Update bitcoin-self-custody-guide.html
· 1 year ago
9736f7c9e3efd654c45901106d970a284b0c5ad9
Parent:
7dcd9e69d
1 file changed +558 −461
- bitcoin-self-custody-guide.html +558 −461
Diff
--- a/bitcoin-self-custody-guide.html +++ b/bitcoin-self-custody-guide.html @@ -1,33 +1,29 @@ <!DOCTYPE html> + <html lang="en"> <head> - <meta charset="UTF-8"> - <meta name="viewport" content="width=device-width, initial-scale=1.0"> - <title>Bitcoin Self-Custody Fortress: A Scalable Security Guide</title> - <meta name="description" content="A scalable Bitcoin self-custody guide for all users, from everyday holders to HNW individuals. Secure your Bitcoin against loss, theft, and ensure recoverability with recommended tools and services."> - <meta name="keywords" content="bitcoin security, self custody, crypto security, hardware wallet, multisig, bitcoin inheritance, opsec, physical security, seed backup, bitcoin guide, crypto tools, privacy services"> - <link rel="canonical" href="https://cheatsheets.davidveksler.com/bitcoin-scalable-security-guide.html"> - - <!-- Favicon --> - <link rel="icon" href="data:image/svg+xml,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 16 16'><text x='0' y='14' font-size='14'>🛡️</text></svg>"> - - <!-- Open Graph --> - <meta property="og:title" content="Bitcoin Self-Custody Fortress: A Scalable Security Guide"> - <meta property="og:description" content="Scalable Bitcoin self-custody for all users. Secure your assets effectively with recommended tools."> - <meta property="og:type" content="article"> - <meta property="og:url" content="https://cheatsheets.davidveksler.com/bitcoin-scalable-security-guide.html"> - <meta property="og:image" content="https://cheatsheets.davidveksler.com/images/bitcoin-scalable-fortress.png"> - - <!-- Twitter Card --> - <meta name="twitter:card" content="summary_large_image"> - <meta name="twitter:title" content="Bitcoin Self-Custody Fortress: A Scalable Security Guide"> - <meta name="twitter:description" content="Scalable Bitcoin self-custody for all users. Protect your crypto with recommended tools."> - <meta name="twitter:image" content="https://cheatsheets.davidveksler.com/images/bitcoin-scalable-fortress.png"> - - <link href="https://cdn.jsdelivr.net/npm/[email protected]/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-QWTKZyjpPEjISv5WaRU9OFeRpok6YctnYmDr5pNlyT2bRjXh0JMhjY6hW+ALEwIH" crossorigin="anonymous"> - <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/[email protected]/font/bootstrap-icons.css"> - - <style> +<meta charset="utf-8"/> +<meta content="width=device-width, initial-scale=1.0" name="viewport"/> +<title>Bitcoin Self-Custody Fortress: A Scalable Security Guide</title> +<meta content="A scalable Bitcoin self-custody guide for all users, from everyday holders to HNW individuals. Secure your Bitcoin against loss, theft, and ensure recoverability with recommended tools and services. Understand the threat landscape." name="description"/> +<meta content="bitcoin security, self custody, crypto security, hardware wallet, multisig, bitcoin inheritance, opsec, physical security, seed backup, bitcoin guide, crypto tools, privacy services, bitcoin threats" name="keywords"/> +<link href="https://cheatsheets.davidveksler.com/bitcoin-self-custody-guide.html" rel="canonical"/> +<!-- Favicon --> +<link href="data:image/svg+xml,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 16 16'><text x='0' y='14' font-size='14'>🛡️</text></svg>" rel="icon"/> +<!-- Open Graph --> +<meta content="Bitcoin Self-Custody Fortress: A Scalable Security Guide" property="og:title"/> +<meta content="Scalable Bitcoin self-custody for all users. Secure your assets effectively by understanding threats and using recommended tools." property="og:description"/> +<meta content="article" property="og:type"/> +<meta content="https://cheatsheets.davidveksler.com/bitcoin-scalable-security-guide.html" property="og:url"/> +<meta content="https://cheatsheets.davidveksler.com/images/bitcoin-scalable-fortress.png" property="og:image"/> +<!-- Twitter Card --> +<meta content="summary_large_image" name="twitter:card"/> +<meta content="Bitcoin Self-Custody Fortress: A Scalable Security Guide" name="twitter:title"/> +<meta content="Scalable Bitcoin self-custody for all users. Protect your crypto by understanding threats and using recommended tools." name="twitter:description"/> +<meta content="https://cheatsheets.davidveksler.com/images/bitcoin-scalable-fortress.png" name="twitter:image"/> +<link crossorigin="anonymous" href="https://cdn.jsdelivr.net/npm/[email protected]/dist/css/bootstrap.min.css" integrity="sha384-QWTKZyjpPEjISv5WaRU9OFeRpok6YctnYmDr5pNlyT2bRjXh0JMhjY6hW+ALEwIH" rel="stylesheet"/> +<link href="https://cdn.jsdelivr.net/npm/[email protected]/font/bootstrap-icons.css" rel="stylesheet"/> +<style> :root { --primary-color: #f7931a; /* Bitcoin Orange */ --secondary-color: #1a1a1a; @@ -165,454 +161,555 @@ </style> </head> <body> - <header class="page-header"> - <div class="container"> - <h1><i class="bi bi-shield-check"></i> Bitcoin Self-Custody Fortress: A Scalable Security Guide</h1> - <p class="sub-title">Tailored Protection for All Levels of Bitcoin Holders</p> - <p class="lead">A comprehensive, expert-informed guide to Bitcoin self-custody, offering scalable security measures whether you're just starting or managing significant wealth. Learn to protect your assets against loss, theft, and ensure long-term recoverability.</p> - <div class="last-updated">Last Updated: May 2025</div> - </div> - </header> - - <main class="container"> - <div class="scaling-banner"> - <h4><i class="bi bi-arrows-angle-expand"></i> Scaling Your Security: One Size Doesn't Fit All</h4> - <p>This guide provides recommendations for various levels of Bitcoin holdings. "<strong>Everyday Holder / Plebe</strong>" suggestions focus on essential, cost-effective security for smaller amounts. "<strong>Significant Holdings / Whale</strong>" advice details advanced measures for substantial wealth, where targeted threats are more likely. Assess your holdings and risk profile to choose the appropriate layers.</p> - </div> - - <div class="warning-banner"> - <h4><i class="bi bi-exclamation-triangle-fill"></i> Fundamental Truth</h4> - <p>Regardless of holding size, your Bitcoin is worthless if you lose access or fall victim to theft. Prioritize <strong>understanding your setup, robust backups, and practicing recovery</strong>.</p> - </div> - - <section class="protection-matrix"> - <div class="matrix-header"> - <h3>General Threat Landscape & Priorities</h3> - <p class="text-secondary">While specific threat actors vary, core vulnerabilities often remain similar. Adapt your focus based on your holdings.</p> - </div> - <div class="row text-center"> - <div class="col-md-3 col-6 mb-3"> - <div class="threat-indicator" style="background-color: var(--danger-color);"></div> - <strong>Critical for ALL:</strong> Accidental Loss / Seed Mismanagement / Bad Backups +<header class="page-header"> +<div class="container"> +<h1><i class="bi bi-shield-check"></i> Bitcoin Self-Custody Fortress: A Scalable Security Guide</h1> +<p class="sub-title">Tailored Protection for All Levels of Bitcoin Holders</p> +<p class="lead">A comprehensive, expert-informed guide to Bitcoin self-custody, offering scalable security measures whether you're just starting or managing significant wealth. Learn to protect your assets against loss, theft, and ensure long-term recoverability.</p> +<div class="last-updated">Last Updated: May 2025</div> +</div> +</header> +<main class="container"> +<div class="scaling-banner"> +<h4><i class="bi bi-arrows-angle-expand"></i> Scaling Your Security: One Size Doesn't Fit All</h4> +<p>This guide provides recommendations for various levels of Bitcoin holdings. "<strong>Everyday Holder / Plebe</strong>" suggestions focus on essential, cost-effective security for smaller amounts. "<strong>Significant Holdings / Whale</strong>" advice details advanced measures for substantial wealth, where targeted threats are more likely. Assess your holdings and risk profile to choose the appropriate layers.</p> +</div> +<div class="warning-banner"> +<h4><i class="bi bi-exclamation-triangle-fill"></i> Fundamental Truth</h4> +<p>Regardless of holding size, your Bitcoin is worthless if you lose access or fall victim to theft. Prioritize <strong>understanding your setup, robust backups, and practicing recovery</strong>.</p> +</div> +<section class="protection-matrix"> +<div class="matrix-header"> +<h3>General Threat Landscape & Priorities</h3> +<p class="text-secondary">While specific threat actors vary, core vulnerabilities often remain similar. Adapt your focus based on your holdings.</p> +</div> +<div class="row text-center"> +<div class="col-md-3 col-6 mb-3"> +<div class="threat-indicator" style="background-color: var(--danger-color);"></div> +<strong>Critical for ALL:</strong> Accidental Loss / Seed Mismanagement / Bad Backups </div> - <div class="col-md-3 col-6 mb-3"> - <div class="threat-indicator" style="background-color: #d65d3e;"></div> - <strong>High for ALL:</strong> Malware / Phishing / Social Engineering +<div class="col-md-3 col-6 mb-3"> +<div class="threat-indicator" style="background-color: #d65d3e;"></div> +<strong>High for ALL:</strong> Malware / Phishing / Social Engineering </div> - <div class="col-md-3 col-6 mb-3"> - <div class="threat-indicator" style="background-color: var(--warning-color);"></div> - <strong>Medium (escalates with holdings):</strong> Device Theft / Sim Swaps / Basic Remote Hacks +<div class="col-md-3 col-6 mb-3"> +<div class="threat-indicator" style="background-color: var(--warning-color);"></div> +<strong>Medium (escalates with holdings):</strong> Device Theft / Sim Swaps / Basic Remote Hacks </div> - <div class="col-md-3 col-6 mb-3"> - <div class="threat-indicator" style="background-color: var(--info-color);"></div> - <strong>Low (escalates to CRITICAL for Whales):</strong> Targeted Physical Coercion / Advanced Persistent Threats / State Actors +<div class="col-md-3 col-6 mb-3"> +<div class="threat-indicator" style="background-color: var(--info-color);"></div> +<strong>Low (escalates to CRITICAL for Whales):</strong> Targeted Physical Coercion / Advanced Persistent Threats / State Actors </div> - </div> - </section> - - <section class="section-container" id="opsec" data-section-id="opsec"> - <h2 class="section-title"><i class="bi bi-eye-slash-fill"></i> Operational Security (OPSEC) & Privacy</h2> - <div class="row"> - <div class="col-lg-6"> - <div class="security-card"> - <h5> - <span><i class="bi bi-mic-mute-fill"></i> The Shield of Silence</span> - <span class="threat-level threat-critical">CRITICAL FOR ALL</span> - </h5> - <p class="summary">Do not publicly discuss your Bitcoin holdings, especially specific amounts. Bragging or unnecessary disclosure makes you a target for <span class="security-term">scammers, hackers, and physical threats</span>.