Bitcoin Inheritance Planning: How to Pass On Your Bitcoin
A comprehensive guide to Bitcoin inheritance planning — covering multisig schemes, Shamir's Secret Sharing, timelocked transactions, and practical steps to ensure your Bitcoin survives you.
Here is an uncomfortable truth that every Bitcoin holder must confront: if you die without a plan, your Bitcoin dies with you. Unlike a bank account that your family can access through legal proceedings, unlike a house that transfers through probate, Bitcoin secured by private keys that nobody else knows is gone — permanently, irreversibly, forever.
This is not a theoretical concern. Chainalysis estimates that approximately 3.7 million Bitcoin — worth hundreds of billions of dollars — are permanently lost, much of it because holders died or became incapacitated without leaving their heirs a way to access the funds. As Bitcoin’s value has grown, so has the scale of this tragedy.
The good news is that Bitcoin’s programmability offers inheritance solutions that are more secure, more flexible, and more resistant to fraud than anything available in the traditional financial system. This guide covers every major approach, from simple solutions for small holdings to sophisticated cryptographic schemes for serious wealth preservation.
The Core Problem
Traditional inheritance is straightforward because traditional assets are custodial. Your bank holds your money and will release it to your estate according to legal procedures. Your brokerage, your pension fund, your insurance company — they all hold your assets on your behalf and follow legal frameworks for transferring them after death.
Bitcoin, when held in self-custody, inverts this model entirely. You hold your own keys. No institution can release your Bitcoin to anyone. The blockchain doesn’t know or care about death certificates, wills, or probate courts. The only thing that can move Bitcoin is the correct private key (or keys, in a multisig setup).
This creates a unique inheritance challenge with competing requirements:
- Security during life: Your inheritance plan must not create vulnerabilities that could lead to theft while you’re alive
- Accessibility after death: Your heirs must be able to access the Bitcoin after your death
- Simplicity: The plan must be understandable by heirs who may not be technically sophisticated
- Resilience: The plan must survive lost documents, damaged hardware, and the passage of time
- Privacy: The plan should not reveal your holdings to more people than necessary
No single solution perfectly satisfies all these requirements. The right approach depends on the size of your holdings, the technical sophistication of your heirs, your threat model, and your trust relationships. Let’s examine the options.
Method 1: The Simple Seed Phrase Approach
The most basic inheritance plan involves securely passing your seed phrase (the 12 or 24 words that can regenerate your wallet’s private keys) to your heirs.
How It Works
- Write your seed phrase on durable material (steel plate, titanium backup, etc.)
- Store it in a secure location (safe deposit box, home safe, or with a trusted attorney)
- Leave instructions in your will or a letter explaining what the seed phrase is and how to use it
- Include information about which wallet software to use and which derivation path your wallet uses
Letter of Instruction Template
Your letter should include:
- An explanation that Bitcoin is digital property with real monetary value
- The location(s) of your seed phrase backup(s)
- The wallet software used (e.g., Sparrow, BlueWallet) and version
- Any passphrases (25th word) used in addition to the seed phrase
- The approximate amount of Bitcoin held (so heirs know the stakes)
- A trusted technical contact who can help the heirs but does NOT have the seed phrase
- Instructions on not sharing the seed phrase with anyone who claims to be “helping”
- A warning about common scams targeting cryptocurrency heirs
Limitations
This approach is simple but has significant drawbacks:
- Single point of compromise: Anyone who finds the seed phrase can steal all your Bitcoin. This means the seed phrase location must be secure from both theft and disaster.
- Trust requirements: If you store the seed phrase with an attorney or in a safe deposit box, you’re trusting those parties not to access it.
- No time delay: There’s no protection if someone finds the seed phrase while you’re alive.
- Technical barrier: Your heirs need to understand how to use a seed phrase to recover a wallet, which may be challenging for non-technical family members.
This method is reasonable for smaller holdings (under 1 BTC) where the simplicity outweighs the security limitations. For larger amounts, more sophisticated approaches are warranted.
Method 2: Multisig Inheritance
Multisignature (multisig) wallets require multiple private keys to authorize a transaction. This is one of the most powerful tools for Bitcoin inheritance planning. For background on how multisig works, see our Bitcoin security guide.
