Start with a test amount, not your stack.

The first run

Do this before sending more than a test amount.

1. Verify the bag and device.

   Check the tamper-evident bag and run the genuine check. When you set the PIN, learn the anti-phishing words shown between the two PIN parts.

2. Update before wallet setup.

   A PIN is required to update firmware. After setting it, stop at the main menu before choosing a seed or restore option. Check the current status, then install and verify the current standard firmware. Do not generate or import a seed, restore a backup, or fund the wallet before confirming the update. Current standard firmware requires one method for each new seed: 65 key presses with unpredictable timing, 50 physical dice rolls, or 128 physical coin flips. Dice Rolls Only remains a separate advanced workflow. Write only the final words offline—no screenshots, cloud notes, password managers, printers, or photos.

3. Make the backup before you fund.

   Start with a readable backup. Move to metal for long-term storage. Encrypted MicroSD backup is useful for COLDCARD settings, but the seed words are what restore the wallet elsewhere.

4. Set up a watch-only wallet.

   Export a wallet file or descriptor to Sparrow, Cove, Nunchuk, or Specter. The app watches addresses and builds transactions; COLDCARD keeps the keys.

5. Receive and spend a small test amount.

   Verify the receive address on the COLDCARD screen. Then build a small PSBT, check amount, destination, fee, and change on-device, sign it, and broadcast.

6. Do a recovery drill.

   Before sending the stack, restore from your backup or check it on a spare device. Confirm the same wallet fingerprint and receive addresses.

Pick the next page