</p> - <button class="btn details-toggle" type="button" data-bs-toggle="collapse" data-bs-target="#opsec-silence" aria-expanded="false" aria-controls="opsec-silence"> - <i class="bi bi-chevron-down"></i> Details +</div> +</section> +<section class="section-container" data-section-id="threats" id="threat-landscape-detailed"> +<h2 class="section-title"><i class="bi bi-binoculars-fill"></i> Understanding the Threat Landscape</h2> +<div class="row"> +<div class="col-lg-6"> +<div class="security-card"> +<h5> +<span><i class="bi bi-bug-fill"></i> Online & Digital Exploits</span> +<span class="threat-level threat-high">HIGH FOR ALL</span> +</h5> +<p class="summary">Your internet-connected devices are constant targets. Malware, phishing, and insecure platforms can lead to direct theft of keys or credentials.</p> +<button aria-controls="threat-online" aria-expanded="false" class="btn details-toggle" data-bs-target="#threat-online" data-bs-toggle="collapse" type="button"> +<i class="bi bi-chevron-down"></i> Details </button> - <div class="collapse collapse-content" id="opsec-silence"> - <div class="tier-advice pleb-advice"> - <h6><i class="bi bi-person-fill"></i> Everyday Holder / Plebe:</h6> - <ul> - <li>Avoid posting about crypto buys/sells on public social media.</li> - <li>Don't share wallet screenshots or transaction details online.</li> - <li>Be cautious discussing crypto with strangers or casual acquaintances.</li> - </ul> - </div> - <div class="tier-advice whale-advice mt-3"> - <h6><i class="bi bi-gem"></i> Significant Holdings / Whale:</h6> - <p>All the above, plus:</p> - <ul> - <li>Implement strict policies about discussing crypto, even with close family/friends if they are not part of your security plan.</li> - <li>Use pseudonyms for all online crypto activity. Maintain separate "crypto" and "normie" digital identities (e.g., encrypted email like <a href="https://proton.me/mail" target="_blank" rel="noopener noreferrer">ProtonMail</a> or <a href="https://tutanota.com/" target="_blank" rel="noopener noreferrer">Tutanota</a>; social profiles).</li> - <li>Never reveal your total holdings or security setup details to anyone not essential to your plan.</li> - <li>Use E2E encrypted communication (e.g., <a href="https://signal.org/" target="_blank" rel="noopener noreferrer">Signal</a>) for any sensitive discussions.</li> - <li>Practice UTXO hygiene (coin control, avoid address reuse) to obscure total wealth on-chain. Software like <a href="https://sparrowwallet.com/" target="_blank" rel="noopener noreferrer">Sparrow Wallet</a> can help.</li> - </ul> - </div> - </div> - </div> - </div> - - <div class="col-lg-6"> - <div class="security-card"> - <h5> - <span><i class="bi bi-shield-slash-fill"></i> Minimizing Your Digital & Physical Footprint</span> - <span class="threat-level threat-high">HIGH (Scales with Holdings)</span> - </h5> - <p class="summary">Reduce links between your real-world identity, locations, and Bitcoin activities. Each link is a potential <span class="security-term">vulnerability point</span>.</p> - <button class="btn details-toggle" type="button" data-bs-toggle="collapse" data-bs-target="#opsec-footprint" aria-expanded="false" aria-controls="opsec-footprint"> - <i class="bi bi-chevron-down"></i> Details +<div class="collapse collapse-content" id="threat-online"> +<ul> +<li><strong>Malware/Viruses:</strong> Keyloggers, clipboard hijackers, ransomware that encrypts your data, or trojans that steal wallet files or trick you into signing malicious transactions.</li> +<li><strong>Phishing & Social Engineering:</strong> Deceptive emails, websites, or messages tricking you into revealing seed phrases, private keys, passwords, or sending Bitcoin to scammers. Fake support staff are common.</li> +<li><strong>Exchange Hacks/Failures:</strong> Leaving Bitcoin on an exchange exposes you to their security breaches, insolvency, or regulatory shutdowns. <span class="security-term">"Not your keys, not your coins."</span></li> +<li><strong>SIM Swaps:</strong> Attackers gain control of your phone number to intercept 2FA codes or reset passwords for exchange accounts or email.</li> +<li><strong>Software Vulnerabilities:</strong> Bugs in wallet software, operating systems, or browsers that can be exploited.</li> +</ul> +<p><strong>Mitigation:</strong> Hardware wallets, strong unique passwords, 2FA (authenticator app), vigilance against suspicious links/requests, keeping software updated cautiously, minimizing use of custodial services for large amounts.</p> +</div> +</div> +</div> +<div class="col-lg-6"> +<div class="security-card"> +<h5> +<span><i class="bi bi-person-bounding-box"></i> Physical Attacks & Coercion</span> +<span class="threat-level threat-medium">MEDIUM (CRITICAL for Whales)</span> +</h5> +<p class="summary">Direct physical threats aim to force you to surrender your Bitcoin. Risk increases significantly if your holdings are known.</p> +<button aria-controls="threat-physical" aria-expanded="false" class="btn details-toggle" data-bs-target="#threat-physical" data-bs-toggle="collapse" type="button"> +<i class="bi bi-chevron-down"></i> Details </button> - <div class="collapse collapse-content" id="opsec-footprint"> - <div class="tier-advice pleb-advice"> - <h6><i class="bi bi-person-fill"></i> Everyday Holder / Plebe:</h6> - <ul> - <li>Use strong, unique passwords for all crypto-related accounts and a reputable password manager (e.g., <a href="https://bitwarden.com/" target="_blank" rel="noopener noreferrer">Bitwarden</a> (Open Source), <a href="https://1password.com/" target="_blank" rel="noopener noreferrer">1Password</a>).</li> - <li>Enable 2-Factor Authentication (2FA - authenticator app preferred over SMS) on exchanges.</li> - <li>Be wary of public Wi-Fi for crypto transactions. Use a VPN (e.g., <a href="https://protonvpn.com/" target="_blank" rel="noopener noreferrer">ProtonVPN</a>, <a href="https://mullvad.net/" target="_blank" rel="noopener noreferrer">Mullvad</a>) if you must.</li> - <li>When ordering hardware wallets, consider if home delivery is safe or if an alternative (office, P.O. Box) is better.</li> - </ul> - </div> - <div class="tier-advice whale-advice mt-3"> - <h6><i class="bi bi-gem"></i> Significant Holdings / Whale:</h6> - <p>All the above, plus:</p> - <ul> - <li>Utilize P.O. Boxes or secure mail forwarding services (e.g., <a href="https://www.travelingmailbox.com/" target="_blank" rel="noopener noreferrer">Traveling Mailbox</a>, <a href="https://physicaladdress.com/" target="_blank" rel="noopener noreferrer">PhysicalAddress.com</a>) for all crypto-related mail and hardware deliveries.</li> - <li>Actively remove Personal Identifiable Information (PII) from data broker sites (e.g., <a href="https://joindeleteme.com/" target="_blank" rel="noopener noreferrer">DeleteMe</a>, <a href="https://optery.com/" target="_blank" rel="noopener noreferrer">Optery</a>).</li> - <li>Consider dedicated, hardened devices (e.g., a specific laptop only for crypto) with minimal software.</li> - <li>Use legal structures (LLCs, trusts) to obscure ownership of assets where appropriate and legal.</li> - <li>Avoid ostentatious displays of wealth that could mark you.</li> - <li>Consider pseudonymous phone numbers/SIMs for sensitive registrations.</li> - </ul> - </div> - </div> - </div> - </div> - </div> - </section> - - <section class="section-container" id="physical" data-section-id="physical"> - <h2 class="section-title"><i class="bi bi-shield-fill-check"></i> Physical Security: Protecting Your Keys & Yourself</h2> - <div class="row"> - <div class="col-lg-6"> - <div class="security-card"> - <h5> - <span><i class="bi bi-safe"></i> Securing Seed Phrases & Devices</span> - <span class="threat-level threat-high">HIGH FOR ALL</span> - </h5> - <p class="summary">Your seed phrases and hardware wallets are prime targets. Protect them from theft, damage, and unauthorized access. <span class="security-term">Geographic separation of backups is key.</span></p> - <button class="btn details-toggle" type="button" data-bs-toggle="collapse" data-bs-target="#physical-seeds" aria-expanded="false" aria-controls="physical-seeds"> - <i class="bi bi-chevron-down"></i> Details +<div class="collapse collapse-content" id="threat-physical"> +<ul> +<li><strong>"$5 Wrench Attack":</strong> Being physically threatened or tortured until you give up your keys/seeds/PINs.</li> +<li><strong>Home Invasion/Robbery:</strong> Attackers break into your home specifically targeting your Bitcoin assets, often due to information leakage about your holdings.</li> +<li><strong>Targeted Kidnapping/Extortion:</strong> High net worth individuals may be targeted for ransom payable in Bitcoin.</li> +<li><strong>Device Theft:</strong> Loss or theft of a phone, computer, or even a hardware wallet (if PIN is weak or seed is stored with it).</li> +<li><strong>Insider Threats:</strong> Betrayal by someone with knowledge of or access to your security setup (e.g., family, friends, employees).</li> +</ul> +<p><strong>Mitigation:</strong> Strong OPSEC (silence about holdings), physical home security, geographically distributed multisig (no single point of access), duress planning, decoy wallets. For HNW, professional security consultation is advised.</p> +</div> +</div> +</div> +<div class="col-lg-6"> +<div class="security-card"> +<h5> +<span><i class="bi bi-person-hearts"></i> User Error & Self-Inflicted Loss</span> +<span class="threat-level threat-critical">CRITICAL FOR ALL</span> +</h5> +<p class="summary">Many Bitcoin losses are self-inflicted due to mistakes, misunderstanding, or poor planning. This is often the biggest threat.