Think about what your everyday computer touches in a week: dozens of websites, browser extensions, downloads, email attachments, maybe a game or two. Every one of those is a path for malware, and malware has a favourite target. A dedicated Bitcoin computer is the blunt, effective answer: one cheap machine that does Bitcoin and nothing else, ever.
Why a Whole Separate Machine?
Because the everyday attacks are boring and effective. Clipboard malware quietly swaps the address you copied for the attacker's. Spyware watches your balance and flags you as a target worth robbing. A poisoned browser extension reads everything you see. None of these need to break Bitcoin's cryptography; they just need to share a computer with your wallet. A machine that never browses, never opens mail, and never installs anything unnecessary takes nearly all of that off the table at once.
To be clear about the division of labour: your keys should still live on an air-gapped signer like a SeedSigner. The Bitcoin computer is the coordinator side of the pair, the clean machine that runs your wallet software and talks to the network.
The Hardware: Cheap Is Fine
This build costs less than an off-the-shelf signing device. A used business laptop (the older ThinkPads are the community favourite for repairability and firmware freedom) or any spare machine in a closet will do, typically $50 to $150. Bitcoin software is light; the node is the only piece that wants disk space. If you later want to go deeper, the same class of machine is what Libreboot and Coreboot like best.
The Setup: Minimal by Design
- Fresh Linux install. Wipe the machine and install a mainstream distribution (Linux Mint is a friendly choice), verifying the download before you flash it.
- Full disk encryption. Turn on LUKS during install, so a stolen laptop is a brick instead of a wallet map.
- Only Bitcoin software. Sparrow, ideally your own Bitcoin node, and nothing else. No browser sessions, no email, no extras. Every package you skip is attack surface you never carry.
- Updates only from official sources, verified, on your schedule.
The Rules That Keep It Clean
The machine stays trustworthy only as long as the discipline holds: no browsing, no downloads, no borrowed USB sticks, no lending it out. Treat it like the tool it is. And keep the habit that survives every setup: verify receive addresses on your signing device's screen, not just on the computer, every time.
Want to go further? This guide gets you a clean online coordinator. The next rung is a machine with no network hardware at all: see the Air-Gapped Computer guide for deep cold storage work.
Keep building. Pair the machine with a properly set up signer, run your own node on it, and bring questions to a meetup.