9 Golden Rules Before Storing Serious Crypto

Mila Mostovaya

August 28, 2026

Crypto Security

It's said that big money equals big problems. Unfortunately, that's true, especially if we're talking about crypto. For example, you can lose your money not only because of scams and attacks but also because of your own mistakes. The main risk here is self-inflicted losses due to losing access to your keys or backups. So River Financial estimates that approximately 1.57 million BTC have been lost forever, with 98% of these losses occurring before 2020.

That's why it is very important to minimize this risk and use large, reliable solutions for storing large sums of money. Let's look at what you can use in this case.

Short Checklist: How to Store Big Crypto

Divide your capital: ~90% in cold storage, the rest in hot storage; the level of security should be commensurate with the amount.
A hardware wallet with a certified Secure Element (CC EAL6+) and a trusted screen.
Purchase only directly; the device must not be preconfigured; generate the seed yourself.
Back up on physical media, at least two copies in different locations; never store digitally.
SLIP-39 (Shamir), if you need to securely split the secret into shares.
2-of-3 multisignature for large amounts (DIY or collaborative custody).
Only transparent signatures: test transactions → address verification → revocation of approvals.
Perimeter security: use SMS-2FA, a hardware key, a whitelisted withdrawal list, a dedicated device, and secure email.
A keyless succession plan in your will and a mandatory recovery test.

1. Divide Your Money into Tiers and Tailor Your Security Measures to Each Amount

The main principle of secure storage isn’t to make it as secure as possible, but to make it proportionate. Over-securing small amounts costs more than it protects; under-securing large amounts is a recipe for disaster.

The industry standard is to keep approximately 80-90% of your capital in cold storage (a hardware wallet, your “safe”), and 10-20% in a hot wallet or on an exchange for active trading. A hot wallet is like pocket money: keep only what you’re willing to lose there.

A practical guide based on capital size looks like this:

up to ~$300: a hot wallet on your phone; that’s enough;
$300-$10,000: one hardware wallet (single-sig);
over $10,000: switch to multi-signature (2-of-3), which eliminates a single point of failure (see section 7 for details).

It’s also worth remembering the industry’s main mantra: “not your keys, not your coins.” Coins held on an exchange are controlled by the exchange’s keys, not yours.

2. Purchase a Hardware Wallet with a Certified Secure Chip

For long-term storage of large amounts, a hardware (cold) wallet is not a luxury but a necessity. It stores private keys offline, physically isolating them from malware that inevitably threatens any software wallet on a device connected to the Internet.

What to look for when choosing a hardware wallet in 2026:

A secure element with CC EAL6+ certification. This certification confirms that the chip has been tested for resistance to physical key extraction, side-channel attacks, and error injection. It is precisely this level of security that makes the device a truly hard-to-compromise target.

A reliable display. In high-quality devices, the secure chip directly controls the display, so what you see during authentication cannot be spoofed by malware on a computer.

Type of isolation. Air-gapped devices do not connect via USB or Bluetooth; instead, they exchange data via QR codes to maintain maximum isolation.

3. Buy the Device Directly and Make Sure It Hasn’t Been Tampered with

A hardware wallet is only as secure as the process of obtaining it. Attacks on the supply chain are real and well-documented: scammers have reflashed devices (including Trezor models), pre-generated mnemonic phrases on them, and sold them through unofficial channels. More sophisticated methods include swapping out the microcontroller or soldering a tiny chip onto the bus between the screen and the processor.

Rules that eliminate almost all of this risk:

Buy only directly from the manufacturer or an authorized retailer. No used devices, no “pre-configured” devices, and no private marketplace sales.
A red flag is if the device arrives already initialized. If the package includes a “pre-generated” seed phrase or PIN, or the device is already unlocked, consider it compromised and do not use it. You must generate the seed yourself on a clean device.
Initialize and write down the seed yourself, verifying the setup process against the vendor’s official instructions.

An important point to note: most high-profile incidents involving hardware wallets were not caused by device malfunctions, but by data leaks at vendors and delivery intermediaries (Ledger confirmed such an incident in January 2026).

