Coldcard Q User Guide: Complete Setup and Getting Started

Have you just gotten a Coldcard Q and aren’t quite sure where to start? Or are you considering making the leap to serious Bitcoin security and want to know how this device works before you buy it? Then this coldcard Q user guide is exactly what you’re looking for. Because the Coldcard Q isn’t a toy. It’s the most robust hardware wallet you can buy for your Bitcoin, and it deserves a thorough setup process.

This guide walks you through the entire setup process step by step. From unboxing to your first Bitcoin transaction. It includes how to set up your PIN correctly, how to securely generate and store your seed phrase, and how to receive and send Bitcoin via PSBT. No false reassurances, no skipping steps.

What is the Coldcard Q?

The Coldcard Q is a Bitcoin-only hardware wallet from Coinkite, a Canadian company that has been setting the standard for Bitcoin security for years. The “Q” in the name stands for QWERTY: the built-in full keyboard is exactly what sets this device apart from its predecessor, the Coldcard MK4 Installation Guide. On the MK4 you worked with a numpad. On the Q you have a full keyboard, which makes PIN entry, BIP39 passphrases, and daily use a lot more comfortable.

In addition to the QWERTY keyboard, the Coldcard Q has a built-in QR code scanner and an NFC chip. This enables fully air-gapped operation: signing transactions without ever connecting a USB cable, using only QR codes or a microSD card. For those serious about self-custody of Bitcoin, this isn’t just an extra feature, it’s the standard operating procedure. The Coldcard Q supports only Bitcoin. No other cryptocurrencies, no compromises. That’s a deliberate choice by Coinkite and one reason why serious Bitcoin users have trusted the Coldcard for years.

BIP39 is the standard for generating seed phrases: a sequence of 24 English words that represent your entire Bitcoin wallet. PSBT (Partially Signed Bitcoin Transaction) is the protocol that the Coldcard Q uses to sign transactions without your private keys ever leaving the device.

Package Contents

The Coldcard Q box contains the device itself, a microSD card for backups and firmware updates, and a USB-C cable. You’ll also find a paper card for your seed phrase backup, which is handy for jotting down the 24 words right away. Upon receipt, always check first to make sure the packaging is undamaged and the seal is intact. If you have any doubts about the integrity of the packaging, contact the supplier immediately before powering on the device. This may sound excessive, but it’s exactly how you should handle a hardware wallet.

A practical tip: keep the original box and all accessories. And the microSD card in the box is not for personal files. That is exclusively for the Coldcard itself.

Initial startup and configuration

Connect the Coldcard Q to a power source via USB-C, or run it on batteries if you prefer to start up in a fully air-gapped state. The Coldcard Q does not have a built-in battery: it runs on three AAA batteries. Always replace all three at the same time; rechargeable NiMH batteries are also suitable. When connected via USB-C, the device runs on an external power source without using any batteries.

When you first start up the device, it will ask you to set a new PIN. This is the most critical part of the entire setup process, so take your time. The PIN consists of two parts. The first part displays two anti-phishing words that are unique to your device, combined with your initial PIN sequence. Write down those words and memorize them. Every time you start up the Coldcard Q and enter the first part of your PIN, these two words will appear on the screen. If they aren’t there, or if they’re different from what you know, you’re using a fake Coldcard. This is how Coinkite makes phishing attacks detectable to the end user.

Set a strong PIN: at least 6 digits per part. Write the complete PIN on paper and store it in a secure location, separate from your seed phrase. You will need your PIN for every session. If you lose the PIN and cannot retrieve it, the device will be blocked. There is no “I forgot my PIN” button.

Create and save seed phrase

Check your firmware version first

Before you create a seed, your device must be on version 1.5.0Q or newer (or 6.6.0QX if you're using Edge). On older versions, the Coldcard generates a seed that is weaker than intended, and this cannot be fixed afterward.

You can find the version on the device under Advanced/Tools, Upgrade, Show Version. If it shows an older version, please update first. The steps for doing so can be found later in this guide.

