Security Guide

Self-Custody Insurance:
Protecting Your Bitcoin

Your hardware wallet keeps hackers out. But what protects your Bitcoin from fire, flood, theft, or your own mortality? Here's the full playbook.

15 min read
Bitcoin.diy Editorial
·

Hold your own keys and no bank, exchange, or government can freeze, seize, or lose your Bitcoin. That's the promise of self-custody, and it's real. But here's what most people underestimate: the moment you take control, you also become your own insurance company.

Between 3 and 6 million Bitcoin are permanently lost. Think about that number. That's 15% to 30% of all Bitcoin ever mined, gone because of house fires, dead hard drives, forgotten passwords, and people who died without telling anyone how to recover their coins. Fidelity Digital Assets puts the loss rate at roughly 566 BTC per day. The daily mining output? Only 450 new coins. More Bitcoin disappears each day than gets created.

This guide covers the full stack of protection: physical backups, inheritance planning, multisig setups, and real insurance products that didn't exist a few years ago. By the end, you'll know how to eliminate every single point of failure. No gaps. No "I'll deal with that later."

What Is Self-Custody and Why Insurance Matters

Self-custody means you hold your own private keys. No exchange. No custodial service. Just you and your Bitcoin. That's how Bitcoin was designed to work, and it's how experienced holders protect their wealth from exchange hacks, insolvency blowups, and government overreach.

"Not your keys, not your coins" went mainstream after FTX collapsed in November 2022 and vaporized billions in customer funds. Billions. Gone overnight. Mt. Gox, Celsius, BlockFi, Voyager, all the same story. The lesson couldn't be simpler: if you don't hold your own keys, you're trusting someone else not to lose, steal, or gamble away your Bitcoin.

But self-custody comes with its own risks. You're the only person who can access your funds, which also makes you the only person who can lose them. Permanently. A hardware wallet keeps hackers out, but it won't save your Bitcoin from a house fire, a flood, or the fact that you won't live forever.

That's where self-custody insurance comes in. We're not just talking about formal insurance policies (though those exist now, and we'll cover them). We're talking about the full system: redundancies, backups, contingency plans, and inheritance strategies that protect your Bitcoin from every realistic threat. Think of it as a layered defense.

The Real Risks: What Can Go Wrong

Before you build a protection plan, you need to know what can actually go wrong. Not theoretical attacks from nation-states. Real, everyday threats that have already cost people their Bitcoin.

Fire and Natural Disasters

A house fire destroys hardware wallets, paper backups, and computers in minutes. Floods, earthquakes, hurricanes do the same. If all your recovery materials sit in one location, a single disaster wipes everything out. Most people skip this one. You assume your home is safe. It probably is, until it isn't.

Physical Theft and Robbery

Physical attacks on known Bitcoin holders are increasing. So-called "wrench attacks," where someone forces you to hand over your keys under threat of violence, aren't hypothetical anymore. They're in the news. Home burglaries targeting hardware wallets and seed backups are growing too. A thief who finds your seed phrase on a piece of paper? That's all they need. Your entire balance, gone in minutes.

Hardware Failure

Hardware wallets are electronic devices. Electronic devices fail. Screens crack, chips degrade, firmware updates occasionally brick things. If your only copy of your keys lives on one hardware wallet with no backup, you're a single component failure away from losing everything. That's why choosing a reliable wallet matters, but it's only the first step.

Memory Loss and Cognitive Decline

This one's uncomfortable to think about. If part of your security depends on remembering a passphrase, a PIN, or where you hid a backup, then cognitive decline becomes a real risk. Strokes, dementia, traumatic brain injuries, these things happen. And they can erase information that exists only in your head. No recovery option for that.

Death Without a Plan

This is the big one. What happens to your Bitcoin when you die? Your family may not even know it exists. And if they do, they probably have no clue how to access it. No password reset. No customer support line to call. Just a hardware wallet they've never seen and a seed phrase they wouldn't recognize. Roughly 4 million Bitcoin sit in wallets with zero activity for over a decade. A significant chunk of those almost certainly belong to people who aren't around anymore. Their families never got the coins. Nobody did.

