*See ChangeLog.md for more recent changes, these are historic versions* ## 1.4.1Q - 2026-07-01 - Enhancement: Can export WIF Store watch-only descriptor. - Enhancement: WIF Store address detection without the need for `PSBT_IN_BIP32_DERIVATION` (improves Electrum support) - Enhancement: BIP-322 Proof of Reserves and Message Signing PSBT requires `PSBT_GLOBAL_GENERIC_SIGNED_MESSAGE` field (read more [BIP-322 Proof of Reserves documentation](../docs/proof-of-reserves-bip-322.md) ) - Bugfix: Fixes legacy input amount spoofing by rejecting witness-utxo-only PSBT inputs when Coldcard is expected to sign a non-segwit input. When both UTXO fields are present the full `non_witness_utxo` is now preferred for amount/script lookup. Thanks, @Damir! - Bugfix: Keep NFC export tag alive for repeated probes. Helps NFC tap reliability on iOS. - Bugfix: Emit warning and do not calculate fee for legacy UTXOs with only witness utxo. - Bugfix: Disable Virtual Disk and NFC before activating HSM. - Bugfix: P2PK signing was broken. Now supports both compressed and uncompressed P2PK spend. - Bugfix: Custom address default menu position was wrong. - Bugfix: Delta Mode Trick PIN was never restored from backup. - Bugfix: Proper error message for incorrect 7z headers. - Bugfix: Exiting nickname entry with nickname already saved deleted previous nickname. - Bugfix: Incorrect error message caused by error in Verify/Decrypt Backup. - Bugfix: NFC Verify Address raised incorrect error message. - Bugfix: CCC key C challenge handled bad BIP-39 checksum by crashing the UX. Now treated as a wrong attempt (counts toward 3-strike lockout). - Bugfix: CCC magnitude reset from CANCEL on empty input. - Bugfix: `OP_RETURN` in CCC with whitelist enabled caused Yikes. - Bugfix: TX Explorer crashed on foreign input with non-standard sighash. - Bugfix: Malformed JSON message-sign request crashed signing UX. - Bugfix: Reject UI-control bytes in JSON / QR text message-signing. - Bugfix: Non-standard `OP_RETURN` outputs shown as "null-data", hiding part of the script. - Bugfix: Over-limit CCC address-whitelist import was rejected but still modified the policy. - Bugfix: Deleting a file right after renaming it (List Files) blanked the old name, leaving the renamed file. - Bugfix: Reordered `multi(...)` multisig with same keys was misreported as name-only change. Now blocked as duplicate. - Bugfix: Max WIF store capacity limit was ignored if saving via QR WIF visualization. - Bugfix: Force Seed XOR restore from Temporary Seed menu to remain temporary even when master seed is blank. - Bugfix: Binary signed-transaction (.txn) failed in NFC/QR file share. - Bugfix: Yikes in transaction explorer for goto index for tx with only one output. - Bugfix: Sending `signmessage` payload encoded as BBQr caused Yikes. - Bugfix: CCC/SSSP NFC whitelist import caused Yikes. - Bugfix: Stricter address ownership validation rejects unrecognized payment addresses before wallet search. - Bugfix: Handle malformed NDEF records robustly. Thanks, @Damir! - Bugfix: Ignore `bkpw` if added to backup. Thanks, [@dmonakhov](https://github.com/dmonakhov)! - Bugfix: Fix 1-of-1 multisig signing failure. - New Feature: Secure Notes & Passwords UX groups. Thanks, [@Gen6G](https://x.com/Gen6G)! - New Feature: Apply Secure Note text, or Secure Note password as BIP-39 passphrase. - New Feature: Standalone encrypted backups for Secure Notes & Passwords. - Bugfix: Major scanner robustness improvements! - Recover scanner setup failures by retrying configuration and reinitializing on the next scan when needed. - Prevent delayed scanner sleep commands from racing with a newly started scan. - Improve scanner shutdown/recovery after scan cancel or command timeout. - Bottom line: should be less "stuck" QR scanners, with the light left on. - Bugfix: Teleporting a multisig PSBT file (without signing it first) sent stale data instead of the selected file. - Bugfix: Fix export message shown after teleport PSBT import & sign. - Bugfix: BIP-21 QR `amount` rendered with wrong decimal scaling on the Payment Address screen (e.g. `amount=1.1` was shown as `1.00000001 BTC`). - Bugfix: Q1 seed word entry cursor alignment for 12-word seeds and preserve visible words after failed QR scans. - Bugfix: QR scan import (Scan Any QR Code, master/temp seed via QR) now shows a clear error message on any parser or seed-loading failure (e.g. wordlist-valid but bad-checksum SeedQR) instead of Yikes. - Bugfix: Yikes when showing "QR too big" for a transaction output alone on an output-explorer page. - Bugfix: Yikes receiving a malformed full-backup via Key Teleport. - Bugfix: Keyboard debounce could leave a key stuck as "pressed" after release, when another key was held (sometimes). - Bugfix: "Send Password" menu item inside Notes & Passwords visibility reversed. - Bugfix: Yikes when using "Send Password" on entry with password None field. - Bugfix: Do not show "Saving..." UX after failed Notes & Passwords import. - Bugfix: Notes & Passwords bulk import JSON with BBQr encoded as text. ## 1.4.0Q - 2065-03-05 - New Feature: Sign [BIP-322](https://github.com/bitcoin/bips/blob/master/bip-0322.mediawiki) Proof of Reserve PSBT files. - Requires a carefully crafted PSBT that does not represent a monetary transaction, but instead is demonstrating control over the keys for a list of UTXO, and commits to a short text message. - Read more [here](https://github.com/Coldcard/firmware/blob/master/docs/proof-of-reserves-bip-322.md). - New Feature: WIF Store. Ability to import foreign WIF keys (Wallet Import Format) and use them for PSBT signing. - New Feature: Export [BIP-380](https://github.com/bitcoin/bips/blob/master/bip-0380.mediawiki) extended key expression. Navigate to "Advanced/Tools -> Export Wallet -> Key Expression" - New Feature: Transaction Input Explorer. Shows data about UTXO(s) being spent. Press (2) before approving transaction to enter Transaction Explorer. - New Feature: Support for v3 transactions in PSBT files. - New Feature: Option to type a derived BIP-85 secret as an emulated USB keyboard. - New Feature: Nuke Device: purges all sensitive data and makes your COLDCARD e-waste. - Enhancement: CCC debug menu allows you to reset block height. - Enhancement: Show the BIP-39 passphrase on-screen (must scroll down) once new key is in effect. - Enhancement: New "Buried Settings" menu, inside Settings menu, for rarely-applied settings. - Enhancement: Add "Blue Wallet" option to "Export Wallet" - Enhancement: Detect duplicated inputs in PSBT file. - Bugfix: Replace `/` with `-` in exported file names of multisig wallet export artifacts. - Bugfix: Empty notes in hobbled mode caused yikes upon menu entry. ## 1.3.5Q - 2025-11-03 - Enhancement: Address format guessing changed away from using PSBT XPUB's derivation paths. Now based on witness/redeem script of first PSBT input instead. - Enhancement: Show master XFP of backup secret and ask user for confirmation before loading backup. - Enhancement: Show firmware version added to hobbled Advanced/Tools menu. - Bugfix: Exiting text input of Custom Backup Password caused yikes. - Bugfix: Temporary seeds in SSSP mode were not able to update block height. - Enhancement: Show backup filename at the top of the screen during backup password entry. ## 1.3.4Q - 2025-09-30 - Spending policies for "Single Signers" adds new spending policy options: - limit your Coldcard so it refuses to sign transactions that are "too big" - require 2FA authentication before signing any transaction (NFC+web) - velocity limits can restrict how often new transactions can be signed - see `docs/spending-policy.md` for more details - "Enable HSM" and "User Management" have moved into `Advanced > Spending Policy`. - Old "CCC" feature has been renamed and moved into that menu as well: "Co-Sign Multisig" - Added `Bull Bitcoin` export to `Export Wallet` menu. - Enhancement: Added warning for zero value outputs if not `OP_RETURN`. - Enhancement: Show QR codes of output addresses in transaction output explorer. Explorer is now offered for transactions of all sizes, not just complex ones. - Enhancement: Added file rename, when listing contents of SD card. - Enhancement: Added ability to restore Coldcard backup via USB (needs latest of ckcc version) - Enhancement: Address ownership allows to specify particular multisig wallet in which to search, if `wallet` query parameter is provided via trivial extension to [BIP-21](https://github.com/bitcoin/bips/blob/master/bip-0021.mediawiki). Example: `tb1q4d67p7stxml3kdudrgkg5mgaxsrgzcqzjrrj4gg62nxtvnsnvqjsxjkej0?wallet=Haystack` - Bugfix: If all change outputs have `nValue=0`, they were not shown in UX. - Bugfix: Disallow negative input/output amounts in PSBT. - Bugfix: Fix filesystem initialization after Wipe LFS or Destroy Seed. - Bugfix: Fix MicroSD selftest code. - Bugfix: NFC loop exporting secrets would not work after first value exported. - Bugfix: Multisig address format handling. - Bugfix: Ownership check failing to find addresses near max (~760), needed to be re-run to succeed - (Q only) Enhancement: Enters "forever calculator" mode when Q would otherwise be electronic waste (ie. after 13 PIN failures). Always enabled, regardless of "login calculator" setting. - (Q only) Bugfix: Correct line positioning when 24 seed words displayed. ## 1.3.3Q - 2025-05-14 - Enhancement: Text word-wrap done more carefully so never cuts off any text, and yet doesn't waste space. - Bugfix: `Add current tmp` option, which could be shown in `Seed Vault` menu under specific circumstances, would corrupt master settings if selected. - Bugfix: PUSHDATA2 in bitcoin script caused yikes. - Bugfix: Warning for unknown scripts was not shown at the top of the signing story. - Bugfix: Do not allow to teleport PSBTs from SD card when CC has no secrets. - Bugfix: Calculator login mode: added "rand()" command, removed support for variables/assignments. ## 1.3.2Q - 2025-04-16 - Feature: Key Teleport -- Easily and securely move seed phrases, secure notes/passwords, multisig PSBT files, and even full Coldcard backups, between two Q using QR codes and/or NFC with helper website. See protocol spec in [docs/key-teleport.md](https://github.com/Coldcard/firmware/blob/master/docs/key-teleport.md) - can send master seed (words, xprv), anything held in seed vault, secure notes/passwords (singular, or all) and PSBT involved in a multisig to the other co-signers - full COLDCARD backup is possible as well, but receiver must be "unseeded" Q for best result - ECDH to create session key for AES-256-CTR, with another layer of AES-256-CTR using a short password (stretched by PBKDF2-SHA512) inside - receiver shows sender a (simple) QR and a numeric code; sender replies with larger BBQr and 8-char password - Enhancement: Always choose the biggest possible display size for QR - Bugfix: Only BBQr is allowed to export Coldcard, Core, and pretty descriptor - Huge new feature: CCC - ColdCard Cosign - COLDCARD holds a key in a 2-of-3 multisig, in addition to the normal signing key it has. - it applies a spending policy like an HSM: - velocity and magnitude limits - whitelisted destination addresses - 2FA authentication using phone app ([RFC 6238](https://www.rfc-editor.org/rfc/rfc6238)) - but will sign its part of a transaction automatically if those condition are met, giving you 2 keys of the multisig and control over the funds - spending policy can be exceeded with help of the other co-signer (3rd key), when needed - cannot view or change the CCC spending policy once set, policy violations are not explained - existing multisig wallets can be used by importing the spending-policy-controlled key - New Feature: Multisig transactions are finalized. Allows use of [PushTX](https://pushtx.org/) with multisig wallets. Read more [here](https://github.com/Coldcard/firmware/blob/master/docs/limitations.md#p2sh--multisig) - New Feature: Signing artifacts re-export to various media. Now you have the option of exporting the signing products (transaction/PSBT) to different media than the original source. Incoming PSBT over QR can be signed and saved to SD card if desired. - New Feature: Multisig export files are signed now. Read more [here](https://github.com/Coldcard/firmware/blob/master/docs/msg-signing.md#signed-exports) - Enhancement: NFC export usability upgrade: NFC keeps exporting until CANCEL/X is pressed - Enhancement: Add `Bitcoin Safe` option to `Export Wallet` - Enhancement: 10% performance improvement in USB upload speed for large files - Bugfix: Do not allow change Main PIN to same value already used as Trick PIN, even if Trick PIN is hidden. - Bugfix: Fix stuck progress bar under `Receiving...