Bitcoin Safe

A desktop software for managing your cold storage wallets

• Easy Multisig-Wallet Setup
  • Step-by-Step instructions for a secure MultiSig setup with PDF backup sheets
  • Test transactions ensure that all hardware signers are ready
  • Full support for Coldcard Q, Coldcard Mk4, Coldcard Mk5, BitBox02 / BitBox02 Nova, Foundation Passport, Jade, Jade Plus, Trezor Safe 3 & 5, Keystone, Ledger Nano S / S Plus / X / Flex, Specter DIY / Shield / Shield Lite, SeedSigner, Krux, using QR, USB, and SD-card
• Secure: Hardware signers only
  • All wallets require hardware signers/wallets for safe seed storage
  • Powered by BDK
• Fast
  • Electrum/Esplora server
  • Compact Block Filters with transaction notifications
• Multi-Language
  • 🇺🇸, 🇨🇳, 🇪🇸, 🇯🇵, 🇷🇺, 🇵🇹, 🇧🇷, 🇮🇳, 🇦🇪, 🇮🇹, 🇫🇷, 🇩🇪, 🇲🇲, 🇰🇷, 🇹🇭, 🇮🇷, 🇵🇱, 🇪🇸, 🇮🇩, 🇹🇷, 🇺🇦, 🇻🇳, 🇧🇩 (more upon request)
• Simpler address labels by using categories (e.g. "KYC", "Non-KYC", "Work", "Friends", ...)
  • Automatic coin selection within categories
  • Transaction flow diagrams, visualizing inputs and outputs, click on inputs and output to trace the money flow
• Sending for non-technical users
  • 1-click fee selection via mempool-blocks
  • Automatic merging of utxos when fees are low
• Plugin Sync & Chat
  • Encrypted cloud backup (via nostr) of labels
  • Label synchronization between different computers
  • Wallet chat and PSBTs sharing between different computers

Available on all platforms

Windows	Mac OS X	Linux

Comprehensive Feature List

• Import and Export Capabilities

  • CSV export for all lists
  • CSV import for batch transactions
  • Label import and export using BIP329
  • Label import from Electrum wallet
  • Export of the money flow diagram to svg
  • Drag and drop for Transactions, PSBTs, and CSV files

• Wallet Features

  • Simplified address labeling using categories like KYC, Non-KYC, Work, Friends
  • Bump fee on transactions (via Replace-by-Fee)
  • Receive faster (via Child Pays For Parents)
  • Encrypted wallet storage
  • Backup PDF with Descriptor (Text and QR code)
  • Message signing via USB and QR

• Support for all major hardware signers

  • MicroSD (files)
  • USB
  • QR codes (enhanced QR code detection for Laptop cameras)
  • Animated QR codes including Coldcard/BBQr and UR format

• Search and Filtering Options

  • Fast filtering across txids, utxos, labels, dates, amounts, categories
  • Search across all open wallets, txids, utxos, labels, dates, amounts, categories

• Languages

  • 🇺🇸 English, 🇨🇳 Chinese – 简体中文, 🇪🇸 Spanish – español de España, 🇯🇵 Japanese – 日本語, 🇷🇺 Russian – русский, 🇵🇹 Portuguese – português europeo, 🇧🇷 Portuguese (Brazil) – português do Brasil, 🇮🇳 Hindi – हिन्दी, 🇦🇪 Arabic – العربية, 🇮🇹 Italian – italiano, 🇫🇷 French – Français, 🇩🇪 German – Deutsch, 🇲🇲 Burmese – မြန်မာ, 🇰🇷 Korean – 한국어, 🇹🇭 Thai – ภาษาไทย, 🇮🇷 Persian (Farsi) – فارسی, 🇵🇱 Polish – Polski, 🇪🇸 Catalan – Català, 🇮🇩 Indonesian – Bahasa Indonesia, 🇹🇷 Turkish – Türkçe, 🇺🇦 Ukrainian – Українська, 🇻🇳 Vietnamese – Tiếng Việt, 🇧🇩 Bengali – বাংলা (more upon request)

• Transaction / PSBT Creation

  • 1-click fee selection and mempool block preview
  • Automatic merging of utxos when fees are low
  • Highlighting of own addresses
  • Address poisoning detection and warning

• Security and Reliability

  • No seed generation or storage on mainnet
  • Seed storage requires a separate hardware signer
  • Update notifications and signature verification
  • Powered by Bitcoin Development Kit (BDK)

• Ease of Use for Multisig Wallets

  • Simplified setup for multisig wallets, including step-by-step instructions and PDF backup sheet
  • Test signing with all hardware signers
  • Collaborative wallet management including chat and PSBT sharing via nostr and label synchronization between trusted devices
  • Optional custom nostr server

