# Why Bitkey Replaced Seed Phrases With a 2-of-3 Multisig Architecture

Block's self-custody wallet balances daily accessibility and recovery using distributed key signing.

- **Source:** [Stephan Livera Podcast](https://brifing.si/source/597843ae-8d51-4318-85aa-04c1d35f69c1)
- **Published:** 2026-10-01
- **Topic:** [Finance](https://brifing.si/c/finance)
- **Original article:** <https://podcasters.spotify.com/pod/show/stephan-livera/episodes/Why-Bitkey-Ditched-Seed-Phrases--Clay-Garrett-SLP778-e3pnbss>
- **On Brifing:** https://brifing.si/s/173bb411-ed74-4a7a-aa8c-444276f876f3

## Redefining Self-Custody Safety

Traditional hardware wallets rely heavily on seed phrases, creating single points of failure for regular users. Block's Bitkey lead Clay Garrett argues true safety combines baseline security with reliable fund recoverability. Eliminating seed phrases prevents accidental permanent loss while keeping everyday user operations simple across regular mobile environments.

## The 2-of-3 Key Distribution

Bitkey utilizes a 2-of-3 multisig scheme split between the mobile application, the physical hardware device, and Block's cloud servers. Normal outgoing transactions combine the app and hardware keys. Users can complete transactions entirely independent of Block's infrastructure, ensuring sovereign ownership over assets without centralized operational lock-in.

## Cloud Backups and Phone Swaps

Replacing a lost mobile phone requires decrypting a cloud backup stored on standard consumer cloud providers. Decrypting this backup file strictly mandates physical interaction with the Bitkey hardware unit. This mechanism prevents malicious cloud compromise from exposing funds while enabling rapid wallet restoration on new mobile devices.

## Lost Hardware Recovery Delay

When a hardware device is lost, recovery shifts to the mobile app and Block's server key. To defend against unauthorized coercion or rogue server access, Bitkey enforces an unalterable seven-day security delay. This mandatory window gives rightful owners ample time to cancel unauthorized recovery attempts before completion.

## Transfer Limits Without Hardware

Daily usability often requires making quick outgoing payments without carrying dedicated physical hardware everywhere. Bitkey accommodates this friction by allowing lower-value transfers using only the mobile app and Block server. Users configure specific balance thresholds, defending primary treasury holdings against immediate physical coercion attacks.

## Inheritance and Social Recovery

Long-term asset continuity requires reliable social coordination mechanisms beyond raw technical keys. Bitkey integrates trusted Recovery Contacts alongside structural inheritance features to safely pass funds down generations. These social protocols verify user status over time without revealing private financial details or granting direct unilateral spending access.

## Exploring FROST and Covenants

Bitkey maintains open-source development with active FROST signature aggregation prototypes already in its repository. Shifting from standard multisig to Schnorr-based threshold schemes reduces on-chain footprints to resemble single-signature transactions. Future Bitcoin covenants could natively enforce complex spending policies and delays directly on the blockchain layer.

## Protocol Standards and Interoperability

Self-custody tools must balance vendor autonomy with broad ecosystem compatibility across custom server networks. Bitkey investigates BIP 89 chain code delegation alongside custom Electrum connection options for privacy preservation. Offering free co-signing services without ecosystem lock-in sets an open architectural standard for modern non-custodial consumer wallets.

## Sources covering this story

- https://podcasters.spotify.com/pod/show/stephan-livera/episodes/Why-Bitkey-Ditched-Seed-Phrases--Clay-Garrett-SLP778-e3pnbss — 

---

_Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._
