Getting a handle on cryptocurrency offline transactions is the single best move any serious holder can take to protect their digital assets
The offline sign-and-broadcast method severs that connection permanently. Your private key never touches a live network.
The transaction is built online, signed in complete isolation, and only the cryptographic signature travels back to be broadcast. No key exposure. No remote attack surface. Just cold, verifiable security.
This guide explains exactly how the process works, why it is important, which tools support it, and how to execute it step by step.
What Are Cryptocurrency Offline Transactions, and Why Are They Important
A cryptocurrency offline transaction is one where the private key, the cryptographic secret that proves ownership of funds and authorizes a spend, is used to sign a transaction on a device that has zero connectivity to the internet or any wireless network during that signing moment.
This is the critical distinction from standard hardware wallet setups. Many hardware wallets connect via USB or Bluetooth to your computer during signing.
That connection, however brief, creates a data channel. A sophisticated attacker with malware on your computer can potentially exploit that channel. An air-gapped setup eliminates it entirely.
How Does the Air-Gapped Sign-and-Broadcast Workflow Actually Work?
The offline sign-and-broadcast process separates what most crypto wallets combine into a single step: building a transaction and signing it. Here is how the two-device workflow operates in practice.
| Step | Action | Where It Happens | Internet connection |
| 1 | Build unsigned transaction | Online device (watch-only wallet) | N/A |
| 2 | Create PSBT / unsigned file | Online device | N/A |
| 3 | Transfer to offline device | Air gap crossing | QR code or microSD card |
| 4 | Verify on device screen | Offline signing device | No transfer needed |
| 5 | Sign transaction offline | Offline signing device | N/A |
| 6 | Transfer signed tx back | Air gap crossing | QR code or microSD card |
| 7 | Broadcast to network | Online device | Internet connection |
The key insight is simple: the private key only exists on the offline device. The unsigned transaction data travels to it.
The signed transaction travels back. The private key never moves. At no point does any internet-connected machine have access to the signing secret.
What Is a PSBT, and How Does It Enable Offline Signing?
PSBT stands for Partially Signed Bitcoin Transaction.
It is a standardized data format defined in Bitcoin Improvement Proposal 174 (BIP 174) that allows a transaction to be constructed, passed between parties or devices, and signed incrementally before being finalized and broadcast.
Before PSBT existed, offline signing was fragile and proprietary. Different wallets used incompatible formats.
Air-gapped workflows required ad-hoc solutions that were hard to verify and easy to get wrong. BIP 174 changed that by creating a universal standard that any compliant wallet can create, sign, combine, and finalize.
Related Reads: Cold wallet vs Hot wallet, Gas fee dynamics.
What Information Does a PSBT Contain?
A PSBT file packages the unsigned transaction together with the metadata the signing device needs to do its job correctly: the UTXO (unspent transaction output) details, BIP 32 derivation paths for the relevant keys, redeem scripts for complex spending conditions, and any existing partial signatures in a multisig setup.
This self-contained format means the offline signer has everything it needs to verify the transaction and apply a valid signature.
What Roles Are Involved in the PSBT Lifecycle?
BIP 174 defines specific roles that map cleanly to the offline workflow. The Creator builds the base unsigned transaction on the online machine.
The Updater adds the UTXO and script metadata. The Signer is the offline device that verifies and signs. The Finalizer converts partial signatures into a complete spending script.
The Extractor produces the final raw transaction ready for network broadcast.
In practice, your watch-only wallet handles Creator and Updater roles, your air-gapped device handles Signer, and the watch-only wallet finishes with Finalizer and Extractor before calling sendrawtransaction.
Does PSBT Work for Ethereum and Other Chains?
PSBT is a Bitcoin-native standard. Ethereum and EVM-compatible chains use their own transaction formats and signing standards, but the conceptual workflow is identical: an unsigned transaction is constructed on an online device, transferred to an offline signer, signed with the private key, and the signature is returned for broadcast.
Hardware wallets like Keystone, ELLIPAL, and NGRAVE implement this air-gapped pattern for both Bitcoin and Ethereum, using QR codes as the data transfer medium regardless of the underlying chain.
What Are the Two Ways to Cross the Air Gap?
QR Codes: The Modern Air-Gap Standard
QR codes are the preferred method for most contemporary air-gapped hardware wallets.
The online wallet displays the unsigned PSBT encoded as a QR code (or a series of animated QR frames for larger transactions using the UR standard from Blockchain Commons).
The offline device’s camera scans it, processes the transaction data, signs it, and displays the signed PSBT as a new QR code. The online device scans that back and broadcasts.
The advantage is absolute physical isolation. No cable, no USB port, no microSD insertion. The data transfer is entirely optical.
Wallets like Keystone 3 Pro, ELLIPAL Titan 2.0, NGRAVE ZERO, and SeedSigner all use this method. The animated QR approach handles transactions too large for a single code.
MicroSD Card: The High-Security Specialist Method
The Coldcard Mk4 popularized the microSD approach, which uses a removable memory card as the physical data bridge.