• Fast syncing:

  • Electrum/Esplora server
  • Compact Block Filters

Installation from Git repository

Ubuntu, Debian

• Install dependencies:

  sudo apt-get install qt6-tools-dev-tools libzbar-dev libxcb-cursor0 '^libqt6.*$' 

• Install poetry and run bitcoin_safe

  git clone https://github.com/andreasgriffin/bitcoin-safe.git
  cd bitcoin-safe
  pip install poetry  && poetry install && poetry run python -m bitcoin_safe

Mac

• Clone bitcoin_safe

  open "/Applications/Python 3.12/Install Certificates.command"
  export SSL_CERT_FILE=$(python3 -m certifi) # to fix ssl errors
  git clone https://github.com/andreasgriffin/bitcoin-safe.git
  cd bitcoin-safe

• Optional: dependency zbar

  brew install zbar  

• Run bitcoin_safe

  python3 -m pip install poetry && python3 -m poetry install && python3 -m poetry run python3 -m bitcoin_safe

Flatpak build

• Reproducible Flatpak bundle build via Docker:

  pip install poetry
  poetry install
  poetry run python tools/build.py --targets flatpak --commit None

  This is the default Flatpak path and matches the GitHub workflow structure: the bundle is built inside a Docker container, then startup is tested separately in CI.

• Host build, install, and smoke-test the Flatpak locally:

  sudo apt-get install flatpak flatpak-builder dbus-daemon desktop-file-utils
  flatpak remote-add --user --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo
  bwrap --ro-bind / / --proc /proc true
  pip install poetry
  poetry install
  poetry run python tools/build.py --targets flatpak --commit None --build-flatpak-on-host

• The Flatpak bundle is written to dist/Bitcoin-Safe-<version>-<arch>.flatpak.

• In VS Code the Build Flatpak launch configuration from .vscode/launch.json uses the host build/install/test path.

Development

• Run the precommit manually for debugging

poetry run pre-commit run --all-files

Python file headers are updated automatically by add-license-header during pre-commit. If the hook rewrites a file, re-stage it and re-run the commit.

Regtest docker environement with electrs and mempool

• install docker

# see https://docs.docker.com/engine/install/ubuntu/

• setting up a regtest environment in docker + mempool instance

curl https://getnigiri.vulpem.com | sudo bash # see https://nigiri.vulpem.com/#install
sudo nigiri start
xdg-open http://localhost:5000/

• This creates
  • esplora localhost:3000 electrs localhost:50000
  • and a gui block explorer at http://localhost:5000
• Setup mempool instance

sudo apt install docker-compose
git clone https://github.com/ngutech21/nigiri-mempool.git

pushd nigiri-mempool
sudo docker-compose up -d
sleep 10
# this is needed because the database needs time to start up 
sudo docker-compose up -d
popd
xdg-open http://localhost:8080/

# if the mempool is endlessly loading, then get the debug output with
sudo docker-compose logs -f mempool-api

• this opens a mempool at http://localhost:8080/

Control the Regtest environment

• get coins to an address

nigiri rpc generatetoaddress 1 bcrt1qgsnt3d4sny4w4zd5zl9x6jufc5rankqmgphyms9vz0ds73q4xfms655y4c # mine blocks

# or use the internal faucet
nigiri faucet bcrt1qgsnt3d4sny4w4zd5zl9x6jufc5rankqmgphyms9vz0ds73q4xfms655y4c 0.01

Verifying the binaries

• In Linux the appimage and deb file hashes should match perfectly with your own built version.
• The Windows exe files are signed, and therefore the signature needs to be stripped.

osslsigncode remove-signature -in signed-binary.exe -out binary-stripped.exe

binary-stripped.exe hash will match the hash of your built version.

Qt designer

Qt componets can be explored with the qt designer:

virtualenv .env-qt-designer
source .env-qt-designer/bin/activate
pip install pyqt6-tools 
pyqt6-tools designer 

Code signing policy

Free code signing provided by SignPath.io, certificate by SignPath Foundation

Privacy policy

This program uses by default

• the electrum/esplora server of blockstream.com to fetch blockchain data
• fetches mempool fee information from mempool.space

You can specify your own (personal) server for both in "Network settings".

When enabeling the Sync&Chat feature default relays are used to transmit encrypted data to your approved trusted devices. You can specify your own relay(s) in the Sync&Chat settings.

This program will not transfer any other information to other networked systems unless specifically requested by the user or the person installing or operating it.