ShopHardware Wallet Comparison
Coldcard Q vs. Mk5
Same security model. Same firmware. Same open-source foundation. Two different workflows.
The choice comes down to form factor, signing methods, and how you use a signing device on a regular basis.
Last updated: April 2026.
Both devices are Coldcard.
Every security feature that defines Coldcard, from firmware, to dual secure elements, to open-source foundation, is built into both devices.
-
✓
Bitcoin-only firmware
-
✓
Open-source build
-
✓
Fully air-gapped capable
-
✓
Dual secure elements
-
✓
Anti-phishing protection
-
✓
On-screen address verification
-
✓
Self-destruct PIN
-
✓
Duress / decoy wallet PIN
-
✓
Countdown PIN
-
✓
Encrypted MicroSD backup
-
✓
BIP-85 child seeds
-
✓
Seed XOR
-
✓
Seed Vault
-
✓
NFC
-
✓
USB-C
-
✓
MicroSD
-
✓
PSBT (BIP-174)
-
✓
Taproot (BIP-341)
-
✓
Miniscript (BIP-379)
-
✓
Sparrow Wallet compatible
-
✓
Serialized tamper-evident packaging
-
✓
Viewable electronics
-
✓
User-contributed entropy
-
✓
Verifiable seed generation
Three things to consider when choosing your Coldcard
The below considerations provide a framework for deciding which device fits your workflow.
Signing workflow
Do you prefer signing air-gapped transactions with QR codes, swapping microSD cards, or tapping with NFC to a mobile wallet? The Mk5 covers microSD and NFC signing, whereas the Q adds support for QR code signing. Your transaction frequency and wallet setup may lead you to a preferred method.
Keyboard and display
Do you enjoy a full QWERTY keyboard and large color screen, or a compact numeric interface? Frequent signers and passphrase users will feel this difference most. The Q's display and full keyboard reduce friction across every session, while the Mk5's numeric keypad is compact and capable.
Portability and power
Does your signing device need to travel with you, fit in a pocket, or stay discreetly out of sight? The Mk5's credit card-sized form factor is built for portability. If your device lives on a desk, the Q's larger form is designed for ergonomics and can run on three AAA batteries or a USB power bank.
Coldcard Q vs. Coldcard Mk5
More inforamtion can be found on their respective product pages. Select any feautre below for a plain-language explanation.
Swipe to compare →
| Feature | Coldcard Q | Coldcard Mk5 |
|---|---|---|
| Form Factor and Signing Workflow | ||
QR code scanner (air-gap via QR) | ||
| A built-in camera enables QR-encoded PSBT import and export. The signing workflow becomes: scan the unsigned transaction from your coordinator, review and approve on-device, display the signed transaction as a QR for the coordinator to scan back. No cable and no physical media required. An alternative to microSD and NFC for fully air-gapped transaction signing. | ||
Full QWERTY keyboard | ||
| A physical QWERTY keyboard enables direct, easy text entry on the device. Entering passphrases, reviewing transaction labels, and navigating text-heavy menus become significantly faster. Without a full keyboard, text entry requires cycling through characters on a numeric grid, which is functional but slower for anything longer than a few characters. | ||
Large color display | ||
| A large color display provides enough screen real estate to show full transaction details, complete addresses, and multisig signing summaries at a comfortable reading size. A smaller monochrome screen conveys the same essential information but requires more scrolling and offers less visual context for careful verification. | ||
Battery powered | ||
| Three AAA batteries let the device operate without any connection to a wall outlet or computer. This enables signing sessions in power-isolated environments where no mains power is present or desired. A USB power bank also works. | ||
Pocketable form factor | ||
| A credit-card sized form factor fits in a wallet, pocket, or travel bag without drawing attention. Compact size matters for users who carry their signing device with them, take it to a secure location to sign, or treat discreet portability and storage as part of their security model. | ||
NFC tap-to-sign | ||
| NFC enables tap-to-sign with compatible mobile wallets such as Nunchuk. A brief tap transfers the unsigned transaction to the signing device, which approves and returns the signed result over the same connection. No cable or physical media is required, making it particularly well-suited to mobile-first signing workflows. | ||
MicroSD slots | ||
