Collaborative Custody for Bitcoin Estate Planning: Casa, Unchained, and the Multisig Inheritance Solution in 2026

What Collaborative Custody Actually Is

Collaborative custody is a multisig arrangement where you hold the majority of keys and a specialized company holds one. In the most common configuration—2-of-3 multisig—you control two keys (typically on separate hardware wallets in different locations), and the custody provider controls the third. To move funds, any two of the three keys must sign a transaction.

This means you retain full sovereignty over your Bitcoin. You can move funds at any time using your two keys, without the provider's permission or even knowledge. The provider cannot move your funds unilaterally—they hold only one key in a quorum that requires two. They serve as a recovery backstop, not a custodian in the traditional sense.

More sophisticated setups use 3-of-5 multisig. Here, you might hold three keys, the provider holds one, and a fifth key sits in geographically separated cold storage. This adds redundancy: you can lose any two keys and still access your Bitcoin. For estate planning purposes, the 3-of-5 model creates more flexibility in distributing keys across trustees, heirs, and legal representatives.

The distinction between collaborative custody and traditional custody matters legally. Under most state frameworks, the provider is not a custodian because they cannot unilaterally access or transfer your assets. You remain the beneficial owner in every meaningful sense. This has implications for bankruptcy remoteness, fiduciary liability, and trust law—all of which we will cover.

Why This Architecture Exists

Pure self-custody creates an inheritance crisis. If you hold all keys yourself and die unexpectedly, your heirs face a brutal technical challenge: locate the hardware wallets, reconstruct the passphrase, navigate the signing process, and do it all while grieving and under time pressure from probate deadlines. Many never succeed. An estimated 3–4 million Bitcoin are already permanently lost, and some meaningful fraction of that represents failed inheritance transfers.

Full institutional custody solves the access problem but creates a different one: you surrender sovereignty. Your Bitcoin sits on someone else's infrastructure, subject to their solvency, their regulatory compliance, and their business decisions. The collapse of FTX in 2022 demonstrated what happens when custodial trust is misplaced.

Collaborative custody occupies the middle ground. You keep sovereignty. Your provider adds a recovery path. And when structured correctly for estate planning, the arrangement ensures your heirs can access their inheritance without becoming Bitcoin security experts overnight.

The Estate Planning Problem It Solves

The core problem in Bitcoin estate planning is the single point of failure. In single-signature self-custody, that single point is you. Your knowledge of where the seed phrase is stored, your ability to operate the hardware wallet, your memory of the passphrase—all of it lives in one brain. When that brain stops functioning, the Bitcoin becomes inaccessible.

Most estate plans attempt to solve this by documenting everything: seed phrases in sealed envelopes, hardware wallet locations in a letter to heirs, recovery instructions locked in a safe deposit box. These paper-based solutions work in theory but fail in practice. Paper degrades. Instructions become outdated when you rotate wallets. Heirs cannot verify the instructions are correct until they actually need them—by which point you are not available to troubleshoot.

Collaborative custody eliminates the single point of failure by distributing trust across multiple parties, none of whom can act alone. The provider holds a recovery key. You hold the operating keys. Your estate plan specifies how keys transfer at death. If any one component fails—lost hardware wallet, forgotten passphrase, provider outage—the remaining components can still reconstruct access.

Casa vs. Unchained: A Direct Comparison

Two companies dominate the collaborative custody space for estate planning: Casa and Unchained. Both offer multisig vaults with company-held recovery keys. Both charge approximately $250 per year for their premium tiers. But their architectures, inheritance protocols, and ancillary services differ in ways that matter significantly for estate planning.

