Your cryptography may be perfect, and your front door may not be. This advanced guide is part of our section on crypto threats and scams. It covers sensitive ground, because the goal is to help you stay safe, not to alarm you.

The most important rule: stay private

Most attackers need to know two things: that you hold crypto, and where to find you. Remove either one, and the risk falls sharply.

  • Do not talk about your holdings at work, in bars or online.
  • Do not post screenshots, gains or hardware wallets.
  • Be careful with crypto merchandise and at conferences.
  • Use a separate email address for crypto purchases.
  • Use a pickup point for hardware deliveries. See buying safely.

Burglary

Most burglars are not looking for crypto. Still:

  • Keep backups out of sight, and unlabeled.
  • Keep your device and your phrase apart.
  • Do not rely on a small unsecured safe. See where to store your phrase.
  • Consider a passphrase, so that a found sheet is not enough.

Coercion

Violent attacks on crypto holders have been reported, mainly against people known to be wealthy. A few design choices can help:

MeasureHow it helps
Decoy walletShows a small balance
Multisig with distant keysOne person cannot spend everything at once
Geographic spreadYou cannot reach all the keys
Time-locked vaultsSpending is delayed
Family planEveryone knows what to do

Your safety comes first

No amount of money is worth your life. If someone threatens you, cooperate, get to safety and contact the police. Your backup design should support this: you should never have to be a hero.

Prepare your household

  • Keep crypto out of daily conversation with children.
  • Agree on what to do in an emergency.
  • Have a good lock and basic home security.
  • If you are a public figure, consider professional security advice.

Public behavior

  • Do not open your wallet in public.
  • Be alert to strangers who ask about crypto.
  • Take care on social media, because a post can reveal your location or lifestyle.

Those who hold a lot of crypto should consider speaking with a security professional and a lawyer. Our advanced setups guide shows some of the available options.