Coldcard vs BitBox02: Bitcoin-Only Hardware Wallets Compared

Coldcard Mk4 vs BitBox02 Bitcoin-Only Overview

Coldcard Mk4 and BitBox02 Bitcoin-only are the two most popular signing devices built exclusively for Bitcoin. Both reject altcoin support entirely, reducing attack surface and firmware complexity. But they take fundamentally different approaches to security architecture, connectivity, and user experience.

Coldcard prioritizes air-gapped signing via MicroSD and NFC, letting users avoid USB data connections altogether. BitBox02 takes a USB-C-only approach, compensating with anti-klepto signing protection, a streamlined companion app, and fully open-source hardware schematics. The right choice depends on whether you value maximum physical isolation or a smoother workflow with strong software safeguards.

For a broader comparison across more devices, see our Bitcoin hardware wallet comparison.

Air-Gapped Signing: MicroSD vs USB-C

The most significant architectural difference between these two devices is how they communicate with wallet software. Coldcard supports fully air-gapped operation: you save a PSBT file to a MicroSD card, insert it into the Coldcard, review and sign on-device, then carry the signed transaction back to your computer on the same card. The USB port and NFC radio never need to be used for data transfer, eliminating an entire class of USB-based attack vectors.

The Mk4 also supports NFC-V (ISO 15693) for wireless PSBT transfer and transaction broadcasting via NFC-enabled phones. This provides a middle ground: no USB cable, but the device does emit a radio signal during the tap.

BitBox02 connects exclusively via USB-C. All communication between the device and BitBoxApp (or Sparrow, Electrum, and other compatible wallets) happens over this wired connection. BitBox02 compensates with anti-klepto signing: a cryptographic protocol that prevents the device from leaking private key material through manipulated signature nonces. BitBox02 was the first hardware wallet to ship this protection, which guards against a class of supply chain attacks that air-gapping alone does not address.

PSBT Workflow Comparison

Both devices support BIP-174 (PSBT), the standard format for passing unsigned transactions between wallets and signing devices. The workflow differs based on each device's connectivity model.

On Coldcard, the PSBT workflow is file-based. Your coordinator software (Sparrow, Electrum, or Specter) exports an unsigned PSBT to a MicroSD card. You insert the card into the Coldcard, review the transaction details on the OLED display, confirm with the keypad, and the signed PSBT is written back to the card. For single-sig, this is straightforward. For multisig, you repeat the process with each cosigning device.

On BitBox02, PSBTs flow over USB-C. The companion BitBoxApp or a third-party coordinator sends the unsigned transaction directly to the device. You review on screen, confirm with the touch sensors, and the signed result returns over the same USB connection. No file management is needed, but the device must be physically connected to a computer.

For a deeper dive into PSBT mechanics, see our Bitcoin PSBT workflow guide and the PSBT multisig workflow research article.

Multisig Support

Both Coldcard and BitBox02 support on-device multisig wallet registration, meaning each device stores the xpubs of all cosigners and can independently verify receive addresses without trusting the coordinator software.

Coldcard offers a feature called Coldcard Co-Signing (CCC), which enables automated 2-of-N multisig with configurable spending policies. The air-gapped MicroSD workflow means multisig configurations and partially signed transactions are exchanged as files. This adds steps but keeps every signer physically isolated. Coldcard works with Sparrow, Electrum, Specter Desktop, Nunchuk, and Casa for multisig coordination.

BitBox02 registers multisig accounts on-device and stores a checksum of co-signer xpubs for address verification. The USB-connected workflow is simpler: plug in, sign, done. No MicroSD file shuffling required. Shift Crypto recommends using multiple BitBox02 devices for the cleanest multisig experience, though mixing with other signing devices via Sparrow or Electrum also works.

For a detailed comparison of multisig setups across more devices, see our Bitcoin multisig setup comparison.

Security Architecture

Coldcard's defining security feature is its dual secure element design. The seed is split across two chips from different manufacturers: a Microchip ATECC608 and a Maxim DS28C36B. A vulnerability in one vendor's silicon does not expose the full key. The device also features a split-PIN anti-phishing mechanism: after entering the first half of your PIN, the device displays unique anti-phishing words. If the words don't match what you expect, the device may have been tampered with. Coldcard ships in a tamper-evident bag with verifiable serial numbers, and its clear case allows visual inspection of the circuit board.

BitBox02 uses a single secure element (ATECC608B) but layers multiple defensive measures on top. The microcontroller and secure chip are covered in epoxy potting, making chip-level probing destructive. Breakaway pins connect the two case halves, so opening the device permanently and visibly damages the enclosure. The bootloader enforces signed firmware only: no downgrades, no cross-edition flashing (Bitcoin-only firmware cannot be replaced with multi-coin firmware). Each unit receives a unique attestation key at the factory, and BitBoxApp verifies device authenticity on every connection.

For more on hardware wallet security considerations, see our research on Bitcoin hardware wallet attack vectors.

Duress Features and Trick PINs

Coldcard has the most extensive duress feature set of any hardware wallet. Beyond the standard duress PIN (which unlocks a decoy wallet with a separate balance), it offers a Brick Me PIN that permanently destroys the device, a Login Countdown PIN, and Trick PINs that can be linked to BIP-85-derived wallets. An attacker who coerces your PIN gets a convincing decoy wallet while your real funds remain hidden.

BitBox02 handles duress through the BIP-39 optional passphrase (25th word). Different passphrases unlock different wallets, so you can maintain a decoy wallet under an empty passphrase and your real wallet under a secret one. This is functionally similar but less granular: there is no equivalent to the Brick Me PIN or countdown-based self-destruct.

