Skip to main content

Air-Gapped Computer (AGC)

What You'll Do

In this guide, you will:

  • Understand why an air-gapped computer provides maximum security
  • Choose the right hardware for your AGC
  • Set up a permanently offline computer for Bitcoin operations

Time required: 2-4 hours
Difficulty: Intermediate to Advanced
Estimated cost: $50-200 (used ThinkPad) or $0 (repurpose old laptop)
Prerequisites: Old laptop (ThinkPad recommended), USB drive with Linux

Background Reading

Before starting, make sure you understand:

Why You Need an Air-Gapped Computer

An air-gapped setup takes security to the highest level. The device holding your private keys is physically isolated from the internet—it cannot be accessed or attacked remotely.

Key security measures:

  • Wi-Fi and Bluetooth physically removed
  • Ethernet port disabled or permanently damaged
  • Never connects to any network, ever

This is the highest level of self-custody security, though it requires more technical effort than standard hardware wallets.

Use Cases for an AGC

Use CaseDescription
Seed generationCreate seeds from dice rolls with DIY Seed Guide
Hardware wallet verificationVerify your HWW generates correct addresses
Transaction signingSign transactions completely offline
Inheritance planningCreate encrypted messages for heirs

Why AGC Over SeedSigner

FeatureAGCSeedSigner
EncryptionStore encrypted wallet backupsStateless, unencrypted only
VerificationUse multiple wallets to cross-checkSingle software
User experienceFull keyboard, large displaySmall screen, camera input
DiscretionLooks like normal laptopKnown Bitcoin device
FunctionalityGPG, scripts, advanced tasksSigning only

While SeedSigner is great for certain use cases, an AGC offers more versatility and security options.

Guide Overview

StepWhat You'll Do
1. Types of AGCChoose your hardware approach
2. SetupConfigure your air-gapped system

Generate Your Own Seed

Use your AGC to create a truly random seed phrase with our DIY Seed Generation Guide. Dice rolls + air-gapped computer = maximum security.

Firmware Options

For the best AGC security, replace the stock BIOS with open-source firmware: