Coldcard Q Review

The Coldcard Q scores 7.6 out of 10 in our hardware wallet ratings, rescored from current evidence on 1 November 2026. The basis is desk research of the Coldcard Q page and documentation, Coinkite's store and security status page, and the Coldcard/firmware repository on GitHub. We did not test a device. The Q takes full marks on three criteria: its two-vendor secure elements, its inspectable firmware and its range of air-gapped signing paths. A $369 list price and Bitcoin-only support pull the average down.

How the Coldcard Q scores in hardware wallets

Five criteria apply in this category. Each is marked 0 to 10 and carries equal weight, as described in our ratings methodology.

The overall score is a plain average: (4 + 10 + 10 + 10 + 4) / 5 = 38 / 5 = 7.6.

Change from the previous scoring: price and value fell from 5 to 4. The July review used a $289 list price. Coinkite's store now lists the Q at $369, and the methodology scores the list price, not a sale price. The category's band for list prices above $300 is 4, and the $319 sale price would fall in the same band. The other four marks are unchanged, and the overall score moves from 7.8 to 7.6.

Strongest criteria: chips, code and signing paths

Air-gap & verification (10)

The Q offers the most ways in the category to move a transaction without a data cable. It can scan a partially signed Bitcoin transaction (PSBT) as a QR code and display the signed result as another one. It can read an unsigned file from one microSD card and write the signed file to a second. NFC and USB-C are there as well. Because it can run on three AAA batteries, a signing session needs no cable of any kind. The device shows the outputs for checking before it signs.

Secure element (10)

Coinkite puts the master seed behind two secure elements from different manufacturers, a Microchip ATECC608 and a Maxim DS28C36B, so that a flaw in one vendor's part is not enough on its own. Neither chip is quoted with a Common Criteria level. The methodology credits independent multi-chip designs as such, which is why the Q ranks above the single certified chips at 9.

Open source (10)

The firmware repository describes a reproducible build. You check out a release tag, build it in Docker with the Q1 makefile and compare the bytes with the published file. The repository's hardware folder also includes a schematic and a bill of materials for the Q board. The licence is MIT with the Commons Clause, which allows reading, building and modifying the code but not selling it. The criterion scores inspectability, not commercial reuse.

Weakest criteria: price and scope

Price & value (4): a measured deficiency

At $369 list, the Q is the most expensive device in the category, more than twice the Keystone 3 Pro's $149. Batteries and a USB cable are extra. Coinkite does offer a 5% discount for paying in on-chain bitcoin with a store code. Scoring follows the list price, so the discount does not change the mark.

Asset coverage (4): by design

The Q signs only Bitcoin transactions. Coinkite presents this as a deliberate choice to keep the attack surface small, and the methodology scores Bitcoin-only devices lower by definition. Some features, including Taproot and Miniscript, need the separate Edge firmware track, according to Coinkite's comparison page.

What the score does not cover

No criterion scores incident history. That leaves out the July 2026 seed-generation incident, which Coinkite's security status page (updated 1 October 2026) says led to stolen funds after attackers regenerated affected keys offline. Coinkite also says devices were not remotely accessed. For Q owners, Coinkite states:

• Seeds generated on the Q before the fixed releases are covered by the advisory.
• The minimum fixed firmware is 1.5.0Q on the standard track or 6.6.0QX on Edge. The recommended standard release is 1.5.3Q.
• Updating the firmware does not repair an existing seed. Affected seeds must be replaced and the funds moved.
• A seed that included at least 50 fair, private, unrecorded dice rolls is treated as having enough added entropy, though Coinkite advises migrating when in doubt.

The secure element mark covers the chips that store the seed, not how the seed was generated, so it is unchanged. Readers should weigh the incident separately, and our guide to backing up a seed phrase covers the new backup a migration requires. Size, keyboard feel and battery life were not assessed.

Coldcard Q vs the closest rated peers

The Keystone 3 Pro matches the Q on all three security criteria and finishes 2.0 points ahead because of price and asset coverage. The Coldcard Mk5 shares the Q's chips and firmware. It is $100 cheaper at list, but its lack of a QR camera costs it two air-gap points, so it scores 0.2 lower overall.

Who it suits

On the scored evidence, the Q fits Bitcoin-only holders who want two independent secure elements, reproducible firmware and QR or dual-microSD signing with no cable. A full keyboard for long passphrases is part of that design. The Q is a poor fit on price for anyone who only needs a basic signer, and it cannot hold assets other than bitcoin.