Coldcard vs Passport: Which Air-Gapped Wallet Wins in 2026?

If you're serious about Bitcoin security, you've probably narrowed your hardware wallet search to two names: Coldcard by Coinkite and Passport Core by Foundation Devices. Both are air-gapped, Bitcoin-only, and built for users who refuse to compromise on security.

But they take very different approaches to achieving the same goal. Coldcard is the veteran, trusted by cypherpunks since 2018. Passport is the newcomer that proved security doesn't have to mean ugly. This guide breaks down every meaningful difference so you can choose the one that fits your needs.

Key Takeaways

• Coldcard prioritizes raw security features and power-user flexibility
• Passport Core prioritizes user experience and design without sacrificing core security
• Both are air-gapped and Bitcoin-only, which is exactly what you want
• Coldcard uses MicroSD primarily for data transfer; Passport uses QR codes + MicroSD
• Coldcard offers more advanced security features (duress PIN, Seed XOR, countdown login)
• Passport offers a better out-of-box experience with the Envoy companion app
• Your choice depends on whether you value maximum security features or daily usability

Quick Comparison

Our Verdict

For most users, Passport Core is the better choice. The fully open-source design, QR-based workflow, excellent Envoy app, and premium build quality make it a wallet you'll actually enjoy using — and a wallet you use consistently is more secure than one that sits in a drawer.

Choose Coldcard Mk4 if you want the deepest set of security features at a lower price and are comfortable with technical interfaces. Choose the Coldcard Q if you want Coldcard's security model with QR codes and a better keyboard experience.

Now let's dig into the details.

Security Model

Coldcard

Coldcard's security architecture has been refined over multiple hardware generations. The Mk4 uses dual secure elements (two separate ATECC608B chips from different manufacturers), which means an attacker would need to compromise both chips to extract your private keys.

Key security features:

• Duress PIN and wallet. Set a secondary PIN that opens a decoy wallet with a small balance. Under coercion, hand over the duress PIN and the attacker sees a convincing but minimally funded wallet.
• Brick Me PIN. A PIN that permanently destroys the secure element. The nuclear option if someone is forcing you to unlock your wallet.
• Countdown login. Require a time delay before the device allows login, giving you time to detect tampering.
• Anti-phishing words. Two words displayed during PIN entry that only you know. If they're wrong, the device has been swapped for a fake.
• Seed XOR. Split your seed phrase across multiple Coldcards. Each holds a piece, and you need all pieces to reconstruct the full seed.
• NFC support (Mk4). Tap-to-sign with compatible wallets like Nunchuk.

Coldcard is designed for threat models where physical attacks are a concern. It's the choice of people who think seriously about adversarial scenarios.

Passport Core

Passport Core uses a single secure element (ATECC608C, the newer variant) and takes a simpler but robust approach to security.

Key security features:

• Supply chain verification. Passport's packaging includes tamper-evident seals and a verification process through the Envoy app. Scan a QR code during setup to verify your device hasn't been tampered with.
• Fully open-source hardware and firmware. Both are fully open source with permissive licenses, meaning anyone can audit the design. This is a significant trust advantage — no Commons Clause, no asterisks.
• Security light. A blue LED near the camera activates only when the secure element is in use, giving visual confirmation of genuine cryptographic operations.
• No wireless connectivity. No Bluetooth, no WiFi, no NFC. Communication is strictly QR codes and MicroSD.
• Auto-lockout. Device disables after 21 incorrect PIN attempts.

Passport's security model is less feature-rich than Coldcard's, but covers the fundamentals well. For most users, the meaningful security difference between the two is minimal.

Licensing: A Real Difference

This matters more than most people realize:

• Passport: Fully open-source hardware and firmware under permissive licenses. Anyone can audit, fork, and build on it. This is the gold standard for verifiable security.
• Coldcard: "Source-viewable" under a Commons Clause license. The code is publicly available and auditable, but cannot be commercially reused. This is not open source by the OSI (Open Source Initiative) definition.

Both approaches let you verify what's running on your device, but Passport's fully open-source model provides stronger trust guarantees and aligns better with Bitcoin's open ethos.

User Interface and Design

This is where the two wallets diverge most dramatically.

