Blockstream

Bitcoin Inheritance Planning

AddedIntermediate
TL;DR: If you hold bitcoin in self-custody and no one else can access your keys, your bitcoin dies with you. Bitcoin inheritance planning gives trusted heirs the ability to recover your bitcoin after your death without giving them premature access. A well-designed plan balances security (protecting bitcoin while you are alive) against accessibility (so heirs can recover it when you are gone), using tools like multisig, timelocks, and clear written instructions. This article is educational and is not legal, tax, or financial advice; consult a qualified estate-planning professional for your situation.
Bitcoin inheritance planning is the process of arranging how your bitcoin will transfer to designated heirs after your death. Because bitcoin has no "forgot password" recovery, no bank to call, and no court that can force a transaction, inheritance planning requires deliberate technical preparation that traditional assets do not. Without a plan, self-custodial bitcoin is permanently lost when the holder dies.

Why Bitcoin Inheritance Is Different

When someone dies holding stocks, real estate, or a bank account, legal systems have established mechanisms for transferring those assets. A court can order a bank to release funds. A brokerage must comply with estate documentation.

Bitcoin does not work this way. The Bitcoin network has no customer support, no override mechanism, and no concept of legal ownership. The only proof of control is a valid cryptographic signature. If your heirs cannot produce that signature, the bitcoin is unspendable forever.

This creates a unique inheritance problem with three layers:

  • Technical access: Your heir needs your private keys or recovery phrase to move the bitcoin.
  • Knowledge: Your heir needs to understand which wallet software or hardware to use and how to execute a recovery. A recovery phrase is useless to someone who does not know what to do with it.
  • Timing: Your heir should gain access only after your death, since premature access creates theft risk while you are alive.

An estimated three to four million bitcoin are already considered permanently lost (per Chainalysis analysis, 2020-2024 estimates), much of it from early holders who died or lost access without any inheritance plan.

Common Inheritance Approaches

No single method works for everyone. The right approach depends on how much bitcoin you hold, how technically capable your heirs are, and how much complexity you are willing to maintain. Here are the most widely used strategies, ranked roughly from simplest to most resilient.

Approach Security Simplicity Third-Party Trust Best For
Letter of Instruction Low (reveals key info) High None Small holdings, family trust
Multisig Inheritance High Low None (or optional) Larger holdings, technical users
Timelock Transactions High Low None Technical users, privacy-focused
Collaborative Custody High Medium Partial (key holder) Users wanting professional support
Third-Party Services Medium High High Non-technical users, convenience

Letter of Instruction

The simplest approach: write a letter explaining where your recovery phrase is stored, which wallet software to use, and step-by-step recovery instructions. Store the letter in a secure location your heir can access after your death (a home safe, a sealed envelope with an attorney, or similar).

Strengths: Easy to set up. No technical complexity. Works for small holdings where simplicity matters more than maximum security.

Weaknesses: Single point of failure. Anyone who finds the letter has full access. A fire, flood, or break-in that destroys it destroys access.

Best for: Small holdings where the alternative is no plan at all.

Multisig With Distributed Keys

Multisig (short for multisignature) requires multiple keys to authorize a transaction. In a 2-of-3 multisig setup, three keys exist, and any two are required to spend. For inheritance, you might distribute keys like this:

  • Key 1: You hold this key on your primary signing device.
  • Key 2: Your heir holds this key (or it is stored in a location they can access).
  • Key 3: A trusted third party (attorney, second family member, or a collaborative custody provider) holds this key.

While you are alive, you spend using Key 1 plus either other key; your heir and the third party can only move funds by colluding with each other. After your death, your heir combines Key 2 with Key 3 to recover the funds.

This is one of the strongest inheritance approaches because no single party ever has enough keys to steal. Your heir cannot spend without the third party's cooperation. The third party cannot spend without your heir. And you retain full spending capability during your lifetime.

For this setup, distributing keys across dedicated hardware signing devices provides the strongest security. A Jade held by each keyholder keeps private keys offline and isolated. Each device stores one key, and no single device can authorize a transaction alone. The heir's Jade can sit in a safe deposit box or secure location until needed, already initialized and ready to sign.

