Self-custody is the right approach for serious bitcoin holders. Holding your own keys means no counterparty risk, no exchange insolvency risk, and no institutional freeze. But self-custody is also the approach that demands the most from the holder — and the one where errors are permanent. There is no "forgot my password" recovery path for a lost seed phrase. There is no customer service line. There is no institutional backstop.
In working with bitcoin holders on custody architecture and inheritance planning, I encounter the same failure modes repeatedly. These are not exotic scenarios or edge cases. They are the norm — and they are entirely preventable.
This is the most common and most consequential misunderstanding in bitcoin self-custody. The hardware wallet — whether a Ledger, a Trezor, a Coldcard, or any other — is not your bitcoin. It is a signing device. Your bitcoin is controlled by a private key, encoded in your seed phrase. The device is simply a convenient, secure way to use that key without exposing it to internet-connected computers.
Hardware devices fail. They are lost, stolen, damaged, or simply stop functioning. Any of these events are routine and entirely recoverable — as long as you have your seed phrase. Without it, a failed device means lost bitcoin. Permanently.
Understand clearly that your seed phrase is the actual backup. Generate it, write it down (or stamp it on a metal plate), verify it, and store it securely — in a location separate from the device, protected from fire and water, and accessible to whoever should inherit your bitcoin. Never store the seed phrase digitally.
A custody architecture with a single point of failure is not secure custody — it is a single accident, theft, or disaster away from total loss. Single points of failure appear in multiple places: a single device with no seed phrase backup; a seed phrase in one location that could burn; a passphrase held only in memory; a multisig where all keys are stored together.
Each of these configurations violates the basic principle of resilient custody: no single event should be sufficient to cause permanent loss.
Map out every single point of failure in your current setup. For each one, ask: if this fails, is my bitcoin gone? Geographically distributed seed phrase backups — in at least two separate locations — are the minimum for serious holdings.
A holder with a good custody setup who has not documented an inheritance procedure has built something that will work perfectly during their lifetime and fail completely at death. Consider what your heirs would face if you died tonight. Do they know your bitcoin exists? Do they know where the hardware device is? Do they know what a seed phrase is?
Create an inheritance document that answers every one of those questions — where the bitcoin is, where the hardware device is, where the seed phrase is, and step-by-step instructions a non-technical heir can follow. Store it somewhere your executor will find it.
A passphrase — sometimes called a "25th word" — is a powerful security tool. Without it, even someone who finds the seed phrase cannot access the bitcoin. It also introduces a catastrophic failure mode I encounter regularly: the passphrase exists only in the holder's memory, and the holder dies, becomes incapacitated, or simply forgets it. The bitcoin is permanently inaccessible — even to the holder.
If you use a passphrase, it must be documented and stored separately from the seed phrase, accessible to heirs under appropriate conditions, and included in your inheritance documentation. Treat the passphrase with the same documentation discipline as the seed phrase itself.
The problem occurs in both directions: under-engineering for significant holdings, and over-engineering to the point that the system cannot be used or recovered. A single hardware device with a handwritten seed phrase in a desk drawer is adequate for small amounts. For significant holdings, it is not. Equally, a complex multisig arrangement that neither the holder nor their heirs can navigate in practice provides no real security.
Match your custody architecture to your holding size, risk tolerance, and the realistic technical capabilities of you and your heirs. For holdings above a meaningful threshold, this question should be determined by a custody specialist, not improvised based on online forums.
"Self-custody is a commitment that extends beyond your own lifetime. The question is not just whether you can access your bitcoin — it is whether the people you care about can access it when you cannot."
Stan ReevesThe window to address these gaps is before any of these events occur. The planning required is not technically complex — it is a matter of documentation, discipline, and occasionally specialist guidance to ensure the architecture is appropriate for the holding size and family situation.