Guide
Air-Gapped Bitcoin Signing Guide: PSBT Workflows Explained
Learn how to sign bitcoin transactions offline using PSBT, when air-gapped workflows are worth the extra effort, and what mistakes to avoid when setting one up.
What is Air-Gapped Bitcoin Signing?
Air-gapped signing means keeping the signing keys away from your internet-connected machine and moving transactions between devices for approval. It is designed to reduce exposure to malware and remote compromise, not to remove all risk from the workflow.
Why people use air-gapped workflows
- Better separation - Keys stay away from your everyday internet-connected machine
- Lower remote attack exposure - The signing step is isolated from the network
- Clearer review points - You can inspect the transaction before final approval
- Useful for higher-consequence transactions - Especially when ordinary wallet flows feel too exposed
Air-gapped signing uses PSBT (Partially Signed Bitcoin Transaction) files to coordinate between your online transaction preparation and offline signing. The process involves creating a transaction on an internet-connected computer, then transferring the unsigned PSBT to an air-gapped device for signing.
Understanding PSBT
PSBT (Partially Signed Bitcoin Transaction) is a Bitcoin Improvement Proposal (BIP 174) that enables secure, interoperable transaction signing across different devices and software.
How PSBT Works
Create
Build transaction on online computer
Export
Save as PSBT file
Sign
Sign on air-gapped device
Broadcast
Send signed TX to network
PSBT Benefits
- Interoperability - Works across different wallets and hardware
- Partial signing - Enables multisig and complex signing workflows
- Human readable - Can be inspected before signing
- Privacy focused - No private key data in the file
Why Air-Gapped Signing Matters
Air-gapped signing can be worthwhile when a normal hardware wallet workflow still feels too exposed for the amount at risk. It is not mandatory for every Bitcoiner, and a sloppy air-gapped setup can still fail.
Security Threats Addressed
Malware & Keyloggers
Even if the hardware wallet holds the key, the online computer can still try to mislead you or interfere with the workflow. Air-gapped signing reduces that exposure but does not replace careful verification.
Supply Chain Attacks
If you do not trust the surrounding environment, keeping the signing step isolated can limit some downstream damage. It does not solve every supply-chain problem by itself.
Remote Attacks
Keeping the signing step offline removes an entire category of remote attacks. You still need to verify devices, files, and transaction details carefully.
Bottom line: Air-gapped signing is a specialized workflow, not a universal requirement. Use it when the amount, threat model, and your own discipline justify the extra complexity.
Top Hardware Wallets for Air-Gapped Signing
Ledger Nano X
Premium hardware wallet with Bluetooth connectivity and support for 5000+ cryptocurrencies.
Price
$1492 year warranty
Trezor Model T
Premium open-source hardware wallet with touchscreen and Shamir backup support.
Price
$2192 year warranty
Coldcard Mk4
Bitcoin-only hardware wallet with dual secure elements and advanced air-gapped features.
Price
$1481 year warranty
Hardware Requirements
Setting up air-gapped signing requires specific hardware that supports PSBT and can operate without internet connectivity.
Essential Components
Hardware Wallet
PSBT-compatible device for offline signing
- • Coldcard Mk4
- • Ledger Nano S/X
- • Trezor Model T
- • Foundation Passport
Air-Gapped Computer
Dedicated offline computer for signing
- • Kept offline for signing duties
- • Clean OS installation
- • MicroSD card reader
- • USB ports for hardware wallet
Optional but Recommended
- MicroSD cards - For transferring PSBT files securely
- QR code scanner - Alternative to SD cards for some wallets
- Printer - For printing transaction details for verification
Setting Up Air-Gapped Signing
Proper setup matters as much as the signing model itself. Follow these steps carefully so the offline device stays understandable, recoverable, and separate from your online workflow.
Step-by-Step Setup Guide
- Prepare air-gapped computer
Start with a dedicated machine and a clean OS installation. If the machine has been online before, do not treat it as truly air-gapped.
- Install signing software
Install wallet software that supports PSBT signing. For hardware wallets, use the manufacturer's offline tools.
- Set up hardware wallet
Initialize your hardware wallet on the air-gapped computer. Generate and backup your seed phrase securely.
- Test the setup
Create a test PSBT with a small amount and verify the entire signing workflow works correctly.
- Establish transfer protocols
Set up secure methods for transferring PSBT files between your online and offline computers.