After configuring the PIN, it’s time for the seed phrase. The Coldcard Q generates a 24-word BIP39 seed phrase. These are 24 common English words that represent full access to your Bitcoin. The hardware device itself is not the vault, those 24 words are the vault. The device is merely the interface.

Write down the 24 words in the correct order on the paper card provided or on a separate sheet of paper. Use a pen, not a pencil. Take your time, in an environment free of distractions and without a camera nearby. Check each word twice. After you’ve written them down, Coldcard will ask you to re-enter a few words for verification. This way, you can be sure you’ve written the words down correctly.

What you should never do: Take a photo of your seed phrase, save it digitally, type it into a computer, store it in a password manager, or put it somewhere in the cloud. Someday. If someone else has your 24 words, they’ll have unlimited access to all your Bitcoin. Completely without leaving a trace. Without exception, with no turning back.

Do you want to take it a step further? Then a steel seed phrase backup is worth considering alongside the paper backup. Paper burns, gets wet, wears out. Steel does not.

Add your own randomness with dice (recommended)

The Coldcard generates a random seed by itself, and on updated firmware that is sufficient. Still, we recommend adding your own randomness, quite literally by rolling dice.

Why: when your own dice are involved, you no longer depend entirely on the device's random number generator. In the July 2026 incident, that turned out to be exactly what made the difference. People who had used dice were not affected.

This is how you do it:

1. When creating the seed, choose the dice option instead of the default option.
2. Roll an ordinary die and enter every roll. At least 50 rolls, and roll every single one of them. Half measures do not count.
3. Do this alone, with no cameras nearby and nobody watching.

It takes you a few minutes and it is the best thing you can do to be independent of manufacturer errors.

Receiving Bitcoin on your Coldcard Q

To receive Bitcoin, you need a software wallet connected to the Coldcard Q. Sparrow Wallet is the most commonly used option for desktop use and works exceptionally well with the Coldcard. The connection is established via a “watch-only” setup: you export the public key information from the Coldcard Q to Sparrow, so that Sparrow can generate addresses and view your balance without the private keys ever leaving the Coldcard.

The steps are simple. Export your wallet information (the wallet export file containing your xpub) from the Coldcard Q to Sparrow via a microSD card or using a QR code with the built-in scanner. Import this file into Sparrow. Sparrow will now generate receiving addresses linked to your keys. Send Bitcoin to one of those addresses, and it will appear in your Sparrow wallet. Sparrow is the “viewer.” The Coldcard is the “signer.” This distinction is important for the next step.

The Coldcard itself does not need to be online to receive Bitcoin. That is handled entirely by Sparrow. The device is only needed when you want to send a message.

Sending Bitcoin: Step by Step

Sending Bitcoin via the Coldcard Q uses PSBT (Partially Signed Bitcoin Transaction). A PSBT is a transaction file created by the software wallet and then signed by the hardware wallet, without the private keys ever leaving the secure chip. The workflow becomes clear once you’ve done it.

Step 1: Create a transaction in Sparrow Wallet. Enter the recipient's address and the amount. Sparrow will generate a PSBT file.

Step 2: Export the PSBT to the Coldcard Q. You can do this via microSD card, USB, or QR code using the built-in scanner. The QR option is the most air-gapped method.

Step 3: The Coldcard Q screen displays the transaction details: the recipient's address, the amount, and the transaction fees. Is everything correct? Enter your PIN and sign the transaction.

Step 4: Export the signed PSBT back to Sparrow via microSD, USB, or QR code. Sparrow sends the signed transaction to the Bitcoin network.

This is the most secure way to send Bitcoin available to consumers. Your private keys never leave the device.

Advanced features: multisig, NFC and BIP39 passphrase

The Coldcard Q isn't just a device for beginners. For users who want to take it a step further, there are advanced features that take security to the next level.

Multisig is a setup that requires multiple keys to sign a transaction. Think of a 2-of-3 configuration: you need two out of three hardware wallets to send a Bitcoin. This also protects you if a device is lost or stolen. The Coldcard Q supports multisig setups and works in conjunction with other Coldcard devices or other compatible signers. For larger amounts, this is the structure that serious Bitcoin users choose.

