Quickstart! Start Here!
About the Bag#
Your COLDCARD® should have arrived sealed in a very special bag: It has a large Coinkite logo, white digits/text, a blue tab, and a barcode with the number underneath. This number is important and we call it the "bag number". Please make note of this number, the Coinkite factory has recorded this number into the secure area of flash memory inside your Coldcard.
Before opening the bag, please inspect the bag for damage or signs of being previously opened. After you pull apart the top seal, it will show the word "VOID".
The purpose of the bag, and its unique number, is to give you confidence that the Coldcard has come directly from the factory and has not been modified by anyone before you start setup.
If you find anything out of place, please contact support@coinkite.com with photos for reference.
This is merely one of many layers of security. Understand that plastic bags can be "hacked" with sharp knives, a heat press and so on. This is an example of "Defense in Depth".
Tamper Evident Bag Mk4 (V3)#
A serialized tear off tab of the bag is included inside. You should use this tab to double check the width of the bag. You can also use a magnifying glass to check the perforations of the tab match the bag. It is important to observe the bottom of the bag is seamless.
Tamper Evident Bag (V2)#
We are no longer using this 'green' bag design.
Tamper Evident Bag (V1 — now obsolete)#
We are no longer using this 'red' bag design.
Power Up#
COLDCARD Mk4#
Connect a power supply to the Coldcard using the USB-C port at the top. Any USB-C cable you already have can be used, or you may purchase a magnetic power-only cable from our store.
You could connect the USB to a computer, but at this stage, a wall charger or USB power pack is recommended as the Coldcard only needs power, not data.
COLDCARD Q#
Coldcard Q can be powered either from a USB-C power supply (wall adapter, computer, power bank, etc), or by using three AAA batteries. In either case, press and hold power button (top left button) for a full second until you get visual feedback that it has started up.
Unlike the Mk4, it does not start as soon as power is applied over USB-C, you must press the power key.
During operation, press the power key for 2 seconds to turn off the Q. This will clear sensitive values from memory and then power down. If for some reason the device is locked up or otherwise unresponsive, if you hold the power key for a full ten seconds, it will power down regardless of the state of the firmware.
Terms of Sale#
The first screen you will see looks like this:
If you look closely at the right edge of the screen, there is a small scroll bar and arrow pointing downwards. Use the 5 and 8 keys to move up and down to see the full message.
The complete terms document can be found here. Press the ✔ key (checkmark, lower right) to accept the terms and continue.
Video: Understanding Anti-Phishing
Initial PIN#
Before a Bitcoin seed is generated, you must select a primary PIN. This is your main defence against random people using your Coldcard when you are not around. Please pick good PIN codes!
On the Coldcard, the PIN consists of two parts, like these examples:
12-34
1234-5678
872323-39843
12-345678
The first part is called the prefix (1234-) and the second, the suffix (-5678). Each part must have between 2 and 6 digits. The prefix determines the anti-phishing words you will see each time you login.
When you pick your PIN code, you'll see the anti-phishing words associated with the PIN prefix. These words will be unique to each Coldcard. You may want to experiment with a few different PIN prefixes until you find some fun or memorable words. Regardless, you will need to remember those words, as it's important to verify the words before proceeding to the second part of the PIN—every time you login to the Coldcard.
You will be asked to confirm the new PIN and enter it a second time to verify it is correct.
Important
No-one can help you if you forget your PIN. There is no back door, hints or alternative ways into the Coldcard.
Use Longer PIN
We strongly recommend using "four plus four" digits in your PIN: 1234-5678
Having just "two plus two" is permitted, but might allow brute force attacks.
New Wallet or Import#
Once your PIN has been established, it's time to setup your bitcoin wallet. You should see a menu like this:
If you already have a BIP-39 seed, or a backup from another Coldcard, or even a XPRV (extended private key), you should choose Import Existing menu item. However, most new users will start with New Wallet.
New Wallet (New Seed)#
Choose New Wallet to generate 12-24 words using the BIP-39 word list.
The words are then shown to you. Write down the seed words, in order on the provided card, a piece of paper or on a metal plate. Please be careful at this stage and make sure you're 100% certain that each word is recorded correctly. You may also want to make another copy of the seed at this point too (ie. have an extra backup).