Targeted phishing attempts and even physical threats are later sent based on leaked addresses and orders. Therefore, protect your personal information when making a purchase: your shipping address is also part of the threat landscape.

4. Back Up Your Seed Phrase on a Metal Medium and Store Copies in Different Geographic Locations

Your seed phrase is the master key to everything. Whoever obtains it gains full control over your funds. And historically, careless backups, not hackers, have destroyed the most coins.

According to a conservative estimate by River Financial, approximately 1.57 million BTC have been lost forever through self-custody, with 98% of these losses occurring before 2020. River explicitly identifies the cause: for most users, the main risk is not theft, but self-inflicted loss of access to keys or backups. Moreover, according to their calculations, careless self-custody has resulted in the loss of more coins (~1.6 million BTC) than all the high-profile exchange disasters, such as Mt. Gox and FTX, combined (~1.2 million BTC).

How to do it properly:

Metal, not paper. Stainless steel or titanium plates with stamped or engraved text are the current standard for those who store significant sums of money. Paper deteriorates due to water, fire, and the passage of time.
At least two copies in different physical locations. Keeping a single copy in one place means choosing between “easy to access” and “will survive a fire or theft”; you can’t have both at once. Two copies stored in separate locations solve this dilemma.
Never store it digitally. Don’t photograph your seed phrase, and don’t store it in the cloud, in notes, in a messaging app, or in a password manager. Mobile malware can extract seed phrases directly from your photo gallery. And as recently as 2026, even password managers have experienced vault leaks.

And a common “just in case” mistake: don’t split the 24 words in half, storing 12 in each of two locations. This offers no protection: 12 of 24 words make brute-forcing the remaining 12 computationally feasible. If you want to split your secret, use SLIP-39 or multi-signature.

5. For Large Amounts, Switch to Multisig (2-Of-3)

A single seed phrase is always a single point of failure: if you lose it or it gets stolen, it’s all over. Multisig eliminates this problem by requiring multiple signatures from a set of keys for any transaction. The standard configuration is 2-of-3: three keys, any two of which are needed to move funds.

This provides resilience against two scenarios at once: losing one key doesn’t lock you out (the two remaining keys handle everything), and compromising one key gives an attacker nothing.

There are two approaches:

DIY multisig. You keep all three keys yourself in different locations. Maximum sovereignty, but all the operational complexity falls on you.
Collaborative custody. A provider (Unchained, Casa, Nunchuk, etc.) holds one of the three keys. On its own, it cannot move your funds, meaning this is still self-custody, but it serves as a “safety net” if you lose your key and helps with setup and succession planning. It’s ideal for reducing the risk of a beginner’s fatal mistake.

A fair trade-off: multisignature eliminates the risk of a single key but adds operational complexity. More keys and more steps for each transaction.

Read more: How Does Monero XMR Multisig Work?

6. For Complex Scenarios: Split Your Backup Using Shamir’s Scheme (Slip-39)

SLIP-39 (Shamir’s Secret Sharing) resolves the age-old backup dilemma: a single copy is easily lost, while multiple copies are easily stolen. The secret is divided into N shares with a configurable threshold of K: to restore the wallet, you need to collect any K of the N shares; fewer shares provide absolutely no information about the key.

How this balances the risks:

raising the threshold protects against theft (a single stolen share is useless);
lowering the threshold protects against loss (you can lose several shares and still recover).

Typical configurations are 2-of-3 and 3-of-5. For example, with a 3-of-5 setup, you distribute five shares across five locations; losing two still allows you to recover the wallet, and anyone who finds one or two shares won’t learn anything.

Don’t confuse these two different mechanisms: Shamir splits a single key into parts, while multisignature involves multiple independent keys and signatures.

7. Verify Every Transaction: Only “Transparent Signatures”

The most costly losses in recent years occurred not because of stolen keys, but because of signatures. Blind signing is approving a transaction without reading its details in human-readable form: the device displays a hexadecimal “mess,” and you’re forced to trust the app’s interface.

