Verify your Bitcoin.
Trust the math.

Bitcoin Witness is a set of plain-text scripts that turns any Raspberry Pi into the air-gapped verification device you've been thinking about. Validate your hardware wallet. Derive your addresses independently. Generate a Confidence Report your heirs can actually use. Generate keys, manage passwords, encrypt documents — all offline, all auditable, all on your hardware.

One workflow. One Confidence Report. Zero trust required.

View seedverify.py on GitHub →

seedverify.py

$ python3 seedverify.py Seed: abandon abandon abandon ... about Master Fingerprint: 73C5DA0A BIP84 — Native SegWit #0 bc1qcr8te4kr609gcawutmrza0j4xv80jy8z306fyu #1 bc1qnjg0jd8228aq7ezdwt2dph4hilpkr4lek7ekse #2 bc1qp59yckz4ae5c4efgw2s5ltz6hpt9rha5v79g8a ✓ Verification complete

The Verification Device You've Been Thinking About

Our Workflow

Your Computer (online)

Verify and run plain-text scripts. No binaries.

Downloads + GPG verifies all components

────▶

SD Card

All software pre-packaged

────▶

Your Pi (offline)

Air-gaps, hardens, and installs everything.

Your Pi never touches the internet.

Every hardware wallet asks for trust.

Bitcoin Witness removes this requirement.

Verification used to take 20+ manual steps.

Now it takes one script.

Your heirs need more than a seed phrase.

They need a Confidence Report.

Bitcoin Witness doesn't replace your hardware or software wallet — it verifies the information you are given. Independently, on an air-gapped device you have bought, using auditable scripts you can read line by line, or trusted software like Electrum or Sparrow — your choice.

The Deliverable

The Confidence Report

The Confidence Report is generated entirely on your air-gapped Raspberry Pi — configured by plain-text scripts you can read, running on hardware you bought. No server, no account, no internet connection. The verification is between you and the math.

═══════════════════════════════════════════════════════════ BITCOIN WITNESS — CONFIDENCE REPORT ═══════════════════════════════════════════════════════════ Date: 2026-04-15 14:32:07 UTC Device: Raspberry Pi 4 (ID: a3f8c2d1) Air-Gap Status: VERIFIED ✓ Entropy Quality: Excellent (3847/4096) VERIFICATION RESULT ─────────────────── Seed Fingerprint: 73C5DA0A Seed Length: 24 words Passphrase Used: No BIP84 (Native SegWit) — m/84'/0'/0' Receive #0: bc1qcr8te4kr609gcawutmrza0j4xv80jy8z306fyu Receive #1: bc1qnjg0jd8228aq7ezdwt2dph4hilpkr4lek7ekse Receive #2: bc1qp59yckz4ae5c4efgw2s5ltz6hpt9rha5v79g8a BIP44 (Legacy) — m/44'/0'/0' Receive #0: 1LqBGSKauBjvYMoAjfMHUEPyPE5bJokyXv Receive #1: 1Ak7MJGSTwXBC8AsGFfEMiv5TUzXY2DYkB ═══════════════════════════════════════════════════════════ This report contains ZERO seed material. Safe to print, store, or share. Store alongside your seed backup. Hand to your estate attorney. Include in your inheritance package. Report SHA-256: 8a3f2c91e7b... ═══════════════════════════════════════════════════════════

Device ID Air-gap verified Your addresses Zero seed material

This is what you get. A timestamped, SHA-256-hashed proof that your seed produces the addresses you expect — without revealing the seed itself.

When your heirs need to recover your Bitcoin, this is how they know it works on the first attempt.

Your Bitcoin Witness, Set Up

Once your air-gapped Pi is configured

Start where you're comfortable.

Verify Zero risk to start

Verify addresses from your xpub — no seed touches the device
Full seed verification across BIP44, BIP49, BIP84, BIP86
Generate your Confidence Report — timestamped, SHA-256 hashed proof

Create Air-gapped generation

Generate new seeds with dice rolls or coin flips — zero RNG trust
Create strong passwords with KeePassXC — fully air-gapped password vault
Derive keys for any BIP39-compatible coin with Ian Coleman's tool (bundled)
Manage encrypted password databases offline

Sign & Protect Full sovereignty

Sign transactions offline with Electrum (PSBT via USB or QR)
Sparrow Wallet for advanced operations (optional, Pi 4/5)
Encrypt inheritance documents with GPG (AES-256)
Full-disk encryption with LUKS
Secure backup and restore to USB

What's Inside

A complete air-gapped workstation: seed verification, key generation, offline signing, password management, document encryption — all running on plain-text scripts you can read line by line. No binaries. No black boxes. No internet. Ever.

Six guided workflows

01
Seed Verification — Derive and compare addresses across all standard paths
02
xpub Watch-Only — Verify without entering your seed
03
Seed Generation — Create new seeds with dice rolls or coin flips
04
PSBT Signing — Import, review, sign, and export transactions offline
05
Encrypted Documents — GPG-encrypted inheritance planning
06
System Health — One-click air-gap verification and diagnostics

Technical

100+ auditable plaintext scripts. Python stdlib-only for core verification. Works on Pi Zero v1.3 to Pi 5. Electrum offline. Sparrow optional on Pi 4/5.

