#1540 Jameson Lopp | How To Keep Your Bitcoin Safe

— Jameson Lopp was swatted at his home—a low-cost physical attack where someone falsely reported an active threat to police, resulting in a massive armed response that could have ended fatally.

— To mitigate risk, Lopp deleted his public internet presence, established legal entities and aliases, and maintains strict operational security to prevent being targeted again.

— Multi-signature custody is a core defense against wrench attacks (forced asset transfers under duress), distributing keys geographically with diverse security protocols to slow attackers and make hostage situations untenable.

— Third-party custody trades the self-custody risks Bitcoin was designed to eliminate for additional risks: employee theft, infrastructure failure, nation-state targeting, and honeypot concentration.

— Privacy is the outermost security layer; if attackers cannot find or identify you, deeper security layers are never probed.

— Travel security requires constant VPN use, avoiding hotel Wi-Fi for sensitive operations, understanding that no single security measure is a silver bullet, and layering many defensive practices.

— If Bitcoin holdings represent a life-changing loss, eliminate single points of failure by adopting multi-signature custody with geographically dispersed keys held by trusted parties (family, attorneys, friends) or safety deposit boxes.

— Assume every person or organization holding a key for you can be compromised; strength comes from diversity across hardware, firmware, geographic location, and security protocols so one failure does not cascade.

— Before accepting third-party custody (ETFs, institutional custodians), understand you are trading the removal of trusted intermediaries—Bitcoin's core innovation—for concentration risk and institutional vulnerabilities.