</p> +<button aria-controls="threat-user-error" aria-expanded="false" class="btn details-toggle" data-bs-target="#threat-user-error" data-bs-toggle="collapse" type="button"> +<i class="bi bi-chevron-down"></i> Details </button> - <div class="collapse collapse-content" id="physical-seeds"> - <div class="tier-advice pleb-advice"> - <h6><i class="bi bi-person-fill"></i> Everyday Holder / Plebe:</h6> - <ul> - <li>Store hardware wallets out of sight when not in use.</li> - <li>Keep your primary metal seed backup (see <a href="#tools-services" class="details-link">Tools section</a> for examples) in a secure, fire-resistant location at home (e.g., quality home safe).</li> - <li>Have at least one additional backup of your seed phrase stored off-site (e.g., with a trusted family member, very secure bank SDB - weigh risks).</li> - <li>Ensure backups are protected from casual discovery and environmental damage (water, fire).</li> - </ul> - </div> - <div class="tier-advice whale-advice mt-3"> - <h6><i class="bi bi-gem"></i> Significant Holdings / Whale:</h6> - <p>All the above, plus:</p> - <ul> - <li>Utilize high-security safes (e.g., TL-15, TL-30 rated from brands like Liberty, Fort Knox, etc.) bolted down.</li> - <li>Distribute key materials (seeds, hardware devices for multisig) across multiple highly secure, geographically diverse locations (different cities/states/countries).</li> - <li>Employ tamper-evident bags/seals for stored devices or seed backups.</li> - <li>Consider decoy safes or stashes with minimal value to mislead attackers.</li> - <li>If using bank SDBs, understand the risks (limited access, potential seizure, not insured for this purpose) and use them as only one part of a distributed strategy.</li> - </ul> - </div> - </div> - </div> - </div> - <div class="col-lg-6"> - <div class="security-card"> - <h5> - <span><i class="bi bi-house-heart-fill"></i> Home & Personal Security</span> - <span class="threat-level threat-medium">MEDIUM (Escalates for Whales)</span> - </h5> - <p class="summary">Basic home security is prudent for everyone. For those with significant holdings, a <span class="security-term">"Home Fortress" protocol and duress planning</span> become vital.</p> - <button class="btn details-toggle" type="button" data-bs-toggle="collapse" data-bs-target="#physical-home-defense" aria-expanded="false" aria-controls="physical-home-defense"> - <i class="bi bi-chevron-down"></i> Details +<div class="collapse collapse-content" id="threat-user-error"> +<ul> +<li><strong>Lost Seed Phrase:</strong> Misplacing, accidentally destroying, or having illegible seed phrase backups. This is permanent loss.</li> +<li><strong>Incorrect Backups:</strong> Writing down seed words incorrectly, in the wrong order, or missing words. Not testing backups.</li> +<li><strong>Forgotten Passphrases:</strong> Forgetting the BIP39 passphrase ("25th word") used with a seed phrase.</li> +<li><strong>Sending to Wrong Address:</strong> Typos or copy-paste errors in recipient addresses. Bitcoin transactions are irreversible. Confirm addresses carefully.</li> +<li><strong>Misunderstanding Technology:</strong> Not comprehending how wallets, transactions, or multisig setups work, leading to critical errors.</li> +<li><strong>Improper Inheritance Planning:</strong> Heirs unable to access funds due to lack of knowledge or clear instructions.</li> +<li><strong>Damage to Backup Medium:</strong> Paper backups destroyed by fire/water, metal backups corroded if low quality or poorly stored.</li> +</ul> +<p><strong>Mitigation:</strong> Meticulous seed backup on durable materials (metal), multiple backups in different locations, testing recovery procedures, double-checking transaction details, continuous learning, clear inheritance plan.</p> +</div> +</div> +</div> +<div class="col-lg-6"> +<div class="security-card"> +<h5> +<span><i class="bi bi-bank"></i> Custodian & Counterparty Risk</span> +<span class="threat-level threat-medium">MEDIUM (HIGH if large % on exchange)</span> +</h5> +<p class="summary">Trusting a third party with your Bitcoin means accepting their security model and operational risks.</p> +<button aria-controls="threat-custodian" aria-expanded="false" class="btn details-toggle" data-bs-target="#threat-custodian" data-bs-toggle="collapse" type="button"> +<i class="bi bi-chevron-down"></i> Details </button> - <div class="collapse collapse-content" id="physical-home-defense"> - <div class="tier-advice pleb-advice"> - <h6><i class="bi bi-person-fill"></i> Everyday Holder / Plebe:</h6> - <ul> - <li>Ensure good quality locks on doors and windows.</li> - <li>Consider a basic monitored alarm system (e.g., <a href="https://simplisafe.com/" target="_blank" rel="noopener noreferrer">SimpliSafe</a>, <a href="https://goabode.com/" target="_blank" rel="noopener noreferrer">Abode</a>) and/or security cameras (e.g., <a href="https://reolink.com/" target="_blank" rel="noopener noreferrer">Reolink</a>, Wyze) if you have noticeable assets.</li> - <li>Be aware of your surroundings. Avoid making yourself an obvious target.</li> - </ul> - </div> - <div class="tier-advice whale-advice mt-3"> - <h6><i class="bi bi-gem"></i> Significant Holdings / Whale:</h6> - <p>All the above, plus "Home Fortress Protocol":</p> - <ul> - <li>Reinforced doors/frames, security film on windows, advanced locks.</li> - <li>Comprehensive, professionally monitored alarm (e.g., ADT, local firms) with cellular backup, multiple sensor types.</li> - <li>Extensive camera coverage (PoE systems like <a href="https://ui.com/camera-security" target="_blank" rel="noopener noreferrer">Ubiquiti Protect</a> or commercial NVRs), cloud backup.</li> - <li>Consider a safe room or reinforced area.</li> - <li><strong>Duress Plan:</strong> Have a decoy wallet, duress PINs, and a believable story about time-locked/dispersed funds. Prioritize life over Bitcoin.</li> - <li>Personal defense training focusing on situational awareness and de-escalation.</li> - </ul> - </div> - </div> - </div> - </div> - </div> - </section> - - <section class="section-container" id="technical" data-section-id="technical"> - <h2 class="section-title"><i class="bi bi-diagram-3-fill"></i> Technical Security: Wallets & Backups</h2> - <div class="row"> - <div class="col-lg-6"> - <div class="security-card"> - <h5> - <span><i class="bi bi-shield-lock"></i> Choosing Your Wallet Setup</span> - <span class="threat-level threat-critical">CRITICAL FOR ALL</span> - </h5> - <p class="summary">The right wallet setup depends on your technical skills, the amount you're securing, and your risk tolerance. <span class="expert-term">Hardware wallets are strongly recommended over software/mobile wallets for most users.</span></p> - <button class="btn details-toggle" type="button" data-bs-toggle="collapse" data-bs-target="#tech-wallet-choice" aria-expanded="false" aria-controls="tech-wallet-choice"> - <i class="bi bi-chevron-down"></i> Details +<div class="collapse collapse-content" id="threat-custodian"> +<ul> +<li><strong>Exchange Insolvency/Collapse:</strong> Exchanges can go bankrupt (e.g., Mt. Gox, FTX), and your funds held by them can be lost or tied up for years.</li> +<li><strong>Hacking of Custodian:</strong> Even large custodians can be hacked, leading to loss of customer funds.</li> +<li><strong>Regulatory Action:</strong> Governments can freeze exchange assets or force disclosures.</li> +<li><strong>Exit Scams/Fraud:</strong> Unscrupulous custodians or services disappearing with user funds.</li> +<li><strong>Terms of Service Changes:</strong> Custodians can change rules, freeze accounts, or limit withdrawals based on their policies.</li> +</ul> +<p><strong>Mitigation:</strong> Minimize funds left on exchanges or with any single custodian. Prioritize self-custody, especially for long-term holdings. If using custodians, choose reputable, regulated entities and understand their insurance/security policies. For HNW, collaborative custody can be a structured way to use a professional co-signer while retaining control.</p> +</div> +</div> +</div> +<div class="col-lg-12"> +<div class="security-card"> +<h5> +<span><i class="bi bi-flag-fill"></i> Nation-State Level & Systemic Risks</span> +<span class="threat-level threat-low">LOW (Escalates for Whales / Specific Jurisdictions)</span> +</h5> +<p class="summary">These are broader risks related to governmental actions or fundamental protocol issues, typically more concerning for very large holders or those in unstable jurisdictions.</p> +<button aria-controls="threat-nation-state" aria-expanded="false" class="btn details-toggle" data-bs-target="#threat-nation-state" data-bs-toggle="collapse" type="button"> +<i class="bi bi-chevron-down"></i> Details </button> - <div class="collapse collapse-content" id="tech-wallet-choice"> - <div class="tier-advice pleb-advice"> - <h6><i class="bi bi-person-fill"></i> Everyday Holder / Plebe: Single Signature</h6> - <ul> - <li><strong>Recommendation:</strong> A reputable single-signature hardware wallet. Purchase directly from the manufacturer. (See <a href="#tools-services" class="details-link">Tools section</a> for examples like Coldcard, Trezor, etc.).</li> - <li>This keeps your private keys offline. Focus on understanding its backup/recovery.</li> - <li>Avoid keeping significant amounts on exchange hot wallets or software wallets on your primary phone/computer.</li> - </ul> - </div> - <div class="tier-advice whale-advice mt-3"> - <h6><i class="bi bi-gem"></i> Significant Holdings / Whale: Multi-Signature (Multisig)</h6> - <p>Single-signature wallets become a single point of failure for large sums. Multisig is essential.</p> - <ul> - <li><strong>Recommendation:</strong> 2-of-3 or 3-of-5 multisig setup using diverse hardware wallets.</li> - <li>Requires multiple keys to authorize a transaction. Keys/seeds must be geographically diverse.</li> - <li>Use robust multisig coordinator software (e.g., <a href="https://sparrowwallet.com/" target="_blank" rel="noopener noreferrer">Sparrow Wallet</a>, <a href="https://specter.solutions/" target="_blank" rel="noopener noreferrer">Specter Desktop</a>, <a href="https://nunchuk.io/" target="_blank" rel="noopener noreferrer">Nunchuk</a>).