Multi-signature custody
A wallet that needs two or more keys to move anything, kept on separate devices in separate places. Lose one key, or have one stolen, and your bitcoin is still safe and still recoverable.
If your bitcoin is on an exchange, or behind a single key in a phone app, this is the part that shouldn't wait.
Learn more
What's included. A custody design covering how many keys you hold, where each one lives and who is trusted with what. Two sessions: one where we build a practice wallet together and throw it away, and one where you build the real one yourself. A check of every backup before a single unit is moved. A plain-English recovery guide you keep.
You learn it, you don't just receive it. The first session is a rehearsal on a practice wallet, which we wipe together at the end. Then you build the real one on your own, in your own time, with nobody watching. That is the point of doing it this way: if you can build it once without us, you can rebuild it any time, and nothing you own depends on us being reachable.
Hardware. We order sealed devices from the manufacturer and have them shipped directly to you. They never pass through our hands, so we never have physical access to them. You then verify the device is genuine yourself as part of the first session. We'll usually suggest a post office or parcel locker rather than your home — partly so nothing sits on a doorstep, and partly because keeping your address out of one more company's records is the same habit we apply everywhere else in your setup.
Why bitcoin only. Multi-signature is written into bitcoin's own rules, so the arrangement is enforced by every computer on the network and fixed the day it is created. Almost everywhere else it is a program somebody deployed, on one chain at a time, that can be rewritten later. That means you can spread your keys across devices from different manufacturers, have each device confirm the arrangement independently, and still recover everything using software from someone else entirely. Other networks can do multi-signature too, but as a contract somebody deployed rather than a rule the network itself enforces. Bitcoin is the model we have chosen to specialise in, and we would rather narrow what we do than sell you a version we cannot stand behind.
Format. Sessions are usually done over a video call. Face to face is available on request.
Typical design. Three keys, any two needed to spend — two hardware devices in separate places plus one on your phone. Larger holdings or several people involved: five keys, any three needed.
Already own a hardware wallet? You're ahead of most people. If yours is compatible it simply joins your quorum as one of the keys — no need to start again.