Power Tools

Air-gap diagnostic (7-check) Boot integrity baseline & verify System integrity check Encrypted backup to USB Wallet backup & restore Entropy monitoring & remediation Secure file shredding Factory reset / wipe-after-use Audit logging Log rotation

Open Source Core

The math isn't ours. The workflow is.

seedverify.py implements BIP39/BIP32 derivation using only Python's standard library — no external packages, no network calls, nothing you can't read in an afternoon. The same math lives in Electrum, Trezor's python-mnemonic, and dozens of GitHub repos.

What those tools don't give you: a guided air-gap workflow, a timestamped Confidence Report, and a Pi image where everything is already hardened. That's Bitcoin Witness.

              seedverify.py
              Python
            

import hashlib, hmac

def mnemonic_to_seed(words: list[str], passphrase: str = "") -> bytes:
    """BIP39: Convert mnemonic to 64-byte seed via PBKDF2-HMAC-SHA512."""
    mnemonic = " ".join(words)
    salt = "mnemonic" + passphrase
    return hashlib.pbkdf2_hmac(
        "sha512", mnemonic.encode("utf-8"),
        salt.encode("utf-8"), 2048
    )

Read the source on GitHub →

Hardware

Your hardware. Your choice.

Support Level	Hardware	What Works
Full support	Pi 4, Pi 5 (2–8 GB)	All software including Sparrow
Supported	Pi Zero 2W (512 MB)	Electrum-first; Sparrow not recommended
Community	Pi Zero v1.3, Pi 3B+	No WiFi chip — maximum paranoia option

You buy the Pi anywhere you want. Generic hardware, no supply chain trust.

We provide 100% auditable plaintext scripts. No compiled binaries. No black boxes. You read every line that runs on your device.

Shipping Q2 2026

Join the waitlist for early access and a free Air-Gap Security Checklist.

FAQ

Common questions

What can I actually do with Bitcoin Witness?

a) Verify your hardware or software wallet — independently derive your addresses on separate hardware running separate code. Know that your ColdCard, Ledger, Trezor, or Electrum is generating what it claims.

b) Generate a Confidence Report — a timestamped, SHA-256-hashed proof document you can print, store with your estate documents, or share with an advisor — without revealing your seed.

c) Generate and manage your own keys and passwords — create seeds with dice or coin flips (zero RNG trust), manage passwords with KeePassXC, derive keys for any BIP39-compatible coin — all on an air-gapped device you configured from scratch.

d) Sign transactions offline — import, review, and sign PSBTs using Electrum or Sparrow without your signing device ever touching the internet.

How is this different from Ian Coleman's BIP39 tool?

Ian Coleman's tool runs in a browser and requires you to know which derivation paths to check. Bitcoin Witness bundles Ian Coleman's tool on air-gapped hardware alongside a guided workflow that produces a timestamped Confidence Report. The math is the same. The operational security is not.

Why should I trust your scripts?

Every script is plain-text bash or Python. No compiled binaries. You can read every line before running it, or ask an AI to audit it. Each release ships with SHA-256 checksums and GPG signatures.

The Pi Zero 2W has WiFi — is it really air-gapped?

We disable WiFi at 5 layers: hardware dtoverlays, kernel module blacklist, firmware deletion, rfkill, and active monitoring. For zero WiFi silicon, use a Pi Zero v1.3. The installer detects your hardware and explains the tradeoff.

What do I need to buy?

Any Raspberry Pi running PiOS Bookworm 64-bit, a microSD card (16 GB+), a power supply, a display adapter, and a USB keyboard. Total hardware cost: $45–80.

Can this replace my ColdCard / Ledger / Trezor?

No, and it's not designed to. Bitcoin Witness verifies your hardware wallet. It's a second opinion from independent software on independent hardware.

What's in the Confidence Report?

A timestamped proof showing your seed fingerprint, derived addresses across all standard paths (BIP44/49/84/86), device ID, air-gap status, and entropy quality — with a SHA-256 hash for integrity. It contains zero seed material and is safe to print or share.

Is this open source?

Bitcoin Witness is source-available — 100% auditable plaintext scripts you can read before running. It is not OSI open source. The free companion tool seedverify.py is MIT-licensed on GitHub.

How is this different from Unchained or Casa?

Collaborative custody (Unchained, Casa) solves who can sign. Bitcoin Witness solves does the backup work. They complement each other — we verify the seed layer, they manage the signing layer. For the millions of single-sig holders, a Confidence Report serves a similar trust function.

What if I need help setting up?

Join the waitlist to be notified when guided setup options are available. Community support is available via GitHub Discussions.

Get the Air-Gap Security Checklist — free.

A practical guide to the 7 checks every air-gapped device should pass. The same checks Bitcoin Witness automates.

