COLDCARD Security Advisory A seed-generation defect affected releases beginning with firmware 4.0.1. Fixed firmware is available. Existing affected seeds still require migration. Check status

Get Started with COLDCARD

Written by Coinkite Team

Applies to: COLDCARD Q, Mk5, and Mk4

Verified on: July 17, 2026

Start with the instructions for the model in your hands. Do not enter a seed phrase from another wallet until you have checked the numbered tamper-evident bag, device, and first-boot security indicators.

Before this wallet holds more than spending money, complete the savings security checklist. It covers current firmware, separate spending and savings seeds, optional dice, passphrases, durable backups, and a full recovery test.

Your seed words, PIN, passphrase, backup password, and private keys are secrets. Coinkite support does not need them. Never paste them into a website, support ticket, chat, phone, or computer.

Open the current official setup documentation