Bitcoin Security Leader Coinkite Unveils Revolutionary Hardware Spending Policies for COLDCARD & 2FA Security Upgrade

Coinkite announced a major firmware update for its flagship COLDCARD Bitcoin hardware wallets, introducing Spending Policies – a groundbreaking feature that gives users fine-grained control over how and where Bitcoin can be spent. This release also adds support for 2FA with Google Authenticator , NFC transaction broadcasting , Smart PIN AutoBrick , and other powerful upgrades, reinforcing COLDCARD’s position as the most advanced Bitcoin-only signing device.

Hardware Wallets Get “Bank-Grade” Spending Controls

Spending Policies allow users to set custom rules for outgoing Bitcoin transactions. Options include per-transaction limits (how much Bitcoin), velocity limits (how often), address whitelist (limits where it goes), and can enforce two-factor authentication. COLDCARD enforces these rules directly on-device, acting like a personal hardware security module (HSM). If a payment fits the policy, COLDCARD will allow the user to sign as normal. If not, the device refuses – blocking unwanted spends.

This creates a seamless balance: routine payments remain easy, while larger or suspicious transactions demand stronger verification. Learn more about Spending Policies.

2FA with Authenticator – First for Hardware Wallets

In a world-first, COLDCARD now supports time-based one-time passwords (TOTP) for 2FA. Even without a hardware clock or internet connection, COLDCARD verifies codes from apps like Google Authenticator. Users can require a 6-digit code for high-security transactions, adding a “something you have” factor to the device’s “something you know” security.

“Spending Policies on Bitcoin hardware wallets are a revolutionary upgrade to self-custody. Even without a hardware clock, we figured out how COLDCARD can 2FA with Authenticator. It’s the biggest leap in transaction-level defense we’ve ever shipped,” said NVK , Co-Founder of Coinkite.