</li> - <li><strong>Collaborative Custody:</strong> For very large sums, consider services (e.g., <a href="https://unchained.com/" target="_blank" rel="noopener noreferrer">Unchained Capital</a>, <a href="https://casa.io/" target="_blank" rel="noopener noreferrer">Casa</a>, <a href="https://www.swanbitcoin.com/vault/" target="_blank" rel="noopener noreferrer">Swan Vault</a>) as one co-signer.</li> - </ul> - </div> - </div> - </div> - </div> - - <div class="col-lg-6"> - <div class="security-card"> - <h5> - <span><i class="bi bi-safe2"></i> Seed Phrase & Passphrase Management</span> - <span class="threat-level threat-critical">CRITICAL FOR ALL</span> - </h5> - <p class="summary">Your 12/24-word seed phrase IS your Bitcoin. Secure it meticulously. <span class="expert-term">Metal backups are essential for durability</span>. BIP39 passphrases ("25th word") add security but also risk if forgotten.</p> - <button class="btn details-toggle" type="button" data-bs-toggle="collapse" data-bs-target="#tech-seed-backup" aria-expanded="false" aria-controls="tech-seed-backup"> - <i class="bi bi-chevron-down"></i> Details +<div class="collapse collapse-content" id="threat-nation-state"> +<ul> +<li><strong>Asset Seizure/Forfeiture:</strong> Governments attempting to confiscate Bitcoin through legal or extra-legal means.</li> +<li><strong>Restrictive Regulations:</strong> Laws making it difficult to use, trade, or self-custody Bitcoin. Outright bans in some jurisdictions.</li> +<li><strong>Capital Controls:</strong> Restrictions on moving Bitcoin across borders.</li> +<li><strong>Increased Surveillance:</strong> Government attempts to de-anonymize users and track transactions, potentially leading to targeted actions.</li> +<li><strong>Protocol-Level Attack (Highly Unlikely but Theoretical):</strong> A 51% attack on the Bitcoin network or discovery of a fundamental cryptographic flaw. This is generally considered a very low probability for Bitcoin due to its decentralization and hash power.</li> +<li><strong>Quantum Computing Threat (Future Concern):</strong> Theoretical future risk where quantum computers could break current cryptographic algorithms. Bitcoin developers are aware and researching quantum-resistant solutions.</li> +</ul> +<p><strong>Mitigation:</strong> Geographic diversification of assets and potentially residency (for HNW), strong privacy practices (OPSEC, CoinJoin), staying informed about regulatory developments, supporting Bitcoin development and decentralization. The core Bitcoin protocol is designed to be highly resistant to most systemic attacks.</p> +</div> +</div> +</div> +</div> +</section> +<section class="section-container" data-section-id="opsec" id="opsec"> +<h2 class="section-title"><i class="bi bi-eye-slash-fill"></i> Operational Security (OPSEC) & Privacy</h2> +<div class="row"> +<div class="col-lg-6"> +<div class="security-card"> +<h5> +<span><i class="bi bi-mic-mute-fill"></i> The Shield of Silence</span> +<span class="threat-level threat-critical">CRITICAL FOR ALL</span> +</h5> +<p class="summary">Do not publicly discuss your Bitcoin holdings, especially specific amounts. Bragging or unnecessary disclosure makes you a target for <span class="security-term">scammers, hackers, and physical threats</span>.</p> +<button aria-controls="opsec-silence" aria-expanded="false" class="btn details-toggle" data-bs-target="#opsec-silence" data-bs-toggle="collapse" type="button"> +<i class="bi bi-chevron-down"></i> Details </button> - <div class="collapse collapse-content" id="tech-seed-backup"> - <div class="rule-box critical"> - <strong>For All Users:</strong> Never store your seed phrase digitally. Avoid typing it into any internet-connected device if possible. - </div> - <h6>Seed Backup Essentials:</h6> - <ul> - <li><strong>Metal Backups:</strong> Stamp or engrave your seed phrase onto robust metal plates. (See <a href="#tools-services" class="details-link">Tools section</a> for examples like CryptoSteel, Blockplate). Paper is NOT for long-term primary backup.</li> - <li><strong>Multiple Copies & Off-site Storage:</strong> At least two metal copies, one securely off-site.</li> - </ul> - <h6>BIP39 Passphrase (Optional "25th Word"):</h6> - <ul> - <li>Adds security if physical seed is compromised, but GONE FOREVER if passphrase is forgotten.</li> - <li><strong>Plebes:</strong> Generally NOT recommended due to risk of forgetting.</li> - <li><strong>Whales:</strong> Can be part of a multi-layered strategy if managed with extreme discipline (passphrase also on metal, stored separately).</li> - </ul> - </div> - </div> - </div> - </div> - </section> - - <section class="section-container" id="tools-services" data-section-id="tools"> - <h2 class="section-title"><i class="bi bi-tools"></i> Recommended Tools, Services & Resources</h2> - <div class="security-card"> - <p class="summary">This is not an exhaustive list, and inclusion does not equal endorsement. <strong>Always Do Your Own Research (DYOR)</strong> before trusting any product or service with your Bitcoin or personal information.</p> - <div class="row resource-list"> - <div class="col-md-6"> - <h6><i class="bi bi-key-fill"></i> Hardware Wallets (Single & Multisig)</h6> - <ul> - <li><i class="bi bi-shield-check"></i> <a href="https://coldcard.com/" target="_blank" rel="noopener noreferrer">Coldcard</a> (Bitcoin-only, airgapped focus)</li> - <li><i class="bi bi-shield-check"></i> <a href="https://blockstream.com/jade/" target="_blank" rel="noopener noreferrer">Blockstream Jade</a> (Bitcoin-only, good value)</li> - <li><i class="bi bi-shield-check"></i> <a href="https://trezor.io/" target="_blank" rel="noopener noreferrer">Trezor</a> (Established, supports multiple coins)</li> - <li><i class="bi bi-shield-check"></i> <a href="https://www.ledger.com/" target="_blank" rel="noopener noreferrer">Ledger</a> (Popular, supports multiple coins - research recent events)</li> - <li><i class="bi bi-shield-check"></i> <a href="https://foundationdevices.com/" target="_blank" rel="noopener noreferrer">Passport by Foundation</a> (Bitcoin-only, airgapped)</li> - <li><i class="bi bi-shield-check"></i> <a href="https://seedsigner.com/" target="_blank" rel="noopener noreferrer">SeedSigner</a> (DIY airgapped signing device)</li> - </ul> - - <h6><i class="bi bi-journal-album"></i> Metal Seed Storage</h6> - <ul> - <li><i class="bi bi-shield-check"></i> <a href="https://cryptosteel.com/" target="_blank" rel="noopener noreferrer">CryptoSteel</a> (Capsule & Cassette)</li> - <li><i class="bi bi-shield-check"></i> <a href="https://blockplate.com/" target="_blank" rel="noopener noreferrer">Blockplate</a> (Stainless steel plates)</li> - <li><i class="bi bi-shield-check"></i> <a href="https://seedplate.com/" target="_blank" rel="noopener noreferrer">Seedplate</a> (Punch-hole or engraved plates)</li> - <li><i class="bi bi-shield-check"></i> <a href="http://coldbit.com/" target="_blank" rel="noopener noreferrer">Coldbit Steel</a> (Various steel backup solutions)</li> - <li><i class="bi bi-shield-check"></i> <a href="https://stampseed.com/" target="_blank" rel="noopener noreferrer">StampSeed</a> (DIY stamping kits)</li> - </ul> - - <h6><i class="bi bi-diagram-3"></i> Multisig Coordinator Software</h6> - <ul> - <li><i class="bi bi-shield-check"></i> <a href="https://sparrowwallet.com/" target="_blank" rel="noopener noreferrer">Sparrow Wallet</a> (Desktop, feature-rich)</li> - <li><i class="bi bi-shield-check"></i> <a href="https://specter.solutions/" target="_blank" rel="noopener noreferrer">Specter Desktop</a> (Desktop, hardware wallet focused)</li> - <li><i class="bi bi-shield-check"></i> <a href="https://bluewallet.io/" target="_blank" rel="noopener noreferrer">BlueWallet</a> (Mobile, good for smaller multisig)</li> - <li><i class="bi bi-shield-check"></i> <a href="https://nunchuk.io/" target="_blank" rel="noopener noreferrer">Nunchuk</a> (Mobile & Desktop, collaborative focus)</li> - <li><i class="bi bi-shield-check"></i> <a href="https://electrum.org/" target="_blank" rel="noopener noreferrer">Electrum</a> (Desktop, versatile, advanced users)</li> - </ul> - </div> - <div class="col-md-6"> - <h6><i class="bi bi-building-shield"></i> Collaborative Custody & Inheritance Services</h6> - <ul> - <li><i class="bi bi-shield-check"></i> <a href="https://unchained.com/" target="_blank" rel="noopener noreferrer">Unchained Capital</a> (Multisig vaults, inheritance)</li> - <li><i class="bi bi-shield-check"></i> <a href="https://casa.io/" target="_blank" rel="noopener noreferrer">Casa</a> (Multisig key management, inheritance)</li> - <li><i class="bi bi-shield-check"></i> <a href="https://www.swanbitcoin.com/vault/" target="_blank" rel="noopener noreferrer">Swan Vault by Swan Bitcoin</a> (Guided multisig setup)</li> - </ul> - - <h6><i class="bi bi-incognito"></i> Privacy Tools</h6> - <ul> - <li><i class="bi bi-shield-check"></i> Password Managers: <a href="https://bitwarden.com/" target="_blank" rel="noopener noreferrer">Bitwarden</a>, <a href="https://1password.com/" target="_blank" rel="noopener noreferrer">1Password</a></li> - <li><i class="bi bi-shield-check"></i> VPN Services: <a href="https://protonvpn.com/" target="_blank" rel="noopener noreferrer">ProtonVPN</a>, <a href="https://mullvad.net/" target="_blank" rel="noopener noreferrer">Mullvad</a></li> - <li><i class="bi bi-shield-check"></i> Encrypted Email: <a href="https://proton.me/mail" target="_blank" rel="noopener noreferrer">ProtonMail</a>, <a href="https://tutanota.com/" target="_blank" rel="noopener noreferrer">Tutanota</a></li> - <li><i class="bi bi-shield-check"></i> Data Broker Removal: <a href="https://joindeleteme.com/" target="_blank" rel="noopener noreferrer">DeleteMe</a>, <a href="https://optery.com/" target="_blank" rel="noopener noreferrer">Optery</a></li> - <li><i class="bi bi-shield-check"></i> Secure Mail Forwarding: <a href="https://www.travelingmailbox.com/" target="_blank" rel="noopener noreferrer">Traveling Mailbox</a></li> - </ul> - <h6><i class="bi bi-book-half"></i> Educational Resources</h6> - <ul> - <li><i class="bi bi-shield-check"></i> <a href="https://bitcoin.org/en/secure-your-wallet" target="_blank" rel="noopener noreferrer">Bitcoin.org - Secure Your Wallet</a></li> - <li><i class="bi bi-shield-check"></i> <a href="https://jamesonlopp.com/bitcoin-information/" target="_blank" rel="noopener noreferrer">Jameson Lopp's Bitcoin Resources</a></li> - <li><i class="bi bi-shield-check"></i> Search for local Bitcoin meetups for community support.