Bitcoin Wallets and Staying Secure

FTX collapsed in November 2022, freezing withdrawals and entering bankruptcy. Customers with funds on the platform had to seek repayment through insolvency proceedings. Withdrawing Bitcoin to a wallet you controlled beforehand removed exposure to that exchange's failure. The risks of holding and securing Bitcoin remained.

That one distinction, a wallet you control versus an account someone else controls, is the single most important concept in Bitcoin security. This chapter walks you through it.

What is a Bitcoin Wallet?

A wallet does not hold your Bitcoin. Most newcomers get this wrong on day one.

Your Bitcoin never leaves the blockchain. What a wallet holds is your private key, the mathematical proof that you can spend specific coins on the chain.

Picture a safety deposit box at a bank vault. The Bitcoin sits in the vault. Your wallet holds the key. Without the key you cannot open the box. With the key you can. The box never moves. Only the key matters.

When you hold Bitcoin on an exchange, the exchange controls the signing keys. Your access depends on its systems and legal obligations. Withdraw to a wallet you control and you manage the keys and authorise transfers yourself.

"Not your keys, not your coins" describes who controls the signing keys. Your legal rights also depend on the custody arrangement.

Hot Wallets vs Cold Wallets

Bitcoin wallets split into two camps depending on whether they touch the internet.

Hot wallets stay online. They live on your phone, your laptop, or in a browser extension. Opening one to pay for coffee takes seconds. The tradeoff is real: anything connected to the internet can be reached by an attacker.

Limit a hot wallet's balance to your spending needs and an amount you could afford to lose.

Cold wallets stay offline. They store your private key on a device that has never touched the internet, or only connects briefly and in a controlled way to sign transactions. A hardware wallet is the most common form.

For savings you choose to self-custody, a cold wallet can reduce online exposure. Its suitability depends on your ability to maintain the device, backups, and recovery plan.

Within self-custody, a common pattern is hot for spending, cold for saving. Plenty of experienced holders keep a small hot wallet for daily use and a hardware wallet for the bulk. The same way you keep walking-around money in your pocket and savings in the bank, except now the bank is you.

How to Choose a Wallet

The first call to make is custodial vs non-custodial.

A custodial wallet means a company holds your private keys for you. Exchange accounts are custodial. So are most beginner-friendly apps that quietly handle the keys in the background. They feel easy. They also bring back counterparty risk, the exact thing Bitcoin was built to remove.

A non-custodial wallet hands you direct control. You manage the keys and their backups. The tradeoff is responsibility: lose both access to the wallet and its recovery information, and your funds may be lost permanently.

The options below are for readers choosing self-custody. Chapter 9 compares self-custody, managed custody, and exchange-traded exposure.

Beginners with small amounts

Start with a simple non-custodial mobile wallet. Phoenix Wallet (Lightning-focused), Blue Wallet, and Muun all work well. Note that Muun uses submarine swaps for Lightning payments, which carries different trust assumptions than a standard Lightning wallet. Recovery differs by wallet; Muun's backup is explained below.

Larger amounts

Consider a hardware wallet for savings. These devices are designed to keep private keys separate from your phone or computer and sign transactions internally. Ledger, Trezor, and Coldcard are examples. Compare current security advisories, recovery methods, and how comfortably you can verify transactions. Firmware defects, weak random-number generation, or supply-chain tampering can compromise even offline keys.

All three sell directly. Buy from the manufacturer or a verified retailer. Never second-hand. Never from a random online seller. Tampered devices have drained real wallets.

July 2026 Coldcard warning (checked 12 September 2026). Coinkite's 30 July advisory describes faulty seed generation that let attackers reconstruct private keys offline and steal funds. Affected firmware spans Mk2/Mk3, Mk4/Mk5, and Q. Check the current status and firmware matrix. The advisory has an exception for qualifying independent dice rolls; a seed securely generated elsewhere is not weakened merely by importing it.

Updating firmware alone does not repair an affected seed. Follow the official migration guide: verify and install the fixed firmware, generate a new seed, check its backup and receive address on the device, and confirm a small test transfer before moving the rest. Keep the old backup until the migration is confirmed. Never erase your only working copy or disclose recovery secrets.

What is a Seed Phrase?

Many non-custodial wallets give you a seed phrase during setup: usually 12 or 24 ordinary English words in a specific order.

Words look like abandon, able, about, above, absent, absorb. Secure setup must generate an unpredictable phrase; the word list alone does not guarantee this.

For wallets that use it, the seed phrase lets you rebuild your keys on a compatible device. Follow your wallet's recovery instructions; setups with an extra passphrase or multiple keys need more than the words alone.

That power cuts both ways. Lose the phrase or share it and the same thing happens to whoever ends up holding it.

Anyone who gets your seed phrase owns your Bitcoin. No grace period. No support line. An attacker with your phrase can drain you in seconds from anywhere on earth. This is exactly why phishing scams target seed phrases. One lapse of attention is the whole heist.

Treat the seed phrase like the only key to a vault holding your life savings. For anyone using Bitcoin seriously, that is what it is.

Muun works differently. For recovery without Muun's servers, keep its Emergency Kit PDF and Recovery Code. The PDF contains encrypted keys and wallet information; the code unlocks them. Save the kit, write the code on paper, and keep them separately. A standard seed phrase alone is not a Muun backup. Follow Muun's recovery instructions.