| A MicroSD slot enables air-gapped PSBT signing by transferring the unsigned transaction on a physical card rather than over a wireless or wired data connection. The slot also stores encrypted wallet backups. The Q has two slots, useful for keeping a dedicated backup card always inserted or managing multiple wallet configurations simultaneously. | ||
USB-C | ||
| USB-C serves as a power input and enables optional wired connection to a host computer. When connected via USB, the device can appear as a virtual disk for PSBT file transfers, or connect directly to compatible coordinator software. | ||
| Multisig and Advanced Features | ||
Key Teleport | ||
| Key Teleport is a secure, encrypted feature for the Coldcard Q that allows the direct transfer of sensitive data—including seeds, multisig PSBTs, and full backups—between two devices via QR code. It uses an ephemeral session key and a shared physical password to ensure that data remains confidential even if the transfer is performed over a public channel like a video call. | ||
Secure notes and passwords | ||
| The Coldcard Q can function as an encrypted password manager and secure text vault for storing sensitive information alongside your private keys. All entries are protected by AES-256-CTR encryption linked to your master seed and are automatically included in your standard device backups. | ||
Multisig coordinator (on-device) | ||
| Both devices support on-device multisig coordination, allowing wallet configurations to be created and managed without depending on external software for the setup phase. The Q's larger screen and full keyboard make the process significantly more ergonomic — reviewing cosigner details, entering configuration values, and navigating wallet setup is more comfortable at a larger display. The Mk5 is fully capable, though the smaller screen and numeric keypad make the same workflow more deliberate. | ||
PSBT (BIP-174) | ||
| PSBT is the standard format for passing unsigned transactions between coordinator software and a signing device. It is the foundation of air-gapped signing workflows, enabling compatibility with any open-source coordinator. | ||
PSBT v2 (BIP-370) | ||
| PSBT v2 is an updated format with additional fields for improved coordinator workflows and better support for complex spending conditions. | ||
Taproot (BIP-341) | ||
| Taproot is a Bitcoin protocol upgrade that improves the privacy and efficiency of complex transaction types, including multisig. It is required for advanced use cases and is increasingly the standard address format. | ||
Miniscript (BIP-379) | ||
| Miniscript is a structured language for expressing Bitcoin spending conditions. It enables complex, auditable spending policies to be defined and verified on-device, making it particularly useful for multisig vault configurations. | ||
| Security Fundamentals | ||
Bitcoin-only firmware | ||
| This firmware implements only the Bitcoin protocol. Every additional asset requires additional signing code, adding audit complexity and potential attack surface. A single-purpose codebase is smaller, simpler, and easier to verify. | ||
Open-source firmware | ||
| The firmware source code is publicly available. Any developer can compile it from scratch and verify their device runs exactly the published code. This is the only reliable way to confirm a signing device does what it claims. | ||
Dual secure elements | ||
| Dual secure elements from independent chip vendors store all key material. Using chips from two separate manufacturers means no single chipmaker's vulnerability can compromise the device. Private keys never touch the main application processor. | ||
Anti-phishing protection | ||
| A secret phrase is set during setup and displayed every time the device unlocks. This confirms the user is interacting with the genuine device, not a substitute or spoofed interface. | ||
On-screen destination verification | ||
| The device displays the destination address on its own screen before signing, independent of the connected computer. This protects against clipboard malware and address substitution attacks. | ||
| Trick PINs | ||
Self-destruct PIN | ||
| This PIN permanently wipes all key material when entered. It is intended for coercion scenarios where preventing key extraction matters more than concealing the response. | ||
Duress / decoy wallet PIN | ||
| A secondary PIN opens a decoy wallet with a small balance, designed to look convincing under pressure. The real wallet stays hidden, providing plausible deniability under physical coercion. | ||
Countdown PIN | ||
| This PIN introduces a configurable time delay before the device unlocks. It is designed to buy time or signal distress in scenarios where someone is being forced to unlock the device. | ||
