You should securely dispose of the old device and use a backup to restore on a new COLDCARD.

Learn More

For detailed setup instructions and security best practices, visit our comprehensive documentation.

View Documentation