Physical Backup Strategies

Your seed phrase, the 12 or 24 words generated during wallet setup, is the master key to everything. Protect it physically and you've covered the most fundamental layer of self-custody insurance. Get this wrong and nothing else matters.

Paper Backups: Simple but Fragile

Writing your seed phrase on paper is what most wallets tell you to do during setup. It works. But paper is fragile. Water destroys it. Fire destroys it. Ink fades. The paper itself degrades over time. If you go the paper route, use pencil (graphite outlasts ink), acid-free archival paper, and a sealed waterproof bag inside a fireproof safe. Even then, treat paper as a temporary backup. Not a permanent one.

Steel and Titanium Backups: Built to Last

Paper burns. That's the whole argument for steel. Stainless steel plates and titanium capsules withstand temperatures above 1,500°C, survive water submersion, and resist physical crushing. Setting up a steel backup takes about 20 minutes. For any amount of Bitcoin worth more than a few hundred dollars, the $30 to $100 cost is obvious.

The Blockplate uses stamped steel plates with no moving parts, so there's nothing to rattle loose. The Cryptosteel Capsule is stainless steel with individual letter tiles you slide into place. The Billfodl follows a similar tile design. They all work well. Blockplate is the simplest, Cryptosteel is the most compact, and Billfodl sits somewhere in between.

Geographic Distribution

One backup, one location. That's a single point of failure. Your house burns down and everything goes with it. But a second copy in a bank safe deposit box 50 miles away? Completely untouched. Geographic distribution is simple in concept, powerful in practice. We break down the exact strategy in the 3-2-1 backup section below.

Seed Phrase and Passphrase Security

Knowing what not to do with your seed phrase matters just as much as the backup itself. People make the same mistakes over and over. Here's how to avoid them.

Never Store Your Seed Phrase Digitally

Never photograph your seed phrase. Typing it into a notes app? Bad idea. Emailing it to yourself is worse. Cloud storage, password managers, encrypted files on your computer, all of these create attack vectors that defeat the entire purpose of owning a hardware wallet in the first place. The rule is simple: if your seed phrase touches the internet, even for a second, consider it compromised.

Passphrases: An Extra Layer (With Risks)

Most hardware wallets let you add an optional passphrase, sometimes called the "25th word." It's an extra layer. Someone finds your seed phrase? Still can't touch your Bitcoin without the passphrase too.

Powerful feature. But it cuts both ways. Forget your passphrase and your Bitcoin is gone. There's no password reset. No support ticket. No recovery process. Just gone. If you use a passphrase, back it up separately from your seed phrase with the same physical standards we've described. Seed phrase in one location, passphrase in another. A thief who finds one piece still can't get in.

Decoy Wallets and Plausible Deniability

Here's a clever side benefit: passphrases enable plausible deniability. Your seed phrase without the passphrase opens a "decoy" wallet. Keep a small amount of Bitcoin in it. If someone forces you to hand over your seed phrase, they see a wallet with funds and think that's everything. Your real holdings stay hidden behind the passphrase. Is it foolproof? No. But it's a meaningful defense against physical threats, and it costs you nothing to set up.

Inheritance Planning for Bitcoin

Your heirs won't know what a seed phrase is. That's the blunt reality for most Bitcoin holders. If you're in this for the long term, you need a plan for what happens after you're gone. This isn't morbid. It's the most responsible thing you can do with your stack. Without a clear plan, your Bitcoin will almost certainly die with you.

The Letter of Intent Approach

Start simple. Write a detailed letter and store it somewhere secure, a bank vault or with an attorney. In it, explain what Bitcoin is, that you own some, where your backup materials are, and step-by-step instructions for recovering the funds. Write it for someone who has never touched a hardware wallet. Include the device model names, what wallet software to use, and contact info for one or two technically savvy people who can walk your family through the process.

