Air-gapped Bitcoin signing keeps your private keys permanently offline — transactions are signed with zero internet connectivity. Here's how to set up and use air-gapped cold storage.
An air-gapped hardware wallet never connects to the internet — not via USB, Bluetooth, or WiFi. Transactions are moved in and out using QR codes or microSD cards. This is the highest security level for cold storage Bitcoin.
If you hold significant Bitcoin, understanding air-gapped signing is essential.
Standard hardware wallets (Trezor, Ledger) connect to a computer via USB to sign transactions. The computer broadcasts the signed transaction to the Bitcoin network. This workflow is secure — but the USB connection is still a potential attack surface.
Air-gapped signing eliminates the physical connection entirely:
The private keys exist in a device that has never touched the internet — and never will.
The Coldcard Mk4 is the gold standard for air-gapped Bitcoin signing. Its microSD-based transaction workflow is battle-tested and widely supported.
Air-gap method: microSD card (or NFC for PSBT transfer with certain companion apps)
Workflow:
Coldcard-specific security features:
SeedSigner is a DIY air-gapped signer built on Raspberry Pi Zero. No persistent storage — your seed phrase is entered each session via BIP39 word selection. The device holds nothing when powered off.
Air-gap method: QR codes (display and camera)
Workflow:
Best for: Maximum security (stateless), technical users, airgap purists.
The Foundation Passport supports both QR and microSD air-gap workflows. Open-source firmware auditable by anyone.
Air-gap method: QR codes and microSD
Workflow: Similar to Coldcard, with better QR workflow that many users find more elegant than microSD.
The Keystone 3 Pro is air-gapped by design (no USB connection for signing). Uses QR codes exclusively.
Air-gap method: QR codes only
Best for: Users who prefer the simplicity of QR-only workflow.
Your air-gapped device needs a companion "watch-only" wallet on your computer — a wallet that knows your public keys (so it can generate addresses and build transactions) but never has access to your private keys.
Sparrow Wallet: The best desktop companion for air-gapped wallets. Natively supports PSBT export/import for Coldcard (microSD) and QR-based signers (SeedSigner, Passport, Keystone). Free, open source.
Specter Desktop: Another strong option, particularly well-suited for multisig setups with multiple air-gapped signers.
BlueWallet: Mobile companion for QR-based air-gapped wallets.
Air-gapped signing is built on PSBT — Partially Signed Bitcoin Transactions (BIP 174). A PSBT is a standardized format for transactions in progress:
PSBT allows transactions to be passed between different software for different purposes — building, signing, and broadcasting can all happen on different devices.
Using Coldcard Mk4 + Sparrow Wallet + microSD:
Initial setup:
Making a transaction:
Air-gapped signing becomes even more powerful in multisig configurations. A 2-of-3 multisig with all three keys air-gapped means:
This is how serious Bitcoin custody works at scale. Services like Casa and Unchained Capital build their collaborative custody products on this foundation.
Using a compromised computer for the watch-only wallet: The watch-only wallet doesn't have your private keys, but it does generate transaction details. A compromised watch-only wallet could substitute a different recipient address. Always verify destination addresses on the air-gapped device's display before signing.
Using the air-gapped device on a networked computer: If you temporarily connect your air-gapped device to a computer with internet (e.g., to update firmware), you've broken the air gap. Use a dedicated offline computer for firmware updates if possible.
Not verifying transaction details: The entire point of the hardware wallet display is for you to verify the transaction before signing. Don't just press confirm — read the destination address and amount carefully.
Losing microSD data: Handle microSD cards carefully. Use high-quality cards from reputable manufacturers. The data on them (PSBT files) is temporary but their loss can interrupt your workflow.
Yes, but marginally for most users. Standard hardware wallet + USB is already very secure — the private key never leaves the device. Air-gapped signing eliminates the USB attack surface (firmware exploit via USB) and provides even stronger guarantees for high-value holdings.
Sparrow Wallet (best for microSD/PSBT workflows), Specter Desktop (best for multisig), and BlueWallet (mobile) are the primary options. All support the PSBT standard.
Trezor and Ledger are primarily USB-based, though Trezor has limited QR-based functionality. For dedicated air-gap workflows, Coldcard, Foundation Passport, SeedSigner, and Keystone are better choices.
Coldcard: firmware updates via microSD (download on an internet-connected machine, verify the hash, transfer to microSD, install). Foundation Passport: similar microSD-based update. This is the correct way to update without breaking the air gap.
Explore air-gapped hardware wallets in our Cold Storage Directory. See also: Coldcard Mk4 Review and Bitcoin Multisig Cold Storage Setup.
Get our free Beginners Guide to Buying Bitcoin plus weekly insights for long-term holders.
A step-by-step guide to setting up a 2-of-3 multisig Bitcoin cold storage arrangement using Sparrow Wallet and hardware wallets — the gold standard for protecting significant Bitcoin holdings.
Air-gapped Bitcoin hardware wallets like Coldcard, Keystone 3 Pro, and Foundation Passport sign transactions via QR codes only — private keys never touch a connected device. This guide explains how they work and when to use one.
The Coldcard Q is the premium option with a full keyboard and larger screen. The Mk4 is cheaper and more portable. Here is how to decide which Coldcard is right for your setup.