Plebum Dominium

Risks of your path

Pick a path in the sidebar. This page shows the risks for the path you picked. If you switch paths, this page switches with you.

If you are stranded on a sheet that is not on your path, switch to Three keys in the sidebar to see all 17 sheets.

One device: words into one trusted device

Trust: one device and its maker. Work: lowest.

One device, one maker. If the device fails, the firmware is flawed, or the shop sold a tampered device, the wallet fails with it.
One seed. Anyone who holds the 24 words holds the coins. There is no second key to stop a thief.
Words go into the device itself, never into a computer, phone, or website. If the words ever go elsewhere, treat that seed as exposed and start again with fresh words.
Stamp the words in titanium first, before the device entry. If the device fails during setup, the plate is the backup.
No passphrase on this path. A found plate alone can restore the wallet on a compatible device.
Keep the plate and the device in different places. Together, they are the wallet.

Next: roll dice, stamp titanium, enter the words on the device. Read the easier option in full on the Risks of your path page.

Trust: one key, one device, one passphrase. Work: medium.

One key and one passphrase. Lose the passphrase and the wallet is gone, even with the plate and the device in hand.
Keep the passphrase on paper apart from the plate. If the plate and the passphrase paper are found together, the passphrase adds nothing.
One device, one maker, with the same device risks as One device. A flawed or tampered device can still fail you.
Words and passphrase go into the device itself during recovery, nowhere else. No hardware company will ever ask for your seed phrase.
Check the receiving address on the device screen, not only on the computer screen, before you accept coins.
The watch-only wallet can watch, it cannot spend alone. Spending needs the device and the passphrase together.

Next: the single-sig sheet.

Trust: no single key, device, or place. Work: highest.

Most steps to get right. A missed step in any key can lock the wallet later.
Lose two keys and the map, and the funds are locked. Keep three plates in three places, and keep the encrypted map apart from any single plate.
Two seeds alone cannot rebuild the third key. Without the descriptor, two keys can spend but cannot rebuild the wallet from scratch. Keep the encrypted map safe.
No passphrase on the 2-of-3. The protection comes from three keys in three places, not from a passphrase.
Practice spend first, and rehearse on testnet if you have not done this before. Savings do not move until the practice spend works.
Shut down fully between keys. A key left in memory after a boot can leak into the next key.

Next: start at the beginning and work the steps.