The Basic Concept
Instead of a single seed phrase that controls everything, you distribute multiple keys among different parties and locations. A 2-of-3 multisig setup, for example, requires any 2 of 3 keys to spend the Bitcoin. This means:
- No single key can be used to steal the funds
- Losing one key doesn’t lock out access (the other two still work)
- You can distribute keys among family members, attorneys, and secure locations
Inheritance-Optimized Multisig Configurations
Configuration 1: 2-of-3 Family Multisig
- Key 1: Held by you (hardware wallet)
- Key 2: Held by your spouse or primary heir (hardware wallet)
- Key 3: Stored in a secure location (bank safe deposit box or with attorney)
During your life, you control Key 1 and can work with your spouse (Key 2) for spending. After your death, your spouse uses Key 2 and retrieves Key 3 from the secure location to access the funds.
Configuration 2: 3-of-5 Distributed Multisig
For larger holdings, a 3-of-5 setup provides greater resilience:
- Key 1: You (hardware wallet, daily access)
- Key 2: Spouse/Primary heir (hardware wallet)
- Key 3: Attorney/Legal advisor (sealed envelope)
- Key 4: Secure location A (bank safe deposit box)
- Key 5: Secure location B (geographically distant safe deposit box)
Any 3 of 5 keys can spend the Bitcoin. This means:
- You can spend daily with Keys 1 + 2 + any other
- After your death, your heirs can access funds with Keys 2 + 3 + 4 (or any other 3-key combination)
- Up to 2 keys can be lost or compromised without losing access
- No single party (attorney, bank) can steal the funds alone
Multisig Implementation Tools
Several tools make multisig inheritance practical:
- Sparrow Wallet: Excellent multisig support with clear UI, connects to your own node
- Caravan by Unchained: Open-source multisig coordination tool
- Nunchuk: Multisig wallet with built-in inheritance planning features
- Liana: Wallet specifically designed for inheritance, with built-in timelocks
Critical: Preserve the Wallet Descriptor
With multisig, the individual keys alone are not sufficient to recover the wallet. You also need the wallet descriptor (also called the “wallet configuration” or “multisig policy”) — a file that specifies which keys are part of the multisig, what type of multisig it is (2-of-3, 3-of-5, etc.), and the derivation paths.
Always store a copy of the wallet descriptor alongside each key. Without the descriptor, even having all the keys won’t help — your heirs won’t know how the keys fit together.
Method 3: Shamir’s Secret Sharing (SSS)
Shamir’s Secret Sharing is a cryptographic technique that splits a secret into multiple “shares,” where a specified minimum number of shares are needed to reconstruct the original secret.
How It Works
SSS is based on polynomial interpolation. A secret (like a seed phrase) is encoded as the y-intercept of a polynomial of degree (threshold - 1). Shares are points on this polynomial. Any (threshold) number of shares can reconstruct the polynomial and thus the secret, but (threshold - 1) shares reveal absolutely no information about the original secret.
For example, a 3-of-5 Shamir split creates 5 shares, any 3 of which can reconstruct the original seed phrase. Having only 2 shares (or even 2 shares plus unlimited computing power) reveals nothing about the original secret.
SLIP-39: The Standard Implementation
The SLIP-39 standard (used by Trezor hardware wallets) implements Shamir’s Secret Sharing for Bitcoin seed phrases. Instead of a single 24-word seed phrase, you get multiple sets of 20 or 33 word shares.
Example of a 2-of-3 SLIP-39 setup:
- Share 1 (20 words): Given to your heir
- Share 2 (20 words): Stored in your safe deposit box
- Share 3 (20 words): Stored with your attorney (sealed)
Any 2 of these 3 shares can reconstruct the original seed, but a single share alone is completely useless to an attacker.
SSS vs Multisig
| Feature | Shamir’s Secret Sharing | Multisig |
|---|---|---|
| Key reconstruction | Combines shares into a single key | Keys remain separate |
| Single point of failure | Yes — when shares are combined, the key exists briefly | No — keys never need to be in the same place |
| On-chain footprint | Standard single-sig transaction | Multisig transaction (slightly larger) |
| Complexity | Shares look like seed phrases | Requires wallet descriptor + all xpubs |
| Hardware wallet support | Trezor (SLIP-39) | Coldcard, Trezor, Ledger, etc. |
The key difference: with SSS, the shares must be combined to reconstruct the private key, creating a brief moment of vulnerability. With multisig, the individual keys are never combined — each key signs independently. For this reason, multisig is generally preferred for large holdings, while SSS is a reasonable choice for moderate amounts.
Method 4: Timelocked Transactions
Bitcoin’s scripting language includes time-lock functionality that can be used for inheritance planning. A timelocked transaction is pre-signed but cannot be broadcast until a specific block height or date.
