Bitkey: first-time setup

Every other guide in this section ends with the same instruction: write twenty-four words on something durable and never lose them. Bitkey does not have those words. There is nothing to write down, nothing to hide, and nothing to lose in a house fire.

That is not a shortcut around the problem. It is a different answer to it. Instead of one secret that must survive forever, Bitkey splits control across three keys and requires any two to spend — a hardware device, your phone, and a key held by Block, the company behind it, purely so that you can recover if one of yours goes missing.

Whether that is a good trade depends entirely on details most reviews skip, so this page sets up the wallet and then does the accounting: precisely what Block can do, what it cannot, and what happens to your coins if the company vanishes tomorrow.

A Bitkey hardware device resting on a phone showing the Bitkey app, shot from above on a plain surface, no seed backup card anywhere in frame.

Image to come

1The three keys, and who holds them

Bitkey is a 2-of-3 multisig wallet. Three keys exist, any two can move coins, and no single key can do anything alone. If the shape of that is unfamiliar, the 2-of-3 guide covers the concept properly — the difference here is who holds what.

• The hardware key lives on the Bitkey device, unlocked by your fingerprint. It never leaves.
• The app key lives on your phone, with an encrypted copy backed up to your cloud account.
• The recovery key is held by Block. It exists solely to help you replace one of the other two, and it is never used in your ordinary spending.

Two of those three are yours, which is the whole architecture in one sentence: you can always spend without asking anyone, and nobody can spend without you. Block holding one key of three means they can participate in a recovery. It does not mean they can move your coins, because one key of three moves nothing.

2Setting it up

This is the easiest setup on the site, deliberately so. There is no seed to transcribe and no quiz to pass.

• Install the Bitkey app and create your wallet in it.
• Pair the hardware device by tapping it against the phone. NFC does the rest.
• Enrol your fingerprint on the device. This is what authorises the hardware key to sign.
• Complete the cloud backup when prompted. This is not optional in practice — it is what makes losing your phone a minor inconvenience instead of a recovery ordeal.
• Add one or two trusted contacts in settings. They cannot see or spend your bitcoin; they can only help you prove you are you if things go badly.

3What “no seed phrase” actually changes

Removing the recovery phrase removes the single most common way people lose bitcoin: a backup that was never written down, written down wrong, lost, destroyed, or photographed and stolen. That is a genuine and substantial win, and it is why this device exists.

It also removes something. A seed phrase is portable — twenty-four words restore into any wallet software, from any maker, decades from now, with nobody's permission. You do not have that here. Your recovery path is Bitkey's recovery path.

A recovery phrase is a thing you must protect forever. Bitkey trades that burden for a dependency. Neither is free, and pretending otherwise is how people choose badly.

The rest of this page is about that dependency, because it is the part worth understanding before you fund the wallet rather than after.

4The recovery routes

Bitkey has four separate mechanisms, and which one applies depends on what you lost.

Cloud Recovery is the everyday case. Your encrypted app key comes back from iCloud or Google Drive onto a new phone, and you are working again in seconds.

Delay + Notify is the one to understand properly, because it behaves differently from how people assume. You start it with the key you still have, then wait seven days while Bitkey notifies you repeatedly and offers to cancel. At the end, it does not restore your old wallet — it builds a new one with new keys and moves your funds across.

That design is deliberate and rather good. It means a key you lost, if it ever surfaces in the wrong hands, is cryptographically disconnected from the wallet holding your coins. It also means recovery is an on-chain transaction, so it costs a network fee and your addresses change.

Inheritance runs the same idea over six months. You name another Bitkey owner as beneficiary; their claim starts a long, loudly-notified clock, and until it completes they learn nothing — not even your balance.

5What Block can and cannot do

The honest accounting, since this is the question the whole product turns on.

• They cannot spend your bitcoin. One key of three authorises nothing. This is arithmetic, not a promise in a terms-of-service document.
• They cannot freeze your wallet. You hold two keys, which is a spending majority, and you never need their participation to transact.
• They can take part in replacing a lost key — which is the service you bought — but only through a process that notifies you and gives you seven days to stop it.
• They know your wallet exists, and the addresses in it. This is a real privacy cost, and it is not one the multisig arithmetic removes.

• A company that can help you recover is a company with something worth attacking. The seven-day delay is what stands between a compromise at Block and a compromise of your coins.
• Assisted recovery means an identifiable relationship with a business. If your reason for holding bitcoin is that nobody should know you hold it, this is the wrong product.
• Trusted contacts are people. Choose ones who will still be reachable, and still like you, in five years.

6If Bitkey disappeared tomorrow

This is the question to ask of any wallet with a company inside it, and it is the one most such products answer badly.

Bitkey's answer is the Emergency Exit Kit: a way to move your funds using your own two keys, without Bitkey's servers being involved at all. Because you hold a spending majority, the company's participation was never required to spend — the exit kit is what lets you exercise that fact if their infrastructure is gone.

• Generate and store the Emergency Exit Kit when you set the wallet up, not when you need it. A tool that lives only on a server you can no longer reach is not a contingency.
• Keep it where you would have kept a seed backup. The phrase went away; the discipline of an offline copy somewhere safe did not.
• Understand it before you need it. Read what it does now, while nothing is urgent.

7Before you fund it

• Confirm the cloud backup completed, and that you can actually sign in to that cloud account independently.
• Generate and store the Emergency Exit Kit.
• Add your trusted contacts and tell them they are on the list.
• Send a small test amount, confirm it arrives, and send it back out — approving on the device screen, which is where you should always read the details.
• If you plan to hold a meaningful amount, rehearse a recovery on a wallet holding almost nothing first.

Who this is actually for

Bitkey is a good answer for somebody who wants genuine self-custody, knows themselves well enough to distrust their own filing, and would rather depend on a company's recovery process than on a piece of paper surviving a decade of house moves.

It is the wrong answer for somebody whose priority is privacy from all counterparties, or who wants a wallet that can be restored into any software decades from now with nobody's help. Those people want a recovery phrase and the burden that comes with it.