SeedSigner

• Name: SeedSigner
• URL: https://seedsigner.com/
• Category: bitcoin self-custody signing infrastructure / DIY air-gapped hardware signer / QR-based transaction-signing control plane
• Tags: bitcoin-ecosystem
• Summary: SeedSigner is an open-source Bitcoin signing stack that lets users build a verifiably air-gapped, stateless signer from inexpensive Raspberry Pi parts instead of buying a sealed commercial hardware wallet. Its current primary-source footprint jointly exposes DIY hardware instructions, QR-only PSBT and xpub exchange, reproducible builds, a custom RAM-booting Linux image with networking stripped out, and first-party verification docs for download integrity and seed generation, so it is better cataloged as self-custody signing infrastructure than as a simple hardware-wallet brand.
• What it does:
  • Lets users assemble an offline Bitcoin signing device from common Raspberry Pi, screen, and camera components, typically for less than $50 according to the project site and README
  • Keeps signing air-gapped by receiving wallet data through scanned QR codes and returning signatures and xpub data through displayed QR codes
  • Supports seed creation from manual BIP39 entry, dice rolls, image entropy, and BIP85 child-seed derivation, plus address verification and message signing utilities
  • Supports single-sig and multisig wallet setup, PSBT review and signing, custom derivation paths, and compatibility with wallet software such as Sparrow, Specter Desktop, BlueWallet, Nunchuk, and Keeper
  • Ships a separate SeedSigner OS with reproducible-build guidance and an aggressively reduced attack surface, including RAM boot, no networking stack, and removable microSD after boot
• Key claims:
  • The official site and main README say SeedSigner’s goal is to lower the cost and complexity of Bitcoin multisignature wallet use by offering a verifiably air-gapped, stateless signing device built from inexpensive publicly available hardware
  • The primary product positioning is notable because the project emphasizes volunteer maintenance, fully open-source code, MIT licensing, and reproducible builds rather than a proprietary hardware trust model
  • The QR-only data-flow model is one of the strongest categorization signals: the device receives transaction or wallet data via camera-scanned QR codes and returns signatures or xpub information by displaying QR codes on its screen
  • The SeedSigner OS repository is especially useful for classification because it documents a purpose-built Linux image that boots from RAM, removes networking/Bluetooth/USB/HDMI-related surface area, and is specifically designed to run SeedSigner securely on common Raspberry Pi hardware
  • The dice-verification documentation is unusually high-signal because it shows the team publishing first-party procedures for independently checking seed-generation outputs against other tools rather than merely asking users to trust the device
  • The main repo and site both stress stateless operation, optional microSD removal after boot, and the absence of WiFi/Bluetooth on the recommended Raspberry Pi Zero 1.3 hardware profile
• Whitepaper: No canonical SeedSigner whitepaper or litepaper surfaced in this pass. The clearest current source of truth is the official site, the main seedsigner repo, the separate seedsigner-os repo, and first-party verification documentation; see ../whitepapers/seedsigner-primary-sources-2026-05-01.md.
• Sources:
  • https://seedsigner.com/
  • https://github.com/SeedSigner/seedsigner
  • https://raw.githubusercontent.com/SeedSigner/seedsigner/dev/README.md
  • https://github.com/SeedSigner/seedsigner-os
  • https://raw.githubusercontent.com/SeedSigner/seedsigner-os/main/README.md
  • https://raw.githubusercontent.com/SeedSigner/seedsigner/dev/docs/dice_verification.md
  • https://github.com/SeedSigner

Internal linkages

• Strongest reference points: coinkite, foundation-devices, and sparrow-wallet.
• Reusable lens: SeedSigner matters when the real comparison lives in QR transport, statelessness, reproducible images, and coordinator dependence, not in generic hardware-wallet branding.

Governance / control risk

• The leverage is in image verification, QR transport, seed-generation discipline, microSD handling, and the coordinator wallet wrapped around the signer.

• SeedSigner makes those workflow assumptions unusually legible. It still depends on surrounding wallet software to turn signing authority into a usable custody setup.

• Last reviewed: 2026-05-28 UTC