When you set up a hardware or software wallet for the first time, it generates a seed phrase — a sequence of 12 or 24 words drawn from a standardised list of 2,048 words. These words encode your master private key in human-readable form.

Every Bitcoin address your wallet ever generates, and every private key that controls those addresses, can be derived from this single seed phrase. Anyone who has your seed phrase has complete and permanent access to every coin in your wallet. There is no password reset. There is no customer support. Access is absolute and irreversible.

1. Never digital. Never photograph it, type it, email it, or store it in any cloud service. Digital = hackable.

2. Never online. No password managers, no encrypted files on internet-connected devices. The security is only as strong as the weakest point in the chain.

3. Physical redundancy. One copy in one location is not enough. Fire, flood, or burglary can eliminate a single copy. Two physical copies in two geographically separate locations is the minimum standard.

4. Never share. No legitimate wallet provider, exchange, or support service will ever ask for your seed phrase. Anyone who does is attempting theft.

5. Metal beats paper. Paper burns, gets wet, fades. Steel engraving or stamping is the standard for long-term storage.

A software wallet on your phone or computer keeps private keys on a device that is connected to the internet, potentially running other apps, and vulnerable to malware. A hardware wallet keeps private keys on a dedicated chip that never connects to the internet and never exposes the private key to the host computer — even when plugged in to sign a transaction.

When you send Bitcoin from a hardware wallet, the transaction is constructed on your computer but signed inside the hardware device. The private key never leaves the device. Even if your computer is completely compromised with malware, an attacker cannot steal your keys — they can only attempt to manipulate what the transaction says, which the hardware device displays for your confirmation.

Bitcoin's protocol natively supports requiring multiple private key signatures to authorise a transaction. The most common configuration is 2-of-3: three keys exist, and any two must sign to move funds.

This creates a system with no single point of failure in either direction — no single compromise can steal funds (attacker needs two keys), and no single loss can prevent access (you need two of three, so losing one key still leaves you functional).

Each key is stored on a separate hardware device, in a separate physical location. Typically: one at home, one in a safety deposit box or trusted location, one with a lawyer or trusted family member.

Portfolio value over ~£100K: The complexity of multisig setup becomes worth it at this scale. Below this, a single hardware wallet with excellent seed backup practice is sufficient for most people.

Inheritance planning: A 2-of-3 where one key is held by a solicitor or family member, with instructions in a will, means funds are recoverable by heirs without giving any single party unsupervised access during your lifetime.

Business / shared treasury: Any situation where multiple parties need to authorise spending — company Bitcoin treasury, partnership, investment club.

Tools for self-managed multisig: Sparrow Wallet (desktop), Nunchuk (mobile), Casa, Unchained. These make setting up and using multisig significantly more accessible than it was three years ago.

Good custody practice addresses three threat vectors simultaneously:

Remote threats (hackers, malware, phishing): solved by hardware wallet + never going online with seed phrase.

Physical threats (theft, fire, flood): solved by geographic redundancy of seed phrase backups + metal over paper.

Human threats (scams, social engineering, coercion): solved by never disclosing holdings, using decoy wallets where appropriate, and having a documented recovery process known only to trusted parties.