How Timelock Inheritance Works
- Create a transaction that sends all your Bitcoin to your heir’s address
- Set a timelock (e.g., 1 year in the future using
nLockTime) - Sign this transaction and give it to your heir
- Every 6-12 months, while you’re alive, create a new timelocked transaction with an updated timelock (pushing the deadline further out)
- If you die and stop updating, the most recent timelocked transaction becomes spendable after the timelock expires
Advantages
- Automatic activation: No need for your heirs to do anything complicated — they just wait and broadcast
- No key sharing: Your heirs never have your private keys
- Revocable: You can move your Bitcoin to a new address at any time, invalidating the timelocked transaction
Limitations
- Maintenance burden: You must regularly create and distribute new timelocked transactions
- UTXO changes: If you spend from the wallet, the timelocked transaction becomes invalid (it references specific UTXOs that no longer exist)
- Fee estimation: The fee set in the timelocked transaction may be inappropriate by the time it’s broadcast months or years later
- Complexity: Managing this manually is error-prone
Liana Wallet: Automating Timelocks
The Liana wallet (by Wizardsardine) is specifically designed for this use case. It creates wallets with built-in recovery paths using timelocks:
- Primary spending: Your key (immediate spending)
- Recovery path: A different key (your heir’s) that activates after a configurable timelock (e.g., 1 year of inactivity)
Every time you make a transaction, the timelock resets automatically. If you stop transacting (presumably due to death or incapacitation), the recovery path activates after the specified period. This is the most elegant technical solution currently available.
Method 5: Trusted Third-Party Services
Several companies offer Bitcoin inheritance as a service, combining multisig with legal frameworks.
Collaborative Custody Model
Services like Unchained Capital and Casa offer a model where:
- You hold 2 of 3 keys (on hardware wallets)
- The service holds 1 of 3 keys
- Normal spending requires your 2 keys (the service can’t spend without you)
- In case of death, the service works with your estate to transfer funds using their key + one of your keys (recovered by your heirs)
Advantages
- Professional support for heirs who aren’t technically skilled
- Legal frameworks already established
- Reduced complexity for the holder
Limitations
- Ongoing cost: Monthly or annual fees
- Counterparty risk: The service could go bankrupt, be hacked, or face regulatory seizure
- Privacy: The service knows your holdings
- Trust: You’re trusting the service not to collude with an insider to steal funds
For holders who value simplicity and have heirs who are not technically capable, these services can be a reasonable option. However, they partially negate the self-sovereignty that makes Bitcoin valuable in the first place. See our post on self-custody for more on this tradeoff.
Method 6: Dead Man’s Switch
A dead man’s switch is a mechanism that activates automatically if you fail to perform a periodic action (like responding to an email or pushing a button).
Digital Dead Man’s Switch for Bitcoin
- Set up a service (self-hosted or third-party) that sends you a periodic check-in request
- If you fail to respond within a specified period (e.g., 30 days), the service automatically sends your inheritance information to designated recipients
- The information sent could include: seed phrase shares, multisig key locations, wallet recovery instructions
Implementation Options
- Self-hosted: Use a script on a VPS that sends periodic emails. If you don’t respond (by clicking a link), it releases information after the timeout.
- Google Inactive Account Manager: Google offers a built-in “Inactive Account Manager” that can share your Gmail/Drive contents with designated contacts after a period of inactivity. You could store encrypted instructions in Google Drive.
- Third-party services: Dedicated services exist but require trust in the provider.
Important Caveat
Never store unencrypted seed phrases or private keys in any digital dead man’s switch system. Instead, use the dead man’s switch to deliver instructions — location of physical backups, passwords for encrypted files, or Shamir shares that must be combined with shares stored elsewhere.
Building Your Inheritance Plan: A Practical Framework
Here’s a framework for building a complete Bitcoin inheritance plan, scaled by holdings size.
