COLDCARD Q - Bitcoin only hardware wallet

Important: update the firmware before first use

This Coldcard Q ships with an older firmware. In July 2026 Coinkite disclosed a flaw in the seed generation of these versions. Instead of its hardware random number generator, the device fell back to a predictable software source. A seed created this way is much weaker than intended. The hardware itself is fine, and the current firmware fixes the flaw.

Why we are listing the Coldcard again, what the warning sticker and the price reduction are about, and how the update works step by step is explained in our article Coldcard is back at Copiaro.

How to set up your Coldcard Q safely:

1. Check the sealed bag for damage, set your PIN and then stay in the main menu. Do not create or import a seed yet.
2. Download the current firmware from coldcard.com/downloads onto a microSD card. As of October 2026 this is version 1.5.3Q.
3. Install the update from the microSD card and check the version number on the display afterwards.
4. Only now create your seed. The current firmware also asks you for your own randomness, for example dice rolls.

With at least 50 rolls of a real die, your rolls alone carry 128 bits of entropy. Your seed then no longer depends on the device's random number generator. The Coldcard takes the rolls straight from its keypad. Our guide Roll your own Bitcoin seed explains what matters when rolling. We sell suitable dice as casino precision dice in a set of five. A microSD card is not included. For the update the Lexar Blue Plus 32 GB is all you need.

If you already created a seed on a Coldcard with older firmware, the update does not make it safer. Our guide to the Coldcard vulnerability explains what to do next.

The Coldcard Q is the big Coldcard. It has a full keyboard, a much larger display and a QR scanner. Long passphrases are easy to type, and you read transactions straight from your wallet app by QR code. The security model is the same as on the Mk4, with two secure elements and trick PINs.

Product details

• QWERTY keyboard with 50 keys
• 2.3 inch LCD with 320 × 240 pixels
• QR scanner with LED lighting, the LEDs double as a flashlight
• runs on three AAA batteries or over USB-C
• two microSD slots and a compartment for spare cards
• tap-to-send NFC for transactions, addresses and XPUBs
• USB data and NFC can be disabled for good by cutting a circuit trace
• two secure elements from two different manufacturers
• trick PINs for duress situations, for example a PIN that opens a decoy wallet or wipes the seed
• size 120 × 75 × 22 mm, weight 93 g without batteries
• works with Sparrow, Nunchuk and other wallets, multisig included

In the box

• Coldcard Q in a sealed tamper-evident bag

Good to know: the Coldcard Q handles Bitcoin only, no other coins. Batteries and microSD cards are not included. Unlike the Mk4 and Mk5 it has no sliding cover, and it is too big for a trouser pocket.

Buy your Coldcard Q at Copiaro. Update first, seed second. Don't trust, verify.