Coldcard vs. Trezor vs. Bitbox02

All three are good Bitcoin hardware wallets, but they aim at different people. Trezor is the simplest and cheapest way in, the BitBox02 the calmest and best guided, Coldcard the tool for holders who want to work without cables and decide every setting themselves. If you plan multisig later, the best choice is not one of them but two or all three.

Why these three?

The big hardware wallet comparison puts nine devices side by side, from Ledger to Passport. Most Bitcoin holders in the German-speaking countries end up with three names: Trezor, BitBox and Coldcard. All three offer Bitcoin-only firmware, all three publish their code, and all three have been around for years.

This article does not go through every criterion again. It puts only these three head to head: who is behind them, what is inside, how they feel to use, and which device suits whom.

The makers

Trezor comes from SatoshiLabs in Prague, Czech Republic. The company sold the very first hardware wallet in 2014. Trezor is the largest of the three makers and offers the most models.

BitBox is developed by Shift Crypto in Zurich, Switzerland. The company builds a single device, the BitBox02, in two editions: the classic BitBox02 and the newer BitBox02 Nova.

Coldcard comes from Coinkite in Toronto, Canada. Coinkite has built only Bitcoin products for years. Coldcard was designed for Bitcoin alone from the start; there has never been a multi-coin version.

The models, as of November 2026

The euro and franc prices are those in the makers' shops for the Bitcoin-only edition. Coinkite sells in US dollars; the range runs from the sale price to the list price. A delivery from Canada adds shipping and import tax.

Many holders still own a Coldcard Mk4, the predecessor of the Mk5. At its core it does the same: two secure elements, air gap via microSD, Bitcoin only. If you have a working Mk4, there is no need to switch.

Security: what is inside the device?

Secure element

A secure element is a chip that protects secrets even when someone steals the device and attacks it with lab equipment. All current models from the three makers have one. The differences are in the design:

• Trezor Safe 3, 5 and 7 have a certified secure element. The Safe 7 adds a second, in-house security chip whose design Trezor discloses.
• BitBox02 combines a main processor with a secure element. The key is only accessible with both together and your PIN.
• Coldcard uses two secure elements from two different chip makers. An attacker would have to defeat both.

Older Trezor models without a secure element (Trezor One and Model T) could be read out in a lab in 2020 when someone had them physically in hand. The Safe series is the answer to that. A strong passphrase adds protection with all three makers, even if a chip were ever cracked.

Open source

With Trezor and BitBox, the firmware is open source under a free licence. Anyone may read it, review it and reuse it.

With Coldcard, the code is public too; you can read it and compile it yourself. The licence does not allow commercial reuse, though, so it is not fully free. For security, what matters most is that experts can review the code, and that is possible with all three.

Bitcoin-only

Coldcard can only do Bitcoin; no other firmware exists. Trezor and BitBox offer a dedicated Bitcoin-only firmware for every model, at the same price as the multi-coin version. Look for that edition when buying, or choose it during setup. Less code means fewer possible bugs and fewer updates.

Air gap: the biggest difference

This is where the three differ most clearly.

• Coldcard is built to work without a data cable. The payment travels to the device as a PSBT file on a microSD card and comes back signed. The Q also reads and shows payments as QR codes and runs on batteries. With both models you can supply power through a charge-only cable or a power bank.
• Trezor and BitBox02 need a connection to a computer or phone, via USB-C, and with the Trezor Safe 7 also via Bluetooth. Air-gapped operation is not provided for.

Whether you need an air gap at all is a question of its own. For most holders a device with a cable is secure enough, because the key never leaves the device either way. When the extra effort pays off is covered in Air-gapped wallets: who are they for?.

Passphrase and multisig

All three devices support a BIP39 passphrase and can serve as a key in a multisig wallet. In daily use, though, it feels different.

On Trezor the passphrase is easiest to find: the app asks for it when you open the wallet. Pay attention to which backup type you choose during setup. Far fewer wallets understand a SLIP39 backup than a BIP39 one.

On the BitBox02 the app guides you step by step through setup. The microSD backup is convenient, but you should still secure the 24 words on paper or metal, because a card can become unreadable after years.

Coldcard has the most special features. With a trick PIN you can, for example, set the device to show a small decoy wallet under duress or to wipe itself. Seed XOR splits the seed into several complete word lists that only together produce the real wallet. That is powerful, but each of these features is also a way to lock yourself out.

Ease of use: how does it feel?

Trezor: the middle ground

You plug in the device, open the Trezor Suite app, and it guides you through firmware, backup and PIN. Afterwards the app looks like a banking app with a balance and history. The Safe 3 with two buttons is a bit tedious for typing a passphrase; the Safe 5's touchscreen makes checking addresses more pleasant. On the iPhone you can only work in a limited way with the Safe 3 and Safe 5, fully only with the Safe 7.

BitBox02: the calmest

The BitBox02 has no buttons but touch-sensitive sliders on its sides. The BitBox app is deliberately plain and explains every step. Beginners who only hold bitcoin and want to save often reach their goal fastest with it. Advanced features such as multisig run through other wallet software such as Sparrow.

Coldcard: the most control

Coldcard has no wallet app of its own for the computer. You use separate software such as Sparrow or Electrum, export your public keys once via microSD, and afterwards sign every payment on the device. The menus are full of options and assume you are not put off by terms such as PSBT, derivation path or xpub. The Q, with its full keyboard and large screen, makes this much more pleasant than the smaller Mk5.

What does a multisig with all three cost?

Because the three devices come from different makers with different chips and different software, they are an obvious combination for a 2-of-3 multisig. How multisig works is explained in Multisig wallet.

If you keep a single wallet without multisig, you need only one device. A second, inexpensive device from another maker is still useful for testing recovery from the words once without resetting your main device.

Which device suits whom?

If you are torn between two devices, take the one whose controls look easier to you at first sight. A mistake in backing up the seed or an unnoticed typo in the passphrase costs you more than any technical difference between these three devices.

How to set up the new device and make your first withdrawal from the exchange is shown in Set up a Bitcoin wallet. Where the words belong afterwards is covered in Storing your seed phrase safely.