Strengths: No single point of failure. Theft requires collusion between two parties. Scales well for larger holdings.

Weaknesses: More complex to set up and maintain. All keyholders must keep their devices safe and accessible. Requires periodic verification that all keys still work.

Best for: Medium to large holdings where security justifies the added complexity.

Timelock Transactions (nLockTime)

Bitcoin supports several timelock mechanisms that can be used for inheritance. The simplest is nLockTime, a transaction-level field that prevents a pre-signed transaction from being valid until a specific block height or Unix timestamp. You pre-sign a transaction that sends your bitcoin to your heir's address, but it cannot be broadcast until the specified time arrives.

More advanced approaches use script-level timelocks. OP_CHECKLOCKTIMEVERIFY (CLTV, defined in BIP 65) enforces absolute timelocks within the spending script itself: funds locked with CLTV remain unspendable until a specified block height or time arrives, regardless of what transaction tries to spend them. OP_CHECKSEQUENCEVERIFY (CSV, defined in BIP 112) enforces relative timelocks, which require a specified number of blocks to pass after the UTXO is confirmed before the funds become spendable. CSV is useful for inheritance constructions where the timer resets every time you move the bitcoin to a fresh address, effectively creating a "dead man's switch" at the script level.

The workflow with nLockTime: every six to 12 months, you create a new timelock transaction set one year in the future, invalidating the previous one by spending the inputs. As long as you keep refreshing, the heir's transaction never becomes valid. If you die or become incapacitated and stop refreshing, the timelock expires and your heir can broadcast the pre-signed transaction.

Strengths: No need to share private keys with anyone. The heir only needs the pre-signed transaction and the ability to broadcast it. Fully trustless: no third party involved.

Weaknesses: Requires regular maintenance (refreshing the timelock). If you forget to refresh, your heir gains premature access. The pre-signed transaction locks in a specific destination address and amount, so changes to your wallet balance require creating new transactions. Not practical for wallets with frequent activity.

Best for: Technically experienced holders who want zero third-party involvement and are disciplined about periodic maintenance.

Collaborative Custody With Inheritance Features

Some self-custodial wallet providers offer collaborative custody models where the provider holds one key in a multisig arrangement and can facilitate inheritance transfers based on pre-arranged conditions.

The provider never has enough keys to spend unilaterally, so the arrangement remains self-custodial. When the time comes, the provider follows a documented process (death certificate verification, waiting period, identity confirmation) before releasing their key to the designated heir.

Strengths: Professional key management. Structured inheritance process. Lower technical burden on the heir.

Weaknesses: Requires trusting the provider to remain in business and honor the arrangement. Provider policies may change over time. Some providers charge ongoing fees.

Best for: Holders who want multisig security without managing all keys themselves.

Third-Party Inheritance Services

A growing number of companies specialize in Bitcoin inheritance planning. Their services range from dead man's switch mechanisms (if you do not check in for a set period, your heir receives instructions) to full estate planning integration with lawyers and custodians.

Strengths: Managed process. Professional guidance. Often include legal documentation.

Weaknesses: Counterparty risk. The service must remain operational for years or decades. Fees accumulate over time. Some services require sharing sensitive information.

Best for: Holders who want a managed, turnkey solution and accept the tradeoff of third-party dependence.

The Security vs. Accessibility Tradeoff

Every inheritance plan sits somewhere on a spectrum between two extremes:

  • Maximum security: No one but you can access the bitcoin. Your keys are stored in ways that resist all theft. Downside: if you die, the bitcoin is lost.
  • Maximum accessibility: Your heir has full, immediate access to your bitcoin at all times. Downside: they can steal it, lose it, or be coerced into moving it while you are alive.

Neither extreme is acceptable. The goal is a plan where your bitcoin remains secure during your lifetime, your heir gains access only after your death, and the process is simple enough that your heir can execute it under stress.