` after a USB communications failure - Bugfix: Showing derivation path in Address Explorer for root key (m) showed double slash (//) - Bugfix: Can restore developer backup with custom password other than 12 words format - Bugfix: Virtual Disk auto mode ignores already signed PSBTs (with "-signed" in file name) - Bugfix: Virtual Disk auto mode stuck on "Reading..." screen sometimes - Bugfix: Finalization of foreign inputs from partial signatures. Thanks Christian Uebber - Bugfix: Temporary seed from COLDCARD backup failed to load stored multisig wallets - Change: `Destroy Seed` also removes all Trick PINs from SE2. - Change: `Lock Down Seed` requires pressing confirm key (4) to execute ## 1.3.1Q - 2025-02-13 - New signing features: - Sign message from note text, or password note - JSON message signing. Use JSON object to pass data to sign in form `{"msg":"","subpath":"","addr_fmt": ""}` - Sign message with key resulting from positive ownership check. Press (0) and enter or scan message text to be signed. - Sign message with key selected from Address Explorer Custom Path menu. Press (2) and enter or scan message text to be signed. - Enhancement: New address display format improves address verification on screen (groups of 4). - Deltamode enhancements: - Hide Secure Notes & Passwords in Deltamode. Wipe seed if notes menu accessed. - Hide Seed Vault in Deltamode. Wipe seed if Seed Vault menu accessed. - Catch more DeltaMode cases in XOR submenus. Thanks [@dmonakhov](https://github.com/dmonakhov) - Enhancement: Add ability to switch between BIP-32 xpub, and obsolete SLIP-132 format in `Export XPUB` - Enhancement: Use the fact that master seed cannot be used as ephemeral seed, to show message about successful master seed verification. - Enhancement: Allow devs to override backup password. - Enhancement: Add option to show/export full multisg addresses without censorship. Enable in `Settings > Multisig Wallets > Full Address View`. - Enhancement: If derivation path is omitted during message signing, derivation path default is no longer root (m), instead it is based on requested address format (`m/44h/0h/0h/0/0` for p2pkh, and `m/84h/0h/0h/0/0` for p2wpkh). Conversely, if address format is not provided but subpath derivation starts with: `m/84h/...` or `m/49h/...`, then p2wpkh or p2sh-p2wpkh respectively, is used. - Bugfix: Sometimes see a struck screen after _Verifying..._ in boot up sequence. On Q, result is blank screen, on Mk4, result is three-dots screen. - Bugfix: Do not allow to enable/disable Seed Vault feature when in temporary seed mode. - Bugfix: Bless Firmware causes hanging progress bar. - Bugfix: Prevent yikes in ownership search. - Bugfix: Factory-disabled NFC was not recognized correctly. - Bugfix: Be more robust about flash filesystem holding the settings. - Bugfix: Do not include sighash in PSBT input data, if sighash value is `SIGHASH_ALL`. - Bugfix: Allow import of multisig descriptor with root (m) keys in it. Thanks [@turkycat](https://github.com/turkycat) - Change: Do not purge settings of current active tmp seed when deleting it from Seed Vault. - Change: Rename Testnet3 -> Testnet4 (all parameters unchanged). - New Feature: Verify Signed RFC messages via BBQr - New Feature: Sign message from QR scan (format has to be JSON) - Enhancement: Sign/Verify Address in Sparrow via QR - Enhancement: Sign scanned Simple Text by pressing (0). Next screen query information about which key to use. - Enhancement: Add option to "Sort By Title" in Secure Notes and Passwords. Thanks to [@MTRitchey](https://x.com/MTRitchey) for suggestion. - Bugfix: Properly re-draw status bar after Restore Master on COLDCARD without master seed. ## 1.3.0Q - 2024-09-12 - New Feature: Opt-in support for unsorted multisig, which ignores BIP-67 policy. Use descriptor with `multi(...)