Most Bitcoin is not stolen. It is lost - left on an exchange that failed, locked behind a single seed phrase that no one can find, or held in a structure that dies with the holder. Security for Bitcoin is not about chasing the next threat. It is about building a custody system that still works when something goes wrong.
The good news is that the basics are within reach of anyone holding more than a trivial balance. None of these steps require you to become a developer. Each one moves you from a single point of failure to something more resilient. Together, they form a foundation that protects your coins through theft, fire, forgetfulness, and death.
1. Move your coins off the exchange
The easiest way to lose Bitcoin is to leave it where you do not control it. Exchanges are convenient for buying and selling, but they are not storage. When your coins sit on an exchange, you hold an IOU, not the keys. The exchange can freeze withdrawals, change terms, mismanage funds, or fail entirely. History has repeated this lesson often enough.
Self-custody means you - and only you - control the private keys that move your Bitcoin. The first practical move is to withdraw your coins to a wallet you control. That wallet does not need to be perfect on day one. It needs to be yours. Once the coins are off the exchange, you remove the largest and most common source of loss in Bitcoin.
2. Use a hardware wallet
A hardware wallet is a dedicated device that stores your private keys offline. Unlike a phone or laptop, it is not connected to the internet while your keys are at rest, so it cannot be drained by a remote malware infection. For most holders, a hardware wallet is the right starting point for serious self-custody.
Popular options include Ledger and Trezor. Each has different trade-offs around security model, open-source firmware, and user interface. Trezor is widely supported and relatively easy to set up, with fully open-source firmware and hardware designs that have been reviewed publicly for years. The best device is the one you can actually use correctly, not the one with the most features on paper.
Whichever device you choose, buy it from the manufacturer or an authorised reseller. Verify the tamper-evident seal. Set it up in a private location. Never enter your seed phrase into a computer, phone, or website.
3. Back up your seed phrase in metal, not paper
Your seed phrase - usually 12 or 24 words - is the master key to your Bitcoin. If the device is lost, broken, or stolen, the seed phrase is what lets you recover your coins. If the seed phrase is lost, your coins are gone. Most people understand this in theory. In practice, the backup is often written on paper and stored in a drawer.
Paper burns, dissolves, and fades. A metal seed backup is resistant to fire, water, and physical decay. It is not a luxury; it is the standard for anyone holding meaningful Bitcoin. Store it in a location that is secure from theft and environmental damage, and consider whether a second copy in a different location is appropriate for your balance.
What you should never do: store your seed phrase as a photo on your phone, in cloud storage, in a password manager, or in an email. Every digital copy of a seed phrase is an attack surface. Offline metal is the baseline.
4. Upgrade to multisig (multi-signature)
Once you are comfortable with a single hardware wallet, the next step is to remove the single point of failure entirely. Multisig, short for multi-signature, requires more than one key to move funds. A typical setup is a 2-of-3 wallet: any two of three keys can authorise a transaction, but no single key can do it alone.
Multisig changes the risk profile dramatically. If one key is stolen, the thief still cannot move the coins. If one key is lost in a fire, the other two can still recover the wallet. If you are coerced into signing, you cannot comply unilaterally - a second key is required. For families and estates, multisig is also the structure that makes succession possible without putting the entire wallet in one person's hands.
Tools like Sparrow Wallet, Specter, and hardware wallets from Ledger and Trezor can be combined to build a multisig setup. The complexity is real, but so is the protection. For balances above a meaningful threshold, or for anyone with people who depend on them, multisig is the responsible next step.
5. Write a recovery letter your family can follow
Technical security is only half the problem. If you die or lose capacity, your family needs to know what exists and how to recover it without becoming cryptographers. The most common cause of inherited Bitcoin loss is silence: no one knew the coins existed, or no one knew how to access them.
A recovery letter is a simple, one-page document kept with your will or estate papers. It should state that you hold Bitcoin, name the custody partner or adviser who can help, and describe the general structure - for example, a multisig wallet with keys held by you, a custody provider, and a secure backup. It should not contain seed phrases, PINs, or the location of specific devices. Think of it as a map to the process, not the keys themselves.
This letter turns a potential treasure hunt into a single phone call. It is the difference between an estate that recovers and one that joins the statistic of permanently lost Bitcoin.
Start with the step you can do today
You do not need to implement all five of these at once. If your coins are still on an exchange, move them. If you are relying on a paper backup, switch to metal. If you are holding a single key, start learning about multisig. If you have not told your family anything, write the letter. Each step compounds the one before it, and the result is a custody system that is secure, recoverable, and built to last beyond you.