Security alert · 30 Jul 2026: a seed-generation flaw in Coldcard devices was disclosed. What to do →

Signing computer: Windows or Linux?

TL;DR

Both are fine for a laptop that does nothing else. Windows is easier and what most people know. Linux has less going on in the background and fewer targets for malware, but hardware wallets need a small extra setup step.

WindowsLinux (Ubuntu, Debian)
Ease of setupEasyModerate
Hardware wallet supportWorks out of the boxNeeds udev rules (one menu item in Sparrow)
Background servicesManyFew
Malware aimed at itMostLess
Built-in protectionMicrosoft DefenderLimited; less needed
Maker apps (Suite, BitBoxApp, Ledger Wallet)YesYes

The device screen matters more

Your keys never touch the computer, and you check every address and payment on the device screens. The operating system mostly decides how much can go wrong on the computer’s side before those checks catch it. A clean, single-purpose laptop matters more than which system it runs (step 2).

If you choose Linux

  • Install a mainstream distribution such as Ubuntu or Debian, with full disk encryption.
  • Add the udev rules so your hardware wallets are recognised over USB: in Sparrow, Tools → Install Udev Rules.
  • Verify Sparrow’s download with gpg, as on Windows.
  • Turn on automatic security updates.

If you choose Windows

  • Reinstall Windows 11 from Microsoft’s own installer, update fully, keep Defender on.
  • Switch off clipboard sync and cloud backup.
  • Install nothing but Sparrow and the makers’ apps.

What about a live system like Tails?

It starts clean every time, which is attractive. But Tails doesn’t include Sparrow, so you keep it in Persistent Storage, and it forces everything through Tor, which some networks block. For most people a dedicated installed system is the better balance.