`. Disabled by default, Enable in `Settings > Multisig Wallets > Legacy Multisig`. Recommended for existing multisig wallets, not new ones. - New Feature: Named multisig descriptor imports. Wrap descriptor in json: `{"name:"ms0", "desc":""}` to provide a name for the menu in `name`. instead of the filename. Most useful for USB and NFC imports which have no filename, (name is created from descriptor checksum in those cases). - New Feature: XOR from Seed Vault (select other parts of the XOR from seeds in the vault). - Enhancement: upgrade to latest [libsecp256k1: 0.5.0](https://github.com/bitcoin-core/secp256k1/releases/tag/v0.5.0) - Enhancement: Signature grinding optimizations. Now about 30% faster signing! - Enhancement: Improve side-channel protection: libsecp256k1 context randomization now happens before each signing session. - Enhancement: Allow JSON files in `NFC File Share`. - Change: Do not require descriptor checksum when importing multisig wallets. - Bugfix: Do not allow import of multisig wallet when same keys are shuffled. - Bugfix: Do not read whole PSBT into memory when writing finalized transaction (performance). - Bugfix: Prevent user from restoring Seed XOR when number of parts is smaller than 2. - Bugfix: Fix display alignment of Seed Vault menu. - Bugfix: Properly handle null data in `OP_RETURN`. - Bugfix: Do not allow lateral scroll in Address Explorer when showing single address from custom path. - Change: Remove Lamp Test from Debug Options (covered by selftest). - New Feature: Seed XOR can be imported by scanning SeedQR parts. - New Feature: Input backup password from QR scan. - New Feature: (BB)QR file share of arbitrary files. - New Feature: `Create Airgapped` now works with BBQRs. - Change: Default brightness (on battery) adjusted from 80% to 95%. - Bugfix: Properly clear LCD screen after BBQR is shown. - Bugfix: Writing to empty slot B caused broken card reader. - Bugfix: During Seed XOR import, display correct letter B if own seed already added to the mix. - Bugfix: Stop re-wording UX stories using a regular expression. - Bugfix: Fixed "easy exit" from quiz after split Seed XOR. ## 1.2.3Q - 2024-07-05 - New Feature: PushTX: once enabled with a service provider's URL, you can tap the COLDCARD and your phone will open a webpage that transmits your freshly-signed transaction onto the blockchain. See `Settings > NFC Push Tx` to enable and select service provider, or your own webpage. More at . You can also use this to broadcast any transaction found on the MicroSD card (See `Tools > NFC Tools > Push Transaction`). - New Feature: Transaction Output Explorer: allows viewing all output details for larger txn (10+ output, 20+ change) before signing. Offered for large transactions only because we are already showing all the details for typical transactions. - New Feature: Setting to enable always showing XFP as first item in home menu. - Enhancement: When signing, show sum of outgoing value at top. Always show number of inputs/outputs and total change value. - Enhancement: Add `Sign PSBT` shortcut to `NFC Tools` menu - Enhancement: Stricter p2sh-p2wpkh validation checks. - Enhancement: Show master XFP of BIP-85 derived wallet in story before activation. Only words and extended private key cases. - Enhancement: Add `Theya` option to `Export Wallet` - Enhancement: Mention the need to remove old duress wallets before locking down temporary seed. - Bugfix: Fix PSBTv2 `PSBT_GLOBAL_TX_MODIFIABLE` parsing. - Bugfix: Decrypting Tapsigner backup failed even for correct key. - Bugfix: Clear any pending keystrokes before PSBT approval screen. - Bugfix: Display max 20 change outputs in when signing, and max 10 of largest outputs, and offer the Transaction Output Explorer if more to be seen. - Bugfix: Calculate progress bar correctly in Address Explorer after first page. - Bugfix: Search also Wrapped Segwit single sig addresses if P2SH address provided, not just multisig (multisig has precedence for P2SH addresses) - Bugfix: Address search would not find addresses for non-zero account numbers that had been exported but not yet seen in a PSBT. - (v5.3.3/1.2.3Q) Bugfix: Trying to set custom URL for NFC push transaction caused yikes error. - Enhancement: Coldcard multisg export/import format detected in `Scan Any QR Code`. - Enhancement: Support newer-version QR scanner modules. - Bugfix: Exporting BIP-85 derived entropy via NFC was offered even when NFC disabled, leading to a Yikes error. - Bugfix: Properly clear LCD screen after simple QR code is shown ## 1.2.3Q - 2024-07-05 - Bugfix: Trying to set custom URL for NFC push transaction caused yikes error. - Bugfix: Properly clear LCD screen after simple QR code is shown ## 1.2.2Q - 2024-06-26 - New Feature: PushTX: once enabled with a service provider's URL, you can tap the COLDCARD and your phone will open a webpage