Multisig offers the best balance for most people because it distributes trust without eliminating access. No single compromise breaks the system, and the recovery process can be straightforward for a less technical heir, as long as clear instructions exist.

Legal Considerations

Bitcoin inheritance involves both technical and legal dimensions. Neglecting either one leaves gaps.

Wills and Trusts

A will can designate who inherits your bitcoin, but it cannot enforce a transfer. Bitcoin transfers require a valid cryptographic signature, and no court order can produce one without the private keys. A will tells your heirs they are entitled to the bitcoin. Your inheritance plan tells them how to get it.

Trusts offer more flexibility. A revocable living trust can hold instructions (not the keys themselves) for accessing bitcoin, with a trustee designated to carry out the recovery process.

Critical point: never store your recovery phrase in a will. In many jurisdictions, wills become public record once they enter probate, which means anyone who reads the filing could gain access to your bitcoin. Treat the recovery phrase as something that must never appear in a document that could be made public.

Tax and Reporting Obligations

In most jurisdictions, inherited bitcoin triggers specific tax treatment. In the United States, inherited assets generally receive a stepped-up cost basis, meaning the heir's cost basis resets to fair market value at the date of death. This can reduce capital gains taxes compared to a lifetime gift. Your estate plan should account for these implications.

Multi-Jurisdictional Complexity

An attorney who understands both Bitcoin and cross-border estate planning is worth the investment when heirs live in a different jurisdiction. Inheritance laws may conflict across borders, and some countries do not recognize digital assets in estate law.

What Not to Do

Common inheritance mistakes create the illusion of a plan without actually solving the problem.

Storing a Recovery Phrase in a Safe Deposit Box Alone

Safe deposit boxes are not as secure as people assume. Banks can restrict access during estate proceedings, and some jurisdictions seal safe deposit boxes upon the holder's death until a court grants access. If the recovery phrase is locked behind a legal process your heir cannot navigate, the bitcoin is inaccessible during the most critical window.

A safe deposit box can be one location in a distributed plan, but it should never be the only location.

Giving Full Access Prematurely

Handing your heir your recovery phrase while you are alive creates immediate risk. Family dynamics change. People make mistakes under financial pressure. An heir with full access can move bitcoin at any time, and Bitcoin transactions cannot be reversed.

Multisig solves this by giving the heir one key that is insufficient to spend on its own. They know they are part of the plan without having the power to act unilaterally.

Having No Plan at All

Having no plan at all is the most common and most damaging mistake. Many self-custody holders assume they will "get to it eventually" and never do. Even a basic letter of instruction is better than silence.

Relying on Memory

Verbal promises ("I told my wife where the Jade is") are not a plan. People forget details, misremember instructions, and cannot ask follow-up questions to someone who has died. Every element of your inheritance plan should be written down and stored securely.

Testing Your Inheritance Plan

An untested plan is barely better than no plan. The question is simple: can your heir recover the bitcoin without your help?

Conduct a Dry Run

Walk your heir through the recovery process using a small test amount. Have them:

  1. Locate all necessary components (recovery phrase, hardware devices, instructions).
  2. Open the correct wallet software or connect the signing device.
  3. Execute a recovery using the recovery phrase or signing keys.
  4. Send a small amount of bitcoin to confirm full control.

If they cannot complete any step without asking you a question, your plan has a gap. Update the instructions accordingly.

Schedule Regular Reviews

Review your inheritance plan at least once per year. Check that:

  • All recovery phrases and keys are still in their designated locations.
  • All hardware signing devices still power on and function.
  • The wallet software referenced in your instructions still exists and works.
  • Your heir's contact information and circumstances have not changed.
  • Your bitcoin holdings have not moved to new addresses or wallets not covered by the plan.

If you use timelock transactions, this annual review is also when you refresh the timelock.

Document Everything

Your inheritance instructions should include:

  • What bitcoin is and roughly how much you hold.
  • Where each recovery phrase or signing device is stored.
  • Which wallet software or hardware to use for recovery.
  • Step-by-step recovery instructions written for someone with no Bitcoin experience.
  • Contact information for anyone else involved (attorney, other keyholders).
  • A clear statement of who inherits what.

