Skip to content

Verify Address Ownership

Why Verify Address Ownership?#

The COLDCARD® Q and Mk4 have the ability to verify that a Bitcoin address presented via QR code (Q only) or NFC (Q and Mk4) is actually part of a wallet on the COLDCARD. This includes multisig addresses, and can also include addresses from non-standard accounts the user has interacted with.

This feature automates the process of a user searching the address explorer manually to verify address ownership, and is optimized for speed.

Danger of Not Verifying Address Ownership

Failure to verify address ownership can leave you vulnerable to attacks via compromised mobile or desktop wallets that may be displaying addresses not generated by your COLDCARD.

Verify an Address from QR Code (Q only)#

  1. Initiate the QR code reader by either pressing the QR button, or navigating to the Scan Any QR Code option on the main menu.

  2. Scan QR code of a Bitcoin address or a BIP-21 payment URI.

  3. You'll be presented with a screen showing the address from the QR code, and instructions to verify ownership.

    Q QR address scanned

  4. Press 1 and the COLDCARD will attempt verification. If the address is part of a wallet the COLDCARD knows about, then you will see a screen with the following information:

    • Verified Address: The address is verified to come from a wallet on this COLDCARD.
    • The address in question.
    • Found in wallet: Which wallet the address was found in.
    • Derivation path: The exact derivation path where this address can be found.

    Q address verified

If the address is not part of a wallet the COLDCARD knows about, then you will see a screen with the following information:

  • Unknown Address: The address could not be verified to come from a wallet on this COLDCARD.
  • The Bitcoin address in question.
  • Number of candidate addresses checked without finding a match.

Q address not verified

Verify an Address from NFC (Q or Mk4)#

  1. Ensure NFC is enabled on the COLDCARD as explained in NFC Tools.

  2. Go to the NFC menu by pressing the NFC button (Q only), or navigating to Advanced/Tools > NFC Tools from the main menu.

    Mk4 NFC tools menu Q NFC tools menu

  3. Once you arrive at the NFC Tools menu you should select Verify Address.

  4. The COLDCARD is now ready to accept data from the tap of an NFC enabled device. Tap the device to the COLDCARD.

  5. The COLDCARD will recognize a Bitcoin address and immediately begin verifying if the address is part of a wallet the COLDCARD knows about.

  6. If the address is part of a wallet the COLDCARD knows about, then you will see a screen with the following information:

    • Verified Address: The address is verified to come from a wallet on this COLDCARD.
    • The Bitcoin address in question.
    • Found in wallet: Which wallet the address was found in.
    • Derivation path: The exact derivation path where this address can be found.

Mk4 address verified Q address verified

If the address is not part of a wallet the COLDCARD knows about, then you will see a screen with the following information:

  • Unknown Address: The address could not be verified to come from a wallet on this COLDCARD.
  • The Bitcoin address in question.
  • Number of candidate addresses checked without finding a match.

Mk4 address not verified Q address not verified

Limitations of Address Ownership Verification#

  • Only the first 1,528 addresses of a wallet (764 receive addresses, and 764 change addresses) are searched. An address outside of that scope will have to be verified manually using the address explorer.
  • Only standard derivation paths are searched, unless the user has interacted with an account outside of the standard derivation.
  • The search can take up to 2 minutes on the initial run, but after that it should be much faster.