Multisig Inheritance

This is where collaborative custody really shines. Providers like Casa and Unchained build inheritance right into the service. Your heirs work with the provider to verify their identity and co-sign a transaction after your death. The provider holds one key, you held two, and the legal framework makes sure your beneficiaries can access one of your keys through a documented process. For most people, this is the most practical path to Bitcoin inheritance.

Dead Man's Switch

The concept is simple: if you don't check in within a set timeframe, the system assumes something happened and takes action. For Bitcoin, that might mean automatically emailing inheritance instructions to a designated address if you don't log into a service for 90 days. Google's Inactive Account Manager does this for free. One important caveat though: email isn't a secure channel for seed phrases. Use the dead man's switch to send instructions about where things are stored, not the seed phrase itself.

Legal Considerations

Find an attorney who understands digital assets. This is harder than it sounds, but it matters. Your will should reference your Bitcoin holdings and point to where recovery instructions are stored. Never put the actual seed phrase in the will. Wills become public documents during probate. In the US, the Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA) has been adopted by most states and gives a legal framework for digital asset access after death. If your attorney hasn't heard of RUFADAA, you might need a different attorney.

The 3-2-1 Multi-Location Backup Strategy

The 3-2-1 rule comes from IT data protection, and it maps perfectly to Bitcoin. The idea is dead simple: build enough redundancy that no single event, no fire, no flood, no burglary, can wipe out all your recovery materials at once.

The 3-2-1 Rule for Bitcoin

  • 3 copies of your seed phrase (the original plus two backups)
  • 2 different mediums (for example, one paper copy and two steel plates, or two steel plates and one engraved titanium backup)
  • 1 offsite location (at minimum, one copy stored in a completely different geographic area)

A Practical 3-2-1 Setup

Here's how we'd set it up. Copy 1: Steel plate in a fireproof safe at home. That's your primary reference for day-to-day access. Copy 2: Second steel plate in a bank safe deposit box or at a trusted family member's place in a different city. Copy 3: Paper backup sealed in a tamper-evident envelope, stored with an attorney or in another geographically separate location. Your house could burn to the ground and you'd still have two intact copies of your seed phrase. That's the whole point.

The Security vs. Accessibility Trade-off

There's a trade-off here. More copies protect against loss, but each copy is also a potential access point for a thief. Sound paranoid? Maybe. But this is where a passphrase pays for itself. Even if someone finds one of your seed phrase backups, they're locked out without the passphrase. That lets you spread copies around more freely without proportionally increasing theft risk.

Multisig as Insurance

Multisig wallets need multiple private keys to authorize a transaction. Instead of one seed phrase controlling everything, you split control across several keys in separate locations. It's arguably the most powerful self-custody insurance you can set up. If single-key storage is a padlock, multisig is a bank vault.

How 2-of-3 Multisig Works

Three keys get created. Any two of the three can sign a transaction and move funds. You hold two keys on separate hardware wallets, a custody provider holds the third. Lose one key? You still get in with the other one plus the provider's key. Provider goes rogue? They only have one key and can't do anything alone. Personally, we think the 2-of-3 setup hits the sweet spot for most people.

Unchained: Bitcoin-Only Collaborative Custody

Unchained is our pick for most Bitcoin holders. Their Personal Vault gives you 2-of-3 multisig for $250 per year. You hold two keys, Unchained holds one. Lose a key? You work with Unchained through video verification to co-sign a recovery transaction. They're Bitcoin-only, which means a tighter codebase and a more focused security model. They also offer Bitcoin-backed loans and IRA accounts using the same multisig infrastructure.

Casa: Premium Multi-Key Vaults

Casa goes bigger with a 3-of-5 multisig vault in their Premium tier ($2,100 per year). You get a mobile key, hardware wallet keys, and a recovery key, plus personalized onboarding, device replacement, and live video verification. Casa recommends this tier for holdings between $75,000 and $500,000 in Bitcoin. They also support Ethereum and stablecoins. That adds flexibility, but it also expands the attack surface compared to Bitcoin-only providers. Is that overkill? Depends on how much you're holding.