Institutional Inheritance: Succession and Key-Person Risk

For businesses and institutions holding bitcoin, inheritance planning extends beyond family succession into operational continuity. The core problem is the same: if the person controlling the keys becomes unavailable, the organization loses access to its bitcoin.

Key-Person Risk

Key-person risk occurs when a single individual holds critical knowledge or access that the organization cannot replicate. In Bitcoin custody, this means one person controls the signing keys or is the only one who knows the wallet configuration. If that person dies, is incapacitated, or leaves the company, the organization's bitcoin may be unrecoverable. This risk is especially acute at smaller companies where one founder manages the entire custody setup.

Business Continuity and Succession Planning

Institutional custody setups should build redundancy at every level:

  • Role-based access: No single employee should hold enough keys to spend unilaterally, and no single departure should lock the organization out.
  • Documented procedures: Full custody documentation should exist independently of any one person's knowledge.
  • Succession protocols: When a keyholder leaves the organization, a defined process should exist for rotating that key to a successor.
  • Regular audits: Periodic verification that all keys are accessible, all devices function, and all documentation is current.

For organizations managing significant bitcoin holdings, platforms like Blockstream Enterprise provide multisig custody with policy engines and role-based access controls designed to eliminate key-person risk. These systems enforce governance rules through the custody platform's policy engine on top of protocol-enforced multisig: spending limits, multi-party approval quorums, and time-period-based limits that prevent any single actor from compromising the treasury.

Board and Stakeholder Considerations

Companies holding bitcoin on their balance sheet should treat custody succession the same way they treat any critical business continuity function. The board should understand the custody architecture and receive regular confirmation that recovery procedures have been tested.

For regulated entities, auditors and compliance teams need visibility into custody continuity without gaining access to signing keys. Policy-based custody systems produce audit logs and approval records that demonstrate governance without exposing sensitive key material.

Step-by-Step: Creating a Basic Inheritance Plan

This guide covers a straightforward inheritance plan for an individual holder using a singlesig wallet. If you hold larger amounts or require multisig, the principles are the same but the key distribution is more involved (refer to the multisig section above).

Step 1: Take Inventory

List every wallet and address where you hold bitcoin. For each one, note:

  • The wallet type (hardware device, mobile app, desktop app).
  • The approximate balance.
  • Where the recovery phrase is stored.
  • Whether the wallet uses a passphrase (sometimes called a "25th word") in addition to the recovery phrase.

Step 2: Secure Your Recovery Phrases

If your recovery phrases are written on paper, consider upgrading to metal backup plates that resist fire and water damage. Store recovery phrases in at least two geographically separated locations. Some holders split a recovery phrase into shares using Shamir's Secret Sharing, where any K of N shares can reconstruct the phrase but fewer than K reveal nothing, so no single location holds enough to recover the wallet alone. For the signing device itself, a hardware wallet like the Jade Plus is well-suited to long-term storage because its Virtual Secure Element keeps the recovery phrase on the device only as an encrypted blob that cannot be decrypted without your PIN, so no unencrypted key material sits on the device to be extracted or to degrade over time. The recovery phrase backup, together with any passphrase you use, is enough to reconstruct access on a compatible wallet, even years later.

Step 3: Write Your Inheritance Instructions

Create a clear, step-by-step document that explains:

  • What bitcoin is (one paragraph for context).
  • How much bitcoin you hold and where.
  • Where to find each recovery phrase.
  • Which software or hardware device to use for recovery.
  • How to verify the recovery was successful (check balance, send a test transaction).
  • Who to contact for help if stuck.

Step 4: Store the Instructions Securely

Store the instructions separately from the recovery phrases. If someone finds both in the same location, they have full access. Options include: a sealed envelope with your attorney, a home safe (different from where the recovery phrase is stored), or with a trusted family member who is not the heir.

