SECSOURCE-LED TOPIC GUIDE

Bitcoin security: keys and recovery

Connect key protection, Seed Phrase, recovery and Multisig. Distinguish technical control of funds, legal entitlement and custody’s operational risks.

79connected coordinates
338Source links

You authorize spending through your own keys and script conditions. Technical ability to sign does not by itself establish legal ownership. A Seed Phrase enables recovery of derived keys in a supported format. The words are not attached to a transaction or sent to the network. Recovery requires the correct words, order, format and any passphrase. Derivation paths, address types and configuration may be needed to find all funds. Multisig can distribute signatures across devices or people. The required signature threshold and available backups determine whether you depend on another party.

Primary sources

Leaked words can threaten many accounts; any passphrase's strength and secrecy affect the risk. Do not invent or translate the words, or send them to support or a website requesting “verification”. Assess custody arrangements against specific threats and a verified recovery procedure. Buying a device alone does not address every way funds can be lost. Linked entries have their own sources and reviews.

A curated path from first principles to the details that matter.

01
Security · KEYS

Self-custody

With self-custody, you hold the means to spend bitcoin instead of an account custodian. That independence brings responsibility: you need to recognize the right address, protect backups and be able to restore the wallet.

Open entry Open source
02
Security · KEY

Private Key

The secret a wallet uses to authorize payments. How private keys work, why they must stay private, and how they differ from a PIN and recovery words.

Open entry Open source
03
Security · SEED

Seed Phrase

Why a wallet shows you a list of words, what they can restore after you lose your phone, and how to keep them from helping a thief too.

Open entry Open source
04
Security · HW

Hardware Wallet

A Hardware Wallet lets you approve bitcoin payments without handing your private keys to your everyday computer. It protects access to money, not money stored inside a box. Checking its screen and keeping a safe backup matter just as much as the device.

Open entry Open source
05
Security · M-of-N

Multisig

A payment need not depend on a single key. Multisig can require, for example, any two of three independent keys to sign.

Open entry Open source
06
Security · WATCH

Watch-only Wallet

A Watch-only Wallet shows incoming payments and balances and can prepare unsigned transactions. It does not hold the private keys needed to spend. An accurate view requires the complete rules of your wallet and reliable blockchain data.

Open entry Open source

Definitions, mechanisms, people and source data connected to this field.

KEYPrivate KeySecurity · 5 §WALWalletSecurity · 5 §SEEDSeed PhraseSecurity · 8 §BIP39BIP 39Security · 14 §BIP32HD WalletSecurity · 14 §M-of-NMultisigSecurity · 7 §COLDCold StorageSecurity · 15 §HWHardware WalletSecurity · 6 §WATCHWatch-only WalletSecurity · 14 §UTXO+Coin ControlPrivacy · 4 §CHGChange AddressPrivacy · 15 §2XDouble-spendSecurity · 15 §XPUBExtended Public Key (xpub)Security · 6 §DESCOutput DescriptorSecurity · 9 §BIP174PSBTSecurity · 6 §CJCoinJoinPrivacy · 6 §PRIVBitcoin PrivacyPrivacy · 7 §PSEUDOPseudonymityPrivacy · 7 §KYCKYCPrivacy · 10 §KEYSSelf-custodySecurity · 7 §BLINDBlind SignaturePrivacy · 10 §MIXMix NetworkPrivacy · 11 §SYBILSybil AttackSecurity · 9 §ECLEclipse AttackSecurity · 9 §SELFSelfish MiningSecurity · 9 §MINIMiniscriptSecurity · 12 §MuSig2MuSig2Security · 10 §SCHNORRSchnorr SignatureSecurity · 12 §SPSilent PaymentsPrivacy · 9 §V2P2PBIP324Privacy · 8 §P2EPPayjoinPrivacy · 8 §NEUTRINOCompact Block FiltersPrivacy · 6 §SELECTCoin SelectionSecurity · 7 §GAPGap LimitSecurity · 6 §PATHDerivation PathSecurity · 10 §BIP85BIP85Security · 5 §SLIP39SLIP-39Security · 6 §SSSShamir Secret SharingSecurity · 6 §SESecure ElementSecurity · 5 §AIRGAPAir-gapped WalletSecurity · 6 §DICEDice Roll EntropySecurity · 5 §DURESSDuress WalletSecurity · 7 §INHERITBitcoin Inheritance PlanSecurity · 10 §VAULTBitcoin VaultSecurity · 7 §DMSDead Man’s SwitchSecurity · 10 §COLLABCollaborative CustodySecurity · 9 §CHAINALChain SurveillancePrivacy · 8 §CIOHCommon-Input Ownership HeuristicPrivacy · 6 §CLUSTERAddress ClusteringPrivacy · 6 §LABELTransaction LabelingPrivacy · 5 §CASHUCashuPrivacy · 9 §BIP157/158Compact Block FiltersPrivacy · 5 §BIP370PSBT v2Security · 4 §FROSTFROSTSecurity · 4 §NEUTRINONeutrinoPrivacy · 4 §BISQBisqPrivacy · 10 §PEACHPeach BitcoinPrivacy · 8 §HCryptographic EntropySecurity · 6 §BIT-HEntropy BitSecurity · 4 §2^NBrute Force Search SpaceSecurity · 6 §RNGRandom Number GeneratorSecurity · 7 §CSPRNGCSPRNGSecurity · 6 §PRNGDeterministic RNGSecurity · 6 §TRNGTrue Random Number GeneratorSecurity · 4 §MIX-HEntropy MixingSecurity · 4 §SEED-GENSeed GenerationSecurity · 5 §CSBIP39 checksumSecurity · 1 §BIP39-PBIP39 passphraseSecurity · 3 §PBKDF2PBKDF2Security · 2 §FPWallet FingerprintSecurity · 3 §REPROReproducible Firmware BuildSecurity · 6 §CK-RNGCOLDCARD RNG Incident (2026)Security · 5 §TIMEWARPTimewarp AttackSecurity · 5 §D++Dandelion++Privacy · 4 §ANONBitcoin Anonymity NetworksPrivacy · 5 §OVFLValue Overflow IncidentSecurity · 5 §FORK13March 2013 Chain SplitSecurity · 5 §SEEDQRSeedQRSecurity · 7 §BBQRBBQrSecurity · 6 §
736Search all Atlas entries