NFC Enables wireless communication with a compatible authentication app on your phone. You keep the Coldcard Q near your phone, and communication takes place wirelessly. Convenient for anyone who wants to manage Bitcoin on the go without compromising the security of cold storage.

BIP39 passphrase adds an extra word or phrase to your 24-word seed phrase, generating a completely different wallet on the same device. Useful as an extra security layer or as a plausible deniability wallet. Set your passphrase via the menu. Store the passphrase separately from your seed phrase, in a different physical location. The QWERTY keyboard of the Q makes setting up a long passphrase a lot more comfortable than the numpad of the MK4.

Pay attention to passphrases

No check whatsoever is performed on your passphrase. Elke A passphrase opens a valid wallet, even one with a typo. You won't get an error message, you just get a different, empty wallet. Therefore, always check the fingerprint before sending anything to it.

Never let an AI think of or check your passphrase. Choose six random words yourself. A passphrase generated by a language model or typed somewhere at some point is no longer a secret.

If you lose your passphrase, your bitcoin is gone. Your 24 words alone won't be enough.

Frequently asked questions

What is the difference between the Coldcard Q and the Coldcard MK4?

The Coldcard Q features a QWERTY keyboard, a built-in QR code scanner, NFC, and a larger screen. The MK4 uses a numeric keypad. For everyday use and for functions like passphrases, the Q is much more comfortable. Want to know how to set up an MK4? Then read our Coldcard MK4 Installation Guide.

Is the Coldcard Q suitable for beginners?

Yes, but take your time with the setup. The Coldcard Q is designed for people who take Bitcoin seriously. Rushing is your biggest enemy with a hardware wallet. The QWERTY keyboard and QR code scanner make the Q more accessible than previous Coldcard generations.

Do I need a computer to use the Coldcard Q?

You'll need a computer for the initial setup and Sparrow Wallet integration. Once setup is complete, you can use the Coldcard Q in a fully air-gapped mode via microSD or QR code, without a direct connection to a computer.

What if I forget my PIN?

The Coldcard Q permanently self-destructs after exactly 13 incorrect PIN attempts. Starting with the third incorrect attempt, a warning will appear showing the number of attempts remaining. There is no factory reset: recovery is only possible using your seed phrase on a new BIP39-compatible device.

What if I lose the Coldcard Q or it gets stolen?

Then you restore your wallet using the seed phrase on a new BIP39-compatible device. The hardware is replaceable. The seed phrase is not. This is why securely storing those 24 words is the most important part of the setup.

Does Coldcard Q support other cryptocurrencies?

No. Bitcoin only. That's Coinkite's standard. Crypto is noise.

How do I update the firmware on the Coldcard Q?

First, check your current version via Advanced/Tools > Upgrade Firmware > Show Version. Then download the latest .dfu file from coldcard.com/downloads/q1 and copy it to a microSD card (FAT32, max 32 GB). On the Coldcard Q, select Advanced/Tools > Upgrade Firmware > From MicroSD, choose the file, and confirm. The red LED will remain on during verification: do not turn off the device. After the restart, enter your PIN to unlock it. Optional: Verify the GPG signature before installation by following the instructions on coldcard.com.

Download firmware only from coldcard.com, and go there by typing the address directly into your browser. Never click on a firmware link in an email, not even in an email that appears to be from us. For the Coldcard Q, you need at least version 1.5.0Q necessary.

Ready for the next step?

The Coldcard Q is the best Bitcoin hardware wallet I know. That might sound like a sales pitch. It is a conclusion after years of testing miners and hardware wallets. The QWERTY keyboard, the QR code scanner and the air-gapped workflow make it not only safer but also more user-friendly than what came before.

"Not your keys, not your coins." That's not just a slogan. That's just how it works. And the Coldcard Q is the most direct way to make sure your keys are truly yours.

1 bitcoin is still 1 bitcoin. Make sure that bitcoin is really yours.

Ready for the next step? Check out the Coldcard Q in our store.

P.S. I test miners and hardware wallets before they end up on the shelf. That is the difference between a webshop that resells items and one that recommends them because they have passed the test. Questions about the setup? Reach us via the contact page or WhatsApp.