</li> - </ul> - </div> - </div> - </div> - </section> - - <section class="section-container" id="inheritance" data-section-id="inheritance"> - <h2 class="section-title"><i class="bi bi-people-fill"></i> Inheritance & Succession Planning</h2> - <div class="row"> - <div class="col-lg-12"> - <div class="security-card"> - <h5> - <span><i class="bi bi-journal-richtext"></i> Ensuring Your Bitcoin Passes On</span> - <span class="threat-level threat-critical">CRITICAL (Complexity Scales)</span> - </h5> - <p class="summary">Without a plan, your Bitcoin could be lost forever upon your death or incapacitation. <span class="expert-term">Heir unfamiliarity is a major risk factor.</span></p> - <button class="btn details-toggle" type="button" data-bs-toggle="collapse" data-bs-target="#inheritance-plan" aria-expanded="false" aria-controls="inheritance-plan"> - <i class="bi bi-chevron-down"></i> Details +<div class="collapse collapse-content" id="opsec-silence"> +<div class="tier-advice pleb-advice"> +<h6><i class="bi bi-person-fill"></i> Everyday Holder / Plebe:</h6> +<ul> +<li>Avoid posting about crypto buys/sells on public social media.</li> +<li>Don't share wallet screenshots or transaction details online.</li> +<li>Be cautious discussing crypto with strangers or casual acquaintances.</li> +</ul> +</div> +<div class="tier-advice whale-advice mt-3"> +<h6><i class="bi bi-gem"></i> Significant Holdings / Whale:</h6> +<p>All the above, plus:</p> +<ul> +<li>Implement strict policies about discussing crypto, even with close family/friends if they are not part of your security plan.</li> +<li>Use pseudonyms for all online crypto activity. Maintain separate "crypto" and "normie" digital identities (e.g., encrypted email like <a href="https://proton.me/mail" rel="noopener noreferrer" target="_blank">ProtonMail</a> or <a href="https://tutanota.com/" rel="noopener noreferrer" target="_blank">Tutanota</a>; social profiles).</li> +<li>Never reveal your total holdings or security setup details to anyone not essential to your plan.</li> +<li>Use E2E encrypted communication (e.g., <a href="https://signal.org/" rel="noopener noreferrer" target="_blank">Signal</a>) for any sensitive discussions.</li> +<li>Practice UTXO hygiene (coin control, avoid address reuse) to obscure total wealth on-chain. Software like <a href="https://sparrowwallet.com/" rel="noopener noreferrer" target="_blank">Sparrow Wallet</a> can help.</li> +</ul> +</div> +</div> +</div> +</div> +<div class="col-lg-6"> +<div class="security-card"> +<h5> +<span><i class="bi bi-shield-slash-fill"></i> Minimizing Your Digital & Physical Footprint</span> +<span class="threat-level threat-high">HIGH (Scales with Holdings)</span> +</h5> +<p class="summary">Reduce links between your real-world identity, locations, and Bitcoin activities. Each link is a potential <span class="security-term">vulnerability point</span>.</p> +<button aria-controls="opsec-footprint" aria-expanded="false" class="btn details-toggle" data-bs-target="#opsec-footprint" data-bs-toggle="collapse" type="button"> +<i class="bi bi-chevron-down"></i> Details </button> - <div class="collapse collapse-content" id="inheritance-plan"> - <div class="tier-advice pleb-advice"> - <h6><i class="bi bi-person-fill"></i> Everyday Holder / Plebe:</h6> - <ul> - <li>Write a simple, clear letter of instruction. Include location of seed backup(s), hardware wallet, and basic access instructions or who to contact for trusted help.</li> - <li>Store this letter securely with your will. Inform your executor or a trusted heir of its existence and location.</li> - </ul> - </div> - <div class="tier-advice whale-advice mt-3"> - <h6><i class="bi bi-gem"></i> Significant Holdings / Whale: Comprehensive Protocol</h6> - <p>All the above, plus a multi-layered strategy:</p> - <ol> - <li><strong>Legal Framework:</strong> Work with a crypto-aware estate attorney.</li> - <li><strong>Detailed Technical Instructions:</strong> Create "idiot-proof" documentation and potentially video walkthroughs.</li> - <li><strong>Guided Recovery / "Coach":</strong> Designate a trusted, crypto-literate individual, recovery service, or collaborative custody partner (some listed in <a href="#tools-services" class="details-link">Tools section</a>) to assist heirs.</li> - </ol> +<div class="collapse collapse-content" id="opsec-footprint"> +<div class="tier-advice pleb-advice"> +<h6><i class="bi bi-person-fill"></i> Everyday Holder / Plebe:</h6> +<ul> +<li>Use strong, unique passwords for all crypto-related accounts and a reputable password manager (e.g., <a href="https://bitwarden.com/" rel="noopener noreferrer" target="_blank">Bitwarden</a> (Open Source), <a href="https://1password.com/" rel="noopener noreferrer" target="_blank">1Password</a>).</li> +<li>Enable 2-Factor Authentication (2FA - authenticator app preferred over SMS) on exchanges.</li> +<li>Be wary of public Wi-Fi for crypto transactions. Use a VPN (e.g., <a href="https://protonvpn.com/" rel="noopener noreferrer" target="_blank">ProtonVPN</a>, <a href="https://mullvad.net/" rel="noopener noreferrer" target="_blank">Mullvad</a>) if you must.</li> +<li>When ordering hardware wallets, consider if home delivery is safe or if an alternative (office, P.O. Box) is better.</li> +</ul> +</div> +<div class="tier-advice whale-advice mt-3"> +<h6><i class="bi bi-gem"></i> Significant Holdings / Whale:</h6> +<p>All the above, plus:</p> +<ul> +<li>Utilize P.O. Boxes or secure mail forwarding services (e.g., <a href="https://www.travelingmailbox.com/" rel="noopener noreferrer" target="_blank">Traveling Mailbox</a>, <a href="https://physicaladdress.com/" rel="noopener noreferrer" target="_blank">PhysicalAddress.com</a>) for all crypto-related mail and hardware deliveries.</li> +<li>Actively remove Personal Identifiable Information (PII) from data broker sites (e.g., <a href="https://joindeleteme.com/" rel="noopener noreferrer" target="_blank">DeleteMe</a>, <a href="https://optery.com/" rel="noopener noreferrer" target="_blank">Optery</a>).</li> +<li>Consider dedicated, hardened devices (e.g., a specific laptop only for crypto) with minimal software.</li> +<li>Use legal structures (LLCs, trusts) to obscure ownership of assets where appropriate and legal.</li> +<li>Avoid ostentatious displays of wealth that could mark you.</li> +<li>Consider pseudonymous phone numbers/SIMs for sensitive registrations.</li> +</ul> +</div> +</div> +</div> +</div> +</div> +</section> +<section class="section-container" data-section-id="physical" id="physical"> +<h2 class="section-title"><i class="bi bi-shield-fill-check"></i> Physical Security: Protecting Your Keys & Yourself</h2> +<div class="row"> +<div class="col-lg-6"> +<div class="security-card"> +<h5> +<span><i class="bi bi-safe"></i> Securing Seed Phrases & Devices</span> +<span class="threat-level threat-high">HIGH FOR ALL</span> +</h5> +<p class="summary">Your seed phrases and hardware wallets are prime targets. Protect them from theft, damage, and unauthorized access. <span class="security-term">Geographic separation of backups is key.</span></p> +<button aria-controls="physical-seeds" aria-expanded="false" class="btn details-toggle" data-bs-target="#physical-seeds" data-bs-toggle="collapse" type="button"> +<i class="bi bi-chevron-down"></i> Details + </button> +<div class="collapse collapse-content" id="physical-seeds"> +<div class="tier-advice pleb-advice"> +<h6><i class="bi bi-person-fill"></i> Everyday Holder / Plebe:</h6> +<ul> +<li>Store hardware wallets out of sight when not in use.</li> +<li>Keep your primary metal seed backup (see <a class="details-link" href="#tools-services">Tools section</a> for examples) in a secure, fire-resistant location at home (e.g., quality home safe).</li> +<li>Have at least one additional backup of your seed phrase stored off-site (e.g., with a trusted family member, very secure bank SDB - weigh risks).</li> +<li>Ensure backups are protected from casual discovery and environmental damage (water, fire).</li> +</ul> +</div> +<div class="tier-advice whale-advice mt-3"> +<h6><i class="bi bi-gem"></i> Significant Holdings / Whale:</h6> +<p>All the above, plus:</p> +<ul> +<li>Utilize high-security safes (e.g., TL-15, TL-30 rated from brands like Liberty, Fort Knox, etc.) bolted down.</li> +<li>Distribute key materials (seeds, hardware devices for multisig) across multiple highly secure, geographically diverse locations (different cities/states/countries).</li> +<li>Employ tamper-evident bags/seals for stored devices or seed backups.</li> +<li>Consider decoy safes or stashes with minimal value to mislead attackers.</li> +<li>If using bank SDBs, understand the risks (limited access, potential seizure, not insured for this purpose) and use them as only one part of a distributed strategy.</li> +</ul> +</div> +</div> +</div> +</div> +<div class="col-lg-6"> +<div class="security-card"> +<h5> +<span><i class="bi bi-house-heart-fill"></i> Home & Personal Security</span> +<span class="threat-level threat-medium">MEDIUM (Escalates for Whales)</span> +</h5> +<p class="summary">Basic home security is prudent for everyone. For those with significant holdings, a <span class="security-term">"Home Fortress" protocol and duress planning</span> become vital.</p> +<button aria-controls="physical-home-defense" aria-expanded="false" class="btn details-toggle" data-bs-target="#physical-home-defense" data-bs-toggle="collapse" type="button"> +<i class="bi bi-chevron-down"></i> Details + </button> +<div class="collapse collapse-content" id="physical-home-defense"> +<div class="tier-advice pleb-advice"> +<h6><i class="bi bi-person-fill"></i> Everyday Holder / Plebe:</h6> +<ul> +<li>Ensure good quality locks on doors and windows.</li> +<li>Consider a basic monitored alarm system (e.g., <a href="https://simplisafe.com/" rel="noopener noreferrer" target="_blank">SimpliSafe</a>, <a href="https://goabode.com/" rel="noopener noreferrer" target="_blank">Abode</a>) and/or security cameras (e.g., <a href="https://reolink.com/" rel="noopener noreferrer" target="_blank">Reolink</a>, Wyze) if you have noticeable assets.