{"id":8706,"date":"2022-06-08T21:00:00","date_gmt":"2022-06-08T21:00:00","guid":{"rendered":"http:\/\/ci02a33c516000269e"},"modified":"2025-01-28T15:25:37","modified_gmt":"2025-01-28T15:25:37","slug":"how-to-use-bitcoin-coldcard","status":"publish","type":"post","link":"https:\/\/bitcoinmagazine.com\/guides\/how-to-use-bitcoin-coldcard","title":{"rendered":"An Easy Guide To Use The ColdCard Bitcoin Hardware Wallet"},"content":{"rendered":"<div id=\"bsf_rt_marker\"><\/div><p>Make sure you go through the other piece \u201c<a href=\"https:\/\/bitcoinmagazine.com\/guides\/how-to-use-a-bitcoin-hardware-wallet\">Using Bitcoin Hardware Wallets<\/a>\u201d first. I will skim through some steps and focus mostly on what is specific to ColdCard here.<\/p>\n<p>This guide will be appropriate for the ColdCard MK3 and the newer Mk4.<\/p>\n<h2>Purchasing<\/h2>\n<p>Buy the device directly from the manufacturer, <a href=\"https:\/\/coinkite.com\/\" target=\"_blank\" rel=\"noopener\">Coinkite<\/a>. This is mandatory; don\u2019t buy from Amazon, Ebay or used, to eliminate the possibility of tampering by a scammer who may later try to steal your bitcoin. You\u2019ll need to get a micro SD card as well (the smallest and cheapest will do) and for this Amazon is probably your cheapest option (or locally and quicker, Walmart or Target, etc, also usually carry them). You\u2019ll need a connection cable as well, as one does not come with the device. You might have one lying around from an old phone, or just buy one.<\/p>\n<p>The Coldcard Mk4 has a USB-C connection attached to the shell, and the Mk3 has a micro USB connection. You need to source your own USB cable that matches the device and your computer\u2019s USB port type.<\/p>\n<figure><img decoding=\"async\" src=\"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2025\/01\/18_image8.png\" title=\"\"><\/figure>\n<p>For example, if you use a modern Mac, it\u2019ll have USB-C ports like the ColdCard does, and you\u2019ll need a cable like this:<\/p>\n<figure><img decoding=\"async\" src=\"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2025\/01\/159_image1.png\" title=\"\"><\/figure>\n<p>For the Mk3 ColdCard and a computer with regular USB ports, you\u2019ll need a cable with micro USB and regular USB, like this:<\/p>\n<figure><img decoding=\"async\" src=\"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2025\/01\/7_image15.png\" title=\"\"><\/figure>\n<p>In addition to the cable, you\u2019ll need a 5-volt charger, like the ones most phones use. You can connect your wallet to the computer for power, but we want to avoid that if we can, for optimal security.<\/p>\n<figure><img decoding=\"async\" src=\"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2025\/01\/9_image12.png\" title=\"\"><\/figure>\n<p>When you place your order with Coinkite, ideally you shouldn\u2019t ship it to your home address, as the packaging (available to see by the entire delivery distribution chain) states that the content is a \u201cColdCard calculator.\u201d You don\u2019t want to reveal to the world that you own bitcoin, and where you live. So, use a fake name, and ship it to your place of work, or a P.O. Box. This is best practice, but probably not a devastating error if you don\u2019t.<\/p>\n<h2>Setting Up The ColdCard<\/h2>\n<p>When the device arrives from Canada, make sure you inspect the tamper-evident bag for any disturbance\/compromise. There is also a number on the bag \u2013 keep it, as the device will require you to compare that number with a number the device provides from its memory, to ensure you are receiving the correct device, and not a swapped one.<\/p>\n<p>Power on the device, and read everything the device presents to you carefully. The keypad has arrows; use them to scroll down to the bottom of all messages. Sometimes at the end of a message, it will get you to press a specific number to prove you read the message. If you didn\u2019t read that and pressed the checkmark to proceed, you\u2019ll loop back to the start and you\u2019ll think the device is faulty.<\/p>\n<p>You\u2019ll be given instructions to set a PIN. The naming of the PIN is unfortunate and a bit confusing, and I\u2019ll explain. There are two PINs in fact. When you turn on your device, you\u2019ll be entering PIN-1. You will then be presented with two \u201cphishing\u201d words that are unique to your device. The words will be the same every time, and you just need to confirm you recognise those words. Recognising the words confirms you put the correct PIN-1, and that the device is really yours and hasn\u2019t been swapped without your knowledge. Once you know the device is yours, the next prompt is to enter PIN-2.<\/p>\n<p>The ColdCard device calls PIN-1 the PIN prefix, and when prompted for PIN-2, it says \u201center rest of PIN.\u201d<\/p>\n<p>When setting PIN-1 or PIN-2, you can choose 2-6 digits for each PIN.