Why Bitkey Replaced Seed Phrases With a 2-of-3 Multisig Architecture
Block's self-custody wallet balances daily accessibility and recovery using distributed key signing.
1Redefining Self-Custody Safety
Traditional hardware wallets rely heavily on seed phrases, creating single points of failure for regular users. Block's Bitkey lead Clay Garrett argues true safety combines baseline security with reliable fund recoverability. Eliminating seed phrases prevents accidental permanent loss while keeping everyday user operations simple across regular mobile environments.
2The 2-of-3 Key Distribution
Bitkey utilizes a 2-of-3 multisig scheme split between the mobile application, the physical hardware device, and Block's cloud servers. Normal outgoing transactions combine the app and hardware keys. Users can complete transactions entirely independent of Block's infrastructure, ensuring sovereign ownership over assets without centralized operational lock-in.
3Cloud Backups and Phone Swaps
Replacing a lost mobile phone requires decrypting a cloud backup stored on standard consumer cloud providers. Decrypting this backup file strictly mandates physical interaction with the Bitkey hardware unit. This mechanism prevents malicious cloud compromise from exposing funds while enabling rapid wallet restoration on new mobile devices.
4Lost Hardware Recovery Delay
When a hardware device is lost, recovery shifts to the mobile app and Block's server key. To defend against unauthorized coercion or rogue server access, Bitkey enforces an unalterable seven-day security delay. This mandatory window gives rightful owners ample time to cancel unauthorized recovery attempts before completion.
5Transfer Limits Without Hardware
Daily usability often requires making quick outgoing payments without carrying dedicated physical hardware everywhere. Bitkey accommodates this friction by allowing lower-value transfers using only the mobile app and Block server. Users configure specific balance thresholds, defending primary treasury holdings against immediate physical coercion attacks.
6Inheritance and Social Recovery
Long-term asset continuity requires reliable social coordination mechanisms beyond raw technical keys. Bitkey integrates trusted Recovery Contacts alongside structural inheritance features to safely pass funds down generations. These social protocols verify user status over time without revealing private financial details or granting direct unilateral spending access.
7Exploring FROST and Covenants
Bitkey maintains open-source development with active FROST signature aggregation prototypes already in its repository. Shifting from standard multisig to Schnorr-based threshold schemes reduces on-chain footprints to resemble single-signature transactions. Future Bitcoin covenants could natively enforce complex spending policies and delays directly on the blockchain layer.
8Protocol Standards and Interoperability
Self-custody tools must balance vendor autonomy with broad ecosystem compatibility across custom server networks. Bitkey investigates BIP 89 chain code delegation alongside custom Electrum connection options for privacy preservation. Offering free co-signing services without ecosystem lock-in sets an open architectural standard for modern non-custodial consumer wallets.