| Seed Management | ||
BIP-85 child seeds | ||
| Independent child seeds are derived from a single master seed. Each child works on its own device without exposing the master, enabling a clean key hierarchy from one securely stored root. | ||
Seed XOR | ||
| A seed can be split into two or more XOR-encoded parts, each individually useless. All parts are required to reconstruct the original seed. This enables geographic seed splitting without the recovery complexity of Shamir's Secret Sharing. | ||
User-contributed entropy | ||
| Additional entropy can be contributed during key generation, reducing sole reliance on the device's hardware RNG. This makes the resulting private key harder to predict or manipulate. | ||
| Supply Chain and Physical Transparency | ||
Serialized tamper-evident packaging | ||
| Each unit ships with a registered serial number on the packaging. Verify before opening to confirm the device has not been swapped or tampered with in transit. | ||
Viewable internal electronics | ||
| A clear case lets you visually inspect the internal components on arrival, confirming no additional hardware was introduced between manufacture and your hands. | ||
| Pricing | ||
| Price (USD) | $249.21 store.coinkite.com | $169.94 store.coinkite.com |
What makes the Coldcard Q different from the Mk5?
The Q is Coldcard's most ergonomic and full-featured signing device, designed for users who interact with Bitcoin regularly and want the most comfortable user experience that full air-gapped security can provide.
The QWERTY keyboard. Entering a passphrase on a small numeric keypad means cycling through characters one by one, whereas on the Q you can just type it comforably. For long passphrases, frequent unlocks, or regular text entry on the device, this difference is immediately noticeable.
QR-based signing. The workflow looks like this: Sparrow wallet displays the unsigned transaction as a QR code, you scan it with the Q's camera, review and approve on-device, then display the signed QR result back to Sparrow. There's no cable, no card swap, and no extra steps. For users who sign frequently, the reduction in friction adds up, since a signing operation with a QR code takes a fraction of the time that it would with a microsD.
A large, color screen. The Q's display shows complete transaction details, full Bitcoin addresses, and multisig signing summaries at a comfortable reading size. A smaller monochrome screen conveys the same essential information but requires more scrolling during address verification. A bigger screen means less friction at the step that matters most.
Advanced features. The Coldcard Q supports Key Teleport, which enables the secure transfer of seeds, multisig PSBTs, and full backups between devices via encrypted QR codes. The Q can also function as a hardened vault for sensitive data, allowing you to store passwords, secure notes, and Nostr keys alongside your private keys.
Battery power. The Q can be powered by three AAA batteries for a cord-free experience, or via a USB-C cable connected to a power bank, wall outlet, or computer. This flexibility allows you to sign in fully power-isolated environments using whichever source you prefer.
Coldcard Mk5: designed for portability, simplicity, and value
The Mk5 is Coldcard's latest iteration of the Mk-series, built around a clear set of priorities: a pocketable form factor, a proven signing workflow, and the full Coldcard security model.
The Mk5 is built for portability and a low profile. It easily fits in your pocket, a wallet, or a travel bag without drawing attention. For users who carry their signing device with them, travel with it to secure locations to sign, or treat a low-profile as part of their security model, the compact size is valuable.
The microSD PSBT workflow is deliberate, transparent, and proven. Every step is visible: copy the unsigned transaction to the card, sign on the device, copy the signed result back. Sparrow wallet has first-class support for this flow, and a large number of experienced bitcoiners prefer this as their primary signing method.
NFC tap-to-sign is the fastest signing workflow available. A quick tap with a compatible mobile wallet like Nunchuk transfers the unsigned transaction to the Mk5, which signs and returns the result over the same method. It doesn't need a cable, physical media, or any extra steps, and the compact size makes tapping feel natural. For users who sign from mobile wallets regularly, this is a frictionless experience.