This is exactly how the biggest disasters unfolded: Bybit ($1.5 billion), Radiant Capital ($50 million), and Drift Protocol. In all cases, the signers used hardware wallets and simply didn’t know what exactly they were approving because the interface had been spoofed.

What to do:

Enable “clear signing.” A good device displays the raw transaction data in an understandable format on a secure screen: which contract, which method, which asset, how much, and where. If what’s shown in the app doesn’t match what’s on the device’s screen, that’s a red flag. In May 2026, the Ethereum Foundation and a group of vendors launched the open Clear Signing standard specifically for this purpose.
Send a test transaction. For large transfers, first send a small amount and wait for it to arrive, then send the rest. Transactions are irreversible.
Check the entire address, not just the beginning and end. An “address poisoning” attack deliberately injects similar addresses into the transaction history; a single copy-paste error has already cost people millions. In January 2026, one holder lost 4,556 ETH (~$12.4 million) this way. Additionally, beware of malware that substitutes the address in the clipboard.
Regularly revoke approvals. When you connect to a DeFi application, you often grant it the right to spend your tokens. These approvals are time bombs. Periodically check and revoke unused permissions using tools like Revoke.cash.

8. Secure The “Perimeter”: Email, 2fa, Device, Withdrawal

Hacks often don’t start with the wallet itself, but around it with email and accounts. Get your perimeter in order.

First, disable SMS two-factor authentication. In July 2026, the NIST standard (SP 800-63B-4) officially classified SMS codes as “limited” authentication methods, the only ones in this category, due to SIM swapping, attacks on the SS7 protocol, and real-time interception. At a minimum, use an authenticator app (TOTP), where the code is generated locally and does not travel over the network.

Second, the best option is a hardware key. YubiKey (starting at ~$58) or Google Titan operate under the FIDO2/U2F standard and are inherently resistant to phishing: even on a fake page, the key performs a cryptographic request tied to the real domain and does not authenticate on the imitation website.

Third, set up a withdrawal whitelist on the exchanges where you hold some of your funds. That way, even with your password and 2FA, an attacker won’t be able to withdraw coins to their own address. Many exchanges impose a 24–48-hour waiting period to add a new address, which gives you time to notice anything amiss.

And remember this simple rule: legitimate support never messages you first in a private chat on Telegram or Discord. Any “support” that does this is a scammer.

9. Create an Inheritance Plan and Test the Recovery Process

A crypto wallet is designed so that if you haven’t shared access, your coins will disappear along with you. It’s estimated that tens of billions of dollars have already been lost forever due to the death or incapacitation of owners who didn’t leave their keys to their heirs. Heirs often don’t even realize that a seed phrase is important.

Key considerations:

Never write down your keys or seed phrase in the will itself: after your death, it becomes a public document in many jurisdictions. You can mention the existence of digital assets in the will, but describe the access procedures in a separate, confidential instruction.

Practical mechanisms for transfer: a 2-of-3 multisignature setup, where the service (Casa, Unchained, Nunchuk) releases its key to the heirs after legal verification (e.g., a death certificate); or SLIP-39 with shares distributed among the heir, a lawyer, and a safe deposit box; or a trust/will drawn up by a crypto-savvy lawyer, plus sealed physical backups.
Be careful with “dead man’s switches.” Such a mechanism transfers access, but not legal title. And the moment of transfer is dangerous in and of itself: an heir unfamiliar with crypto is an easy target for phishing precisely when they first receive the seed. They need to be prepared in advance.

And let’s repeat the most important technical step that people skip most often: test the restoration before entrusting your wallet with significant amounts of money. Restore your wallet from a backup on a clean device and make sure you can access the same addresses. A backup you’ve never tested isn’t a backup.

Disclaimer: This material is for educational purposes only and does not constitute financial, legal, or tax advice. The rules governing the inheritance and taxation of cryptocurrency vary by jurisdiction. Please consult a qualified professional regarding your specific situation. Certain figures (exchange rates, loss amounts, incident statistics) are current as of the time this material was prepared and are subject to change. Please verify the most up-to-date information before publication.