For anyone holding keys to serious Bitcoin, the problem is old. Travel, emergencies, or treasury decisions land while your hardware wallet sits at home. Before now, the paranoid path was Tails OS, PGP key generation, Tor routing—a setup that took hours and demanded technical fluency most operators lacked.
Coinkite's Coldcard Q shipped with a simpler answer one year ago: Key Teleport. The feature splits key transmission across encrypted QR codes and separate PIN channels, designed so an attacker would need to compromise two different communication lines at once to intercept anything. The source material does not specify how many users have adopted it, but the mechanics are tight enough that even stress-testing against Anthropic's Opus 4.8 AI model—which was fed encrypted data, one PIN, then both PINs—could not crack the output.
The hardware itself does the heavy lifting. Coldcard Q packs dual secure elements from different chip makers, plus an open-source MCU, meaning an attacker with physical access would need to compromise multiple components in tandem. A 3.2-inch LCD displays BBQr codes, a standard Coinkite developed that backs larger messages than typical QR codes without external dependencies. A dedicated scanner with a red strobe light and optional flash handles reading in poor lighting, solving the camera-quality and screen-resolution variance that trips up ordinary payment QR workflows.
How the split works in practice
A recipient generates an ephemeral key pair using the secp256k1 curve for each transfer, then encrypts their public key with an 8-digit PIN via AES-256-CTR. That encrypted key appears as a QR code on their screen. They send the QR via one channel—a Zoom call, for instance—and the PIN separately over Signal or another service. The sender scans the QR, enters the PIN, and derives a shared session key using ECDH with the receiver's public key and ephemeral keypair.
Then the sender picks what data to move: a quick text message, seed words, or a full Coldcard backup with metadata and custom settings. That data gets encrypted once, then encrypted again with a fresh PIN. Another QR code, another separate PIN channel. The receiver scans, enters the second PIN, and gains access. Both devices stay entirely airgapped throughout, powered by AAA batteries, using only QR code and optional NFC links.
What the test showed
When Bitcoin Magazine fed Opus 4.8 the encrypted blurb alone, the model stalled, saying information was missing. Given one PIN, it found that insufficient. Given both, it attempted brute force but acknowledged success would only work if ephemeral keys were generated with intentionally weak entropy. The model ultimately conceded the data was securely sealed. The test does not represent production-grade cryptanalysis, but it does confirm the protocol resists casual or semi-automated attack even when an observer holds partial credentials.
The friction that once required Tails boots and PGP key ceremonies now fits into a QR scan. Whether that shift meaningfully increases key mobility for Bitcoin treasuries depends on adoption—the source material does not report uptake figures—but the design removes a major friction point that kept most operators tethered to their hardware wallets or forced into riskier shortcuts.