Critical Security Notes
- Do not reconnect a machine you want to keep air-gapped
- Only use software from official sources on the air-gapped machine
- Verify all file checksums before transferring data
- Keep detailed logs of all transactions signed offline
PSBT Signing Workflow
The PSBT workflow separates transaction creation from signing, enabling secure air-gapped operations. Here's how it works in practice.
Complete Workflow Example
Sending Bitcoin with Air-Gapped Signing
Specify recipient address and amount
Save to MicroSD card or USB drive
Verify transaction details on screen
Confirm details on hardware wallet screen
Save completed transaction to storage medium
Send signed transaction to Bitcoin network
Verification Steps
Always verify transaction details before signing:
- • Recipient address matches your intended destination
- • Amount is correct, including fees
- • Transaction inputs come from your wallet
- • No unexpected outputs or change addresses appear
Software Tools & Wallets
Several software tools support PSBT and air-gapped signing. Choose based on your hardware wallet and comfort level.
Recommended Software
Sparrow Wallet
Professional Bitcoin wallet with excellent PSBT support and air-gapping features.
- • Native PSBT support
- • Hardware wallet integration
- • Transaction analysis tools
- • Free and open-source
Electrum
Lightweight wallet with strong PSBT capabilities and multisig support.
- • Fast and lightweight
- • Command-line PSBT tools
- • Hardware wallet support
- • Extensive documentation
Coldcard Tools
Official tools for Coldcard hardware wallet with advanced air-gapping features.
- • Designed for air-gapped use
- • Advanced security features
- • MicroSD card support
- • QR code integration
Security Best Practices
Air-gapped signing can reduce meaningful risks, but only if the workflow stays disciplined and easy for you to verify.
Operational Security
Air-Gapped OpSec Rules
- Keep the signing machine off networks for the life of the workflow
- Use read-only media when possible for PSBT files
- Verify all transaction details on both online and offline devices
- Keep detailed logs of all signing operations
- Test your setup regularly with small amounts
- Use fresh MicroSD cards for each signing session
Hardware Security
- Physical security - Protect your air-gapped computer from physical access
- Backup strategy - Have redundant air-gapped setups for recovery
- Supply chain verification - Source hardware from trusted suppliers
Common Air-Gapped Signing Mistakes to Avoid
Mistake: Reconnecting the signing machine
Once a signing machine goes back online, you should stop treating it as air-gapped and rebuild the workflow if that separation matters to you.
Mistake: Skipping transaction verification
Check recipient addresses, amounts, and fees on both the coordinator and the signing device before you approve anything.
Mistake: Reusing untrusted storage media
USB drives and SD cards can carry malware or stale files. Use clean media and keep the transfer process simple enough to audit.
Mistake: Skipping test transactions
Prove the workflow with small amounts before you rely on it for meaningful balances or urgent transfers.
Mistake: Ignoring physical security
Offline gear can still be tampered with, stolen, or swapped. Protect the signing device, the storage media, and the recovery materials together.
Frequently Asked Questions
What is air-gapped Bitcoin signing?
Air-gapped signing is a workflow where transaction creation happens on an online machine while signing happens on a separate offline device using PSBT (Partially Signed Bitcoin Transaction) files.
How does PSBT work for offline Bitcoin signing?
PSBT (Partially Signed Bitcoin Transaction) is a Bitcoin standard that allows transactions to be created, partially signed, and completed across different devices or people. It enables secure air-gapped signing workflows.
Why should I use air-gapped signing for Bitcoin?
Air-gapped signing can reduce exposure to malware and remote compromise by separating transaction creation from key use. It is most useful when the extra setup and verification steps are worth the added friction.
What hardware do I need for air-gapped signing?
You need a hardware wallet that supports PSBT (most modern ones do) and an air-gapped computer or dedicated signing device. Popular options include Coldcard, Ledger, Trezor, and Passport.
Is air-gapped signing complicated?
It is more complex than ordinary hardware wallet use. That complexity only pays off if you can keep the workflow clean, verify every step, and still recover the setup later.
Checklist Drop
Get the Air-Gapped Security Checklist
Download our free checklist covering air-gapped setup, PSBT workflows, and security best practices.
We respect your privacy. Unsubscribe at any time.
Related Guides
Ready to Implement Air-Gapped Security?
Air-gapped signing with PSBT provides the highest level of Bitcoin security. Start with our recommended hardware solutions and protect your digital wealth with offline signing.