COLDCARD Security Advisory A seed-generation defect affected releases beginning with firmware 4.0.1. Fixed firmware is available. Existing affected seeds still require migration. Check status

COLDCARD START

Start with a test amount, not your stack.

Keep the first run small and boring: verify the device, write the seed, make the backup, receive a little bitcoin, sign once, then make sure recovery works.

The first run

Do this before sending more than a test amount.

  1. Verify the bag and device.

    Check the tamper-evident bag and run the genuine check. When you set the PIN, learn the anti-phishing words shown between the two PIN parts.

  2. Create the seed on fixed firmware.

    Check the current status and verify the signed firmware first. Current standard firmware requires one method for each new seed: 65 key presses with unpredictable timing, 50 physical dice rolls, or 128 physical coin flips. Dice Rolls Only remains a separate advanced workflow. Write only the final words offline—no screenshots, cloud notes, password managers, printers, or photos.

  3. Make the backup before you fund.

    Start with a readable backup. Move to metal for long-term storage. Encrypted MicroSD backup is useful for COLDCARD settings, but the seed words are what restore the wallet elsewhere.

  4. Set up a watch-only wallet.

    Export a wallet file or descriptor to Sparrow, Cove, Nunchuk, or Specter. The app watches addresses and builds transactions; COLDCARD keeps the keys.

  5. Receive and spend a small test amount.

    Verify the receive address on the COLDCARD screen. Then build a small PSBT, check amount, destination, fee, and change on-device, sign it, and broadcast.

  6. Do a recovery drill.

    Before sending the stack, restore from your backup or check it on a spare device. Confirm the same wallet fingerprint and receive addresses.

Learn recovery before adding complexity.

Practice recovery with a small test amount first. Before the wallet holds an amount whose loss would be materially harmful to you, apply a strong, unique BIP-39 passphrase, back it up separately, record its wallet fingerprint, and test recovery. Leave Trick PINs, SeedXOR, Seed Vault, and multisig for later unless their recovery plans are already understood and tested.