Coldcard Mk4

Coldcard has a functional, utilitarian interface. The small monochrome OLED screen displays text and simple menus. Navigation uses a numeric keypad (0-9 plus directional keys). The device looks and feels like a tool, not a consumer product.

The learning curve is real. Menu structures are deep, and some operations require navigating multiple layers of settings. If you're comfortable with command-line tools and technical interfaces, you'll feel at home. If you expect smartphone-level polish, you'll find it frustrating.

The plastic enclosure is deliberately unsexy. Coinkite's philosophy is that a hardware wallet should look boring — not like something worth stealing.

Coldcard Q ($250–360)

The Q bridges the UX gap with a full QWERTY keyboard, larger color display, and QR code scanning. Seed entry and passphrase setup become significantly smoother. Same air-gapped operation and dual secure elements as the Mk4, but meaningfully better to use day-to-day.

Passport Core (~$249)

Passport Core looks and feels like a premium device. The 1.8-inch color IPS display with Gorilla Glass protection makes every operation clearer and more intuitive. The T-9 alphanumeric keypad provides tactile physical buttons. The anodized aluminum chassis gives it the feel of a high-quality consumer device.

Setup takes about 10 minutes and the Envoy companion app walks you through each step. The replaceable Nokia BL-5C battery means you never need to plug it in during signing — and when the battery eventually dies, you swap it for a $5 replacement instead of buying a new device.

If you've avoided hardware wallets because they seem intimidating, Passport Core is designed specifically for you.

The verdict: If usability matters and you want a device you'll actually enjoy using, Passport Core wins handily. If you see bare-bones as a feature (less complexity = fewer attack surfaces), Coldcard's minimalism has merit.

Air-Gap Method: MicroSD vs QR Codes

Coldcard: MicroSD (+ NFC on Mk4, + QR on Q)

Coldcard Mk4 transfers transaction data through MicroSD cards. You export a partially signed Bitcoin transaction (PSBT) from your wallet software to a MicroSD card, insert it into the Coldcard, sign it, then move the card back to your computer. The Mk4 also supports NFC for tap-to-sign.

The Coldcard Q adds QR code scanning, bringing it closer to Passport's workflow.

Pros:

• MicroSD works reliably every time, regardless of lighting conditions
• Can transfer larger data (firmware updates, complex multisig setups)
• NFC (Mk4) offers a fast alternative for simple transactions

Cons:

• MicroSD requires physically handling a card for each transaction
• Slower workflow than QR scanning for routine transactions
• Cards can be lost or damaged

Passport Core: QR Codes + MicroSD

Passport Core uses its built-in Omnivision camera to scan QR codes displayed on your computer or phone screen, then displays a signed QR code for your software to scan back. MicroSD is available as a backup method for firmware updates and encrypted backups.

Pros:

• Faster workflow once you're used to it
• No physical media to manage for routine transactions
• Feels more seamless and modern
• MicroSD available as backup method

Cons:

• Large transactions require multiple animated QR frames, which can be finicky in poor lighting
• QR codes have data size limitations
• Camera quality and ambient lighting affect scanning speed

The verdict: QR codes feel faster and more natural for everyday use. MicroSD is more reliable for edge cases and large data. Passport's support for both methods gives it the most flexibility.

Companion Apps

Coldcard: Bring Your Own

Coldcard doesn't have a dedicated companion app. It works with multiple wallet software options: Sparrow Wallet, Electrum, Bitcoin Core, BlueWallet, Nunchuk, and others. You pick the software you prefer and pair it with the Coldcard.

This is intentional — Coinkite believes you shouldn't be locked into one ecosystem. The downside is that setup requires more steps, and the experience varies depending on which software you choose.

Passport Core: Envoy

Foundation built Envoy, a clean mobile app designed specifically for Passport. Envoy handles setup, firmware updates, transaction creation, and account management. It's polished, intuitive, and makes the Passport experience feel cohesive.

You're not locked into Envoy. Passport Core also works with Sparrow, BlueWallet, Bitcoin Core, Electrum, and Wasabi. But Envoy is good enough that most Passport users stick with it.

The verdict: If you want an integrated, polished experience, Passport Core + Envoy is excellent. If you want freedom to choose your own software stack, Coldcard's agnostic approach is preferable.