</li> +<li>Be aware of your surroundings. Avoid making yourself an obvious target.</li> +</ul> +</div> +<div class="tier-advice whale-advice mt-3"> +<h6><i class="bi bi-gem"></i> Significant Holdings / Whale:</h6> +<p>All the above, plus "Home Fortress Protocol":</p> +<ul> +<li>Reinforced doors/frames, security film on windows, advanced locks.</li> +<li>Comprehensive, professionally monitored alarm (e.g., ADT, local firms) with cellular backup, multiple sensor types.</li> +<li>Extensive camera coverage (PoE systems like <a href="https://ui.com/camera-security" rel="noopener noreferrer" target="_blank">Ubiquiti Protect</a> or commercial NVRs), cloud backup.</li> +<li>Consider a safe room or reinforced area.</li> +<li><strong>Duress Plan:</strong> Have a decoy wallet with a plausible amount to surrender. Use duress PINs/passphrases on hardware if available. Formulate a believable story about time-locked/dispersed funds (this should ideally be true for multisig setups). Prioritize life over Bitcoin. Comply with attackers to de-escalate.</li> +<li>Personal defense training focusing on situational awareness and de-escalation.</li> +</ul> +</div> +</div> +</div> +</div> +</div> +</section> +<section class="section-container" data-section-id="technical" id="technical"> +<h2 class="section-title"><i class="bi bi-diagram-3-fill"></i> Technical Security: Wallets & Backups</h2> +<div class="row"> +<div class="col-lg-6"> +<div class="security-card"> +<h5> +<span><i class="bi bi-shield-lock"></i> Choosing Your Wallet Setup</span> +<span class="threat-level threat-critical">CRITICAL FOR ALL</span> +</h5> +<p class="summary">The right wallet setup depends on your technical skills, the amount you're securing, and your risk tolerance. <span class="expert-term">Hardware wallets are strongly recommended over software/mobile wallets for most users.</span></p> +<button aria-controls="tech-wallet-choice" aria-expanded="false" class="btn details-toggle" data-bs-target="#tech-wallet-choice" data-bs-toggle="collapse" type="button"> +<i class="bi bi-chevron-down"></i> Details + </button> +<div class="collapse collapse-content" id="tech-wallet-choice"> +<div class="tier-advice pleb-advice"> +<h6><i class="bi bi-person-fill"></i> Everyday Holder / Plebe: Single Signature</h6> +<ul> +<li><strong>Recommendation:</strong> A reputable single-signature hardware wallet. Purchase directly from the manufacturer. (See <a class="details-link" href="#tools-services">Tools section</a> for examples like Coldcard, Trezor, etc.).</li> +<li>This keeps your private keys offline. Focus on understanding its backup/recovery.</li> +<li>Avoid keeping significant amounts on exchange hot wallets or software wallets on your primary phone/computer.</li> +</ul> +</div> +<div class="tier-advice whale-advice mt-3"> +<h6><i class="bi bi-gem"></i> Significant Holdings / Whale: Multi-Signature (Multisig)</h6> +<p>Single-signature wallets become a single point of failure for large sums. Multisig is essential.</p> +<ul> +<li><strong>Recommendation:</strong> 2-of-3 or 3-of-5 multisig setup using diverse hardware wallets.</li> +<li>Requires multiple keys to authorize a transaction. Keys/seeds must be geographically diverse.</li> +<li>Use robust multisig coordinator software (e.g., <a href="https://sparrowwallet.com/" rel="noopener noreferrer" target="_blank">Sparrow Wallet</a>, <a href="https://specter.solutions/" rel="noopener noreferrer" target="_blank">Specter Desktop</a>, <a href="https://nunchuk.io/" rel="noopener noreferrer" target="_blank">Nunchuk</a>).</li> +<li><strong>Collaborative Custody:</strong> For very large sums, consider services (e.g., <a href="https://unchained.com/" rel="noopener noreferrer" target="_blank">Unchained Capital</a>, <a href="https://casa.io/" rel="noopener noreferrer" target="_blank">Casa</a>, <a href="https://www.swanbitcoin.com/vault/" rel="noopener noreferrer" target="_blank">Swan Vault</a>) as one co-signer.</li> +</ul> +</div> +</div> +</div> +</div> +<div class="col-lg-6"> +<div class="security-card"> +<h5> +<span><i class="bi bi-safe2"></i> Seed Phrase & Passphrase Management</span> +<span class="threat-level threat-critical">CRITICAL FOR ALL</span> +</h5> +<p class="summary">Your 12/24-word seed phrase IS your Bitcoin. Secure it meticulously. <span class="expert-term">Metal backups are essential for durability</span>. BIP39 passphrases ("25th word") add security but also risk if forgotten.</p> +<button aria-controls="tech-seed-backup" aria-expanded="false" class="btn details-toggle" data-bs-target="#tech-seed-backup" data-bs-toggle="collapse" type="button"> +<i class="bi bi-chevron-down"></i> Details + </button> +<div class="collapse collapse-content" id="tech-seed-backup"> +<div class="rule-box critical"> +<strong>For All Users:</strong> Never store your seed phrase digitally. Avoid typing it into any internet-connected device if possible. </div> - </div> - </div> - </div> - </div> - </section> - - <section class="section-container" id="maintenance" data-section-id="maintenance"> - <h2 class="section-title"><i class="bi bi-arrow-repeat"></i> Continuous Verification, Drills & Adaptation</h2> - <div class="row"> - <div class="col-lg-12"> - <div class="security-card"> - <h5> - <span><i class="bi bi-calendar3-event-fill"></i> Security is a Process, Not a Destination</span> - <span class="threat-level threat-medium">MEDIUM FOR ALL</span> - </h5> - <p class="summary">Regularly test your setup, from signing transactions to full backup recovery. <span class="expert-term">Stay informed and adapt your strategy</span> to new threats, software updates, and changes in your life.</p> - <button class="btn details-toggle" type="button" data-bs-toggle="collapse" data-bs-target="#maintenance-drills" aria-expanded="false" aria-controls="maintenance-drills"> - <i class="bi bi-chevron-down"></i> Details +<h6>Seed Backup Essentials:</h6> +<ul> +<li><strong>Metal Backups:</strong> Stamp or engrave your seed phrase onto robust metal plates. (See <a class="details-link" href="#tools-services">Tools section</a> for examples like CryptoSteel, Blockplate). Paper is NOT for long-term primary backup.</li> +<li><strong>Multiple Copies & Off-site Storage:</strong> At least two metal copies, one securely off-site.</li> +</ul> +<h6>BIP39 Passphrase (Optional "25th Word"):</h6> +<ul> +<li>Adds security if physical seed is compromised, but GONE FOREVER if passphrase is forgotten.</li> +<li><strong>Plebes:</strong> Generally NOT recommended due to risk of forgetting.</li> +<li><strong>Whales:</strong> Can be part of a multi-layered strategy if managed with extreme discipline (passphrase also on metal, stored separately).</li> +</ul> +</div> +</div> +</div> +</div> +</section> +<section class="section-container" data-section-id="tools" id="tools-services"> +<h2 class="section-title"><i class="bi bi-tools"></i> Recommended Tools, Services & Resources</h2> +<div class="security-card"> +<p class="summary">This is not an exhaustive list, and inclusion does not equal endorsement. <strong>Always Do Your Own Research (DYOR)</strong> before trusting any product or service with your Bitcoin or personal information.</p> +<div class="row resource-list"> +<div class="col-md-6"> +<h6><i class="bi bi-key-fill"></i> Hardware Wallets (Single & Multisig)</h6> +<ul> +<li><i class="bi bi-shield-check"></i> <a href="https://coldcard.com/" rel="noopener noreferrer" target="_blank">Coldcard</a> (Bitcoin-only, airgapped focus)</li> +<li><i class="bi bi-shield-check"></i> <a href="https://blockstream.com/jade/" rel="noopener noreferrer" target="_blank">Blockstream Jade</a> (Bitcoin-only, good value)</li> +<li><i class="bi bi-shield-check"></i> <a href="https://trezor.io/" rel="noopener noreferrer" target="_blank">Trezor</a> (Established, supports multiple coins)</li> +<li><i class="bi bi-shield-check"></i> <a href="https://www.ledger.com/" rel="noopener noreferrer" target="_blank">Ledger</a> (Popular, supports multiple coins - research recent events)</li> +<li><i class="bi bi-shield-check"></i> <a href="https://foundationdevices.com/" rel="noopener noreferrer" target="_blank">Passport by Foundation</a> (Bitcoin-only, airgapped)</li> +<li><i class="bi bi-shield-check"></i> <a href="https://seedsigner.com/" rel="noopener noreferrer" target="_blank">SeedSigner</a> (DIY airgapped signing device)</li> +</ul> +<h6><i class="bi bi-journal-album"></i> Metal Seed Storage</h6> +<ul> +<li><i class="bi bi-shield-check"></i> <a href="https://cryptosteel.com/" rel="noopener noreferrer" target="_blank">CryptoSteel</a> (Capsule & Cassette)</li> +<li><i class="bi bi-shield-check"></i> <a href="https://blockplate.com/" rel="noopener noreferrer" target="_blank">Blockplate</a> (Stainless steel plates)</li> +<li><i class="bi bi-shield-check"></i> <a href="https://seedplate.com/" rel="noopener noreferrer" target="_blank">Seedplate</a> (Punch-hole or engraved plates)</li> +<li><i class="bi bi-shield-check"></i> <a href="http://coldbit.com/" rel="noopener noreferrer" target="_blank">Coldbit Steel</a> (Various steel backup solutions)</li> +<li><i class="bi bi-shield-check"></i> <a href="https://stampseed.com/" rel="noopener noreferrer" target="_blank">StampSeed</a> (DIY stamping kits)</li> +</ul> +<h6><i class="bi bi-diagram-3"></i> Multisig Coordinator Software</h6> +<ul> +<li><i class="bi bi-shield-check"></i> <a href="https://sparrowwallet.com/" rel="noopener noreferrer" target="_blank">Sparrow Wallet</a> (Desktop, feature-rich)</li> +<li><i class="bi bi-shield-check"></i> <a href="https://specter.solutions/" rel="noopener noreferrer" target="_blank">Specter Desktop</a> (Desktop, hardware wallet focused)</li> +<li><i class="bi bi-shield-check"></i> <a href="https://bluewallet.io/" rel="noopener noreferrer" target="_blank">BlueWallet</a> (Mobile, good for smaller multisig)</li> +<li><i class="bi bi-shield-check"></i> <a href="https://nunchuk.io/" rel="noopener noreferrer" target="_blank">Nunchuk</a> (Mobile & Desktop, collaborative focus)</li> +<li><i class="bi bi-shield-check"></i> <a