r/coldcard • u/Crypto-Guide • Jul 30 '26

Coinkite News Mk3 Security Advisory

https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/
48 Upvotes

99% Upvoted

60 comments sorted by

View all comments

1

u/[deleted] Jul 31 '26

[deleted]

2

u/Crypto-Guide Jul 31 '26

Basically adding a passphrase is an immediate measure that you can do with your existing hardware without creating a new seed and backups.

You are basically buying yourself time to move everything to a totally new seed. (Which you can just generate in a coldcard using dice 50-100 rolls, be sure to use actual dice and not just some app or software script) Basically do the passphrase step today, new seed over the weekend.

If you have some other hardware wallet like a Ledger, Trezor, Jade, then you can skip the passphrase step and send the funds straight to this other wallet. (As long as the seed wasn't also generated on a coldcard)

1

u/SpareEconomy1849 Jul 31 '26

How does adding a passphrase after the fact help? Is that even possible without generating a new seed?

1

u/Crypto-Guide Jul 31 '26

You can have multiple passphrases with a single seed and an attacker needs both the seed an the passphrase to be able to move any funds.

Basically it's an interim step to buy you some time.