Best COLDCARD Alternatives

COLDCARD by Coinkite is built for Bitcoin-only, air-gapped use: the Mk5 signs over microSD or NFC, the Q adds a QR scanner, and the firmware is open source. On the Mk5 the seed protection is split across two secure elements from different vendors.

In July 2026 Coinkite disclosed that a build setting introduced in 2021 had made COLDCARD generate seeds with a software random number generator instead of the hardware one. According to Coinkite, seeds created on the Mk4, Mk5 and Q carry about 72 bits of entropy instead of 128; attackers began sweeping affected wallets on 30 July 2026, and Galaxy Research confirmed more than 1,778 BTC stolen. Coinkite states the devices themselves were not hacked or remotely accessed, and current firmware is fixed.

The other reasons are practical: a colour touchscreen, pairing with a phone, or a recovery model without a written seed. None of these makes COLDCARD a poor device; they are trade-offs.

Switching devices does not fix a weak seed — moving funds to a newly generated seed does. Per Coinkite, affected seeds are those generated on Mk4/Mk5 firmware before 5.6.0, Q firmware before 1.5.0Q, Edge firmware before 6.6.0X / 6.6.0QX, and Mk2/Mk3 firmware 4.0.1–4.1.9; seeds built from 50 or more private dice rolls are not at risk from this bug. A passphrase does not make an affected seed safe. If yours is affected, generate a new seed — on updated COLDCARD firmware or on any device below — and move your funds now. Details on the COLDCARD brand page.

The table below is generated from the same verified-spec dataset used across this site: price, whether the device uses a secure element, whether it supports air-gapped/QR signing, the number of supported networks, and connection types. Ratings are formula-based, not editorial picks.

For most devices these notes are based on official documentation and published specifications. The one exception is Tangem, which we have used hands-on; where we describe hands-on impressions, that is limited to Tangem. Everything else is "according to the vendor / based on published specs."

The closest match in spirit: Bitcoin-only, open-source firmware, and air-gapped signing over QR codes, with a 3.5" colour touchscreen. It also offers NFC and Bluetooth, works with iPhone, and supports Shamir backup. At $349 (2026) it is the most expensive option here. In our ratings it scores 69/100.

The Jade Plus ($149) is Bitcoin-only, fully open source and signs air-gapped over QR with its camera, or via SD card / USB drive; it also connects over USB-C and Bluetooth and works with iPhone. It has no secure element by design: a "virtual secure element" (a blind PIN oracle you can self-host) protects the key instead. The Jade Core ($99) drops the camera and battery, so it is not air-gapped. Both score 66/100 in our ratings. Blockstream published security firmware releases in November 2025 and August 2026 after responsible disclosures; its changelog does not detail the issues.

Air-gapped over QR or microSD, with a 4" touchscreen and an optional Bitcoin-only firmware — useful if you might want other coins later. It works with iPhone and Android wallets and supports Shamir backup. Not all of its firmware is published (open source scope: partial). $149, 72/100 in our ratings. In October 2026 Keystone's online store was breached and customer order data was taken; Keystone says keys and seeds were not exposed — details on the Keystone brand page.

Fully open-source firmware, an EAL6+ certified secure element and a Bitcoin-only firmware option. They are not air-gapped: the Safe 5 ($129) signs over USB-C and does not work with iPhone; the Safe 7 ($249) adds Bluetooth and iPhone support. Safe 5 scores 78/100 and Safe 7 81/100 in our ratings — the highest here. In June 2026 Ledger's Donjon team published a laser fault-injection finding on the Safe 7's TROPIC01 chip; Trezor states keys and backup are not stored on it.

Swiss, fully open-source firmware, an EAL6+ secure chip (per BitBox), microSD backups, and a dedicated Bitcoin-only edition. It connects over USB-C and Bluetooth (iPhone supported) rather than air-gapped. $196, 75/100 in our ratings. In August 2026 BitBox fixed firmware flaws in versions 9.26.2 and 9.26.5; per BitBox the Nova was not exposed to the bootloader flaw.

A different model for people who do not want to manage a seed at all: Bitkey ($250, Bitcoin-only, open-source firmware) uses a 2-of-3 setup across the hardware device, your phone and a server run by Block, so losing any one key is recoverable. It has no discrete secure element and connects over NFC. It scores 40/100 in our ratings — the trade-offs are explained in the Bitkey review.

1. Buy the new device from the manufacturer and check the packaging on arrival.
2. Generate a new seed on the new device and write it down offline. Do not import your COLDCARD seed — if it was affected, importing carries the weakness with it.
3. Create the receiving address and verify it on the new device's screen.
4. Send a small test transaction from your current wallet; wait for it to confirm.
5. Move the rest, then retire the old seed for anything of value.

Compare further: best Bitcoin-only hardware wallets · best air-gapped wallets · Coinkite vs Foundation.

• Coinkite — COLDCARD seed generation advisory
• BleepingComputer — COLDCARD RNG flaw linked to Bitcoin theft
• Decrypt — Galaxy estimates of losses (14 Aug 2026)