Coldcard vs Passport: Which Air-Gapped Wallet Wins?

If you're serious about Bitcoin security, you've probably narrowed your hardware wallet search to two names: Coldcard by Coinkite and Passport by Foundation Devices. Both are air-gapped, Bitcoin-only, and built for users who refuse to compromise on security.

But they take very different approaches to achieving the same goal. Coldcard is the veteran, trusted by cypherpunks since 2018. Passport is the newcomer that proved security doesn't have to mean ugly. This guide breaks down every meaningful difference so you can choose the one that fits your needs.

Key Takeaways

• Coldcard prioritizes raw security features and power-user flexibility
• Passport prioritizes user experience and design without sacrificing core security
• Both are air-gapped and Bitcoin-only, which is exactly what you want
• Coldcard uses MicroSD for data transfer; Passport uses QR codes
• Your choice depends on whether you value maximum security features or daily usability

Quick Comparison

Security Model

Coldcard

Coldcard's security architecture has been refined over multiple hardware generations. The Mk4 uses dual secure elements (two separate ATECC608B chips), which means an attacker would need to compromise both chips to extract your private keys. This is a meaningful improvement over single-secure-element designs.

Key security features:

• Duress PIN and wallet. Set a secondary PIN that opens a decoy wallet with a small balance. Under coercion, you can hand over the duress PIN and the attacker sees a convincing but empty (or minimally funded) wallet.
• Brick Me PIN. A PIN that permanently destroys the secure element. If someone is forcing you to unlock your wallet, this is the nuclear option.
• Countdown login. Require a time delay before the device allows login, giving you time to detect tampering.
• Anti-phishing words. Two words displayed during PIN entry that only you know. If they're wrong, the device has been swapped for a fake.
• Seed XOR. Split your seed phrase across multiple Coldcards. Each one holds a piece, and you need all pieces to reconstruct the full seed.

Coldcard is designed for threat models where physical attacks are a concern. It's the choice of people who think seriously about adversarial scenarios.

Passport

Passport uses a single secure element (ATECC608B) and takes a simpler but still robust approach to security.

Key security features:

• Supply chain verification. Passport's packaging includes tamper-evident seals and a verification process through the Envoy app. You scan a QR code during setup to verify your device hasn't been tampered with.
• Open-source hardware and firmware. Both are fully open source, meaning anyone can audit the design. This is a significant trust advantage.
• Security light. A blue LED near the camera activates only when the secure element is in use, giving visual confirmation of genuine cryptographic operations.
• No wireless connectivity. No Bluetooth, no WiFi, no NFC. Communication is strictly QR codes and MicroSD.

Passport's security model is less feature-rich than Coldcard's, but it covers the fundamentals well. For most users, the meaningful security difference between the two is minimal.

User Interface and Design

This is where the two wallets diverge most dramatically.

Coldcard

Coldcard has a functional, utilitarian interface. The small monochrome OLED screen displays text and simple menus. Navigation uses a numeric keypad (0-9 plus directional keys). The device looks and feels like a tool, not a consumer product.

The learning curve is real. Menu structures are deep, and some operations require navigating multiple layers of settings. If you're comfortable with command-line tools and technical interfaces, you'll feel at home. If you expect smartphone-level polish, you'll find it frustrating.

The plastic enclosure is deliberately unsexy. Coinkite's philosophy is that a hardware wallet should look boring, not like something worth stealing.

Passport

Passport looks like a premium device. The color touchscreen (with physical navigation buttons) makes every operation clearer and more intuitive. You can see full addresses, transaction details, and QR codes at a glance.

Setup takes about 10 minutes and the Envoy companion app walks you through each step. The physical build feels solid: the metal body and rounded design give it the feel of a premium consumer device.

If you've avoided hardware wallets because they seem intimidating, Passport is designed specifically for you.

The verdict: If usability matters to you and you want a device you'll actually enjoy using, Passport wins handily. If you see bare-bones as a feature (less complexity = fewer attack surfaces), Coldcard's minimalism has merit.

Air-Gap Method: MicroSD vs QR Codes

Coldcard: MicroSD

Coldcard transfers transaction data through MicroSD cards. You export a partially signed Bitcoin transaction (PSBT) from your wallet software to a MicroSD card, insert it into the Coldcard, sign it, then move the card back to your computer.

