Air-Gapped Bitcoin Signing Methods Compared: QR, NFC, MicroSD, USB

Air-Gapped Signing Methods Overview

Air-gapped signing keeps your Bitcoin private keys on a device that never connects directly to the internet. The unsigned transaction travels from your online wallet to the offline signer through one of four communication channels: QR codes, NFC, MicroSD cards, or USB. Each channel makes a different tradeoff between security isolation and usability.

The channel you choose determines your actual attack surface. A camera scanning a QR code is a one-directional optical link. An NFC tap is a short-range radio exchange. A MicroSD card is a physical filesystem transfer. USB is a full bidirectional data bus. These differences matter because the signing device is the last line of defense: if an attacker can inject data into it or exfiltrate keys from it, your bitcoin is at risk regardless of how strong the device's secure element is.

All four methods use PSBTs (BIP-174) as the standard transaction format. The difference is how the PSBT gets onto and off of the signing device. The following table summarizes each method and which major hardware wallets support it.

QR Code Signing

QR code signing uses an optical channel: the online wallet displays the unsigned PSBT as a QR code (or series of animated QR frames for larger transactions), the air-gapped device scans it with its built-in camera, signs offline, and displays the signed result as a new QR code for the wallet software to scan back.

Two encoding standards handle PSBTs that exceed a single QR code's capacity. UR (Uniform Resources), developed by Blockchain Commons, uses fountain codes so that any sufficient subset of received frames can reconstruct the payload regardless of order. BBQr (Better Bitcoin QR), developed by Coinkite, supports Base32 and ZLIB compression and can encode PSBTs up to 500 KB across ordered frames. Wallet software like Sparrow auto-detects which format the connected signer expects.

Devices That Use QR Code Signing

The Keystone 3 Pro ($149) is QR-only by design: its USB-C port carries power only, and it has no Bluetooth, WiFi, or NFC. It uses the UR standard and is compatible with Sparrow, Electrum, and BlueWallet. Foundation Passport ($199 for the Core model) supports both QR and MicroSD, with no electronic data paths. SeedSigner is a DIY option built on a Raspberry Pi Zero v1.3 (the model without WiFi or Bluetooth) for under $50, operating as a stateless signer that wipes keys from memory on every power-off. Blockstream Jade Plus ($65) supports air-gapped QR signing using SeedQR for key loading and its blind oracle security model. The Coldcard Q ($249) supports QR alongside NFC and MicroSD.

QR Security Properties

The optical channel is the strongest argument for QR signing. Data flows through photons, not electrons. The camera is a passive sensor: it cannot be used to exfiltrate data from the device. The displayed QR code on the signer's screen is the only output, and it contains only the signed PSBT. There is no firmware update path through the camera (updates arrive via MicroSD or are impossible depending on the device), which eliminates one class of supply chain attack.

The tradeoffs are speed and environment sensitivity. Large multisig transactions with many inputs produce PSBTs that require dozens of animated QR frames, and scanning takes 10 to 30 seconds depending on lighting conditions and camera quality. Low-light environments degrade reliability.

NFC Tap Signing

NFC (Near Field Communication) signing transfers the PSBT over a short-range radio link. You hold an NFC-capable phone within about 4 cm of the signing device's antenna, the unsigned PSBT passes to the signer, the device signs it, and a second tap sends the signed transaction back. The entire round-trip takes a few seconds.

Devices That Use NFC Signing

Coldcard Mk5 ($189) and Coldcard Q ($249) both support NFC as one of their signing channels, alongside MicroSD (and QR on the Q). NFC is optional on both devices and can be permanently disabled via a settings toggle. Tangem ($55 to $70 for a card set) is an NFC-only wallet card with an EAL6+ certified secure element: it has no screen, no USB port, and no camera, so all interaction happens through its companion phone app.

NFC Security Properties

NFC operates at 13.56 MHz with an effective range of roughly 4 cm, which limits remote eavesdropping. However, NFC is an electronic channel, not an optical one. Unlike QR codes, an NFC exchange is bidirectional at the radio level, which means it theoretically expands the attack surface compared to a camera. Relay attacks (extending the NFC range via a secondary device) are a known class of NFC vulnerability, though executing one against a signing workflow requires physical proximity to the target.

Tangem's NFC-only design has a notable limitation: the card has no display, so address verification depends entirely on the companion phone app. Malware on the phone could display a different address than what the card actually signs. Coldcard avoids this problem because its physical screen shows the transaction details for verification before signing, regardless of which channel delivered the PSBT.

