Coldcard vs. BitBox02

Encrypting a channel is not the same as removing it. USB and Bluetooth channels are not only pathways for data. They are also surfaces that can be probed. An attacker with access to the channel can send inputs, observe device responses, and extract information from the feedback loop that exists as long as the connection is open. Encryption protects the content of communication but does not remove the channel or prevent probing attempts.

Air-gapped signing is the architectural solution to this problem. With QR code signing on the Coldcard Q, an unsigned transaction arrives as a QR code, is signed on the device, and leaves as a new QR code. Both the Q and Mk5 also support MicroSD as a signing transport: the card carries the transaction in and the signed result comes out. NFC tap-to-sign on the Mk5 provides a third path for mobile workflows. In each case, the channel between signing device and networked machine does not exist.

BitBox02 is a well-secured connected device. Coldcard is built to eliminate the connection entirely. These are different security models, not different points on the same spectrum. Users who treat every avoidable connection as a liability and want that connection removed by design will find Coldcard's architecture better matched to that requirement.

BitBox02 is the smallest of the three. At 54.5 x 25.4 x 9.6mm and 12g, it is closer to a USB dongle than a traditional hardware wallet. It slips into a jacket pocket, a travel bag, or even a keychain pouch without adding bulk, and its understated appearance does not signal what it is. For users who want their signing device to be as compact and inconspicuous as possible, that size is a meaningful advantage.

The Coldcard Mk5 is credit-card sized at 87 x 52mm and weighs 55g with its protective cover. It fits in a wallet or a front pocket, travels discreetly, and does not stand out. The Mk5 also supports NFC tap-to-sign with compatible mobile wallets such as Nunchuk, which allows signing on the road from a phone without a laptop or a cable.

The Coldcard Q is the largest of the three at 120 x 75 x 22mm and 93g without batteries. With its full QWERTY keyboard, large color screen, and built-in QR scanner, it is built for extended use at a desk rather than for travel.

If portability and a low profile are your priority, both BitBox02 and the Mk5 are well-suited for carrying, traveling, and keeping a device discreet. If your device lives on a desk, in a drawer, or in a safe, size matters less than the depth of security features and signing workflows on offer.

Coldcard has a deeper seed management toolset. Seed XOR lets you split a seed into two or more parts using bitwise XOR, distributing backup risk across separate physical locations without relying on any third-party secret-sharing scheme. Seed Vault stores multiple seeds on a single device, each encrypted by the master seed key. Trick PINs include a dedicated duress wallet PIN that opens a separate wallet under a distinct short PIN code (no passphrase entry required under coercion) and a brick-me PIN that permanently destroys the secure elements on entry.

BitBox02 covers the essentials well. A BIP-39 passphrase opens a separate hidden wallet for plausible deniability in coercion scenarios. The device supports dice-roll entropy at setup and encrypted microSD backup from first use. For users who do not need dedicated duress PINs, distributed seed splitting, or multiple independent seeds on one device, BitBox02's feature set covers solid self-custody.

The companion app question matters for long-term resilience. BitBoxApp is required for initial setup, firmware updates, and the standard management workflow. BitBox02 can be used with Sparrow, Electrum, Specter, and Wasabi for signing after initial configuration, but BitBoxApp is the center of the experience. Coldcard works with any PSBT-compatible coordinator from initial setup: Sparrow, Electrum, Nunchuk, Specter, and others. Your ability to use Coldcard is not conditional on Coinkite maintaining a companion application.

For users building multisig vaults, key hierarchies across multiple devices, or inheritance setups, Coldcard's tooling goes further. For users who want a clean, app-driven Bitcoin-only workflow, BitBox02 is the stronger option.