Feature	Casa	Unchained
Multisig Model	2-of-3 (Standard), 3-of-5 (Premium)	2-of-3 vault
Interface	Mobile-first app	Web-based vault dashboard
Inheritance Protocol	Built-in, 6-month health check	Inheritance protocol with designated contacts
IRA Integration	No	Yes (Bitcoin IRA with collaborative custody)
Lending	No	Yes (Bitcoin-collateralized loans)
Premium Cost	~$250/yr (Premium), ~$129/yr (Standard)	~$250/yr (Signature tier)
Key Recovery	Mobile key recovery via Casa app	Key replacement through support process
Seedless Option	Yes (mobile key has no exposed seed)	No (all keys use standard seed phrases)
Geographic Key Distribution	Recommended, user-managed	Recommended, user-managed

Casa: Mobile-First, Inheritance Built In

Casa’s architecture centers on their mobile app. In the 2-of-3 configuration, one key lives on your phone (managed by the Casa app), one on a hardware wallet you control, and one held by Casa. The 3-of-5 Premium tier adds two more hardware wallets you control, bringing your key count to four out of five.

The mobile key is “seedless”—there is no 12 or 24-word recovery phrase exposed to you. The key material lives in your phone’s secure enclave, backed up to your iCloud or Google account. This reduces the attack surface (no seed phrase to steal) but creates a dependency on your phone and cloud account that must be addressed in your estate plan.

For estate planning, Casa’s 3-of-5 Premium tier is the relevant product. With four keys under your control and one held by Casa, you have maximum flexibility to distribute keys across your estate structure. Two keys can go to successor trustees, one to a secure backup location, and Casa holds the recovery key that makes the inheritance protocol function.

Unchained: Vault Model, Financial Services Integration

Unchained takes a more traditional approach. Their 2-of-3 vault uses standard hardware wallets for both user keys, with Unchained holding the third. There is no mobile key and no seedless option—every key has a conventional seed phrase that must be securely stored.

Where Unchained distinguishes itself is the surrounding financial infrastructure. Their Bitcoin IRA product uses the same collaborative custody model, meaning your retirement Bitcoin benefits from multisig security without surrendering it to a traditional IRA custodian. Their lending product allows you to borrow against your Bitcoin without selling—a meaningful feature for buy-borrow-die estate planning strategies.

For families whose estate plan involves IRA assets, lending strategies, or trading alongside long-term holding, Unchained’s integrated platform reduces the number of custodial relationships to manage. For families focused purely on cold storage security and inheritance, Casa’s purpose-built inheritance protocol may be the stronger choice.

How Inheritance Protocols Work

The inheritance protocol is where collaborative custody becomes genuinely useful for estate planning. Without it, collaborative custody is just better security. With it, you have a structured transfer mechanism that activates on death or incapacity.

Casa’s Inheritance Protocol

Casa uses a health check system. Every six months, the app sends you a notification asking you to confirm you are alive and in control of your Bitcoin. If you respond, nothing happens. If you fail to respond after the grace period, Casa initiates the inheritance process.

The designated heir (configured by you in advance) contacts Casa. After identity verification, Casa provides the heir with Casa’s key and instructions for locating your remaining keys. In a 3-of-5 setup, the heir needs Casa’s key plus two of your four keys to move the Bitcoin. Your estate documents should specify where those keys are stored and who has access.

The six-month health check creates an important constraint: there is a minimum six-month delay between your death and your heir’s ability to access the Bitcoin through the inheritance protocol. In practice, this aligns reasonably well with probate timelines, but it means collaborative custody cannot provide immediate liquidity to the estate. If the estate needs funds for funeral expenses, tax payments, or debt service within six months, other assets must cover those obligations.

Unchained’s Inheritance Protocol

Unchained’s approach uses designated contacts and a time-delay mechanism. You specify trusted individuals who can initiate the inheritance process. When they do, Unchained begins a waiting period with key rotation steps designed to ensure the original owner has time to intervene if the request is fraudulent.

If no intervention occurs within the specified period, Unchained facilitates the key transfer to designated beneficiaries. The process involves identity verification, legal documentation review, and coordinated key signing.

Both protocols share a common vulnerability: they depend on the provider remaining operational. If Casa or Unchained ceases operations, the inheritance protocol dies with it. Your heirs are left with a standard multisig recovery challenge—possible, but significantly harder without the provider’s infrastructure and support.