The online wallet writes the unsigned PSBT file to the card.
You physically move the card to the Coldcard, which signs the transaction and writes the signed PSBT back. You move the card to the online machine, which broadcasts.
This method is favored by users who want explicit physical control over every data movement and prefer to work with verifiable files rather than optical codes.
The Coldcard’s reputation as the most security-hardened consumer Bitcoin wallet rests partly on this workflow, combined with its secure element and open-source firmware.
Which Devices Support Air-Gapped Signing
Here is a comparison of the leading options:
| Device | Air-Gap Method | Ideal For | Security Level |
| Coldcard Mk4 | microSD card | Advanced Bitcoin users | Highest |
| Keystone 3 Pro | QR codes | Beginners to intermediate | Very High |
| ELLIPAL Titan 2.0 | QR codes | Multi-coin users | Very High (EAL5+) |
| NGRAVE ZERO | QR codes | Maximum security seekers | Highest (EAL7) |
| SeedSigner (DIY) | QR codes | Privacy-focused builders | Very High |
| Foundation Passport | microSD card | Sovereign Bitcoin users | Very High |
How Do You Execute an Offline Bitcoin Transaction Step by Step?
The core structure of blockchains relies on online validation and recording, making completely disconnected transactions currently impossible.
Step 1: Set Up the Watch-Only Wallet
Install Sparrow Wallet on your online computer. During setup, import the extended public key (xpub or zpub) from your air-gapped device by scanning its QR code.
This creates a watch-only wallet that can see your balances and build transactions, but holds no private keys. Sparrow connects to your own Bitcoin node or a public Electrum server for blockchain data.
Step 2: Construct the Unsigned Transaction
In Sparrow, navigate to Send and enter the recipient address, the amount in satoshis or BTC, and set an appropriate fee rate based on current mempool conditions.
Sparrow selects the UTXOs, builds the transaction, and packages it as a PSBT. Choose the option to sign with an external hardware wallet. Sparrow will display the unsigned PSBT as an animated QR code on screen.
Step 3: Scan and Verify on the Offline Device
Pick up your Keystone. In the device’s interface, choose Scan and point the camera at your computer screen.
The device reads the animated QR frames and reconstructs the full PSBT. It then displays the transaction details on its own screen: recipient address, amount, and fee.
This is your verification moment. Confirm that every detail matches your intention on the device screen, not the computer screen. If anything looks wrong, reject the signing.
Step 4: Sign Offline
Once you have verified and are satisfied, enter your PIN and confirm the signature on the device. The Keystone applies the cryptographic signature using the private key stored in its secure element.
The signed PSBT is displayed on the device screen as a new animated QR code. Your private key never left the device.
Step 5: Broadcast the Signed Transaction
Back in Sparrow on your online machine, choose the option to scan the signed PSBT and point your computer’s camera at the Keystone’s screen.
Sparrow reads the signed transaction, finalizes the PSBT format, and presents you with a broadcast button. Click broadcast.
Sparrow sends the fully signed transaction to the Bitcoin network, where it propagates to nodes and eventually gets confirmed in a block. The private key was never online.
What Are the Security Threats That Offline Signing Does and Does Not Prevent?
Air-gapped signing is a massive security upgrade, but it’s not a magic shield. It effectively kills off remote hacks, malware, and network exploits because your private keys never “see” the internet.
However, it won’t save you from physical theft, tampered hardware, or your own mistakes, like losing your seed phrase or blindly signing a transaction to the wrong address.
Basically, it secures the connection, but you still have to secure the device and the data you put into it.
How Do Cryptocurrency Offline Transactions Fit Into a Broader Security Strategy?
- Secure the seed phrase backup first. A titanium or steel engraved backup stored in a fireproof safe or safety deposit box is the foundation everything else rests on.
No amount of signing security matters if your seed phrase can be found by an attacker or destroyed by a flood. - Use air-gapped signing for cold storage holdings. Any amount you intend to hold for months or years belongs behind the full offline signing workflow.
- Use a hot wallet for regular transactions, funded only with what you are comfortable losing. Most practitioners maintain a software wallet (MetaMask, BlueWallet, or a Lightning wallet) with small float for day-to-day use.
- Verify firmware on your signing device before every use. Hardware wallet manufacturers publish signed firmware updates with checksums. Always verify against the official source before installing.
- Maintain physical security of the signing device. It should never be accessible to visitors, should be PIN-protected, and ideally stored in a locked container when not in use.
- Understand the complete trust chain. Air-gapped signing reduces network trust requirements to near zero but introduces hardware and firmware trust. Know your device’s supply chain, its secure element certification, and its firmware verification process.
Final Verdict
The sign-and-broadcast workflow gives you the most secure possible environment for moving significant crypto holdings.
But for the day-to-day side of your crypto life, receiving payments, managing smaller balances, sending between wallets, or using crypto for business, you need a platform that matches that same commitment to security without the complexity.
UPay is built for exactly this: a secure, user-friendly platform for managing cryptocurrency transactions that prioritizes your protection at every layer.
