Chapter 06 10 5 min read
Secure Your Bitcoin
Hardware wallets, backups, and recovery: a security plan you understand.
Protect both the device and the backup. A hardware wallet cannot rescue a disclosed or missing recovery phrase.
In this chapter
Protect access for the years ahead
Treating Bitcoin as savings technology means preparing to keep access for a long time. Devices break, homes change, and memory fades. A durable backup and a recovery process you understand are part of saving, not just setup tasks.
Security protects access to your sats. It does not protect their purchasing power while Bitcoin is still monetizing. A sound plan deals with both: secure the keys, and keep the amount within what you can afford to expose to price risk.
Give the keys a dedicated home
A hardware wallet is a dedicated device designed to keep private keys away from a general-purpose phone or computer. It authorizes a transaction internally, while companion software broadcasts it.
Its screen matters. Check receiving addresses, payment destinations, amounts, and fees on the device where supported. A device can protect keys while still signing a bad transaction you approve.
Trezor and BitBox are starting points. Choose a model whose setup and recovery process you understand. Order from the manufacturer or an authorized seller, and follow its authenticity checks. Never use recovery words supplied on an already-filled card.
Make the backup in private
Let your wallet generate its own recovery information. Record the words in order and verify them through the wallet’s official setup process. Do not invent your own phrase.
Keep the backup offline. Avoid photographs, email drafts, cloud documents, and password-manager notes for recovery words. A BitBox microSD backup also needs physical protection: do not plug it into an ordinary computer to inspect or copy it.
No support agent needs your recovery words. A message asking you to “validate,” “synchronize,” or “upgrade” a wallet by entering them on a website is a reason to stop.
Plan for damage and loss
Paper can be a first backup, but fire and water can destroy it. A compatible metal backup can improve physical durability. Cryptosteel and Trezor Keep Metal are options; verify the word count and backup standard before buying.
Store the wallet and backup separately in controlled, discreet locations. Consider theft, accidental disposal, fire, and whether someone who needs to recover the wallet could find the instructions. Additional copies reduce some loss risks while creating more places from which a backup could be stolen.
Do not casually split a word list into pieces or invent an encryption method. Advanced arrangements can introduce recovery failures you do not yet know how to recognize.
Practice recovery safely
Use the manufacturer’s built-in backup-check feature, where available, and the instructions for your exact model. This can verify the backup without erasing the working wallet.
Do not reset a funded wallet just to see what happens. If you want to rehearse a full recovery, learn the procedure using a separate practice wallet and a small amount first. Use a compatible device and backup standard; different word formats are not interchangeable.
An optional wallet passphrase is a separate secret that can create a different wallet. Losing it can make the backup insufficient. Leave advanced features alone until you understand their recovery consequences.
Build a few repeatable habits
- Keep the wallet software current, using official update channels. Check your backup before a device update.
- Make a small test when using a new destination or setup. Verify every later transaction too.
- Keep device PINs private, and avoid public discussion of balances and backup locations.
- Be skeptical of urgent support messages, giveaways, and recovery services asking for an advance payment.
- Leave clear recovery instructions for a trusted person without exposing the secrets in an ordinary shared document. Seek qualified help for estate planning when needed.
If you believe the backup has been exposed, treat that wallet as compromised. A new device PIN does not change the keys. From a trusted setup, moving funds to a newly generated wallet with a new backup may be necessary; get reliable help if you are unsure how to proceed.
A few places to start
Read the details and compare with your own needs. How recommendations work.
Trezor
RecommendedHardware wallets that let you review and approve transactions on a separate device.
Before choosing Compare current models, supported backup formats, and recovery steps. Buy directly or through an authorized seller.
Visit TrezorBitBox
RecommendedHardware wallets with a Bitcoin-only option and a guided setup in the BitBox app.
Before choosing Understand the microSD backup and recovery words. Treat either backup with the same care as the wallet keys.
Visit BitBoxCryptosteel
RecommendedMetal storage for recording recovery information offline, with more physical resilience than paper.
Before choosing Choose a model compatible with your exact backup format. Metal protects against damage, not someone reading it.
Visit CryptosteelTrezor Keep Metal
RecommendedA metal backup designed to preserve wallet recovery words without relying on an online copy.
Before choosing Check the exact word count and backup standard supported by the model before ordering.
Visit Trezor Keep Metal