The COLDCARD Mk5 is Coinkite's ultra-secure and affordable Bitcoin signing device. It features dual secure elements, a bright Gorilla Glass screen, improved numeric keypad, and NFC for tap-to-sign and Push TX — all in a compact design with a clear case so you can verify nothing's been tampered with. Like every COLDCARD, it operates fully air-gapped and runs open-source firmware that you can build and verify yourself.

100% Backwards Compatible

Your existing investment protected—migrate seamlessly from existing COLDCARD devices.

Improved Keyboard

A refined keypad designed for precision entry.

Bigger, Brighter Screen

Protected by Gorilla Glass for maximum durability.

Relocated USB-C Port

Conveniently positioned for easier access.

Improved NFC

Faster, more reliable wireless communication.

PushTX

Broadcast transactions directly from your COLDCARD via NFC.

Available in Multiple Colours

Choose the one that matches your style.

Compact Design

Small enough to hide anywhere. Big enough to secure everything.

Powered by

Sleep Like a Baby
Technology™

Dual Secure Element for Key Storage

COLDCARD uses two Secure Elements, from different vendors, to protect your Bitcoin. Specifically, the COLDCARD uses Microchip's ATECC608 and Maxim's DS28C36B to store the critical master secret: the 24-word seed phrase for your BIP39 wallet.

Genuine vs. Caution Lights

To resist Evil Maids, we sign our firmware with a factory key. During boot-up, the firmware's signature will be verified and the appropriate Green/Red light set. The circuit for the lights is exposed on the top surface, so physical tampering will be visible.

Anti-phishing Words

The PIN code on COLDCARD is divided into two parts. You first enter the prefix and then you will be shown two words on-screen. Those words are unique for all PIN prefixes, and for each COLDCARD ever made.

Physical Security

The carefully designed PCB increases the SE probing difficulty. Our clear case is part of our security model too, so you can look and see if a "hardware implant" has been inserted inside your device.

Trick PIN Features

COLDCARD has even more tricks up its sleeve!

xkcd comic about security
xkcd #538

Duress PIN

You may define an optional "duress PIN code". If anyone enters that PIN code, nothing special is shown on the screen and everything operates as normal... However, the bitcoin key generated is not the main key. It is effectively a completely separate wallet!

Countdown to Brick PIN

This is a covert variation of the BRICK ME PIN mode. It forces a time delay when logging into the Coldcard. Once set, this special mode covertly bricks the Coldcard (or optionally merely wipes the seed).

BIP39 Passphrases (25th word)

We support BIP39 passphrases so you can also create an unlimited supply of distraction wallets. This feature is also useful for your own organization of funds or accounts.

Brick Me PIN

Another PIN can also be defined, which we call the "Brick Me" PIN. Using that PIN code at any PIN prompt will destroy the dual secure element and render your Coldcard worthless.

Login Countdown

Force a time delay when logging into the Coldcard. Once enabled, you must enter the PIN correctly, wait out a forced delay, then enter your PIN correctly a second time to get in.

xkcd comic about security
xkcd #538

Advanced Features

Temporary Seed and Seed Vault

Temporary seed is a temporary secret completely separate from the master seed, typically held in RAM and not persisted between reboots in the Secure Element.

Seed Vault adds the ability to store multiple temporary secrets in encrypted settings for simple recall and later use. Stored secrets are AES-256-CTR encrypted with your master seed's key.

COLDCARD Co-Signing

COLDCARD Co-Signing (CCC) is a powerful feature that lets you create automated multisig wallets, protected by user-defined spending policies for enhanced security and control.

When enabled, CCC adds a second seed (the Spending Policy Key) to your COLDCARD, which works with your main seed and additional backup keys to create 2-of-N multisig wallets.