Operational security is a discipline, not a feature you install.

Your exchange might be secure today. So was FTX. So was Mt. Gox. So was Bybit — until $1.5 billion vanished in a single exploit. An exchange holds your Bitcoin with a promise. A hardware wallet holds it with math. If the amount matters to you, get it off the exchange.

Nothing happens. Your Bitcoin isn't stored on the device — it lives on the blockchain. The hardware wallet just holds the keys. If you lose the device, buy a new one and restore from your seed phrase. That's why protecting your seed backup matters more than protecting the device itself.

Security should scale to your holdings. If you're holding $500, a hardware wallet and a metal seed backup are probably sufficient. The point is to build good habits now so they're automatic when the number grows. The worst time to learn security is after a loss.

The Ledger devices themselves were not compromised — the customer database was. Names, emails, home addresses, and phone numbers of 270,000+ buyers leaked online. Those people became targets for phishing and physical attacks. The hardware still works, but the breach shows why minimizing personal data exposure matters.

A seed phrase is the master key — 12 or 24 words that can generate every private key your wallet will ever use. A private key is a specific key for a specific address. You back up the seed phrase. The wallet software handles the private keys automatically. Never share either one.

Passwords get stolen in data breaches, captured by keyloggers, and cracked by brute force. Two-factor authentication means a stolen password alone isn't enough. Use a hardware key like YubiKey for maximum protection, or a TOTP app at minimum. Never use SMS.

No. A wallet address is like a mailbox — anyone can send to it, but only you can take things out. What your address does reveal is your balance and transaction history, since the blockchain is public. That's a privacy concern, not a security one.

A VPN hides your IP address from sites you visit and your ISP, which is valuable. But it doesn't protect on-chain privacy. If you bought Bitcoin through a KYC exchange, chain analysis can trace those coins regardless of your VPN. Privacy requires a layered approach: VPN, your own node, coin control, address hygiene, and thoughtful UTXO management.

This is a personal decision. Instead of sharing the seed directly, consider a multi-sig setup where your spouse holds one key but can't act alone, or a collaborative custody service with an inheritance protocol. The goal is access after your death without risk during your life.

ETFs remove the burden of key management, which is a real benefit. But they also remove sovereignty. You don't hold Bitcoin — you hold shares in a fund that holds Bitcoin on your behalf. They can freeze your position, the custodian can be hacked, and you're subject to every rule the fund imposes. ETFs are a fine exposure vehicle. They are not self-custody.

You don't need to be a whale to be a target. Attackers cast wide nets. Data breaches expose millions of users at once. Phishing emails go out by the millions. SIM swaps happen to regular people. The question isn't whether you're important enough to target. It's whether you're easy enough to exploit.

Multi-signature (multi-sig) means requiring multiple keys to authorize a transaction — typically 2-of-3 or 3-of-5. Each key is stored on a separate device in a separate location. The result: no single point of failure. If one key is lost, stolen, or compromised, your funds are still safe. You need multi-sig when your holdings are significant enough that losing them would materially hurt you. Services like Unchained, Casa, and Nunchuk make it accessible without running your own infrastructure.

A duress wallet is a secondary wallet with a small, believable balance — accessible via a different PIN or passphrase on the same hardware device. In a physical attack (the $5 wrench scenario), you hand over the duress wallet and the attacker sees a balance that looks plausible. Your real holdings stay hidden behind a separate passphrase. It's not foolproof — an experienced attacker may know the trick — but it raises the cost of attacking you. If you hold enough to be a target, set one up.

Very real and accelerating. Reported physical attacks on crypto holders surged 169% from February through September 2025 alone, according to Jameson Lopp's tracker. The Ledger co-founder kidnapping in France involved days of captivity and the loss of a finger. Home invasions, fake deliveries, and forced transfers at gunpoint are all documented. CertiK recorded 72 verified incidents in 2025, a 75% increase over all of 2024. The attackers are increasingly organized, they research targets for months, and they know crypto transfers are irreversible. Physical security is now non-optional for anyone with visible holdings.

AI voice cloning can now replicate a family member's voice from a few seconds of audio. Deepfake video calls have been used to impersonate executives and authorize transfers. The countermeasures: establish pre-agreed code words with family and close contacts for verifying identity over phone. Never authorize any financial action based on a voice or video call alone. Use a separate channel to verify — if someone calls you, hang up and call them back on a number you already have. Treat urgency itself as a red flag.

Privacy means controlling what information you reveal and to whom. Anonymity means no one can connect your actions to your identity at all. Bitcoin gives you neither by default — it's pseudonymous, meaning transactions are public but tied to addresses, not names. KYC exchanges bridge that gap permanently. True privacy requires deliberate effort: running your own node so you're not leaking wallet data to someone else's server, using coin control to avoid linking UTXOs, generating fresh addresses, and being thoughtful about when and how you convert between Bitcoin and fiat.

Yes — and the effort is less than people think. When you use someone else's node (which most wallets do by default), you're trusting them with your transaction data, your balances, and your address history. Your own node verifies everything independently and keeps your financial activity private. A Raspberry Pi with a 1TB drive and free software like Umbrel or Start9 costs under $300 and takes an afternoon to set up. For the privacy-conscious, it's the single highest-impact thing you can do after buying a hardware wallet.

This is one of the hardest OpSec problems because it requires granting access to someone who shouldn't have access while you're alive. Options range from simple (a sealed letter with seed phrase instructions in a safety deposit box) to advanced (a multi-sig setup where your estate attorney holds one key, a family member holds another, and a timelock condition releases after a period of inactivity). Collaborative custody services like Casa offer dedicated inheritance protocols. The key principle: your heirs need enough information to recover funds, but not enough to access them prematurely. Test the recovery process while you're alive.

Every Bitcoin you receive creates an Unspent Transaction Output (UTXO) — think of it like a specific bill in your wallet. When you spend Bitcoin, you select which UTXOs to use, and any leftover goes to a change address. The problem: if you combine UTXOs from different sources (say, a KYC exchange and a private purchase), you've permanently linked those histories on a public ledger. Good UTXO management means labeling your coins by source, never mixing KYC and non-KYC funds, and using coin control features in wallets like Sparrow to choose exactly which UTXOs fund each transaction.

If you've ever bought Bitcoin through a KYC exchange, chain analysis firms can trace those coins forward through every subsequent transaction. Companies like Chainalysis and Elliptic sell this capability to governments, exchanges, and law enforcement worldwide. This doesn't mean you've done anything wrong — but it means your financial history is more visible than you might assume. The practical implication: once a UTXO is linked to your identity, that link is permanent. Plan accordingly. Separate your KYC and non-KYC holdings. Use your own node. Think before you consolidate.

Review every six months minimum. Check: Are your hardware wallet firmware and software wallets updated? Is your seed backup still intact and accessible (do a dry-run recovery)? Have you been reusing addresses? Are your 2FA methods still current — no SMS, hardware keys preferred? Review exchange login history for unrecognized IPs. Check if your email has appeared in new breaches (haveibeenpwned.com). Verify your VPN is active and not leaking DNS. Test that your heirs can actually follow your inheritance plan. If any answer makes you uncomfortable, fix it now.