Build Quality and Hardware

Passport Core feels like a premium product. The aluminum body, Gorilla Glass screen, and replaceable battery make it the best-built air-gapped wallet available. Coldcard Mk4 feels like a security tool — functional but no-frills.

Pricing and Value

The Mk4 offers the most security features per dollar. Passport Core's premium is justified by the build quality, Envoy app, and superior daily UX. The Coldcard Q is the most expensive option but combines Coldcard's security with better usability.

All three are excellent value compared to the amount of bitcoin they protect.

Who Should Buy Which?

Choose Coldcard Mk4 If:

• You want the deepest set of security features available at the lowest price
• You're comfortable with technical interfaces and don't mind a learning curve
• Advanced features like Seed XOR, duress wallets, and countdown login matter to your threat model
• You prefer to pick your own companion software
• You want the most battle-tested air-gapped hardware wallet on the market

Read our full Coldcard Mk4 Review | Buy Coldcard

Choose Passport Core If:

• You want an air-gapped hardware wallet you'll actually enjoy using
• Setup simplicity and an integrated app experience matter to you
• You prefer QR code signing over MicroSD
• Fully open-source hardware and firmware (no asterisks) is important to you
• You want to recommend a hardware wallet to less technical friends or family
• Premium build quality matters to you

Read our full Passport Review | Buy Passport Core

Choose Coldcard Q If:

• You want Coldcard's security model with a better user experience
• You run multisig setups and want the smoothest PSBT workflow
• You want both QR code and MicroSD air-gap methods with Coldcard's dual secure elements

Read our full Coldcard Mk4 Review | Buy Coldcard Q

Can You Go Wrong?

No. Both Coldcard and Passport Core are excellent air-gapped, Bitcoin-only hardware wallets. Either one will protect your bitcoin far better than any software wallet or exchange account.

The differences are real, but they're differences of emphasis, not quality. Coldcard emphasizes security depth. Passport emphasizes usability. Both succeed at their goals.

If you're paralyzed by the choice, ask yourself one question: Am I more likely to use a device that's maximally secure but technical, or one that's slightly less feature-rich but a pleasure to use? A wallet you actually use consistently is more secure than one that sits in a drawer because the interface frustrated you.

Frequently Asked Questions

Is Passport Core as secure as Coldcard?

For the vast majority of users and threat models, yes. Both use tamper-resistant secure elements, air-gapped operation, and support passphrase protection and multisig. Coldcard adds duress wallets, Seed XOR, and countdown login — features that matter for high-value targets but are unnecessary for most people.

Is Coldcard really open source?

No. Coldcard's firmware is "source-viewable" under a Commons Clause license. The code is publicly available for anyone to audit, but it cannot be commercially reused. Passport Core is fully open source under permissive licenses — both firmware and hardware schematics.

Which is better for multisig?

Both excel at multisig. Coldcard has a slight edge with native PSBT handling and the most tested multisig implementation in the industry. Passport Core's multisig support via Envoy and Sparrow is also excellent. You can even mix Coldcard and Passport in the same multisig setup.

Can I use Passport Core without the Envoy app?

Yes. Passport Core works with Sparrow Wallet, Electrum, BlueWallet, Bitcoin Core, and Wasabi. The Envoy app is optional, just highly recommended for the smoothest experience.

What happens if the Passport battery dies?

The Passport Core uses a standard Nokia BL-5C replacement battery, which you can buy for a few dollars anywhere. Your seed phrase and keys are stored on the secure element and are not affected by battery replacement.

Which wallet should I recommend to non-technical family members?

Passport Core, without hesitation. The Envoy app guides users through setup step by step, the QR-based workflow is intuitive, and the device itself looks approachable rather than intimidating.

What's Next?

Ready to secure your bitcoin with an air-gapped wallet? Here are your next steps:

1. Read our detailed reviews of the Coldcard Mk4 and Foundation Passport for deeper analysis of each device.
2. Choose based on your priorities. Security maximalist? Coldcard. Usability first? Passport Core. Either way, you're making a great choice.
3. Set it up properly. Whichever you choose, verify the firmware before installing, back up your recovery phrase on metal, and test a recovery before loading significant funds.
4. Check our hardware wallet buying guide for a broader comparison including Trezor and Ledger.

Your bitcoin deserves better than a hot wallet. Both of these devices deliver.