Bitcoin Security Guide

Bitcoin security is your responsibility. Unlike banks, there's no "forgot password" recovery. Understanding and implementing proper security protects your investment.

Why Security Matters

Self-Custody Reality

Key Facts:

• You control your keys
• No central authority
• Transactions irreversible
• Lost keys = lost Bitcoin

Common Losses

Ways People Lose Bitcoin:

• Forgotten seed phrases
• Phishing attacks
• Exchange hacks
• Malware/keyloggers
• Physical theft
• Scams

Threat Landscape

Online Threats

Digital Risks:

• Phishing websites
• Malware
• Keyloggers
• SIM swapping
• Email compromise
• Social engineering

Physical Threats

Real-World Risks:

• Theft of devices
• Stolen backups
• Home invasion
• Coercion
• Natural disasters

Third-Party Risks

Platform Risks:

• Exchange hacks
• Exchange insolvency
• Custodial failures
• Insider theft

Seed Phrase Security

The Master Key

Understanding:

• 12 or 24 words
• Controls all Bitcoin
• Never changes
• Cannot be reset

Storage Best Practices

Do:

• Write on paper
• Store in secure location
• Consider metal backup
• Keep multiple copies
• Separate locations

Don't:

• Store digitally
• Take photos
• Email to yourself
• Save in cloud
• Store near device

Metal Backups

Options:

• Steel plates
• Titanium cards
• Cryptosteel/Billfodl
• Fire/water resistant
• Long-term durability

Multiple Locations

Strategy:

• Home safe
• Bank safe deposit box
• Trusted family member
• Geographic separation
• Consider security of each

Wallet Security

Hardware Wallet Best Practices

Essential:

• Buy directly from manufacturer
• Check for tampering
• Set strong PIN
• Update firmware
• Verify receive addresses

Software Wallet Security

Protect:

• Use on secure device
• Keep software updated
• Strong password
• Enable encryption
• Malware protection

Device Security

General:

• Up-to-date operating system
• Antivirus software
• Avoid suspicious downloads
• Dedicated device if possible
• Regular security audits

Account Security

Two-Factor Authentication

Types Ranked:

• Hardware keys (best): YubiKey
• Authenticator apps (good): Google Authenticator, Authy
• SMS (weak): Avoid if possible

Setup:

• Enable on all accounts
• Backup 2FA codes
• Don't use SMS if avoidable
• Hardware key for high-value accounts

Password Management

Best Practices:

• Unique password per site
• Long, random passwords
• Password manager (Bitwarden, 1Password)
• Never reuse passwords

Email Security

Protect Your Email:

• Strong, unique password
• 2FA enabled
• Dedicated email for crypto
• Watch for phishing

Phishing Protection

Common Phishing Tactics

Watch For:

• Fake exchange websites
• Impersonation emails
• Fake support messages
• Malicious links
• Urgency/fear tactics

Protection Strategies

Do:

• Bookmark official sites
• Type URLs manually
• Verify SSL certificates
• Check sender addresses
• Never click email links

Red Flags

Warning Signs:

• Urgent action required
• Too good to be true
• Spelling/grammar errors
• Requests for seed phrase
• Unsolicited contact

Scam Awareness

Common Scams

Types:

• Giveaway scams ("Send 0.1, get 1 back")
• Fake support scams
• Investment scams
• Romance scams
• Ponzi schemes

Protection Rules

Remember:

• No one gives free Bitcoin
• Support never asks for seed phrase
• Guaranteed returns are scams
• Verify before trusting
• If too good to be true, it is

Advanced Security

Multisignature Wallets

Benefits:

• Requires multiple keys
• No single point of failure
• Theft protection
• Options: 2-of-3, 3-of-5

Use Cases:

• Large holdings
• Business accounts
• Shared funds
• Enhanced security

Passphrase (25th Word)

Additional Protection:

• Extra word added to seed
• Creates hidden wallet
• Plausible deniability
• Must remember exactly

Caution:

• Lose passphrase = lose Bitcoin
• Not for beginners
• Must backup securely

Air-Gapped Security

Maximum Security:

• Computer never online
• Sign transactions offline
• Transfer via QR codes/SD
• Complex but very secure

Exchange Security

While on Exchanges

If Using Exchanges:

• Enable all security features
• Use withdrawal whitelist
• Set up address book
• Enable 2FA
• Monitor activity

Minimizing Exchange Risk

Best Practice:

• Withdraw to personal wallet
• Only keep trading amounts
• Multiple exchange accounts
• Research exchange security

Recognizing Exchange Issues

Warning Signs:

• Withdrawal problems
• Long processing times
• Poor communication
• Negative news
• Regulatory issues

Physical Security

Protecting Hardware

Secure:

• Lock up hardware wallets
• Secure backup locations
• Be discreet about holdings
• Home security

Operational Security

Practices:

• Don't discuss holdings publicly
• Be cautious about display
• Trusted contacts only
• Plan for emergencies

$5 Wrench Attack

Physical Coercion:

• Threat of violence for keys
• Difficult to prevent
• Decoy wallet strategy
• Multisig delays

Inheritance Planning

Preparing for Worst Case

Consider:

• How will heirs access funds?
• Documentation needed
• Trusted individuals
• Legal considerations

Options

Methods:

• Clear written instructions
• Trusted executor
• Time-locked solutions
• Multi-party schemes
• Legal documentation

Balance

Challenge:

• Accessible enough for heirs
• Secure enough from theft
• Clear but not too detailed
• Regular updates needed

Security Checklist

Essential Practices

• [ ] Hardware wallet for large amounts
• [ ] Seed phrase on paper/metal
• [ ] Multiple backup locations
• [ ] 2FA on all accounts
• [ ] Unique, strong passwords
• [ ] Bookmarked official sites
• [ ] Verified addresses before sending
• [ ] Regular security reviews

Advanced Practices

• [ ] Dedicated crypto device
• [ ] Hardware security keys
• [ ] Multisig setup
• [ ] Inheritance plan
• [ ] Regular backup verification

Key Takeaways

• You are responsible for your own security
• Seed phrase is the master key—protect it
• Never store seed phrase digitally
• Enable 2FA on all accounts
• Be vigilant against phishing
• If it seems too good to be true, it is
• Hardware wallets for significant amounts
• Plan for inheritance and emergencies

What's Next?

Learn about the Lightning Network and how it enables fast, cheap Bitcoin transactions.

This article is for educational purposes only and does not constitute financial advice.