DIY Multisig with Open-Source Tools

Don't want a third party involved at all? You can build multisig yourself with open-source tools like Sparrow Wallet, Electrum, or Caravan (built by Unchained, but free to use). You manage every key. Maximum sovereignty, maximum responsibility. This path isn't for everyone. It requires genuine technical confidence and meticulous backup procedures for each key. One mistake and there's no helpdesk to call.

DIY vs Managed Custody Services

So which approach should you pick? It comes down to three things: your technical comfort level, the size of your holdings, and how much peace of mind is worth to you in dollar terms.

FactorDIY Self-CustodyManaged / Collaborative
Annual Cost$0 (hardware wallet cost only)$250 to $2,100+ per year
Recovery SupportYou are on your ownProvider assists via video verification
InheritanceManual setup requiredBuilt-in inheritance features
PrivacyMaximum (no third party involved)Provider knows you hold Bitcoin
Technical Skill NeededHighLow to moderate
Best ForTechnical users, privacy maximalistsMost holders, especially with larger amounts

Here's our honest take: if you're holding more than a few thousand dollars in Bitcoin, collaborative custody is worth the money. Yes, $250 a year sounds like a lot for something you hope you never need. But Unchained's Personal Vault gives you professional recovery support and built-in inheritance planning. That's cheap insurance. For a deeper look at your wallet options, see our best Bitcoin wallet guide.

Insurance Products That Actually Exist

For years, "Bitcoin insurance" was a nice idea with no real products behind it. That's changed. Several companies now sell actual, regulated insurance policies built for self-custody holders. The market is still young. Options are limited. But real coverage exists, and it's worth knowing what's out there.

AnchorWatch

AnchorWatch is backed by Lloyd's of London, which is about as established as insurance gets. Their policies cover self-custody holders and can be paired with their Bitcoin-native vault technology. They also do commercial insurance for Bitcoin businesses: custody, cyber risk, mining operations. Currently US-only. If you're in the States and want regulated coverage from a name people recognize, this is the one to look at first.

Bitsurance

Bitsurance partners with BitBox and covers burglary, robbery, extortion (wrench attacks included), and natural disasters like fire, floods, and earthquakes. Coverage goes up to €100,000 starting at roughly €25 per month. The important thing: your private keys stay entirely under your control. No firmware changes, no third-party key access. You just opt in through the BitBoxApp. Simple.

Breach Insurance

Breach is regulated by the Bermuda Monetary Authority and handles premiums and claims in crypto, which is a nice touch. Their "Crypto ShieldPro" product targets institutions, but individual coverage is available too. They pitch themselves on affordability and accessibility. Worth a look if AnchorWatch or Bitsurance don't fit your situation.

Resolvr (BDIC)

Resolvr takes a different angle. Their Bitcoin Denominated Insurance Collaborative (BDIC) is building an insurance marketplace where everything is denominated in Bitcoin, not fiat. That matters because if you file a claim two years from now, you get paid in BTC, not dollars that have lost purchasing power. They cover loss, theft, kidnapping, and ransom, with Lightning-settled payments. Still rolling out as of early 2026, so keep an eye on this one.

What Standard Insurance doesn't Cover

Don't assume your homeowners or renters policy covers your Bitcoin. It almost certainly doesn't. Even policies that mention "electronic data" or "money" usually have sub-limits that are laughably low and may explicitly exclude crypto. Check your policy. Read the fine print. If Bitcoin isn't specifically named, you're not covered. Period.

Building Your Self-Custody Insurance Plan

So that's the theory covered. Now let's put it into action. Here's a step-by-step plan you can work through this weekend. Adapt it based on the size of your holdings and how much risk you're comfortable with.

1

Upgrade to Metal Backups

Replace any paper seed phrase backups with steel or titanium. Budget $30 to $100. Seriously, this is the single highest-impact thing you can do for under $100. Do it today.

2

Implement the 3-2-1 Backup Strategy

Three copies, two mediums, one offsite. A bank safe deposit box, a trusted family member's home in another city, or both. This takes an afternoon to set up and protects you for decades.