Here's your Air-Gap Security Checklist.

These are the same 7 checks Bitcoin Witness runs automatically before every sensitive operation. You can run them yourself on any Linux device — Raspberry Pi, laptop, or desktop. Open a terminal and follow each step.

Don't worry if you're not a terminal expert — each check is one command. Copy it, paste it, read the output.

□ 1. No Network Interfaces Active

A "network interface" is any connection your device has to the outside world — WiFi, Ethernet, or Bluetooth. On an air-gapped device, all of these should be turned off. Even an interface that isn't connected to a network can theoretically be exploited.

What to type in the terminal:

ip -o link show | grep "state UP"

What you want to see:

Nothing. Empty output means no interfaces are active. That's exactly what you want.

What it means if you see something:

If you see eth0 or wlan0 listed, that interface is still active. Turn it off by typing: sudo ip link set wlan0 down (replace wlan0 with whatever name appeared).

□ 2. No Default Routes

A "route" tells your device how to reach the internet. If a default route exists, your device knows a path out — even if no cable is plugged in. Removing all routes ensures there's no way for data to leave.

What to type:

ip -4 route show default

Then also type:

ip -6 route show default

What you want to see:

Nothing for both commands. No routes means no path to the internet.

What it means if you see something:

If you see "default via..." in the output, remove it: sudo ip route del default

□ 3. No DNS Resolvers

DNS is the system that translates website names (like "google.com") into numbers your computer can use. If your device has a DNS resolver configured, it has a potential path to communicate with the internet. On an air-gapped device, DNS should be completely empty.

What to type:

grep nameserver /etc/resolv.conf

What you want to see:

Nothing, or "No such file or directory." Both mean DNS is not configured.

What it means if you see something:

If you see lines starting with "nameserver", clear the file: sudo truncate -s 0 /etc/resolv.conf

□ 4. No Listening Sockets

A "socket" is like an open door on your device that other computers can connect to. A web server, SSH, or file sharing service all open sockets. On an air-gapped device, no doors should be open to the outside — only internal ("loopback") connections are acceptable.

What to type:

ss -tuln | grep -v "127.0.0.1"

What you want to see:

Only lines mentioning 127.0.0.1 (your device talking to itself), or nothing at all.

What it means if you see something:

If you see lines with 0.0.0.0 or :: (meaning "listening on all networks"), a service is accepting outside connections. Find and stop it, or ask for help identifying which service it is.

□ 5. No Wireless Hardware Active

Even if WiFi and Bluetooth appear "off" in your settings, the radio hardware might still be powered on at a lower level. This check uses rfkill, a tool that blocks wireless hardware at the operating system level — a stronger guarantee than just turning WiFi off in the menu.

What to type:

rfkill list

What you want to see:

Every entry should show "Soft blocked: yes". This means the OS has explicitly disabled all wireless radios.

What it means if you see something different:

If any entry shows "Soft blocked: no", block everything: sudo rfkill block all

□ 6. Entropy Quality

"Entropy" is randomness. Your device needs high-quality randomness to generate secure keys and seeds. If entropy is too low, any keys generated could be predictable and therefore insecure. This check measures how much randomness is available right now.

What to type:

cat /proc/sys/kernel/random/entropy_avail

What you want to see:

A number above 256. Above 3000 is excellent. The higher the better.

What it means if the number is low:

If the number is below 256, wait a minute and check again (entropy builds up over time), or restart the entropy service: sudo systemctl restart rng-tools-debian

□ 7. No Unexpected Processes

A "process" is a running program. Some programs — like SSH (remote login), curl (web downloads), or wget (file downloads) — are designed to communicate over the network. None of these should be running on an air-gapped device. This check looks for any of them.

What to type:

What you want to see:

Only one line — the grep command you just ran searching for itself. That's normal and harmless.

What it means if you see more lines:

If you see sshd, curl, or similar programs listed, stop them. Find the process number (the second column) and type: sudo kill 1234 (replace 1234 with the actual number).

All 7 checks clear? Your device is air-gapped. You can safely handle key material.

Any check failed? Do not handle seeds or private keys until all 7 pass.

Bitcoin Witness automates all of these — they run at boot and before every workflow. This checklist is for when you want to verify it yourself.

Verify your Bitcoin.
Trust the math.

You're on the list.

Our Workflow

The Confidence Report

Once your air-gapped Pi is configured

Six guided workflows

The math isn't ours. The workflow is.

Your hardware. Your choice.

You're on the list.

Common questions

Get the Air-Gap Security Checklist — free.

Here's your Air-Gap Security Checklist.

Verify your Bitcoin.Trust the math.

You're on the list.

Our Workflow

The Confidence Report

Once your air-gapped Pi is configured

Six guided workflows

The math isn't ours. The workflow is.

Your hardware. Your choice.

You're on the list.

Common questions

Get the Air-Gap Security Checklist — free.

Here's your Air-Gap Security Checklist.

Verify your Bitcoin.
Trust the math.