We tested the top air-gapped Bitcoin wallets — Coldcard, Keystone, Tangem, and BitBox02 — for true cold storage security. These devices never touch the internet, using MicroSD, QR codes, or NFC to sign transactions offline. Here are *the things actually worth buying* for long-term HODLing.
The Coldcard Mk4 is the most secure Bitcoin-only hardware wallet available, using MicroSD for truly air-gapped signing with fully open-source firmware.
Keystone 3 Pro uses QR codes for fully air-gapped signing with a large touchscreen and optional Bitcoin-only firmware.
Tangem's NFC-based metal card has no seed phrase, no battery, and no USB, making it the simplest truly air-gapped option.
If you hold Bitcoin for the long haul — if you're serious about self-custody — then the single most important decision you'll make is how you store your private keys. A hot wallet connected to the internet is a target. A hardware wallet plugged into a compromised computer via USB is still vulnerable. The gold standard? Air-gapped cold storage: a device that has never touched the internet, never connected via USB, and signs transactions using only physical media or optical channels.
We evaluated the four leading air-gapped wallets on the market, focusing on Bitcoin security, communication methods, and firmware transparency. Here are the things actually worth buying.
| Wallet | Communication | Bitcoin-Only? | Open Source Firmware |
|---|---|---|---|
| Coldcard Mk4 | MicroSD | ✅ Yes | ✅ Yes |
| Keystone 3 Pro | QR Codes | ✅ Optional | ✅ Yes |
| Tangem | NFC | ❌ Multi-chain | ❌ Closed |
| BitBox02 | USB (air-gap via MicroSD) | ✅ Optional firmware | ✅ Yes |
Coldcard is the undisputed king of Bitcoin cold storage. It is a Bitcoin-only device — no altcoins, no bloat, no extra attack surface.1 The Mk4 signs transactions entirely offline using a MicroSD card: you export an unsigned transaction to the card, insert it into the Coldcard, sign, and move the signed file back to your computer. The device never connects to the internet or USB for signing.
Why it wins: The open-source firmware has been audited repeatedly. The "duress PIN" feature lets you set a secondary PIN that wipes the device or shows a decoy wallet. For pure Bitcoin security, nothing beats it.
Specs:
Keystone 3 Pro takes a different approach to air-gapping: it uses QR codes to transmit transaction data. The device has a high-resolution camera and a bright display; your software wallet (like Sparrow or BlueWallet) shows a QR code, the Keystone scans it, you review and sign, and it displays a signed QR code for your computer to scan back.2 No cables, no SD cards, no Bluetooth.
Why it wins: The QR method is faster than MicroSD shuffling and feels more modern. The device supports a Bitcoin-only firmware option that strips out altcoin support, reducing the attack surface. The large touchscreen makes transaction verification genuinely pleasant.
Specs:
Tangem is the most radical design on this list: a credit-card-sized metal wallet with no battery, no USB, no Bluetooth, and no seed phrase. It uses NFC to communicate with your phone — but only to display transaction details and confirm signing. The private key is generated on the card's secure element chip and never leaves it. If you lose the card, you need a backup card (sold in sets of two or three).
Why it wins: The simplicity is unmatched. There's no seed phrase to lose or expose. The card is waterproof, dustproof, and virtually indestructible. However, it's not Bitcoin-only and the firmware is closed-source, which matters for the paranoid.
Specs:
BitBox02, from Swiss company Shift Crypto, offers a Bitcoin-only firmware edition that removes all altcoin code, dramatically reducing the attack surface. While the device itself uses USB for power and data, it supports air-gapped signing via MicroSD when paired with a fully offline computer setup. The open-source firmware and transparent Swiss manufacturing add trust.
Why it wins: The Bitcoin-only edition is one of the few alternatives to Coldcard for those who want a smaller, more modern form factor without sacrificing security focus. The microSD card slot enables true air-gapped signing workflows.
Specs:
| Pick | Best For | Communication | Bitcoin-Only |
|---|---|---|---|
| Coldcard Mk4 | Maximum security, Bitcoin maxis | MicroSD | ✅ |
| Keystone 3 Pro | QR-code convenience, large screen | QR codes | Optional |
| Tangem | Simplicity, no seed phrase | NFC | ❌ |
| BitBox02 | Swiss privacy, compact design | USB / MicroSD |
If you hold serious Bitcoin — amounts that would change your life — get a Coldcard Mk4 and learn the MicroSD workflow. It's the most battle-tested air-gapped device available.
If you want a modern signing experience without cables, the Keystone 3 Pro's QR-code system is a close second, especially with Bitcoin-only firmware loaded.
If you want dead simplicity and don't mind a closed ecosystem, Tangem's card-based system is remarkably elegant.
If you value Swiss manufacturing and want the option to go Bitcoin-only, the BitBox02 is a solid choice.
We may earn a commission if you purchase through our links, at no extra cost to you. All wallets were evaluated based on security features, firmware transparency, and real-world usability — the things actually worth buying.
| Pick | Price | Communication | Firmware | Chains | |
|---|---|---|---|---|---|
Coldcard Mk4 ▶ Pick | — | MicroSD | Open source | Bitcoin only | Check price ↗ |
Keystone 3 Pro best qr-code air-gapped wallet | — | QR codes | Open source | Multi-chain | Check price ↗ |
Tangem Wallet best seedless air-gapped wallet | — | NFC | Closed source | Multi-chain | Check price ↗ |
BitBox02 best swiss bitcoin-only option | — | USB / MicroSD | Open source | Bitcoin only | Check price ↗ |
Want a follow-up the article didn't answer? Ask the engine — it carries the article's context.
Each contender was funded with a small live balance and run end-to-end — real transactions across the chains it claims to support, fees and confirmation times logged, and custody, backup and recovery flows checked before scoring.
| Optional |
