Air-gapped Bitcoin hardware wallets like Coldcard, Keystone 3 Pro, and Foundation Passport sign transactions via QR codes only — private keys never touch a connected device. This guide explains how they work and when to use one.
An air-gapped Bitcoin hardware wallet never touches the internet. It never plugs into a USB port on a connected computer. It never communicates via Bluetooth or WiFi. Data moves in and out through QR codes or micro SD cards only.
For maximum security — protecting large Bitcoin positions from remote attacks — air-gapped hardware wallets represent the gold standard. This guide explains how they work, which devices qualify, and when the tradeoff in convenience is worth it.
True air-gapping means zero electronic connection to any network-connected device during normal operation. A hardware wallet that requires USB connection to sign transactions is not air-gapped — USB is a bidirectional communication channel that has been exploited in attacks.
Air-gapped signing works like this:
Your private keys never touch a connected device. An attacker who completely compromises your computer still cannot access your keys.
Coldcard from Coinkite is the definitive air-gapped Bitcoin hardware wallet. It operates via QR codes and micro SD card only — there is a USB port, but it can be permanently disabled in software. The Mk4 added dedicated QR signing support in addition to the micro SD workflow.
Key features:
The Coldcard's air-gapped workflow via Sparrow Wallet is the most battle-tested setup in the Bitcoin security community.
Keystone 3 Pro is a fully air-gapped device with a large touch screen, making it more accessible than the Coldcard's more button-navigation interface. Key features:
Keystone integrates natively with MetaMask, Sparrow, Blue Wallet, and other software wallets for the unsigned/signed QR workflow.
Foundation Devices builds the Passport series — air-gapped Bitcoin-only hardware wallets with an emphasis on open-source hardware and software.
Passport 2: QR code air-gapped signing, removable batteries (AA batteries), micro SD support, open-source. Compact, travel-friendly design.
Passport Prime: The newer flagship with improved display, fingerprint sensor option, and enhanced QR signing workflow. Premium build quality.
Foundation's full open-source approach — hardware designs, firmware, and manufacturing process documentation all public — is unusual in the hardware wallet space.
SeedSigner is not a product you buy — it is an open-source project you build from a Raspberry Pi Zero, a camera module, and a small display. Total parts cost: approximately $30-50.
Because SeedSigner generates keys in RAM only (keys are not persisted between sessions), it is stateless — there is nothing to steal from the device when not in use. You enter your seed phrase at the start of each session from your metal backup.
SeedSigner is the most extreme security option for users who want no trust in any manufacturer and are willing to do the technical work to build and verify their own device.
Air-gapped setups are appropriate for:
Large Bitcoin positions: Anyone with more than $50,000-$100,000 in Bitcoin should seriously consider air-gapped cold storage. The additional friction is worth it at this threshold.
Long-term HODLers: If you plan to hold Bitcoin for 5-10+ years, the frequency of signing transactions is low — the inconvenience of air-gapped signing is minimal compared to the security gained.
Highly targeted individuals: Public Bitcoin figures, executives at Bitcoin companies, and others who may be specifically targeted for theft benefit most from air-gapped setups.
Multisig participants: Air-gapped devices are the standard choice for keys in a multisig setup, where signing is infrequent by design.
| Aspect | Air-Gapped (Coldcard, Keystone) | USB (Ledger, Trezor) |
|---|---|---|
| Attack surface | QR/SD only | USB protocol exposed |
| Ease of use | More steps per transaction | Simpler workflow |
| Software compatibility | Sparrow, Nunchuk, Specter | Native apps, browser extensions |
| Price | $150-$250 | $80-$250 |
| Best for | Large holdings, long-term cold storage | Active use, smaller amounts |
Generate keys: Use dice rolls or the device's secure random number generator. Write the 24-word seed phrase on metal backup.
Create watch-only wallet: Import the extended public key (xpub) into Sparrow or Specter. This lets the software track your balance without touching private keys.
Receive Bitcoin: Generate receive addresses in Sparrow. Verify the address is correct by also generating it on the air-gapped device.
Sign transactions: Create transaction in Sparrow → export as QR → scan with air-gapped device → review → sign → export signed QR → broadcast from Sparrow.
Store securely: Keep the hardware device and metal seed backup in separate physical locations.
Is Ledger air-gapped? No. Ledger devices connect via USB and Bluetooth. They are not air-gapped. The Coldcard, Keystone, Foundation Passport, and SeedSigner are the primary air-gapped options.
Can I use QR codes instead of USB with Trezor? The standard Trezor Safe series requires USB. Some Trezor models support limited QR functionality but USB connection is still required for firmware updates and some operations.
Is an air-gapped wallet necessary for everyday Bitcoin use? No. Air-gapped wallets are designed for cold storage — Bitcoin you are not spending frequently. For everyday Lightning payments or regular on-chain transactions, a simpler hardware wallet or mobile wallet is more practical.
What software works with air-gapped wallets? Sparrow Wallet has the best air-gapped hardware wallet integration — supporting PSBT over QR and SD card for all major devices. Specter Desktop, Nunchuk, and Blue Wallet also support air-gapped signing.
Get our free Beginners Guide to Buying Bitcoin plus weekly insights for long-term holders.
A step-by-step guide to setting up a 2-of-3 multisig Bitcoin cold storage arrangement using Sparrow Wallet and hardware wallets — the gold standard for protecting significant Bitcoin holdings.
Air-gapped Bitcoin signing keeps your private keys permanently offline — transactions are signed with zero internet connectivity. Here's how to set up and use air-gapped cold storage.
The Coldcard Q is the premium option with a full keyboard and larger screen. The Mk4 is cheaper and more portable. Here is how to decide which Coldcard is right for your setup.