Bitcoin Custody Advisor

Lightning is a payment layer built on top of Bitcoin, enabling near-instant and near-free transactions. Funds are locked into payment channels opened on-chain and used for fast, repeated spending. Think of it as a bitcoin current account — not a savings vault. It comes in two forms: custodial (a company holds your channel keys) and non-custodial (you hold your own keys and seed phrase — your 12 or 24-word recovery phrase — the master key to your wallet).

A free software application on your phone or desktop that holds your private keys (the cryptographic key that proves ownership and authorizes transactions) while connected to the internet. At setup, it generates a 12 or 24-word seed phrase — a master key to all funds in the wallet. You are in full cryptographic control of your bitcoin, but your device is permanently reachable by online attackers. The seed phrase is the single point of failure for everything in this wallet.

A dedicated physical device — roughly the size of a USB stick — that generates and stores your private keys permanently offline. To spend bitcoin you connect it to a computer, but the keys never leave the device. Every transaction is displayed on the device's own secure screen for verification before signing. Remote attackers have no path to your keys because the keys are never on a networked device. This is the industry-standard starting point for any serious bitcoin holder.

A BIP39 passphrase (a custom word or phrase you add to your seed — effectively a "25th word") generates a completely hidden wallet on top of the same seed. Someone who finds your seed phrase backup gains access only to a valid but empty decoy wallet. Your real funds require both the seed phrase AND the passphrase. This creates two-factor protection and plausible deniability — if you are ever forced to reveal your seed under coercion, the decoy wallet is a convincing misdirection. Supported by all major BIP39-compatible hardware wallets.

The same single-key signing architecture as Tier 2 or 3, but the seed phrase backup is distributed across multiple physically separate locations. A fire, flood, earthquake, or burglary at any one location cannot destroy your only recovery path. This is a backup resilience upgrade — not a key architecture upgrade. The key remains single, but no single disaster can eliminate your ability to recover your bitcoin.

Multisig (multi-signature) is a fundamentally different wallet structure — not a modification of a single key, but an entirely different architecture. Multiple independent private keys are required to co-sign every transaction. In a 2-of-3 setup you have 3 keys and need any 2 to move bitcoin. One stolen device, one burned location, one compromised seed — none of it can move your funds alone. Each key is completely independent and never needs to be co-located with another key to sign. This is the gold standard for holdings above $100,000.

The apex of self-custody. Each signing device has permanently and irreversibly severed its network connection — no WiFi, no Bluetooth, no USB data transfer, no NFC, no connection of any kind, ever. Transactions are prepared on a watch-only wallet, exported as a PSBT (Partially Signed Bitcoin Transaction — a portable transaction file passed between signers) file, physically transferred to each air-gapped signer via QR code or microSD card only, signed in complete isolation, and then physically carried back to the watch-only wallet for broadcast. Combined with multisig, physical compromise of any single device cannot produce a valid signature. There is no recovery service, no customer support, and no second chance — everything depends on what you have set up correctly in advance.