Pros:

• Works reliably every time
• Can transfer larger data (like firmware updates)
• No camera required on the device

Cons:

• Requires physically handling a card for each transaction
• MicroSD cards can theoretically carry malware (though Coldcard validates everything)
• Slower workflow than QR scanning

Passport: QR Codes

Passport uses its built-in camera to scan QR codes displayed on your computer or phone screen, then displays a signed QR code for your software to scan back.

Pros:

• Faster workflow once you're used to it
• No physical media to manage
• Feels more seamless and modern
• Also supports MicroSD as a backup method

Cons:

• Large transactions require multiple animated QR frames, which can be finicky
• Camera quality matters (Passport's is good, but lighting conditions affect scanning)
• QR codes have data size limitations

The verdict: QR codes feel faster and more natural for everyday use. MicroSD is more reliable for edge cases and large data transfers. Passport's support for both methods gives it flexibility.

Companion Apps

Coldcard

Coldcard doesn't have a dedicated companion app. It works with multiple wallet software options: Sparrow Wallet, Electrum, Bitcoin Core, Blue Wallet, Nunchuk, and others. You pick the software you prefer and pair it with the Coldcard.

This is intentional. Coinkite believes you shouldn't be locked into one ecosystem. The downside is that setup requires more steps, and the experience varies depending on which software you choose.

Passport: Envoy

Foundation built Envoy, a clean mobile app designed specifically for Passport. Envoy handles setup, firmware updates, transaction creation, and account management. It's polished, intuitive, and makes the Passport experience feel cohesive.

You're not locked into Envoy. Passport also works with Sparrow, Blue Wallet, and other PSBT-compatible wallets. But Envoy is good enough that most Passport users stick with it.

The verdict: If you want an integrated, opinionated experience, Passport + Envoy is excellent. If you want freedom to choose your own software stack, Coldcard's agnostic approach is preferable.

Build Quality and Hardware

Coldcard Mk4: Plastic enclosure, compact form factor, numeric keypad, small OLED screen. It's light, portable, and deliberately unassuming. No battery; it powers via USB-C (you can use a battery pack for true air-gapped operation).

Passport: Metal and plastic body, larger form factor, color screen with physical buttons plus touch. Built-in rechargeable battery means you never need to plug it in during signing. The camera is integrated into the top of the device.

Passport feels like a premium product. Coldcard feels like a security tool. Both are built to last, but they serve different aesthetic sensibilities.

Pricing and Value

Coldcard Mk4: ~$150 Passport: ~$200

The $50 difference buys you Passport's screen, battery, camera, and build quality. Whether that's worth it depends on your priorities. Coldcard packs more advanced security features at a lower price. Passport delivers a better day-to-day experience at a modest premium.

Both are excellent value compared to the amount of bitcoin they protect.

Who Should Buy Which?

Choose Coldcard If:

• You want the deepest set of security features available
• You're comfortable with technical interfaces and don't mind a learning curve
• Advanced features like Seed XOR, duress wallets, and countdown login matter to your threat model
• You prefer to pick your own companion software
• You want the most battle-tested hardware wallet on the market

Check out our full Coldcard Mk4 Review | Buy Coldcard

Choose Passport If:

• You want a hardware wallet you'll actually enjoy using
• Setup simplicity and an integrated app experience matter to you
• You prefer QR code signing over MicroSD
• Fully open-source hardware is important to you
• You want to recommend a hardware wallet to less technical friends or family

Check out our full Passport Review | Buy Passport

Can You Go Wrong?

Honestly? No. Both Coldcard and Passport are excellent air-gapped, Bitcoin-only hardware wallets. Either one will protect your bitcoin far better than a software wallet or exchange account.

The differences are real, but they're differences of emphasis, not quality. Coldcard emphasizes security depth. Passport emphasizes usability. Both succeed at their goals.

If you're paralyzed by the choice, ask yourself one question: Am I more likely to use a device that's maximally secure but technical, or one that's slightly less feature-rich but a pleasure to use? A wallet you actually use consistently is more secure than one that sits in a drawer because the interface frustrated you.

What's Next?

Ready to secure your bitcoin with an air-gapped wallet? Here are your next steps:

1. Read our detailed reviews of the Coldcard Mk4 and Foundation Passport for deeper analysis of each device.
2. Choose based on your priorities. Security maximalist? Coldcard. Usability first? Passport. Either way, you're making a great choice.
3. Set it up properly. Whichever you choose, verify the software before installing, back up your recovery phrase on metal, and test a recovery before loading significant funds.

Your bitcoin deserves better than a hot wallet. Both of these devices deliver.