What the developer wrote
Authored by Peter D. Gray
forgotten pin
What changed, and why it matters
This commit only updates user documentation. It fixes a typo in a menu path and adds a new section explaining what to do if a user forgets their 'Bypass PIN' for the Spending Policy feature: perform a factory reset via 'Destroy Seed' and restore from backup. There is no code change and no security vulnerability is being fixed.
No security action required; this is a documentation-only update. Review the added guidance for accuracy if desired.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff modifies docs/spending-policy.md only. It corrects a mismatched backtick/quote in a menu path and clarifies that Seed Vault usage is blocked unless the related setting is enabled. It adds a ‘Forgotten Bypass PIN Code’ paragraph describing the recovery procedure (Advanced > Destroy Seed) and its effects. No firmware source code is changed.
Changed components
docs/spending-policy.mdInspect captured patch +16 / −3
diff --git a/docs/spending-policy.md b/docs/spending-policy.md
index 11317f7..eca3f45 100644
--- a/docs/spending-policy.md
+++ b/docs/spending-policy.md
@@ -35,7 +35,7 @@ for typical transactions before enabling the Spending Policy.
# Setup Spending Policy
-Visit `Advanced / Tool > Spending Policy" menu and choose
+Visit `Advanced / Tool > Spending Policy` menu and choose
"Single-Signer". First some background information is shown,
then you are prompted to define the "Bypass PIN". This PIN code
is only used when you need to disable the spending policy, but is
@@ -68,8 +68,9 @@ using this setting. In either case they are strictly readonly.
### Related Keys
-BIP-39 passphrase entry, Seed Vault usage can be blocked with
-this setting. Even when enabled, the Seed Vault is always readonly.
+BIP-39 passphrase entry, Seed Vault usage will be blocked unless this
+setting is enabled. Even when enabled, the Seed Vault is always readonly
+and cannot be changed.
# Other Menu Items
@@ -195,3 +196,15 @@ They could attempt unlimited spending, but transactions signed will
not be valid. If they try to view the seed words or generally export
private key material, they will hit many of the "wipe seed if delta
mode" cases.
+
+## Forgotten Bypass PIN Code
+
+If you've enabled a spending policy and still remember the main PIN,
+but cannot disable the feature because you've forgotten the Bypass
+PIN, your only option is to use `Advanced > Destroy Seed`. After
+some confirmations, this erases the master seed, all settings, seed
+vault items, secure notes, and trick pins. It's basically a factory
+reset except for the main PIN code which is unchanged. Once you've
+done that, you can enter your seed words from backup (or restore a
+backup file) and continue to use the COLDCARD again.
+
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.