<\/p>\n<p>You will then be presented with the option to create a new wallet or \u201cimport existing\u201d (restore a wallet). I will go through creating a new wallet. The device will give you 24 words, one at a time. Write them down in order, and then you\u2019ll be asked to confirm the words. Just work through the prompts. Remember to make a duplicate of these words, and store the two copies in different locations to prevent total loss from a catastrophe such as a fire.<\/p>\n<p>Once you are finished, the device will show you the top menu which reads \u201cReady to Sign.\u201d You can then disconnect the device. Reconnect and make sure you get the hang of turning it on and entering your PIN numbers.<\/p>\n<h2>About Passphrases<\/h2>\n<p>A \u201cwallet\u201d has several meanings. Here I\u2019m using it to describe the unique collection of 2^32 addresses that belong to the<\/p>\n<ul>\n<li>seed phrase (words)<\/li>\n<li>plus passphrase (your choice of text up to 100 characters)<\/li>\n<li>plus derivation path<\/li>\n<\/ul>\n<p>Those three things, when combined, create a \u201cwallet\u201d \u2013&gt; roughly 4.3 billion addresses each with a private key.<\/p>\n<p><em>Don\u2019t worry too much about the derivation path; in a way, it acts like a second passphrase, and users should just leave this as a default, usually, m\/84\u2019\/0\u2019\/0\u2032; even advanced users shouldn\u2019t edit these in my opinion<\/em>. If during any wallet creation process, the derivation path is presented to you, it is good practice to write it down, although if lost and you never changed it, it won\u2019t be too difficult to recover the \u201cdefault\u201d numbers.<\/p>\n<p>Every time you turn on the ColdCard, you will have access to the 4.3 billion addresses that belong to the seed (no passphrase).<\/p>\n<p>You can apply any passphrase you want (100 character limit) and when you do, the ColdCard forgets the original 4.3 billion address from its temporary memory (it only holds one collection of addresses at a time), and you get a fresh new set of addresses (a wallet) that belong to the original seed phrase plus the passphrase you chose.<\/p>\n<p>When you turn off the device, all wallets disappear from memory (but not the seed of course). When you turn it on, you\u2019ll be back to the original wallet with seed plus no passphrase. To get your passphrase wallet back, you have to apply the passphrase again. In this way, you can have limitless wallets (each with 4.3 billion addresses) that are derived from a single seed phrase (which you backed up).<\/p>\n<p>If you ever lose the device, you can simply buy another (or even one of a different brand name if you choose), restore the seed you have kept safe, and you\u2019ll get your original wallet back. You can then apply any passphrase to get your passphrase wallets back (and the bitcoin in them of course). Your bitcoin is not bound to the ColdCard device, it is bound to the BIP-39 (Bitcoin Improvement Proposal 39) protocol. You can learn more about this protocol by following the instructions of <a href=\"https:\/\/bitcoinmagazine.com\/culture\/diy-bitcoin-private-key-project\">this fun exercise<\/a>.<\/p>\n<p>To apply a passphrase, go to the passphrase menu, and select \u201cedit phrase.\u201d The 1, 2 or 3 buttons allow you to change the type of symbols to select from. Use the up and down arrow to select the symbol, then use the left and right arrows to move the cursor to the position you want to edit. When finished, click the checkmark. But that\u2019s not it, you still need to \u201capply\u201d the passphrase to memory. Scroll to the bottom and select \u201capply.\u201d Read the message. If your micro SD card is inserted, you\u2019ll have the option to save the passphrase to the card to avoid this tedious procedure of typing the passphrase, but be aware you are recording sensitive information on the card and need to keep it secure.<\/p>\n<p>When turning on the device at a later time, to get your passphrase wallet, you go to the passphrase menu. If your micro SD card is inserted, you can select \u201crestore saved.\u201d If not, you have to repeat the above procedure (edit phrase, and then apply).<\/p>\n<p><em>Remember if you ever want to \u201cexport\u201d a wallet from the device to make a watching wallet (don\u2019t worry if you don\u2019t know what that means for now), you need to have the correct wallet in memory at the time you make the export; either the wallet with no passphrase or a wallet from one of your passphrases.<\/em><\/p>\n<h2>Watching Wallet<\/h2>\n<p>In previous articles, I explained how to download and verify Sparrow wallet, and how to connect it to your own node, or a public node. This is outside the scope of this guide, but you can follow these guides if interested. Otherwise, just read on.