BIP-85 Derived Seeds

Both devices support BIP-85, which derives independent child seeds from a master seed. This lets you generate separate 12- or 24-word mnemonics for hot wallets, Lightning nodes, or other purposes without managing multiple independent backups. If you have your master seed, you can always regenerate any child seed.

Coldcard's BIP-85 implementation integrates with Trick PINs: you can assign a derived wallet to a specific PIN for duress scenarios or compartmentalized storage. Derived seeds can also be stored in Coldcard's Seed Vault for quick switching between identities.

BitBox02 added BIP-85 support in its Brienz firmware update. The implementation is straightforward: choose a word count and index, and the device derives a child mnemonic you can export to any BIP-39 compatible wallet.

Open-Source Status

This is an area where the two devices diverge significantly. BitBox02 is fully open source under the Apache 2.0 license. Firmware, the BitBoxApp companion software, and complete hardware schematics (PCB design, chip wiring) are all published on GitHub. Anyone can audit, fork, or build upon the design. Reproducible builds via Docker let users verify that released binaries match the published source.

Coldcard's firmware was originally GPLv3, but Coinkite added a Commons Clause restriction in 2020 that prohibits commercial redistribution. The code is publicly viewable and auditable on GitHub, and reproducible builds are supported, but it does not meet the standard open-source definition. Hardware schematics are not published. Coinkite uses the term "verifiable" rather than "open source" to describe this approach.

Seed Backup Options

Coldcard offers several backup methods beyond the standard 24-word mnemonic: encrypted MicroSD backups (AES-256), SeedXOR (which splits a seed into two or more parts, each of which is itself a valid BIP-39 mnemonic), dice roll seed generation for provable entropy, and the Seed Vault for storing multiple encrypted secrets on-device.

BitBox02 performs automatic MicroSD backup during initial setup and supports manual 24-word mnemonic export for metal or paper backup. It also offers a "roll your own seed" option for users who want to provide their own entropy. Both devices support BIP-39 passphrases (the optional 25th word) for additional wallet isolation.

For more on cold storage backup strategies, see our Shamir secret sharing backup guide.

Which Should You Choose

Choose Coldcard Mk4 if air-gapped operation is non-negotiable. If you want your signing device to never touch a USB data connection, Coldcard is the only option between these two. It is also the stronger choice for complex multisig setups where each signer needs to be physically isolated, and for users who want extensive duress features (Trick PINs, Brick Me, decoy wallets). The dual secure element architecture provides an extra layer of hardware redundancy.

Choose BitBox02 if you prioritize fully open-source hardware, a smoother user experience, or anti-klepto signing protection. The companion BitBoxApp reduces friction for new users, and the USB-only workflow is simpler for single-sig cold storage. The published hardware schematics and Apache 2.0 license make it the more auditable device. BitBox02 is also lighter, smaller, and slightly less expensive.

Note: Both devices work with Sparrow, Electrum, and Specter Desktop. Your choice of coordinator software is independent of your hardware wallet choice.

Once your Bitcoin is secured in cold storage, you may want to explore options for using it without moving funds on-chain. Spark enables fast, low-cost Bitcoin and stablecoin transfers as a Bitcoin Layer 2, which pairs well with a cold storage setup for your long-term holdings.

Frequently Asked Questions

Is Coldcard Mk4 better than BitBox02 for multisig?

Coldcard has an edge for multisig setups where air-gapped isolation between cosigners is a priority. Its MicroSD-based PSBT workflow keeps every signer completely offline. BitBox02 supports multisig with on-device xpub verification but requires a USB connection for each signing step. For mixed-vendor multisig (using both devices as cosigners), Sparrow Wallet provides the best coordinator experience.

Can BitBox02 sign transactions without a computer?

No. BitBox02 requires a USB-C connection to a computer or Android device running BitBoxApp or a compatible wallet. It cannot operate air-gapped. If offline signing is a requirement, Coldcard with MicroSD or NFC is the appropriate choice.

Is Coldcard firmware truly open source?

Coldcard firmware is source-available but not open source by the standard definition. The code is publicly viewable on GitHub and supports reproducible builds, but the Commons Clause restriction added in 2020 prohibits commercial redistribution. BitBox02 firmware is fully open source under Apache 2.0, and its hardware schematics are also published.

What is anti-klepto protection and why does it matter?

Anti-klepto protection prevents a hardware wallet from secretly leaking your private key through manipulated transaction signature nonces. Even if a device's firmware were compromised (through a supply chain attack, for example), anti-klepto ensures the signatures it produces cannot encode private key material. BitBox02 was the first hardware wallet to implement this protocol. Coldcard does not currently support it.

Do both wallets support Bitcoin-only firmware?

Yes. Both the Coldcard Mk4 and BitBox02 Bitcoin-only edition run firmware that supports Bitcoin exclusively. Neither device can be used with altcoins. The BitBox02 also comes in a multi-coin edition, but the Bitcoin-only firmware cannot be cross-flashed to the multi-coin version or vice versa, enforced at the bootloader level.

Which hardware wallet is better for beginners?

BitBox02 has a lower learning curve. The BitBoxApp companion software guides users through setup, and the USB-only workflow avoids the complexity of MicroSD file management. Coldcard is a more capable device for advanced users but assumes familiarity with concepts like PSBTs, xpubs, and derivation paths. Both devices are suitable for single-sig cold storage.

Can I use Coldcard or BitBox02 with a Lightning node?

Neither device signs Lightning channel transactions directly, as Lightning requires hot keys for real-time channel state updates. However, both can generate BIP-85 derived seeds to fund a separate Lightning node wallet while keeping your cold storage master seed offline. See our Lightning node comparison for more on node options.

This tool is for informational purposes only and does not constitute financial advice. Data is approximate and based on publicly available information as of mid-2026. Prices, features, and firmware capabilities may change. Always verify current specifications on the manufacturer's website before purchasing.