Skip to content

Secure Notes & Passwords

(requires Q)

Secure Notes & Passwords supercharge COLDCARD® with password manager functionality and ability to store free-form text in secure manner.

Notes & Passwords are stored in encrypted settings (AES-256-CTR encrypted with your master seed's key).

Enable Secure Notes & Passwords#

Enable this functionality in Advanced/Tools -> Secure Notes & Passwords -> press ENTER.

enable0

enable1

Once enabled new menu item is visible in home menu Secure Notes & Passwords.

enabled

To disable feature user needs to remove all notes and passwords first. In empty Secure Notes & Passwords menu Disable Feature option is present.

disable

Notes#

To create new note navigate to Secure Notes & Passwords and pick New Note.

(1) Choose note title, which will be visible in menu and press ENTER. Max length for title is 32 characters.

n_title

(2) Input actual note text and press CANCEL when done (ENTER is used for new line). There is no limitations for note length, but storing very large notes may affect performance system-wide.

n_txt

n_saved

Both title and free-form text can be modified via Edit option.

(3) Export unencrypted note via SD, NFC, or QR code as JSON that has following form:

{"coldcard_notes": [{"misc": "free form\n\nmultiline\n\nfree-form\n\ntext note", "title": "note1"}]}

Passwords#

To create new password navigate to Secure Notes & Passwords and pick New Password.

(1) Choose password tile, which will be visible in menu and press ENTER. Max length for title is 32 characters.

p_title

(2) Choose username, and press ENTER. Max length for username is 32 characters.

p_usr

(3) Choose password (Max length for password is 128 characters):

  • input your own password - just type it!
  • F1 (SYM+Z) to generate random 12 words mnemonic (cca 128 bits of entropy)

p_12w

  • F2 (SYM+X) to generate random 24 word mnemonic (cca 256 bits of entropy)

p_24w

  • F3 (SYM+C) to generate random simple password (only cca 50 bits of entropy)

p_simple

  • F4 (SYM+V) to generate random strong password (cca 126 bits of entropy)

p_strong

  • F5 (SYM+B) to use BIP-85 index for password generation

p_bip85_idx

p_bip85

  • or press KEY_QR to import password from QR scan

(4) Input website (Max length for website is 32 characters)

p_web

(5) Free-form multiline text note. Press CANCEL when done.

p_note

Once password is saved its menu layout looks like this:

p_saved

Change Password#

User can change password anytime via Change Password option. Both new and old passwords are shown for verification purposes.

p_change

Export Password#

Export single password via SD, NFC, or QR (unencrypted).

p_export

Below is the QR export of the password entry created in this tutorial. You can try to import it via Secure Notes & Passwords -> Import -> press KEY_QR

p_export_qr

Exported JSON:

{"coldcard_notes": [{"password": "AjLyNHZaKeGwEtVxPyuqy", "site": "brb.io", "misc": "use bip-44 0th path", "user": "scg", "title": "nostr-key"}]}

Send Keystrokes#

You can send keystrokes and let COLDCARD type password for you with Send Password option. COLDCARD can emulate keyboard and send keystrokes to connected computer.

p_send_keystrokes

Not all characters supported (yet)!

At this point only lower case, upper case letters, carriage return, and / * - + are supported.

Bulk Import/Export#

Go back to main Secure Notes & Passwords menu where saved items are visible.

p_main

(1) Choose Export All and decide the export type (SD, QR, NFC)

Export JSON:

{"coldcard_notes": [
  {"misc": "free form\n\nmultiline\n\nfree-form\n\ntext note", "title": "note1"}, 
  {"password": "AjLyNHZaKeGwEtVxPyuqy", "site": "brb.io", "misc": "use bip-44 0th path", "user": "scg", "title": "nostr-key"}
]}

(2) Delete both created entries that we created before (3) Use Import option to bulk import them back