Step 5: Inform Your Heir

Your heir does not need to see the recovery phrases or know the full details of your custody setup. They need to know three things:

  1. You hold bitcoin.
  2. A recovery plan exists.
  3. Where to find the instructions when the time comes.

Step 6: Test the Plan

Walk your heir through a practice recovery using a small amount of bitcoin. Verify they can complete every step without your guidance. Update the instructions based on any questions or confusion that arise.

Step 7: Review Annually

Set a calendar reminder to review your plan every year. Confirm all recovery phrases are still where they should be, all devices still function, and your heir's circumstances have not changed.

Frequently Asked Questions

What happens to bitcoin when someone dies without an inheritance plan?

The bitcoin becomes permanently unspendable. It remains on the Bitcoin blockchain forever, visible but unmovable. No court, government, or company can recover it. This is fundamentally different from traditional assets, where banks and brokerages can be compelled to release funds to estate executors.

Can I include my recovery phrase in my will?

Do not store your recovery phrase in a will. In many jurisdictions, wills become public record during the probate process, which would let anyone who reads the filing see your recovery phrase and steal your bitcoin. Your will should reference the existence of bitcoin holdings and direct your executor to a separate, securely stored set of inheritance instructions. Rules vary by jurisdiction, so confirm the specifics with an estate-planning professional.

How does multisig help with inheritance?

In a 2-of-3 multisig setup, you hold one key, your heir holds another, and a third party holds the last. The spending script (enforced at the Bitcoin protocol level via P2WSH with OP_CHECKMULTISIG, or via Tapscript with OP_CHECKSIGADD for Taproot) requires two valid signatures from the three registered public keys. Your heir cannot steal bitcoin during your lifetime because they only have one of the two required keys. After your death, the heir and the third party combine their keys to produce the two required signatures, recovering the funds. Advanced constructions can combine multisig with a relative timelock (OP_CHECKSEQUENCEVERIFY, CSV) to create time-gated inheritance paths: a Taproot script tree where the primary spending path requires your signature, but a secondary leaf allows the heir's key plus a timelock to spend after a defined period of inactivity. Because the relative timelock resets every time you move the funds, normal activity keeps the heir path dormant.

How often should I review my Bitcoin inheritance plan?

At least once per year. Verify that all recovery phrases and signing devices are where they should be, that referenced wallet software still functions, and that your heir's circumstances remain current. When timelock transactions are part of the plan, the annual review is also when you refresh the timelock to prevent premature activation.

What is the biggest mistake people make with Bitcoin inheritance?

Having no plan at all. The second biggest mistake is creating a plan but never testing it. If your heir cannot complete the recovery process without your help, the plan has gaps that could result in permanent loss.

Do institutional Bitcoin holders need inheritance planning?

Yes. The institutional version is called succession planning or business continuity planning. The risk is the same: if the person controlling the keys becomes unavailable, the organization loses access. Institutional setups use multisig with role-based access controls and key rotation protocols to ensure no single departure compromises treasury access.

How is Bitcoin estate planning different from regular estate planning?

Regular estate planning relies on legal mechanisms: a court can compel a bank or brokerage to release assets to an executor. Bitcoin has no such override. The only way to move bitcoin is a valid cryptographic signature, so a will can say who inherits the bitcoin but cannot, by itself, transfer it. Effective Bitcoin estate planning pairs the legal documents (will or trust) with a separate, secure technical plan that gives heirs access to the keys after death, never storing the recovery phrase in the will itself. This article is educational, not legal advice; an estate-planning attorney familiar with digital assets can help structure both layers.

What happens to bitcoin when the owner dies?

It depends entirely on whether an inheritance plan exists. If heirs can access the private keys or recovery phrase, they can move the bitcoin to their own wallet. If no one can access the keys, the bitcoin remains on the blockchain permanently but is unspendable, because no court or company can recover it. This is why an estimated three to four million bitcoin are already considered lost. A documented, tested plan, often using multisig so heirs hold one key while a trusted party holds another, is what makes the difference.

Mockup view Refreshed Added Overlap resolution
Version history
LatestCurrent version (unreleased edits)
v1Pre-benchmark-trim2026-06-14 · 14 changes