Threat models: secure against what?

Security is choosing what you protect against. A simple method for finding the right setup.

General information, not financial advice. Test any setup with a small amount first. Status 23 October 2026.

There is no setup that is safest for everyone. A threat model asks: what am I protecting, against whom, and what can I live with?

Common threats, roughly from most to least common

  • Your own mistakes: lost backup, forgotten passphrase, wrong address.
  • Scams and phishing: fake support, fake apps, investment fraud. The FBI's yearly IC3 reports show crypto fraud among the largest reported losses.
  • Malware: clipboard swapping of addresses, keyloggers.
  • Custodian failure: exchanges that collapse or freeze withdrawals.
  • Physical theft and coercion: rarer, but serious for people known to hold much.
  • Death and incapacity.

Matching tools to threats

  • Mistakes → tested backups, simple instructions.
  • Malware → hardware wallet, check the address on the device screen.
  • Custodian failure → self-custody.
  • Theft of a backup → passphrase or multisig.
  • Coercion → discretion: do not advertise holdings; multisig with keys in other places.
  • Death → an inheritance plan.

Scale with the amount

A small amount on a phone wallet is fine. As the amount grows, add layers. But each layer is a new way to lock yourself out, so test every step.

The problem → Bitcoin's answer

Banks protect you, but also control you. Bitcoin lets you choose your own level of protection, from simple to institution-grade.