Coldcard vs. Bitkey

Self-custody is ultimately about sovereignty. It means being able to hold, verify, and transact your wealth without depending on any person, government, or company. On the spectrum from exchange custody (a company controls the keys) to true self-custody (you control the keys), Bitkey sits in the middle, albeit closer to the self-custody side. You hold two of three keys, so you can send or spend bitcoin without Block's direct involvement, but recovering any lost key requires Block's infrastructure. This design is deliberate, and is best classified as assisted or collaborative self-custody, not true self-custody.

Bitkey's tradeoff offers some protection, but at the cost of some sovereignty and transaction privacy. Seed phrase mismanagement and hardware loss are among the most common ways people lose their bitcoin, and Bitkey's 2-of-3 default structure, trusted contact recovery, and inheritance features all target that problem. The tradeoff is accepting Block as a mandatory key-holder. Bitkey implemented chain code delegation in late 2024, which prevents Block from deriving wallet addresses or viewing transaction history for hardware-signed transactions. But its mobile pay feature, which lets you spend below a daily limit without your hardware device, requires Block's server to co-sign and reveals the transaction details during the signing process. Block asserts that those details are not stored.

Bitkey's custody model is designed for a particular audience. Some newcomers to bitcoin custody might be intimidated by the responsibility of seed phrase management and are willing to trade some sovereignty, privacy, and flexibility to reduce that risk. Coldcard is designed for uncompromised sovereignty: no third-party key, no manufacturer dependency, and a seed phrase that works on any compatible wallet regardless of whether Coinkite is operational.

Third-party dependency is a built-in design feature. It enables key recovery without a seed phrase, powers the spending limit feature, and provides the infrastructure for trusted contacts and inheritance. These value propositions come with the required inclusion of Block in your custody arrangement, which introduces a different category of risk that otherwise would not exist.

The concern is not only about Block itself, but the environment in which it operates. Block could be acquired by a company with different priorities, it could face government or regulatory pressures to make policy changes, or it could experience financial difficulty and decide to discontinue Bitkey as a product. Additionally, the Bitkey app could be removed from from certain regional app stores. A well-rounded security threat model must account for various dpossibilities that could affect one or more of the keys that are needed to transact or recover your funds.

Block's published recovery mechanism addresses many of these concerns. The Delay + Notify system is a built-in time-delayed recovery process: after a waiting period, you can replace your hardware key without Block's active co-signing. Block's app-layer software is also open source on GitHub, which supports the stated intention to allow self-recovery without Block's servers. Whether that infrastructure functions as described when a user actually needs it depends on Block having maintained it.

For many people, this is an acceptable tradeoff. Newcomers or people holding small amounts of bitcoin may reasonably judge that the risk of losing a seed phrase outweighs the risks of involving a third party. For people holding a meaningful amount of bitcoin long-term, that calculus shifts. The larger and more important the position, the more consequential the third-party dependency becomes.

Bitkey offers an innovative tradeoff balance in accessible Bitcoin custody. It carves out a new niche in the custody space where the third party doesn't have unilateral control, yet users don't manage seed phrases. It also builds around tools people already use: a mobile app for spending, a cloud service for backup, and a hardware device with a fingerprint reader. The inheritance feature and trusted contacts recovery address real problems that traditional hardware wallets don't always address. For someone new to Bitcoin who finds seed phrase management daunting, Bitkey is a meaningful step up from leaving funds on an exchange.

Coldcard's design goal is maximum sovereignty with no external dependencies. No third-party key, no cloud provider, and no required companion app. Your seed phrase recovers your wallet on any compatible software without Coinkite's involvement, and signing happens entirely offline. Your access to your bitcoin depends on you and nobody else. The tradeoff for full sovereignty is full responsibility: you secure the seed phrase, you manage the workflow, and there is no one to call if you make a mistake.

The right choice depends on where you are now and where you expect to be as your holdings grow. If you are new to Bitcoin and your main concern is protecting yourself from your own key mismanagement, Bitkey is a well-designed solution with a low barrier to entry. If you are building a long-term position and the idea of Block Inc. holding a key in your arrangement becomes less comfortable as that position grows, Coldcard is built for that model.