Skip to content
COLD HARDCUSTODY

Checklists

Self-custody checklists

Your custody checklist

SAVED ON THIS DEVICE
0 of 4 complete

Your ticks are stored only in this browser (localStorage) and never sent to us or anyone else. Never type a seed phrase into any website, including this one.

Setup checklist

Before you buy

  • Device is on the recommended list and the vendor's security page was checked today
  • Ordered from the official site or a reseller listed on the maker's own site; private shipping address and email
  • On arrival: seals intact, no pre-printed seed card, device not pre-initialized

Software & firmware

  • Sparrow 2.5.5+ from sparrowwallet.com with PGP signature and SHA-256 verified
  • Device genuine/attestation check passed
  • Firmware at or above minimum: BitBox02 9.26.5 · Jade 1.0.41 · Trezor Safe 2.12.5 · COLDCARD 5.6.3 / 1.5.3Q · Ledger latest
  • Firmware version confirmed on the device screen

Seed creation

  • New seed generated on the device, never pre-supplied words
  • Own entropy added where supported
  • Strong PIN or password set
  • Words handwritten and confirmed on the device
  • Private note of device model, firmware and date

Sparrow & testing

  • Watch-only wallet created; server choice made (own node, Tor or accepted public server)
  • Master fingerprint recorded
  • First receive address verified on the device
  • Small test receive and send, checked on the device
  • Wipe and restore test passed with the same fingerprint and first address

Seed backup checklist

Backup

  • Metal backup made; each word numbered and complete (or first 4 letters)
  • Metal copy checked word by word against paper
  • Paper drafts destroyed after verification
  • No digital copies anywhere: no photos, cloud, email, notes apps, password managers or printers
  • Storage not labeled "bitcoin" and protected from fire, water and casual discovery
  • Seed not split into partial word sets

Passphrase & multisig

  • Passphrase decision made; if used, strong, unique and backed up separately
  • Passphrase wallet fingerprint recorded
  • Restore test passed (seed alone, and seed + passphrase if used)
  • Multisig: descriptor copy stored with each seed backup
  • Next physical inspection date set

Letter of instruction outline

Never write seed words, passphrases or PINs in this letter. Store it with your estate documents and review yearly.

Sections to include

  • A note to your executor: bitcoin is self-custodied, take your time, trust no one who contacts you offering help
  • Trusted technical helper (optional) and what they know
  • Wallet summary: name, type, approximate share, devices
  • Where the pieces are, described not revealed: devices, seed backups, passphrase backup, descriptor copies, Sparrow file, PIN holders
  • Recovery steps: gather pieces, buy a new device direct, verify Sparrow, restore on the hardware wallet only, confirm the fingerprint, send a small test first
  • Exchange accounts and 2FA device locations
  • Estate attorney and accountant contacts
  • Wishes and distribution notes, signature and date

Yearly recovery drill

Prepare

  • Private place, no cameras or smart speakers
  • Spare or wiped hardware wallet on the minimum firmware
  • Vendor security pages checked today

Restore & inspect

  • Seed restored on the hardware wallet, never a computer or phone
  • Passphrase entered if used
  • Master fingerprint and first receive address match records
  • Multisig: descriptor imports and a test spend with a key pair succeeds
  • Backups legible and in place; Sparrow and firmware up to date
  • Inheritance letter and threat model reviewed