3

Enable a Passphrase

Add a passphrase to your hardware wallet. Back it up separately from the seed phrase, different location, same physical standards. While you're at it, load a small amount into the decoy wallet on the base seed. Free plausible deniability.

4

Write an Inheritance Plan

Write that recovery letter for your heirs. Store it with an attorney or in a bank vault. Better yet, use a collaborative custody provider with built-in inheritance. Don't put this off. People always think they have more time.

5

Consider Multisig (for Larger Holdings)

Holding more than $10,000 in Bitcoin? Multisig through Unchained ($250/year) or Casa eliminates single points of failure and gives you professional support for recovery and inheritance. Worth every penny at that level.

6

Evaluate Insurance Products

Once you're above $50,000, formal insurance starts to make sense. Compare AnchorWatch, Bitsurance, and Breach on coverage limits, premiums, and whether they cover your specific risks. Not cheap, but neither is losing your stack.

7

Schedule Annual Reviews

Set a yearly calendar reminder. Check that all backups are accessible, hardware wallets still work, inheritance plans are current, and insurance coverage matches your holdings. Bitcoin appreciates over time. Your protection should scale with it. Don't set and forget.

Frequently Asked Questions

Can you insure Bitcoin held in self-custody?

Yes, and it's a newer development than most people realize. Companies like AnchorWatch (backed by Lloyd's of London), Bitsurance (partnered with BitBox), and Breach Insurance now sell policies built specifically for self-custody holders. You're typically covered against theft, physical damage, and natural disasters. Pricing starts around €25 per month for up to €100,000 in coverage, though exact options depend on your provider and where you live.

What happens to my Bitcoin if I die without a plan?

It's probably gone forever. Your heirs would need your private keys or seed phrase to recover the funds, and if nobody knows where those are or how to use them, the Bitcoin just vanishes. Permanently. That's why setting up an inheritance plan matters so much. Multisig with a provider like Unchained or Casa, a dead man's switch, or sealed instructions with an attorney can all solve this.

Is a steel seed phrase backup really necessary?

Paper burns. It also fades, warps, and falls apart over time. Steel or titanium backups survive temperatures above 1,500 degrees Celsius, resist corrosion, and can handle being crushed. If you're holding any Bitcoin you can't afford to lose, spending $30 to $100 on a metal backup is a no-brainer. The Blockplate, Cryptosteel Capsule, and Billfodl are the most popular options.

What is the best multisig setup for personal use?

For most people, 2-of-3. You hold two keys on separate hardware wallets in different locations, and a collaborative custody provider like Unchained ($250/year) or Casa holds the third. Lose one key? You still have access. Someone steals one? They can't move anything without a second key. No single point of failure, and nobody can touch your Bitcoin without you.

How much Bitcoin is lost due to poor self-custody?

Somewhere between 3 and 6 million Bitcoin. Gone forever. That's 15% to 30% of all Bitcoin ever mined. Here's the wild part: according to Fidelity Digital Assets, the daily loss rate (roughly 566 BTC per day) actually outpaces the mining rate of 450 new coins per day. The main causes? Lost private keys, destroyed hardware, and owners who died without telling anyone how to access their coins.

Does homeowner's insurance cover Bitcoin?

Almost certainly not. Standard homeowners and renters policies don't cover digital assets. Some have tiny sub-limits for "electronic data" or "money," but those rarely apply to crypto and the amounts are laughably low. You'll need a specialized crypto insurance policy or a dedicated rider that explicitly names digital asset holdings.

What is the 3-2-1 backup rule for Bitcoin?

It's borrowed from IT data protection, and it works perfectly for Bitcoin. Keep at least 3 copies of your seed phrase. Use at least 2 different storage mediums (say paper plus steel). Store at least 1 copy somewhere geographically separate from the others. That way a house fire or flood can't wipe out everything at once.

Keep Reading

Protect Your Bitcoin Today

Start with a steel backup. That's step one. Then work your way up. Every layer you add makes your Bitcoin harder to lose.