that transmits your freshly-signed transaction onto the blockchain. See `Settings > NFC Push Tx` to enable and select service provider, or your own webpage. More at . You can also use this to broadcast any transaction found on the MicroSD card (See `Tools > NFC Tools > Push Transaction`). - New Feature: Transaction Output Explorer: allows viewing all output details for larger txn (10+ output, 20+ change) before signing. Offered for large transactions only because we are already showing all the details for typical transactions. - New Feature: Setting to enable always showing XFP as first item in home menu. - Enhancement: When signing, show sum of outgoing value at top. Always show number of inputs/outputs and total change value. - Enhancement: Add `Sign PSBT` shortcut to `NFC Tools` menu - Enhancement: Stricter p2sh-p2wpkh validation checks. - Enhancement: Show master XFP of BIP-85 derived wallet in story before activation. Only words and extended private key cases. - Enhancement: Add `Theya` option to `Export Wallet` - Enhancement: Mention the need to remove old duress wallets before locking down temporary seed. - Bugfix: Fix PSBTv2 `PSBT_GLOBAL_TX_MODIFIABLE` parsing. - Bugfix: Decrypting Tapsigner backup failed even for correct key. - Bugfix: Clear any pending keystrokes before PSBT approval screen. - Bugfix: Display max 20 change outputs in when signing, and max 10 of largest outputs, and offer the Transaction Output Explorer if more to be seen. - Bugfix: Calculate progress bar correctly in Address Explorer after first page. - Bugfix: Search also Wrapped Segwit single sig addresses if P2SH address provided, not just multisig (multisig has precedence for P2SH addresses) - Bugfix: Address search would not find addresses for non-zero account numbers that had been exported but not yet seen in a PSBT. ## 1.2.1Q - 2024-05-09 - _Important Bugfix_: Already imported multisig wallets would show errors when signing. This was caused by our internal change in key path notation from `84'` (prime) to `84h` (hardened). - Enhancement: Add `Nunchuk` and `Zeus` options to `Export Wallet` - Enhancement: `View Identity` shows temporary seed active at the top - Enhancement: Can specify start index for address explorer export and browsing - Enhancement: Allow unlimited index for BIP-85 derivations. Must be enabled first in `Danger Zone` - Change: `Passphrase` menu item is no longer offered if BIP39 passphrase already in use. Use `Restore Master` with ability to keep or purge current passphrase wallet settings. - Change: Removed ability to add passphrase to master seed if active temporary seed. - Change: Wipe LFS during `Lock Down Seed` and `Destroy Seed` - Bugfix: Do not allow non-ascii or ascii non-printable characters in multisig wallet name - Bugfix: `Brick Me` option for `If Wrong` PIN caused yikes. - Bugfix: Properly handle and finalize framing error response in USB protocol. - Bugfix: Handle ZeroSecretException for BIP39 passphrase calculation when on temporary seed without master secret - Bugfix: Saving passphrase on SD Card caused a freeze that required reboot - Bugfix: Properly verify signed armored message with regtest address - Bugfix: Create ownership file when generating addresses export CSV - Recovery SD Card image building moved into its own repo: [github.com/Coldcard/recovery-images](https://github.com/Coldcard/recovery-images) - Bugfix: Reload trick pins before checking for active duress wallet. - Enhancement: Allow export of multisig XPUBs via BBQr - Enhancement: Import multisig via QR/BBQr - both legacy COLDCARD export and descriptors supported - Enhancement: Status bar text is sharper now - Enhancement: Added ability to write signed PSBT/txn to lower (B) SD slot when both cards inserted - Bugfix: Fullscreen display of v23 and v24 QRs were too dense and hard to read - Bugfix: Battery idle timeout also considers last progress bar update - Bugfix: Allow `Send Password` (keystrokes) of capital letters of alphabet - Bugfix: Pressing SYM+SHIFT was toggling CAPS continuously. Now toggles once only - Bugfix: Restrict keys that can be pressed during seed entry after final word inserted ## 1.1.0Q - 2024-04-02 - Enhancement: Scan any QR and report if it is part of a wallet this Coldcard knows the key for. Includes