href="https://electrum.org/" rel="noopener noreferrer" target="_blank">Electrum</a> (Desktop, versatile, advanced users)</li> +</ul> +</div> +<div class="col-md-6"> +<h6><i class="bi bi-building-shield"></i> Collaborative Custody & Inheritance Services</h6> +<ul> +<li><i class="bi bi-shield-check"></i> <a href="https://unchained.com/" rel="noopener noreferrer" target="_blank">Unchained Capital</a> (Multisig vaults, inheritance)</li> +<li><i class="bi bi-shield-check"></i> <a href="https://casa.io/" rel="noopener noreferrer" target="_blank">Casa</a> (Multisig key management, inheritance)</li> +<li><i class="bi bi-shield-check"></i> <a href="https://www.swanbitcoin.com/vault/" rel="noopener noreferrer" target="_blank">Swan Vault by Swan Bitcoin</a> (Guided multisig setup)</li> +</ul> +<h6><i class="bi bi-incognito"></i> Privacy Tools</h6> +<ul> +<li><i class="bi bi-shield-check"></i> Password Managers: <a href="https://bitwarden.com/" rel="noopener noreferrer" target="_blank">Bitwarden</a>, <a href="https://1password.com/" rel="noopener noreferrer" target="_blank">1Password</a></li> +<li><i class="bi bi-shield-check"></i> VPN Services: <a href="https://protonvpn.com/" rel="noopener noreferrer" target="_blank">ProtonVPN</a>, <a href="https://mullvad.net/" rel="noopener noreferrer" target="_blank">Mullvad</a></li> +<li><i class="bi bi-shield-check"></i> Encrypted Email: <a href="https://proton.me/mail" rel="noopener noreferrer" target="_blank">ProtonMail</a>, <a href="https://tutanota.com/" rel="noopener noreferrer" target="_blank">Tutanota</a></li> +<li><i class="bi bi-shield-check"></i> Data Broker Removal: <a href="https://joindeleteme.com/" rel="noopener noreferrer" target="_blank">DeleteMe</a>, <a href="https://optery.com/" rel="noopener noreferrer" target="_blank">Optery</a></li> +<li><i class="bi bi-shield-check"></i> Secure Mail Forwarding: <a href="https://www.travelingmailbox.com/" rel="noopener noreferrer" target="_blank">Traveling Mailbox</a></li> +</ul> +<h6><i class="bi bi-book-half"></i> Educational Resources</h6> +<ul> +<li><i class="bi bi-shield-check"></i> <a href="https://bitcoin.org/en/secure-your-wallet" rel="noopener noreferrer" target="_blank">Bitcoin.org - Secure Your Wallet</a></li> +<li><i class="bi bi-shield-check"></i> <a href="https://jamesonlopp.com/bitcoin-information/" rel="noopener noreferrer" target="_blank">Jameson Lopp's Bitcoin Resources</a></li> +<li><i class="bi bi-shield-check"></i> Search for local Bitcoin meetups for community support.</li> +</ul> +</div> +</div> +</div> +</section> +<section class="section-container" data-section-id="inheritance" id="inheritance"> +<h2 class="section-title"><i class="bi bi-people-fill"></i> Inheritance & Succession Planning</h2> +<div class="row"> +<div class="col-lg-12"> +<div class="security-card"> +<h5> +<span><i class="bi bi-journal-richtext"></i> Ensuring Your Bitcoin Passes On</span> +<span class="threat-level threat-critical">CRITICAL (Complexity Scales)</span> +</h5> +<p class="summary">Without a plan, your Bitcoin could be lost forever upon your death or incapacitation. <span class="expert-term">Heir unfamiliarity is a major risk factor.</span></p> +<button aria-controls="inheritance-plan" aria-expanded="false" class="btn details-toggle" data-bs-target="#inheritance-plan" data-bs-toggle="collapse" type="button"> +<i class="bi bi-chevron-down"></i> Details + </button> +<div class="collapse collapse-content" id="inheritance-plan"> +<div class="tier-advice pleb-advice"> +<h6><i class="bi bi-person-fill"></i> Everyday Holder / Plebe:</h6> +<ul> +<li>Write a simple, clear letter of instruction. Include location of seed backup(s), hardware wallet, and basic access instructions or who to contact for trusted help.</li> +<li>Store this letter securely with your will. Inform your executor or a trusted heir of its existence and location.</li> +</ul> +</div> +<div class="tier-advice whale-advice mt-3"> +<h6><i class="bi bi-gem"></i> Significant Holdings / Whale: Comprehensive Protocol</h6> +<p>All the above, plus a multi-layered strategy:</p> +<ol> +<li><strong>Legal Framework:</strong> Work with a crypto-aware estate attorney.</li> +<li><strong>Detailed Technical Instructions:</strong> Create "idiot-proof" documentation and potentially video walkthroughs.</li> +<li><strong>Guided Recovery / "Coach":</strong> Designate a trusted, crypto-literate individual, recovery service, or collaborative custody partner (some listed in <a class="details-link" href="#tools-services">Tools section</a>) to assist heirs.</li> +</ol> +</div> +</div> +</div> +</div> +</div> +</section> +<section class="section-container" data-section-id="maintenance" id="maintenance"> +<h2 class="section-title"><i class="bi bi-arrow-repeat"></i> Continuous Verification, Drills & Adaptation</h2> +<div class="row"> +<div class="col-lg-12"> +<div class="security-card"> +<h5> +<span><i class="bi bi-calendar3-event-fill"></i> Security is a Process, Not a Destination</span> +<span class="threat-level threat-medium">MEDIUM FOR ALL</span> +</h5> +<p class="summary">Regularly test your setup, from signing transactions to full backup recovery. <span class="expert-term">Stay informed and adapt your strategy</span> to new threats, software updates, and changes in your life.</p> +<button aria-controls="maintenance-drills" aria-expanded="false" class="btn details-toggle" data-bs-target="#maintenance-drills" data-bs-toggle="collapse" type="button"> +<i class="bi bi-chevron-down"></i> Details </button> - <div class="collapse collapse-content" id="maintenance-drills"> - <div class="rule-box expert-insight"> - <strong>Universal Best Practice:</strong> Before committing any significant funds to a new wallet or backup method, send a small, trivial amount of Bitcoin through the *entire* lifecycle: setup, deposit, securing the seed, signing a test transaction, and then *fully recovering the wallet from your seed backup* on a separate or wiped device. This catches most user errors early. +<div class="collapse collapse-content" id="maintenance-drills"> +<div class="rule-box expert-insight"> +<strong>Universal Best Practice:</strong> Before committing any significant funds to a new wallet or backup method, send a small, trivial amount of Bitcoin through the *entire* lifecycle: setup, deposit, securing the seed, signing a test transaction, and then *fully recovering the wallet from your seed backup* on a separate or wiped device. This catches most user errors early. </div> - <h6>Key Maintenance Activities:</h6> - <ul> - <li><strong>Scheduled Drills & Full Recovery Tests:</strong> Annually for Plebes, more frequently for Whales.</li> - <li><strong>Stay Updated:</strong> Follow reputable Bitcoin security news. Update software/firmware *cautiously*.</li> - <li><strong>Adapt to Change:</strong> Re-evaluate security after life events or changes in holdings/risk.</li> - </ul> - </div> - </div> - </div> - </div> - </section> - - <section class="section-container" id="checklist" data-section-id="checklist"> - <h2 class="section-title"><i class="bi bi-check2-square"></i> Scalable Self-Custody Checklist</h2> - <div class="security-card"> - <h5><i class="bi bi-list-task"></i> Key Actions (Tailor to Your Holdings & Risk)</h5> - <p class="text-secondary">Review and implement applicable steps. <i class="bi bi-person-fill"></i> = Core for Everyone. <i class="bi bi-gem"></i> = Enhanced/Essential for Significant Holdings.</p> - <div class="row"> - <div class="col-md-6"> - <h6>Foundational Security (OPSEC & Physical)</h6> - <ul> - <li><input type="checkbox" id="chk-s-opsec-silence"><label for="chk-s-opsec-silence"><i class="bi bi-person-fill"></i> Practice "Shield of Silence" regarding holdings.</label></li> - <li><input type="checkbox" id="chk-s-secure-accounts"><label for="chk-s-secure-accounts"><i class="bi bi-person-fill"></i> Secure online accounts (strong unique passwords, 2FA).</label></li> - <li><input type="checkbox" id="chk-s-safe-hw-delivery"><label for="chk-s-safe-hw-delivery"><i class="bi bi-person-fill"></i> Ensure safe delivery of hardware wallets.</label></li> - <li><input type="checkbox" id="chk-s-basic-home-sec"><label for="chk-s-basic-home-sec"><i class="bi bi-person-fill"></i> Implement basic home physical security for backups.</label></li> - <li><input type="checkbox" id="chk-s-whale-opsec"><label for="chk-s-whale-opsec"><i class="bi bi-gem"></i> Advanced OPSEC: pseudonyms, PII scrubbing, separate digital identities.</label></li> - <li><input type="checkbox" id="chk-s-whale-home-fortress"><label for="chk-s-whale-home-fortress"><i class="bi bi-gem"></i> Develop "Home Fortress" & duress protocols.</label></li> - </ul> - <h6>Wallet & Backup Architecture</h6> - <ul> - <li><input type="checkbox" id="chk-s-hw-wallet"><label for="chk-s-hw-wallet"><i class="bi bi-person-fill"></i> Use a reputable hardware wallet (single-sig for smaller amounts).</label></li> - <li><input type="checkbox" id="chk-s-metal-backup"><label for="chk-s-metal-backup"><i class="bi bi-person-fill"></i> Create metal seed backups (minimum 2 copies).</label></li> - <li><input type="checkbox" id="chk-s-offsite-backup"><label for="chk-s-offsite-backup"><i class="bi bi-person-fill"></i> Store at least one seed backup securely off-site.</label></li> - <li><input type="checkbox" id="chk-s-test-full-workflow"><label for="chk-s-test-full-workflow"><i class="bi bi-person-fill"></i> Test entire wallet setup & recovery with small amount first.</label></li> - <li><input type="checkbox" id="chk-s-bip39-careful"><label for="chk-s-bip39-careful"><i class="bi bi-person-fill"></i> Understand BIP39 passphrase risks thoroughly if considering use.</label></li> - <li><input type="checkbox" id="chk-s-whale-multisig"><label for="chk-s-whale-multisig"><i class="bi bi-gem"></i> Implement multisig (e.g., 2-of-3, 3-of-5) with diverse hardware.</label></li> - <li><input type="checkbox" id="chk-s-whale-geo-distro"><label for="chk-s-whale-geo-distro"><i class="bi bi-gem"></i> Geographically distribute all multisig key material.</label></li> - </ul> - </div> - <div class="col-md-6"> - <h6>Inheritance & Long-Term Planning</h6> - <ul> - <li><input type="checkbox" id="chk-s-simple-heir-letter"><label for="chk-s-simple-heir-letter"><i class="bi bi-person-fill"></i> Create a basic letter of instruction for heirs.