How to Store a Seed Phrase Safely

Write it down by hand, on paper. Do not photograph it. Do not type it into a phone or laptop. Do not email it to yourself. Do not drop it into a password manager or cloud drive. Every digital surface can be compromised.

Keep two physical copies in two separate locations. Apartment burns down or floods? You need a backup elsewhere. A family member's home, a bank safe deposit box, somewhere you trust.

Consider a metal backup. Paper burns. Steel does not. Devices like Billfodl or Cryptosteel let you stamp or engrave your seed words into stainless steel. For a hardware wallet holding a few thousand francs, CHF 50 to 100 buys real peace of mind.

Never enter your seed phrase on a website. No legitimate wallet, exchange, or support service will ever ask you to. Any site that does is trying to steal from you.

What Happens if You Lose Your Wallet or Seed Phrase?

These examples apply to wallets backed up with a seed phrase. For Muun, use the Emergency Kit and Recovery Code described above.

You lose the device but still have the seed phrase: You are fine. Buy a new device, install the wallet software, type in your seed phrase, and your Bitcoin is right there. The coins were never on the old device. They were on the blockchain the whole time. The seed phrase is what matters.

You lose the seed phrase but still have the device: You can still spend, as long as the device works. But do not stall. Generate a new wallet, send the coins to it, and back up the new seed phrase properly. A dead device with no backup means permanent loss.

You lose both: The coins are gone. There is no recovery mechanism. Nobody to call. This is the entire reason you back up before anything breaks.

You shared the seed phrase or entered it on a fake site: Assume the coins are already gone. If you still have wallet access, move everything to a fresh wallet with a new seed phrase right now, before the thief beats you to it.

Security Best Practices

These habits reduce common risks:

If your wallet uses a seed phrase, write it on paper, by hand, during setup. Never store it digitally.

Keep two physical backups in separate locations. Stamp the seed into metal for anything significant.

If you choose self-custody for savings, consider a hardware wallet whose setup and recovery process you can maintain.

Turn on two-factor authentication for any exchange account you still use. Authenticator app, not SMS. SIM swap attacks are real.

For very high-value holdings, look at multisig: a setup where spending coins requires signatures from two or more separate keys. It can reduce reliance on one key, but requires careful setup and recovery planning. Sparrow Wallet, Unchained Capital, and Casa all support multisig self-custody.

Every few months, check backup access, review security advisories and firmware guidance, and confirm your recovery plan still works. Use the wallet's official backup-check procedure; never enter recovery secrets into a website.

Setting Up a Hardware Wallet: What to Expect

Knowing what happens during setup helps you avoid mistakes. Follow the manufacturer's official instructions for your model, including device checks and firmware verification before generating keys.

During setup, the device generates private keys and displays its recovery words on its own screen. Write every word in the order shown and complete the device's backup check. The number of words and recovery method vary by model and setup.

This is the most important moment in the entire process. You are receiving the master key to your wallet. Write every word clearly. Check your handwriting. Number the words. Store the paper somewhere safe before you do anything else.

The device will also ask you to set a PIN, a short code you enter when using it physically. A PIN makes unauthorised access harder; it does not guarantee protection against theft. If you forget it, verify your complete recovery backup before resetting the device.

Once set up, your hardware wallet talks to your phone or computer through a companion app like Ledger Live or Trezor Suite. These apps show balances and let you send and receive Bitcoin. In normal operation, signing happens inside the device and the app receives the signed transaction. This separation reduces exposure; it cannot guarantee that keys were generated securely or that the device is free of defects. Verify the receive address on the device and test recovery before depositing savings.

Risk Note

Losses can result from lost backups, phishing, exchange failures, or defects in wallets and firmware. Careful users can still lose funds. An offline key or PIN also cannot prevent physical coercion; keep your holdings and backup locations private.

A hardware wallet and a verified backup reduce risk. Security remains an ongoing responsibility: follow advisories, check firmware guidance, and revisit recovery arrangements as your circumstances change.

Reader Takeaway

A wallet holds private keys, not coins. Coins live on the blockchain. Hot wallets give you convenience for small amounts. Cold wallets (hardware wallets) reduce online exposure for savings, but retain device and recovery risks. Back up your wallet using its own recovery method: often a seed phrase, but Muun uses an Emergency Kit and Recovery Code. Keep checking security guidance and your recovery plan.

Chapter Summary

• A Bitcoin wallet stores your private keys. Your Bitcoin stays on the blockchain. Whoever holds the keys controls the coins.
• For self-custody, hot wallets favour day-to-day access and cold wallets reduce online key exposure.
• Non-custodial wallets put you in control. Custodial wallets (exchange accounts) hand control to a company and reintroduce counterparty risk.
• The seed phrase is the human-readable master key to your wallet. Write it on paper. Keep two copies in separate physical locations. Never store it digitally or share it with anyone.
• Losing the device and all recovery information can mean permanent loss. Keep the complete backup your wallet requires; for Muun, that means the Emergency Kit and Recovery Code.
• Hardware wallets reduce online exposure, but firmware, seed-generation, and supply-chain flaws remain possible. Follow advisories and migrate affected seeds when required.

References

• Antonopoulos, A. Mastering Bitcoin. O'Reilly
• Bitcoin.org: Choose Your Wallet
• Ledger Academy: Recovery phrase basics
• Chainalysis Crypto Crime Report (loss and scam trends)
• Swiss Financial Market Supervisory Authority (FINMA): guidance on crypto custody