Multisig and single sig wallets. - searches up to the first 1528 addresses (external and change addresses) - stores data as it goes to accelerate future uses - worst case, it can take up to 2 minutes to rule out an address, but after that it is fast! - Enhancement: Calculator login mode. When enabled, the usual PIN entry screen is replaced with a functional calculator. Enter your PIN as `12-12` or `12 12` to get it. To verify anti-phishing words, use `12-`. - Bugfix: Key right of L was giving back quote, should have been single-quote. SYM+E for back quote. - Bugfix: Constant `AFC_BECH32M` incorrectly set `AFC_WRAPPED` and `AFC_BECH32`. - Bugfix: Base64 PSBT via QR was not properly decoded. - Bugfix: Fix inability to activate Duress Wallet as temporary seed when master seed is 12 words. - Bugfix: Switch to BBQr for larger data exports at a new lower size threshold. - Generally, won't show tiny QR anymore with 1:1 pixels. - Sparrow wallet export will always be BBQr now. - Most other exports fit into a reasonable single QR. - Bugfix: fixed `Type Passwords` a.k.a emulated keystrokes - Bugfix: Yikes when using BIP39 passphrase with temporary seed without master seed set. - Tweak: Default idle timeout when on battery, was reduced to 10 minutes from 30. - Tweak: Cursor movements wrap around if menu is longer than screen height. - Tweak: Force default HW settings (USB,NFC,VDisk OFF) after clone/backup is restored. - Tweak: Cleanup in NFC code: repeated messages, "Unable to find data expectd in NDEF", removed. ## 1.0.1Q - 2024-03-14 - Enhancement: Move dice rolls (for generating master seed) to `Advanced` submenu. - Cleanup reproducible building / start process of backporting to Mk4. ## 1.0.0Q - 2024-03-10 - Bump major verison number, remove BETA marking. - Finalize version 1.0.4 bootrom (no real changes). - Bugfix: Yikes when saving seed words imported by QR. - Bugfix: Crash w/ blank screen sometimes, either on power-up or after upgrading firmware. - Testing: Accelerate internal testing by reviving "headless" mode of simulator. ## 0.0.8Q - 2024-03-02 - BBQr display changes: - if less than 12 frames would result, uses simpliest QR that can fit on screen at 3x or 2x size. Result is easier to scan BBQr's. - progress bar along bottom drawn differently - in some cases, the status bar area (at top) will be used to show QR - added: Advanced > Danger Zone > Debug Functions > BBQr Demo - Says "Loading..." not "Wait..." during login process. - Many more test cases. ## 0.0.7Q - 2024-02-26 - bugfix: BBQr display of some segwit transactions would sometimes fail with message about "non hex digit" - bugfix: very obscure bug in low level code could cause txid to be miscalculated if all the conditions occured just right - Animated BBQr are shown as chunkier QR's to make them easier for other devices to scan. - Supports QR export from Wallet Exports: will be either text file (U) or JSON (J) BBQr sequence, but only if it cannot fit into normal single QR. ## 0.0.6Q - 2024-02-22 - bugfix: randomize keys for PIN entry - when picking files, we just skip to showing you the files options (or picking the single winner) rather than talking about it first. - BIP-39 passphrase process completely streamlined - batch signing now offered when we see two or more signable PSBT's on the card - bugfix: can now reformat SD card in B slot - move away from `44'` (prime) for hardened derivation paths, in favour of `44h`; both accepted for input, but we are going to display `44h` style going forward. - bugfix: (QR) or other double-wide chars would be garbled if half off right edge - cleanups, bugfixes ## 0.0.5Q - 2024-02-16 - fixes and changes from version 5.2.2 of Mk4 encorporated - bugfix: save bip-39 password to absent SD card - import multisig wallet via descriptor inside a QR - too much whitespace in locktime details - bugfix: cant detect SD card in Ready to Sign... - WIF private key detected when scaning QR (display only for now) ## 0.0.4Q - 2024-02-15 - BBQr animation display smoother - test cases fixed, bugs that were exposed, fixed. - lots of bugfixes: batch signing, seed XOR, big backups - "Ready to Sign" messaging improved, slot B support. - block firmware upgrade when battery very low ## 0.0.3Q - 2024-02-08 - first test-only release