Trust Compatibility and Trustee Requirements

For significant Bitcoin holdings, the question is not whether to use a trust—it is which trust structure integrates best with collaborative custody. Under the current 2026 estate tax framework, the federal lifetime exemption stands at $15 million per person ($30 million for married couples), and the annual gift exclusion is $19,000 per recipient. Holdings above these thresholds face a 40% estate tax. A properly structured trust can shelter Bitcoin from this exposure across generations.

Collaborative custody works with trust-held Bitcoin. The configuration changes slightly: instead of you holding two keys personally, the trustee holds two keys and the collaborative custody provider holds one. The trust instrument names the trustee as the authorized operator of the multisig wallet, and the provider’s records reflect the trust as the account holder.

The Trustee Competency Problem

This is where theory meets reality. A trustee holding multisig keys must be technically competent enough to operate hardware wallets, verify transaction details, and execute the signing ceremony without error. Most professional trustees—banks, trust companies, attorneys—have no experience with this.

There are three solutions:

• Technically competent individual trustee. A family member or advisor who understands Bitcoin self-custody. This is the simplest approach but creates its own single point of failure—now the trustee is the bottleneck.
• Co-trustees with distributed keys. Two co-trustees each hold one key. Neither can act alone, which provides checks and balances but requires coordination for every transaction.
• Trustee with sub-custodian delegation. The trust instrument authorizes the trustee to delegate custody operations to a qualified sub-custodian or technical advisor. The trustee retains fiduciary oversight while the sub-custodian handles the mechanical key operations.

The trust instrument must explicitly address which approach applies. Generic trust language about “investing prudently” does not cover the operational specifics of multisig custody. Your estate attorney needs to draft provisions that specify authorized custody providers, key management protocols, and succession procedures for key holders.

The Key Ceremony for Estate Planning

The key ceremony is the initial setup event where all key holders—you, your co-trustees, your attorney, your heirs—gather to create the multisig wallet, distribute keys, verify the configuration, and test the recovery process. For estate planning purposes, this ceremony is not optional. It is the foundation everything else builds on.

What Happens During a Key Ceremony

1. Hardware wallet initialization. Each key holder initializes their hardware wallet in the presence of all participants. Seed phrases are generated, recorded on metal backup plates, and verified.
2. Multisig wallet creation. The collaborative custody provider’s software coordinates the creation of the multisig wallet, registering each public key and establishing the signing quorum.
3. Test transaction. A small amount of Bitcoin is sent to the new wallet, then spent from it using the required key quorum. This verifies that the setup works before significant funds are deposited.
4. Recovery test. At least one key holder simulates a lost key scenario. The remaining key holders execute a recovery transaction using the backup quorum. This proves the inheritance path works.
5. Documentation. Every participant receives a sealed document specifying their role, their key’s location, the recovery procedure, and the contact information for all other key holders and the provider. These documents become part of the estate file.

The ceremony typically takes two to four hours. For trust-held Bitcoin, the trustee, successor trustees, and the estate attorney should all attend. The attorney witnesses the process, which strengthens the legal chain of custody and provides evidence that the trust was properly funded with Bitcoin held in the specified custody arrangement.

Annual Verification

The key ceremony is not a one-time event. Best practice is to conduct an annual verification where all key holders confirm they still have access to their keys, test a small transaction, and update documentation to reflect any changes in personnel, hardware, or provider terms. This annual cadence aligns with both Casa’s health check rhythm and standard trust administration schedules.

Backup Key Storage: Tradeoffs and Best Practices

Where you store backup keys determines whether your estate plan survives contact with reality. Each storage option involves tradeoffs between security, accessibility, and resilience.

Safe Deposit Box

A bank safe deposit box provides physical security, fire resistance, and access controls. The drawbacks: banks can freeze box access during probate, box access may require a court order after the holder’s death, and the bank knows the box exists (creating a metadata trail). For estate planning, ensure the trust or a co-trustee is named on the box access list. Some states have specific statutes governing safe deposit box access after death—check your jurisdiction.

