MSTR Cat

Blockchain/Level X · Full circle/10.2 The recipe/Lesson 7

Step 7: recovery and inheritance

The dead man’s switch, the forgotten passphrase, and the descriptor that unlocks nothing

MaterialsA fireproof safe with a combination lock for physical storageA metal stamping kit or engraver for durable backup platesA version-controlled document template for inheritance instructions

Wonder

  1. Why does a backup that has never been restored count as hope rather than security?
  2. How can an heir possess every seed word in existence yet remain locked out of a multisig wallet?
  3. What specific mechanism causes most lost bitcoin to vanish into the void without ever being stolen?

Explore

  1. A backup that has never been successfully restored is a hypothesis, not a fact. The standard practice is to perform a recovery drill: install fresh wallet software on a spare device or clean profile, enter the seed phrase and any passphrase, and verify that the generated addresses match those holding funds. This confirms the mnemonic is intact, the derivation path is correct, and the human process works under pressure. Without this verification, a corrupted metal plate or a misremembered word remains invisible until it is too late to fix.
  2. For multisig wallets, seed phrases alone are insufficient. The specific spending conditions are defined by an output descriptor—a string that encodes public keys, derivation paths, and timelocks. Standard single-signature wallets use predictable BIP44 or BIP84 paths, but legacy or custom scripts cannot be guessed from a mnemonic. If the descriptor is lost, even with all recovery phrases in hand, the heir cannot reconstruct the wallet structure. The descriptor must be stored alongside the keys as part of the complete inheritance package.
  3. Inheritance documentation requires more than technical data; it demands instructions a non-technical heir can follow without guidance. A common failure mode is leaving a seed phrase with no context: which device to use, what software to download, or how to verify the address on-chain. Effective plans include step-by-step recovery guides and trusted contact lists for notaries or lawyers. These documents must be tested periodically to ensure they remain accurate as software interfaces change and that designated heirs are still reachable.
  4. The trade-off between security and accessibility is central to key management. Storing backups in multiple locations protects against fire or theft but increases the risk of human error, such as losing one share while retaining others. A 2-of-3 Shamir’s Secret Sharing setup offers redundancy, yet if the owner dies without documenting which shares are held by whom, recovery becomes a scavenger hunt. The physical location of each key component matters as much as its cryptographic integrity; a safe that no one else knows about protects from thieves but locks assets away during emergencies.
  5. History records the cost of neglected backups more often than theft. In 2013, James Howells discarded a hard drive containing roughly 8,000 BTC; it is now buried in a Newport, Wales landfill, and legal attempts to excavate have failed. In January 2021, Stefan Thomas revealed he had exhausted eight of ten password guesses on an encrypted drive holding 7,002 BTC; two more errors would erase the keys permanently. These cases illustrate that cryptographic security is only as strong as the human processes surrounding key management and physical durability.
  6. Most lost bitcoin vanishes from its owners rather than being stolen by external attackers. A forgotten passphrase, a corrupted backup file, or a misplaced descriptor results in permanent loss because there is no central authority to reset access. The protocol does not distinguish between theft and negligence; the keys are either valid or they are not. Regular drills and comprehensive documentation mitigate this risk by ensuring that every component of the recovery process is verified before it is needed.

Key facts

  • An output descriptor defines the specific spending conditions for a multisig wallet and cannot be derived from seed phrases alone.
  • James Howells’ hard drive, holding approximately 8,000 BTC, was discarded in 2013 and remains buried in a Newport landfill.
  • Stefan Thomas had two password guesses remaining on an encrypted drive containing 7,002 BTC as of January 2021.
  • A recovery drill involves restoring a seed phrase on fresh software to verify that generated addresses match known holdings.
  • Standard single-signature wallets use BIP44 or BIP84 derivation paths, allowing reconstruction from mnemonics alone.
  • Most lost bitcoin is attributed to owner error and negligence rather than external theft.

Exercise nine, six, three, one

9CollectList 9 distinct components required for a complete multisig inheritance plan, ranging from cryptographic keys to physical logistics.
6ClusterGroup the 9 components into 6 categories based on their primary point of failure: human memory, technical obsolescence, physical loss, legal ambiguity, social coordination, or documentation decay.
3DistillReduce the 6 groups to 3 core reasons why inheritance plans fail despite having all cryptographic keys present.
1CrystallizeWrite 1 sentence on the trade-off between distributing key shares across multiple parties and maintaining the simplicity required for a non-technical heir to execute recovery.

Fact check

Dates, figures and claims checked against the published sources listed below.

Open in the interactive academy →

PT ES ZH JA KO RU DE FR MS