</label></li> - <li><input type="checkbox" id="chk-s-inform-executor"><label for="chk-s-inform-executor"><i class="bi bi-person-fill"></i> Inform executor/trusted heir of instruction letter's existence/location.</label></li> - <li><input type="checkbox" id="chk-s-whale-estate-plan"><label for="chk-s-whale-estate-plan"><i class="bi bi-gem"></i> Engage crypto-aware estate attorney for will/trust.</label></li> - <li><input type="checkbox" id="chk-s-whale-heir-coach"><label for="chk-s-whale-heir-coach"><i class="bi bi-gem"></i> Arrange for a "coach" or detailed guided recovery for heirs.</label></li> - <li><input type="checkbox" id="chk-s-whale-detailed-heir-docs"><label for="chk-s-whale-detailed-heir-docs"><i class="bi bi-gem"></i> Prepare comprehensive technical documentation for heirs.</label></li> - </ul> - <h6>Ongoing Maintenance & Vigilance</h6> - <ul> - <li><input type="checkbox" id="chk-s-annual-recovery-drill"><label for="chk-s-annual-recovery-drill"><i class="bi bi-person-fill"></i> Conduct annual full backup recovery drill.</label></li> - <li><input type="checkbox" id="chk-s-stay-informed"><label for="chk-s-stay-informed"><i class="bi bi-person-fill"></i> Stay informed on security best practices & new threats.</label></li> - <li><input type="checkbox" id="chk-s-cautious-updates"><label for="chk-s-cautious-updates"><i class="bi bi-person-fill"></i> Update software/firmware cautiously after verification.</label></li> - <li><input type="checkbox" id="chk-s-whale-regular-drills"><label for="chk-s-whale-regular-drills"><i class="bi bi-gem"></i> Conduct regular (e.g., quarterly) signing drills & device health checks.</label></li> - <li><input type="checkbox" id="chk-s-whale-threat-reval"><label for="chk-s-whale-threat-reval"><i class="bi bi-gem"></i> Re-evaluate threat model and update protocols after significant life/holding changes.</label></li> - </ul> - </div> - </div> - </div> - </section> - </main> - - <footer> - <div class="container"> - <p>© <span id="currentYear"></span> David Veksler | This guide synthesizes principles from numerous Bitcoin security experts and resources for a scalable approach.</p> - <p><a href="https://walletrecovery.info" target="_blank" rel="noopener noreferrer">WalletRecovery.info</a> | <a href="https://davidveksler.substack.com" target="_blank" rel="noopener noreferrer">Substack</a></p> - <p class="text-secondary">This guide is for informational purposes. It is not financial, legal, or specific security advice. Your security is your ultimate responsibility. Always Do Your Own Research (DYOR) and consult qualified professionals where needed. Product and service links are for illustrative purposes and not endorsements.</p> - <p><strong>Core Principles for All: Robust Backups | Practice Recovery | Maintain OPSEC | Stay Vigilant. Scale complexity with holdings and risk.</strong></p> - </div> - </footer> - - <script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/js/bootstrap.bundle.min.js" integrity="sha384-YvpcrYf0tY3lHB60NNkmXc5s9fDVZLESaAA55NDzOxhy9GkcIdslK1eN7N6jIeHz" crossorigin="anonymous"></script> - <script> +<h6>Key Maintenance Activities:</h6> +<ul> +<li><strong>Scheduled Drills & Full Recovery Tests:</strong> Annually for Plebes, more frequently for Whales.</li> +<li><strong>Stay Updated:</strong> Follow reputable Bitcoin security news. Update software/firmware *cautiously*.</li> +<li><strong>Adapt to Change:</strong> Re-evaluate security after life events or changes in holdings/risk.</li> +</ul> +</div> +</div> +</div> +</div> +</section> +<section class="section-container" data-section-id="checklist" id="checklist"> +<h2 class="section-title"><i class="bi bi-check2-square"></i> Scalable Self-Custody Checklist</h2> +<div class="security-card"> +<h5><i class="bi bi-list-task"></i> Key Actions (Tailor to Your Holdings & Risk)</h5> +<p class="text-secondary">Review and implement applicable steps. <i class="bi bi-person-fill"></i> = Core for Everyone. <i class="bi bi-gem"></i> = Enhanced/Essential for Significant Holdings.</p> +<div class="row"> +<div class="col-md-6"> +<h6>Foundational Security (OPSEC & Physical)</h6> +<ul> +<li><input id="chk-s-opsec-silence" type="checkbox"/><label for="chk-s-opsec-silence"><i class="bi bi-person-fill"></i> Practice "Shield of Silence" regarding holdings.</label></li> +<li><input id="chk-s-secure-accounts" type="checkbox"/><label for="chk-s-secure-accounts"><i class="bi bi-person-fill"></i> Secure online accounts (strong unique passwords, 2FA).</label></li> +<li><input id="chk-s-safe-hw-delivery" type="checkbox"/><label for="chk-s-safe-hw-delivery"><i class="bi bi-person-fill"></i> Ensure safe delivery of hardware wallets.</label></li> +<li><input id="chk-s-basic-home-sec" type="checkbox"/><label for="chk-s-basic-home-sec"><i class="bi bi-person-fill"></i> Implement basic home physical security for backups.</label></li> +<li><input id="chk-s-whale-opsec" type="checkbox"/><label for="chk-s-whale-opsec"><i class="bi bi-gem"></i> Advanced OPSEC: pseudonyms, PII scrubbing, separate digital identities.</label></li> +<li><input id="chk-s-whale-home-fortress" type="checkbox"/><label for="chk-s-whale-home-fortress"><i class="bi bi-gem"></i> Develop "Home Fortress" & duress protocols.</label></li> +</ul> +<h6>Wallet & Backup Architecture</h6> +<ul> +<li><input id="chk-s-hw-wallet" type="checkbox"/><label for="chk-s-hw-wallet"><i class="bi bi-person-fill"></i> Use a reputable hardware wallet (single-sig for smaller amounts).</label></li> +<li><input id="chk-s-metal-backup" type="checkbox"/><label for="chk-s-metal-backup"><i class="bi bi-person-fill"></i> Create metal seed backups (minimum 2 copies).</label></li> +<li><input id="chk-s-offsite-backup" type="checkbox"/><label for="chk-s-offsite-backup"><i class="bi bi-person-fill"></i> Store at least one seed backup securely off-site.</label></li> +<li><input id="chk-s-test-full-workflow" type="checkbox"/><label for="chk-s-test-full-workflow"><i class="bi bi-person-fill"></i> Test entire wallet setup & recovery with small amount first.</label></li> +<li><input id="chk-s-bip39-careful" type="checkbox"/><label for="chk-s-bip39-careful"><i class="bi bi-person-fill"></i> Understand BIP39 passphrase risks thoroughly if considering use.</label></li> +<li><input id="chk-s-whale-multisig" type="checkbox"/><label for="chk-s-whale-multisig"><i class="bi bi-gem"></i> Implement multisig (e.g., 2-of-3, 3-of-5) with diverse hardware.</label></li> +<li><input id="chk-s-whale-geo-distro" type="checkbox"/><label for="chk-s-whale-geo-distro"><i class="bi bi-gem"></i> Geographically distribute all multisig key material.</label></li> +</ul> +</div> +<div class="col-md-6"> +<h6>Inheritance & Long-Term Planning</h6> +<ul> +<li><input id="chk-s-simple-heir-letter" type="checkbox"/><label for="chk-s-simple-heir-letter"><i class="bi bi-person-fill"></i> Create a basic letter of instruction for heirs.</label></li> +<li><input id="chk-s-inform-executor" type="checkbox"/><label for="chk-s-inform-executor"><i class="bi bi-person-fill"></i> Inform executor/trusted heir of instruction letter's existence/location.</label></li> +<li><input id="chk-s-whale-estate-plan" type="checkbox"/><label for="chk-s-whale-estate-plan"><i class="bi bi-gem"></i> Engage crypto-aware estate attorney for will/trust.</label></li> +<li><input id="chk-s-whale-heir-coach" type="checkbox"/><label for="chk-s-whale-heir-coach"><i class="bi bi-gem"></i> Arrange for a "coach" or detailed guided recovery for heirs.</label></li> +<li><input id="chk-s-whale-detailed-heir-docs" type="checkbox"/><label for="chk-s-whale-detailed-heir-docs"><i class="bi bi-gem"></i> Prepare comprehensive technical documentation for heirs.</label></li> +</ul> +<h6>Ongoing Maintenance & Vigilance</h6> +<ul> +<li><input id="chk-s-annual-recovery-drill" type="checkbox"/><label for="chk-s-annual-recovery-drill"><i class="bi bi-person-fill"></i> Conduct annual full backup recovery drill.</label></li> +<li><input id="chk-s-stay-informed" type="checkbox"/><label for="chk-s-stay-informed"><i class="bi bi-person-fill"></i> Stay informed on security best practices & new threats.</label></li> +<li><input id="chk-s-cautious-updates" type="checkbox"/><label for="chk-s-cautious-updates"><i class="bi bi-person-fill"></i> Update software/firmware cautiously after verification.</label></li> +<li><input id="chk-s-whale-regular-drills" type="checkbox"/><label for="chk-s-whale-regular-drills"><i class="bi bi-gem"></i> Conduct regular (e.g., quarterly) signing drills & device health checks.</label></li> +<li><input id="chk-s-whale-threat-reval" type="checkbox"/><label for="chk-s-whale-threat-reval"><i class="bi bi-gem"></i> Re-evaluate threat model and update protocols after significant life/holding changes.</label></li> +</ul> +</div> +</div> +</div> +</section> +</main> +<footer> +<div class="container"> +<p>© <span id="currentYear"></span> David Veksler | This guide synthesizes principles from numerous Bitcoin security experts and resources for a scalable approach.</p> +<p><a href="https://walletrecovery.info" rel="noopener noreferrer" target="_blank">WalletRecovery.info</a> | <a href="https://davidveksler.substack.com" rel="noopener noreferrer" target="_blank">Substack</a></p> +<p class="text-secondary">This guide is for informational purposes. It is not financial, legal, or specific security advice. Your security is your ultimate responsibility. Always Do Your Own Research (DYOR) and consult qualified professionals where needed. Product and service links are for illustrative purposes and not endorsements.</p> +<p><strong>Core Principles for All: Robust Backups | Practice Recovery | Maintain OPSEC | Stay Vigilant. Scale complexity with holdings and risk.</strong></p> +</div> +</footer> +<script crossorigin="anonymous" integrity="sha384-YvpcrYf0tY3lHB60NNkmXc5s9fDVZLESaAA55NDzOxhy9GkcIdslK1eN7N6jIeHz" src="https://cdn.jsdelivr.net/npm/[email protected]/dist/js/bootstrap.bundle.min.js"></script> +<script> document.getElementById('currentYear').textContent = new Date().getFullYear(); document.querySelectorAll('#checklist input[type="checkbox"]').forEach(checkbox => { const id = checkbox.id;