<\/p>\n<p><a href=\"https:\/\/armantheparman.com\/bitcoincore\/\" target=\"_blank\" rel=\"noopener\">Install Bitcoin Core<\/a><\/p>\n<p><a href=\"https:\/\/armantheparman.com\/sparrow\/\" target=\"_blank\" rel=\"noopener\">Install Sparrow Bitcoin<\/a><a href=\"https:\/\/armantheparman.com\/download-sparrow\/\" target=\"_blank\" rel=\"noopener\"> Wallet<\/a><\/p>\n<p><a href=\"https:\/\/armantheparman.com\/sparrowcore\/\" target=\"_blank\" rel=\"noopener\">Connect Sparrow Bitcoin Wallet to Bitcoin Core<\/a><\/p>\n<p>An alternative to using Sparrow bitcoin wallet is Electrum desktop wallet, but I will proceed to explain Sparrow\u2019s bitcoin wallet as I judge it to be the best for most people. Advanced users may like to use Electrum as an alternative.<\/p>\n<p>To install Sparrow, follow the \u201cInstall Sparrow Bitcoin Wallet\u201d link above and then return here.<\/p>\n<p><strong>Run Sparrow Wallet<\/strong><\/p>\n<figure><img decoding=\"async\" src=\"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2025\/01\/33_image6.png\" title=\"\"><\/figure>\n<p>This pop-up can be deceiving. Read it properly. The \u201coffline\u201d button and toggle is an <em>image only<\/em>, i.e., you can\u2019t actually interact with it (people have tried!). Just click the next button.<\/p>\n<figure><img decoding=\"async\" src=\"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2025\/01\/23_image7.png\" title=\"\"><\/figure>\n<p>Again, that yellow toggle is an <em>image only<\/em>. Read and click \u201cNext.\u201d And the same with the next two pop-ups, until you see this:<\/p>\n<figure><img decoding=\"async\" src=\"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2025\/01\/11_image10.png\" title=\"\"><\/figure>\n<p>Here we are about to connect to a public server that belongs to Emzy. Emzy is a great guy and I wouldn\u2019t object to connecting to his node, although best practice (which you can eventually strive for) is to connect to your own node. Click the \u201cTest Connection\u201d button to make sure you can connect to Emzy\u2019s node.<\/p>\n<p>Then you can click the giant blue \u201cGeneral\u201d tab on the left:<\/p>\n<figure><img decoding=\"async\" src=\"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2025\/01\/5_image14.png\" title=\"\"><\/figure>\n<p>All of this can be left as defaults. Go ahead and select \u201cCreate New Wallet.\u201d<\/p>\n<p>Name it something pretty:<\/p>\n<figure><img decoding=\"async\" src=\"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2025\/01\/49_image5.png\" title=\"\"><\/figure>\n<p>Then click \u201cCreate Wallet\u201d<\/p>\n<figure><img decoding=\"async\" src=\"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2025\/01\/114_image2.png\" title=\"\"><\/figure>\n<p>We can set up all sorts of wallets from here. I will demonstrate two ways, one with the ColdCard directly connected by cable to the computer (this is fine, but theoretically not as good as the next method). The other is the more cumbersome way, i.e., air-gapped.<\/p>\n<p><strong>With Cable<\/strong><\/p>\n<p>Go ahead and connect the ColdCard to the computer and enter the PIN. Then apply the passphrase if you want that.<\/p>\n<p>Then click the \u201cConnected Hardware Wallet\u201d button.<\/p>\n<figure><img decoding=\"async\" src=\"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2025\/01\/7_image13.png\" title=\"\"><\/figure>\n<p>Then click \u201cScan\u201d \u2026<\/p>\n<figure><img decoding=\"async\" src=\"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2025\/01\/12_image9.png\" title=\"\"><\/figure>\n<p>Sparrow should detect your device. Some troubleshooting if you fail at this step:<\/p>\n<ol>\n<li>Make sure you have proceeded past the PIN-entering stage on the device.<\/li>\n<li>If you previously connected the device to another wallet, unplugging and reconnecting may be necessary to \u201cforget\u201d the old connection.<\/li>\n<li>Make sure the USB option is not turned off in the ColdCard settings.<\/li>\n<\/ol>\n<figure><img decoding=\"async\" src=\"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2025\/01\/75_image3.png\" title=\"\"><\/figure>\n<p>Now we are presented with some details about the wallet. You can copy the xpub or zpub to a file \u2013 this will allow you to restore the wallet (but no spending ability) \u2013 sort of like being able to access your bank account online but as an observer only. The xpub is still sensitive, but just not as much as the seed words and passphrase. Note the computer doesn\u2019t know the seed phrase: that is kept hidden in the ColdCard, its primary job. Click \u201cApply\u201d to proceed.<\/p>\n<figure><img decoding=\"async\" src=\"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2025\/01\/8_image16.png\" title=\"\"><\/figure>\n<p>A copy of the watching wallet is going to be made on the computer and this will encrypt it. Don\u2019t confuse \u201cpassword\u201d with \u201cpassphrase.