The price point is worth factoring in, especially when buying multiple devices. At $169.94, the Mk5 is noticeably less than the Q, with the same complete security foundation. For users who don't need the features or form factor of the Q, or who are buying multiple devices for multisig setups, gifts, or backups, the savings can be meaningful.
Coldcard Q vs. Mk5: which should I buy?
Both devices are fully capable and share the same security model. The decision comes down to how you use a signing device on a regular basis and your personal preference for user experience.
Transaction frequency and complexity. If you sign regularly or review transactions with multiple outputs, the Q's large screen and keyboard make each session more comfortable. Occasional, straightforward signing doesn't necessarily require a large screen or full keyboard.
Passphrase length. If you use a BIP-39 passphrase, you have to type it every time you unlock the device. On the Mk5 that means cycling through characters on a numeric keypad, while on the Q you type it directly. For users with a longer passphrase or frequent device use, this is often the deciding factor.
Signing workflow. The Mk5 signs via microSD or NFC tap, which pair naturally with desktop coordinators and mobile wallets. The Q adds support for QR code signing: scan the unsigned PSBT in, approve on-device, scan the signed result back out. Frequent transactions or usage of mobile vs. desktop signing may lead you to prefer one method over another.
Advanced features. The Q features Key Teleport via QR code as well as the ability to store sensitive data like passwords, notes, and Nostr keys. Both devices support on-device multisig coordination, but the Q's larger screen and keyboard make the setup and management workflow more ergonomic, whereas the Mk5's smaller interface requires more navigation.
Portability. If you travel with your device, take it to secure locations to sign, or want to keep a low profile during transport or storage, the Mk5's credit card-sized form factor offers clear advantages. If it simply lives on a desk or in a lock box, the ergonomics of a larger form factor may make the Q a better fit.
Price point. If budget is a primary consideration or if you're buying multiple devices for multisig setups, gifts, or spares, then the price difference is worth including in your decision.
There is no wrong choice. Both are the best Bitcoin signing devices available, so it ultimately comes down to how you prefer to use your Coldcard.
Passphrases and upgrade considerations for choosing
The passphrase question
A BIP-39 passphrase (the "25th word") adds a second factor to your seed that creates a completely separate wallet. It's one of the most effective ways to protect your Bitcoin, because even if your seed phrase is discovered, the passphrase-protected wallet is inaccessible. The catch is that you have to type the passphrase every time you unlock the device. On the Mk5's numeric keypad, entering a 10-20 character passphrase means cycling through characters methodically. On the Q's QWERTY keyboard, you simply type it. For passphrase users, this difference is significant enough that it often drives the choice.
Switching from Mk5 to Q later
Your seed phrase is not tied to any specific Coldcard model. If you start with the Mk5 and later want to get a Q, you can import your seed phrase into the Q and your wallet is immediately available with the full balance and transaction history. There is no lockout, no migration ceremony, and no dependency on any of Coinkite's systems. This is because your Bitcoin is tied to your seed phrase, not the device itself. Starting with the Mk5 and switching to the Q later (or vice versa) is a completely valid path with no added complications.
Which device is right for you?
Both share the Coldcard security foundation. The decision comes down to your personal preference and workflow.
Choose the Q
- →You prefer a full QWERTY keyboard over a numeric keypad
- →You sign transactions at a desk and want the most ergonomic signing experience available
- →You want QR-based signing, with no cable or card swap needed
- →You coordinate multisig wallets and want to manage configurations directly on the device
- →You want to run the device on three AAA batteries for a fully power-isolated environment
- →You want a larger screen to read full Bitcoin addresses and multisig summaries at a comfortable size
Choose the Mk5
- →You want a signing device that fits in your pocket, bag, or wallet for easy portability
- →Your workflow centers on microSD PSBT signing with Sparrow wallet or NFC tap with a mobile wallet
- →You prefer using Sparrow Wallet or another external coordinator for multisig setups
- →You want the full Coldcard security foundation at a lower price point
- →A smaller, more discreet form factor is part of your security model