Cold Storage QR Stateless
Cold Storage vs. QR Stateless Signer Explained
Cold Storage Mode (Seed Stored on Jade 24/7)
In this standard setup, you initialize the Blockstream Jade with your 12- or 24-word BIP39 recovery phrase (seed). The device stores it persistently, protected by a PIN and Blockstream’s “blind oracle” encryption system (a virtual secure element).
• The seed remains encrypted on the device when powered off.
• To use it, you unlock via PIN (often with the companion Blockstream app or air-gapped methods on Jade Plus).
• You can sign transactions repeatedly without re-entering the seed.
• The device holds the master private keys derived from that seed (plus any passphrase if used).
This is convenient for daily or frequent use, like a traditional hardware wallet.
QR Stateless Seed Signer Mode (Temporary / Empty Jade)
Here, the Jade acts as a temporary, air-gapped signer with no persistent seed stored.
• You keep the seed offline (e.g., on paper, metal backup, or as a SeedQR code — a compact QR representation of your recovery words).
• Each session: Power on the Jade → Choose “Temporary Signer” or “Scan QR” → Scan your SeedQR (or manually enter words) → Optionally enter a BIP39 passphrase → Sign the transaction (usually via QR codes for full air-gap).
• When you power off the Jade, the seed is wiped from memory. Nothing valuable remains on the device.
This is ideal for maximum security or air-gapped workflows, especially with the Jade’s built-in camera for scanning QR codes.
Key Differences
| Aspect | Cold Storage (Persistent Seed) | QR Stateless Signer (Temporary) |
|---|---|---|
| Seed Storage | Always on device (encrypted) | Never stored; loaded fresh each time via QR/words |
| Convenience | High — unlock with PIN and go | Lower — scan QR + optional passphrase each session |
| Security if Stolen | Device has encrypted seed (protected by PIN/oracle) | Device empty when off — nothing to steal |
| Attack Surface | Relies on PIN + encryption strength | Minimal; seed only present during active signing |
| Air-Gap | Possible but often uses Bluetooth/USB for unlock | Excellent for full QR air-gapped signing |
| Best For | Frequent use, single wallet | Long-term cold storage, paranoia-level security, multisig |
Benefits of Using Jade as a QR Stateless Seed Signer
Nothing to steal when powered off: Even if someone takes your Jade, there are no keys on it. This is a major advantage over persistent storage.
• True air-gapped operation: Combine with QR transaction signing (PSBTs) and the camera — no USB, Bluetooth, or even PIN oracle needed for signing sessions. Perfect for paranoid users or high-value holdings.
• Easier secure backups: Store your master SeedQR on durable metal plates (multiple copies in safe locations). The Jade becomes just a tool, not a single point of failure.
• Flexibility for multiple setups: Great for multisig (different seeds) or temporary access without affecting your main PIN-protected wallet.
• Reduced physical extraction risk: No long-term keys on the device to target with advanced attacks.
• Simpler for “set and forget” cold storage: Many users recommend this for long-term Bitcoin holdings — the Jade is only “live” when you need to sign.
Downsides:
Include more steps per use and needing physical access to your SeedQR each time (so store it securely but accessibly).
Using Multiple Passphrases with the Same Seed
BIP39 passphrases act like an extra “25th word” (any characters, up to ~100 on Jade). The same recovery phrase + different passphrases = completely different wallets and derivation paths.
How it works on Jade:
• The device stores only one base recovery phrase.
• Each time you load the seed (persistent or stateless), you can enter a different passphrase.
• This unlocks entirely separate sets of addresses/private keys.
• Example: Seed + “” (empty) = Wallet A; Seed + “bitcoin” = Wallet B; Seed + “mysecret2026” = Wallet C.
Benefits:
• Compartmentalization: Manage different Bitcoin allocations (e.g., savings, spending, inheritance) from one seed backup.
• Plausible deniability / duress protection: Keep small “decoy” amounts in easy-to-reveal passphrases; hide large holdings behind a strong one. Attacker with your seed + PIN still needs the correct passphrase.
• Privacy & organization: Multiple independent wallets without multiple devices or seeds.
• Stateless synergy: In QR mode, you scan the base SeedQR then enter the specific passphrase for that session — very flexible.
Important warnings:
• Passphrases are case-sensitive and must be entered exactly the same every time — or funds are inaccessible.
• Always test small amounts first.
• Back up the exact passphrase(s) securely (they are not part of the standard 12/24 words).
• Jade supports this in both modes.
Recommendation:
For serious long-term cold storage, the stateless QR + passphrase combination is one of the strongest setups with Jade. Use the persistent mode for convenience on smaller or more active wallets. Always verify transactions on the device screen and use air-gapped QR signing where possible.