Tier 1: Small Holdings (Under 1 BTC)
Approach: Simple seed phrase with letter of instruction
- Back up your seed phrase on steel (Cryptosteel, Billfodl, or DIY steel washer method)
- Store the backup in a home safe or safe deposit box
- Write a clear letter of instruction (see template above)
- Store the letter separately from the seed phrase
- Tell one trusted person where both the letter and the seed backup are located
- Review annually
Tier 2: Moderate Holdings (1-10 BTC)
Approach: 2-of-3 multisig or Shamir’s Secret Sharing
- Set up a 2-of-3 multisig wallet using Sparrow or similar software
- Distribute keys: one to you, one to your primary heir, one to a secure location
- Store wallet descriptors alongside each key
- Write detailed recovery instructions
- Walk your primary heir through a test recovery (using a small amount)
- Review and test every 6 months
Tier 3: Significant Holdings (10+ BTC)
Approach: 3-of-5 multisig with professional support
- Set up a 3-of-5 multisig with geographically distributed keys
- Use at least 2 different hardware wallet manufacturers for your keys
- Consider a collaborative custody service to hold one key
- Engage an attorney familiar with digital assets for legal documentation
- Create a detailed recovery document with step-by-step instructions
- Conduct a supervised test recovery with your primary heir
- Review quarterly
Universal Best Practices
Regardless of your holdings size:
- Test your recovery plan: Have someone actually attempt to recover a small test wallet using only your instructions. If they can’t do it, fix the instructions.
- Update regularly: Review your plan at least annually. Hardware wallet models change, software gets updated, and your life circumstances evolve.
- Document the tools: Include information about which wallet software, hardware wallet models, and Bitcoin network parameters (derivation paths, address types) your setup uses. In 20 years, the software you use today may not exist — your heirs need enough information to recover using alternative tools.
- Consider multiple scenarios: What if you die? What if you’re incapacitated but alive? What if you and your spouse die together? Plan for each scenario.
- Don’t over-optimize: A good plan that you actually implement is better than a perfect plan that’s so complex you never finish it.
Legal Considerations
Bitcoin inheritance intersects with the legal system in important ways.
Including Bitcoin in Your Will
- Mention that you hold digital assets (without specifying amounts or locations of keys)
- Designate a digital executor who understands cryptocurrency
- Reference a separate “letter of wishes” (non-legally-binding but informative) with technical details
- Be cautious about including sensitive technical details in a will, as wills become public documents in many jurisdictions after probate
Tax Implications
In many jurisdictions, inherited Bitcoin has specific tax treatment:
- Cost basis: In the US, inherited assets receive a “stepped-up cost basis” to the fair market value at the time of death, potentially eliminating capital gains taxes
- Estate tax: Large Bitcoin holdings may be subject to estate tax thresholds
- International considerations: If your heirs are in different countries, multiple tax jurisdictions may apply
Consult a tax professional familiar with cryptocurrency in your jurisdiction.
Trusts
For large holdings, a trust structure can provide:
- Privacy: Trusts are not public records (unlike wills)
- Control: You can specify conditions for distribution (age thresholds, graduated access, etc.)
- Tax optimization: Properly structured trusts can minimize estate taxes
- Protection: Trusts can protect assets from creditors or poor decisions by heirs
The challenge is finding a trustee who understands Bitcoin custody. Some services (like Unchained Capital) are beginning to offer trust-compatible multisig solutions.
Common Mistakes to Avoid
-
No plan at all: The most common and most catastrophic mistake. If you hold Bitcoin and don’t have an inheritance plan, create one today.
-
Storing seed phrases digitally: Never store seed phrases in password managers, cloud storage, email, or any digital format. These are vulnerable to hacking. Use physical backups only.
-
Telling too many people: Every person who knows about your Bitcoin is a potential threat. Balance accessibility with security.
-
Single point of failure: A single seed phrase in a single location means one fire, one flood, or one theft destroys everything.
-
Ignoring updates: Bitcoin wallet standards evolve. Instructions written in 2024 may reference deprecated software by 2030. Update your plan regularly.
-
Assuming technical knowledge: Your heirs probably don’t know what a “seed phrase” or “derivation path” is. Write instructions for a complete beginner.
-
Forgetting about the passphrase: If you use a BIP-39 passphrase (25th word), forgetting to include it in your inheritance plan means your heirs will recover an empty wallet. This is one of the most common inheritance failures.
Conclusion: Plan Today, Not Tomorrow
The uniqueness of Bitcoin — its reliance on private keys rather than institutions — makes inheritance planning both more critical and more flexible than traditional asset planning. You can create inheritance schemes that are more secure, more private, and more resistant to fraud than anything possible with traditional assets. But you have to actually do it.
The best time to create your Bitcoin inheritance plan was when you first acquired Bitcoin. The second best time is today. Start with the tier appropriate to your holdings, test it thoroughly, and update it regularly. Your future heirs will thank you.
Your Bitcoin is your legacy. Make sure it doesn’t disappear when you do.