The settings menu, contains a number of items which are essentially preferences.
Most people will use the Coldcard very briefly to authorize a transaction and put it away. They are not typically used for long. Therefore, we provide an "idle timeout" feature, set to a default time of four hours. You may change this to a number of different values between two minutes and eight hours, or disable the idle auto-logout function completely.
The number pad uses capacitive touch technology. From this setting menu, you may adjust the sensitivity of the touch. In warm or humid environments, or in cases where you see "phantom presses", choose "-2 Sensitive" (least sensitive). For the impatient, there is "+2 Sensitive" which feels more responsive and "quick".
The latest version of the firmware includes as many as five different levels of sensitivity. Please note that less-sensitive modes are a little slower to respond to your touch.
(new in v1.1.0)
Max Network Fee
The transaction is being signed by Coldcard typically includes a small "network fee" that goes to the miner who includes your transaction into a block. Normally, this fee is a tiny amount compared the the value of transaction, so the Coldcard will always warn if it exceeds 1% of the output value. There is also a hard limit on the fee, which defaults to 10%. If that threshold is exceeded, Coldcard will refuse to sign the transaction.
Using this new setting, you can change or remove that percentage fee limit. The 1% warning is still shown, but you will be able to approve the transaction as normal.
(new in v1.1.0)
From this menu, choose which blockchain to use. This does not affect your seed or master private key, but it does affect how we render addresses.
Change PIN Code
Different Kinds of PIN Codes
There are two "wallets" in each Coldcard, however, the primary PIN should be considered the "owner" of the Coldcard. For some security-related functions, such as firmware updates, you will need the primary PIN.
Use the Secondary PIN to store another independent seed to segregate your funds. To login with the secondary pin, after entering the PIN prefix, while looking at the anti-phising words, press 2 instead of OK.
Both the main and secondary wallets have a derived "duress" wallet. The duress wallet is intended as a personal safety feature: you should put money you are willing to lose into the duress wallet, and should you even be forced to reveal a PIN, you may provide the duress PIN in place of the "real" PIN. The Coldcard operates as normal when unlocked by the duress PIN code so that your attackers are not alerted. However, if they are technical enough, there are ways to detect the difference.
Start here to learn more about the technical details.
There is also a PIN number which we call the "brickme PIN". If that PIN code is used at any prompt, the Coldcard destroys itself. It becomes a useless brick. All the secrets (including the secondary wallet) are destroyed.
Please be careful with the brickme PIN. The destruction process is quick and irreversible. The Coldcard should be discarded as e-waste and cannot be reused.
Choose Diverse PIN Codes
Please use unique PIN codes for each feature. In theory the duress PINs (main and secondary) could be the save value, and the main and secondary PIN's could also match each other, but we do not recommend it.
Forgotten PIN Code
If you've forgotten your PIN, we cannot help you. Even if you gave us the Coldcard, and we put all our resources into it, we cannot crack or break the Coldcard to get the seed out without the PIN. Our design uses a specialized key storage chip and your wallet secret (seed) is effectively encrypted by the PIN and held in that chip.