MicroSD Card Transfer

MicroSD signing moves the PSBT as a file on a removable storage card. The workflow is straightforward: export the unsigned PSBT from your desktop wallet to a MicroSD card, physically move the card to the signing device, review and sign the transaction, then move the card back to import the signed PSBT. Coldcard coined the term "sneakernet" for this approach.

Devices That Use MicroSD Signing

Coldcard has supported MicroSD since the Mk1. The current Mk5 ($189) has one MicroSD slot, while the Coldcard Q ($249) has dual MicroSD slots. Foundation Passport ($199+) also supports MicroSD alongside QR code signing. These devices use MicroSD for both PSBT transfer and firmware updates, keeping the device fully disconnected from any electronic communication channel during normal operation.

MicroSD Security Properties

MicroSD provides a genuine air gap: no radio or wired data connection exists between the signer and any other device during the signing process. The card is a passive storage medium. However, the filesystem on the card is a potential attack vector. A compromised computer could write additional files to the card, or a sophisticated attacker could use a modified SD card with embedded firmware to attempt data exfiltration. In practice, Coldcard mitigates this by parsing only specific file types (PSBT files) and ignoring everything else.

The MicroSD channel handles arbitrarily large PSBTs without the frame-scanning overhead of QR codes, making it the preferred method for complex multisig transactions or batch operations. The physical insertion/removal cycle is slower than NFC but faster than scanning dozens of animated QR frames.

USB Signing

USB signing connects the hardware wallet directly to a host computer via a USB cable. The host wallet software sends the unsigned PSBT over the bus, the device signs it, and the signed transaction returns over the same connection. This is the default mode for Trezor, Ledger, and BitBox02 devices.

Devices That Use USB Signing

Trezor Safe 5 ($169) and Trezor Safe 3 ($79) use USB-C as their primary (and often only) signing interface. Ledger Flex ($249) connects via USB-C or Bluetooth, with an EAL6+ certified secure element. BitBox02 Bitcoin-only edition ($109) is USB-only by deliberate design choice: its developers argue that air-gapping provides "little-to-no added hardware wallet security" and instead use encrypted communication via the Noise Protocol Framework over USB.

USB Security Properties

USB is not an air-gapped method. It establishes a full bidirectional data connection between the signing device and a potentially compromised host computer. Known USB attack vectors include BadUSB (malicious firmware on the USB controller itself), device enumeration by the host OS, and data exfiltration over the bus. These are theoretical risks against well-designed hardware wallets, but they represent a fundamentally larger attack surface than optical or physical-media channels.

Device manufacturers mitigate USB risks differently. Ledger isolates all key operations inside its secure element and restricts what the USB interface can access. BitBox02 encrypts all USB traffic using the Noise Protocol Framework with out-of-band pairing verification, so even a compromised host cannot read or manipulate data in transit. Trezor relies on its on-screen transaction verification to prevent blind signing, though Ledger's security research team demonstrated voltage glitching attacks against the STM32F429 microcontroller used in the Trezor Safe 3 (the Safe 5 uses a newer STM32U5 chip with improved resistance).

Security and Convenience Comparison

The following table rates each signing method across key security and usability dimensions. Ratings reflect the inherent properties of the communication channel, not any specific device implementation.

PSBT Workflow Differences

The BIP-174 PSBT standard provides a universal transaction format that works across all signing methods. The workflow always follows the same logical steps: create the transaction in wallet software, transfer the unsigned PSBT to the signer, verify and sign on the device, then transfer the signed PSBT back for broadcast. What differs is the transfer mechanism at each step.

QR workflows require a coordinator wallet (Sparrow, Electrum, or BlueWallet) that can display and scan QR codes. The coordinator renders the unsigned PSBT using either the UR or BBQr encoding, the signer's camera reads it, and the signed result appears on the signer's screen for the coordinator to scan. For a deeper look at PSBT construction and signing flows, see our PSBT workflow guide.

NFC workflows are phone-centric. The companion app (Nunchuk for Coldcard, or Tangem's own app) constructs the PSBT and transmits it via NFC tap. MicroSD workflows use desktop wallets that can export and import .psbt files. USB workflows are the most transparent to the user: the wallet software communicates directly with the device, often making the PSBT exchange invisible.

For multisig setups, QR and MicroSD methods work naturally because each co-signer can pass the partially signed PSBT through the same channel. USB wallets also support multisig PSBTs but require each signer to connect to the coordinator sequentially.