\u201d<\/p>\n<figure><img decoding=\"async\" src=\"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2025\/01\/49_image4.png\" title=\"\"><\/figure>\n<p>Once the computer does it\u2019s thinking, all the blue buttons on the left are available to you. You can click \u201cAddresses\u201d now and see your wallet. Even though you have 4.3 billion addresses, only the first several are shown. By the way, you also have 4.3 billion change addresses, so I should have said earlier that each wallet has 8.6 billion unique addresses.<\/p>\n<h2>Receiving<\/h2>\n<p>To receive some bitcoin, go to the Addresses tab on the left and choose one of the addresses to receive. Just right-click the address you want, and select \u201cCopy Address.\u201d Then go to your exchange where the money is being sent from and paste it there. Or you may give the address to a customer who can use it to pay you.<\/p>\n<p>When you use the wallet for the first time, you should receive a very small amount, practice sending it to another address, either within the wallet or back to the exchange, to prove that the wallet is functioning as expected.<\/p>\n<p>Once you do that, you must back up the words that you wrote down. As mentioned earlier, a single copy is not enough. Have two paper copies at least (metal is better), and keep them in two different, well-secured, locations. See \u201c<a href=\"http:\/\/armantheparman.com\/using-hwws\" target=\"_blank\" rel=\"noopener\">Using Bitcoin Hardware Wallets<\/a>\u201d for a full discussion on this.<\/p>\n<h2>Sending<\/h2>\n<figure><img decoding=\"async\" src=\"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2025\/01\/9_image11.png\" title=\"\"><\/figure>\n<p>When making a payment, you need to paste in the address you are paying to in the \u201cPay to\u201d field. Enter the amount and you can also manually adjust to the fee you want.<\/p>\n<p>The wallet cannot sign the transaction unless the ColdCard is connected. That\u2019s the job of the hardware wallet \u2013 to receive the transaction, sign it, and give it back, signed. Make sure when you sign on the device, you visually inspect the address you are paying to is the same on the device and on the computer screen, and the invoice you receive (e.g., you might have received an email to pay a certain address).<\/p>\n<p>Also pay attention that if you choose to use a coin that is larger than the payment amount, then the remainder will be sent back to one of your wallet\u2019s change addresses. Some people have not known this, and looked up their transaction on a public blockchain, and thought that some bitcoin was sent to an attacker\u2019s address, but in fact, it was their own change address.<\/p>\n<h2>Firmware<\/h2>\n<p>Installing the firmware yourself on the device is best practice, but outside the scope of this guide. <a href=\"https:\/\/coldcard.com\/docs\/upgrade#:~:text=Load%20the%20Latest%20Firmware%20on%20your%20COLDCARD&amp;text=Make%20sure%20your%20COLDCARD%20is,Select%20the%20firmware%20file.\" target=\"_blank\" rel=\"noopener\">There are instructions here<\/a> by Coinkite.<\/p>\n<h2>Conclusion<\/h2>\n<p>This article showed you how to use a ColdCard hardware wallet in a safer and more private way than advertised \u2013 but this article alone is not enough. As I said at the start, you should combine it with the information provided in \u201c<a href=\"https:\/\/armantheparman.com\/using-hwws\/\" target=\"_blank\" rel=\"noopener\">Using Bitcoin Hardware Wallets<\/a>.\u201d<\/p>\n<p><em>This is a guest post by Arman The Parman. Opinions expressed are entirely their own and do not necessarily reflect those of BTC Inc or <\/em>Bitcoin Magazine<em>.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>How to use the ColdCard hardware wallet, a popular choice amongst Bitcoiners concerned with security and privacy.<\/p>\n","protected":false},"author":2824,"featured_media":6060,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[43],"tags":[443,1692,422,2096,199,284],"class_list":{"0":"post-8706","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-guides","8":"tag-cold-storage","9":"tag-coldcard","10":"tag-feature","11":"tag-guide","12":"tag-hardware-wallets","13":"tag-self-custody"},"author_data":{"id":2824,"name":"Arman The Parman","nicename":"arman-the-parman","avatar_url":"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2024\/12\/atp2-96x96.png"},"featured_image_url":"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2024\/11\/img_6049.png","_links":{"self":[{"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/posts\/8706","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/users\/2824"}],"replies":[{"embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/comments?post=8706"}],"version-history":[{"count":0,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/posts\/8706\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/media\/6060"}],"wp:attachment":[{"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/media?parent=8706"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/categories?post=8706"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/tags?post=8706"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}