Coldcard Q Review: The Air-Gapped Signer for Bitcoin Only

We generated a seed on the Coldcard Q using dice rolls for extra entropy, then signed a full transaction by holding the device's camera up to a QR code on a laptop screen, with no cable ever connecting the two.

Why the dock matters less than the camera here

Most hardware wallets plug into a phone or laptop to sign a transaction, a connection that is also the theoretical attack surface a malware author would target. The Coldcard Q skips that entirely: transactions travel in as QR codes read by its built-in scanner or as files on a microSD card, and the signed result travels back out the same way. The device never needs a USB cable to function, which is what "air-gapped" means in practice rather than as a marketing word.

Two secure elements instead of one

Inside the Coldcard Q sit two independent secure element chips, a Microchip ATECC608B and a Maxim DS28C36B, each capable of protecting the private key on its own. Coinkite's reasoning is that a single compromised chip family should not be enough to break every device that uses it; an attacker would need to defeat both designs, not one. That redundancy, combined with the full QWERTY keyboard for entering a long BIP39 passphrase without hunting through an on-screen grid, is the strongest argument for paying more than a Ledger or Trezor costs.

Bitcoin-only is a feature, not a limitation, for the right buyer

Coinkite builds nothing but Bitcoin hardware, and the Coldcard Q reflects that focus completely: there is no Ethereum, no token support, no multi-chain app to maintain. For a maximalist who holds nothing else, that narrower scope means less code to audit and fewer moving parts that could go wrong. For anyone holding a mixed portfolio, it means running a second wallet for everything else, which defeats the point of buying one device to simplify custody.

One tradeoff worth stating plainly: Coldcard's firmware stopped being open source in the legal sense back in 2020. You can view the source to verify what it does, but you cannot legally fork or redistribute it, a step back from the fully open model some competitors still use. Coinkite argues this protects against counterfeit clones; critics call it a downgrade in verifiability. Both points are fair.