Once you've written the words down, press ✔ to continue to the quiz. The Coldcard will ask you what each word is in random order. The device does this to verify your backup copy is correct. If at any point you are unsure of a word, you may see them again by pressing ✔.
If you complete the quiz successfully, the words are saved and your new Coldcard is ready to be used.
Important Warning
It is critical to write down the wallet seed. Do not use this product without the seed written down and stored safely offline. Do not save the wallet seed onto a computer or mobile phone. Do not take a picture of the seed words with anything other than a chemical camera.
Video: Tutorial: Applying a Passphrase
Passphrase (BIP-39)#
If you want to use a BIP-39 passphrase you can enter it at this point to switch to that wallet. Remember to do this every time you want to access the wallet under that passphrase after powering on the Coldcard.
Ready to Sign!#
Once your PIN code and master seed have been established, your Coldcard is ready for operation. You should see a menu like this one:
If the USB-C port is connected to a computer from your Coldcard, the device will make itself available to that computer. (The Coldcard is invisible to the attached computer, if any, until the PIN code is correctly entered.) You can use a desktop wallet, such as Electrum or Sparrow to pair with the Coldcard and send transactions to be signed.
Alternatively, you can use a MicroSD card to bring in transactions and sign them.
Using Coldcard Offline with Sparrow#
Take a look at Sparrow's full step-by-step Coldcard guide here: Sparrow Beginner Coldcard Guide
Using Coldcard with Electrum via USB#
- All versions of Electrum since 3.2.3 have Coldcard support built-in
- Download the latest here and verify your download with PGP signature.
- select "New/Restore" from File menu
- pick file name
- pick "Standard Wallet"
- pick "Use a hardware device"
- select the Coldcard device shown
- choose Segwit or classic address format
- operates like any other USB hardware wallet
Using Coldcard Offline with Electrum#
- secure quality MicroSD cards of small size
- on the Coldcard, go to: Advanced > File Management > Export Wallet > Electrum Wallet
- read and approve the warning message, like this:
- a new file,
new-electrum.json, is written to the MicroSD - remove card, take to a computer running Electrum
- your Electrum client must have the Coldcard plugin enabled
- open the wallet file, and wait for sync to complete.
- you may want to keep the wallet file (which now has many additional details about change addresses and so on) elsewhere on your computer.
When you want to spend from this wallet:
- open the wallet in Electrum
- setup your new transaction as usual
- choose Finalize transaction, then select Export > For hardware device; include xpubs > Export to file
- (do not choose top-level Export to file option: the PSBT file generated is not compatible.)
- you can save the PSBT file directly to your MicroSD card at this point.
- use a short file name that describes transaction or has the date; must end in
.PSBT - move that card to the Coldcard
- select "Ready to Sign" from main menu of the Coldcard
- pick today's PSBT file from the list (if there is more than one on the card)
- approve the details of the transaction
- the resulting transaction will be saved back to the card, under the same filename with new
ending:
-final.txn - use any copy of Electrum, or a public service to push the hex-encoded transaction from that file
- for example, in Electrum, use Tools > Load transaction > From file
Subject to Change
Electrum is a vibrant Open-Source project and is constantly changing. Please alert us if these instructions are out-of-date.
We support creating 'skeleton' (xpub) wallet files for these systems:
Multiple Accounts#
When exporting files for Bitcoin Core or Electrum, you may now press 1 at the confirmation screen, and then enter an arbitrary "account number" on the Coldcard. That account number is put as the last hardened component of the derivation path for the wallet's keys.
In this example, if a segwit-style wallet was made, the full derivation path of the first address (non-change) would be:
m/84'/0'/615'/0/0
Note the 615' in the the path. By default, account number is zero.
Video: Understanding Caution Lights
What's Next#
Keep your Coldcard in a safe location. Every time you remove the device from storage to use it, please consider the following:
- Are there scratches on the case?
- Is the light green or red? It should be green!
- Are the anti-phishing words correct? Do not enter the rest of your PIN if you are unsure.