Which Method Offers the Strongest Air-Gap Guarantee?

QR code signing provides the strongest air-gap guarantee of any current signing method. The optical channel is unidirectional at the physical layer: the camera captures light, and light cannot carry data back from the device's internal memory. There is no electronic coupling between the signer and the coordinator at any point during the transaction. This is why security-focused devices like the Keystone 3 Pro and SeedSigner use QR as their sole communication method.

MicroSD ranks second. The air gap is genuine during signing (no electronic connection exists), but the card itself is a writable medium that passes between a trusted and untrusted environment. A sufficiently motivated attacker could target the SD card's filesystem or use a modified card, though practical exploitation is difficult against a well-implemented parser.

NFC is a step below because it introduces a radio channel, even though the range is short. USB provides no air gap at all but compensates with other security mechanisms like secure elements and encrypted communication protocols.

The practical recommendation depends on your threat model. For most users storing personal savings, any hardware wallet with on-screen verification is a massive improvement over software-only custody. For high-value storage or institutional cold storage, QR-only or QR-plus-MicroSD devices offer the strongest isolation. For a broader comparison of signing devices, see our hardware wallet comparison tool.

Frequently Asked Questions

What is air-gapped signing in Bitcoin?

Air-gapped signing means your private keys live on a device that has no direct electronic connection to any network-connected computer. Unsigned transactions are transferred to the device through an indirect channel (QR code, NFC, or MicroSD), signed offline, and transferred back for broadcast. The key never touches an internet-connected machine.

Is QR code signing more secure than USB for Bitcoin hardware wallets?

QR code signing provides a stronger air gap than USB because the optical channel is physically incapable of bidirectional electronic data transfer. USB connects the signing device directly to a host computer's data bus, exposing it to potential BadUSB attacks and host-side malware. However, USB wallets like BitBox02 and Ledger mitigate these risks through encrypted communication and secure elements. The real-world security difference depends on your threat model and the specific device.

Which Bitcoin hardware wallets support air-gapped QR code signing?

The Keystone 3 Pro, Foundation Passport, SeedSigner, Blockstream Jade Plus, and Coldcard Q all support QR code signing for PSBTs. The Keystone 3 Pro and SeedSigner are QR-only devices with no other electronic data paths. The Passport and Coldcard Q also support MicroSD. The Jade Plus can operate air-gapped with SeedQR key loading.

Can NFC hardware wallets be hacked remotely?

NFC operates at a range of roughly 4 cm, making remote exploitation extremely difficult without physical proximity. However, NFC relay attacks can extend the effective range by placing a secondary device near the target. For signing devices with screens (like Coldcard), on-device transaction verification prevents blind signing even if the NFC channel is intercepted. Screenless NFC cards like Tangem rely on the companion app for verification, which introduces phone-side risk.

What is the difference between UR and BBQr encoding for QR-based signing?

UR (Uniform Resources) is developed by Blockchain Commons and uses fountain codes, allowing any sufficient subset of received frames to reconstruct the full PSBT regardless of scanning order. BBQr (Better Bitcoin QR) is developed by Coinkite and uses Base32 encoding with optional ZLIB compression, supporting PSBTs up to 500 KB. UR is more resilient to missed frames in noisy scanning environments. Wallet software like Sparrow auto-detects the format used by the connected signer.

Is a MicroSD card air-gapped signing method truly secure?

MicroSD provides a genuine air gap during the signing process: no electronic connection exists between the signer and any other device. The primary risk is that the card is a writable filesystem that travels between a trusted (signing device) and untrusted (computer) environment. A compromised computer could write malicious files to the card, and theoretically a modified SD card could contain embedded firmware. In practice, well-designed signers like Coldcard parse only PSBT files and reject unexpected data.

Do I need an air-gapped wallet for self-custody Bitcoin?

An air-gapped wallet is not strictly required for self-custody, but it significantly reduces the attack surface for high-value holdings. For moderate amounts, a USB hardware wallet with on-screen verification is a substantial improvement over software wallets. For larger holdings or long-term cold storage, air-gapped signing via QR or MicroSD provides the strongest key isolation available to individual users. Bitcoin Layer 2 solutions like Spark can work alongside hardware wallets for day-to-day spending while keeping long-term savings in cold storage.

This tool is for informational purposes only and does not constitute financial or security advice. Device specifications, pricing, and security properties are based on publicly available information as of mid-2026 and may change with firmware updates or new product releases. Always verify current specifications on the manufacturer's website before purchasing a signing device.