The Bitcoin Matrix
Jameson Lopp & Nick Neuman: Bitcoin Key Management & Security
- Self-custody requires a fundamentally different security mindset than credit-based digital payments, since lost Bitcoin cannot be recovered like fraudulent credit card charges.
- Single-signature wallets present a single point of failure; multisig (multiple keys) eliminates that risk because losing one key does not result in loss of funds.
- Seed phrases introduce complexity and anxiety for most users; Casa's "seedless" model uses multisig so keys need replacing (not restoring) if lost, removing the backup burden.
- The $5 wrench attack (physical coercion) cannot be defeated by technical means alone; protection requires geographically distributed keys and service-layer safeguards like Casa's emergency lockdown and video verification.
- Decoy or duress wallets add complexity and false security; a better approach is key distribution across locations (e.g., phone, bank safety deposit box, Casa recovery key) that makes it impractical for an attacker to gather all signatures.
- Inheritance planning with multisig (Casa's diamond tier) avoids the "treasure map" problem by using a three-of-six setup where three keys become legally accessible only upon proof of death, ensuring heirs can recover funds without early exposure.