All guides
Planning

Backup, Recovery, and Inheriting a Bitcoin Reserve

7 min read

A backup is only real once a recovery has been tested — and only useful after you are gone if someone can follow it. How to build, rehearse, and hand over a plan.

Two events end most self-custody stories, and neither is a hacker. The first is a failed recovery: a phrase written down once, never tested, discovered years later to contain an error or to have been lost with a drawer. The second is an unplanned absence: the holder dies or is incapacitated, and the family owns hardware they cannot open and paper they cannot interpret. Both are planning failures, and both are fixed the same way — by treating a Bitcoin reserve as a system with documentation and drills, not a secret to be guarded.

A backup is not a backup until it has been restored

Writing a seed phrase creates a candidate. It becomes a backup only after you have destroyed the original wallet access and restored the balance from the written words alone, in a clean wallet, without referring to the app that generated it. This single rehearsal catches every fatal mistake at a moment when it is still cheap to fix: a mis-ordered word, an ambiguous letter, a phrase stored next to the wrong passphrase, a backup that 'works' only on the original device.

  • Transcribe the words by hand onto paper or stamp them into metal — never type them into any device that is online.
  • Restore from the copy into a fresh wallet and confirm the expected addresses appear.
  • Then, and only then, move a meaningful amount to that wallet.
  • Repeat the drill whenever the backup, its location, or the wallet software changes.
An untested backup is a rumour about a backup.

Redundancy without multiplying risk

A single copy is a single point of failure — fire, flood, or forgetfulness ends it. But every additional copy is also an additional thing that can be found and read by the wrong person. The standard resolution is two or three copies in geographically separate locations that you control: a home safe, a bank safe-deposit box, a trusted relative's house. Each location should reveal nothing on its own, and the route to each should exist in exactly one head until it is written into the continuity plan below.

The continuity document: what your heirs actually need

Heirs do not need your keys — they need instructions. A continuity document tells a designated person what exists, where each backup lives, and what to do step by step. Critically, it separates knowledge from access: the document can describe the existence and location of backups while the final secret element — a passphrase, a combination, a personal identification detail — is delivered by a separate channel, such as a notarised letter or your lawyer's sealed envelope. This way, any single stolen piece is inert without the other.

  • Name a beneficiary and a backup person, and tell both that the document exists.
  • Describe the storage method in plain language a non-technical relative can follow.
  • List the exact locations of every backup copy — vague hints help no one after you are gone.
  • Explain which wallet software restores the phrase and where to get it from its official source.
  • State what must never be done: photograph the phrase, type it into a website, or share it with 'support'.

A simple rehearsal schedule

Plans decay silently. A short, calendar-driven routine keeps the system alive without making it a hobby: once a year, confirm each physical copy is legible and in place; once a year, restore a small test amount from the written words; after every house move, life event, or change of beneficiaries, update the continuity document and re-brief the named people. Thirty minutes a year is the entire maintenance cost of a reserve that can outlive its owner.

Self-custody is a responsibility you can engineer for

The objection 'but what if I lose it, or something happens to me?' is not an argument against holding your own keys. It is a specification. Test the recovery, duplicate the backup across separate locations, write a continuity document that separates knowledge from access, and rehearse once a year. A reserve built to that specification is more durable than an account at any company — because it does not depend on the company surviving, only on a piece of paper and a plan that you proved works.