Attorney’s Vault

Storing a backup key with your estate attorney provides professional custody with attorney-client privilege protection. The attorney can access the key as part of estate administration without a court order. The risk: if your attorney retires, changes firms, or dies, the key may be difficult to locate. Specify a succession plan for the attorney relationship in your estate documents.

Geographic Distribution

Distributing keys across multiple geographic locations protects against localized disasters—fire, flood, theft, government seizure. In a 3-of-5 setup, you might store keys across three different cities or even countries. The tradeoff is coordination complexity: accessing your Bitcoin requires retrieving keys from multiple locations, which slows response time and increases travel costs.

The Right Approach for Most Families

For a 3-of-5 collaborative custody estate plan, a practical distribution looks like this: Key 1 in your home safe (daily access). Key 2 with a co-trustee in a different city. Key 3 in a bank safe deposit box registered to the trust. Key 4 in your attorney’s vault. Key 5 held by the collaborative custody provider. Any three of these five can sign a transaction, meaning the estate can lose access to two keys and still recover the Bitcoin.

What Happens If Your Provider Goes Bankrupt

This is the question every skeptic asks, and it has a good answer followed by an important caveat.

The good answer: in a 2-of-3 collaborative custody arrangement, you hold two keys. You can move your Bitcoin at any time, unilaterally, without the provider’s participation. If Casa or Unchained shuts down tomorrow, your funds are not trapped. You export the wallet configuration, sign a transaction with your two keys, and sweep the funds to a new wallet. This is the fundamental advantage of collaborative custody over full institutional custody—you are never locked in.

The important caveat: the inheritance protocol dies with the provider. If Casa goes bankrupt, the health check stops running. No one monitors whether you are alive. No one facilitates key transfer to your heirs. The inheritance mechanism you built your estate plan around simply ceases to exist.

Your heirs are left with a standard multisig inheritance challenge: they need to locate your keys, understand the multisig configuration, and execute transactions using tools that may not be the original provider’s software. This is doable—the Bitcoin protocol does not depend on any single company—but it requires significantly more technical sophistication than the provider-assisted inheritance path.

Privacy Considerations for HNWI Clients

Collaborative custody requires you to share information with a third party. The provider knows your wallet addresses, your balance, your transaction history, and (depending on KYC requirements) your identity. For high-net-worth individuals, this creates a meaningful privacy exposure.

The specific concerns:

• Balance disclosure. The provider can see exactly how much Bitcoin you hold in their managed wallets. For families with $10M+ in Bitcoin, this concentration of information creates a target—not from the provider itself, but from any data breach or insider threat at the provider.
• Transaction surveillance. The provider can observe when you move funds, how much you move, and to which addresses. Combined with blockchain analysis, this gives a comprehensive view of your financial activity.
• Subpoena risk. Provider records are subject to law enforcement subpoenas. Unlike your personal records (which may be protected by various privileges), the provider’s records of your activity are held by a third party with limited legal basis to resist disclosure.
• Data breach exposure. If the provider suffers a data breach, your identity, balance, and address data may become public. The 2020 Ledger breach demonstrated how devastating hardware wallet customer data exposure can be.

Mitigating these risks is possible but requires deliberate architecture. Some families maintain collaborative custody for their estate-planned Bitcoin (the portion they intend to pass to heirs) while keeping a separate self-custody wallet for transactional Bitcoin. This limits the provider’s visibility to the inheritance tranche only.

Another approach: hold the collaborative custody account in the name of the trust or a holding LLC rather than in your personal name. This adds a layer of entity-level privacy, though the provider will still know the beneficial owner through KYC processes.

Insurance Through Collaborative Custody

Some collaborative custody providers offer insurance coverage on the Bitcoin held in their managed wallets. This coverage typically applies to specific loss scenarios—provider key compromise, internal theft, certain types of hacking—but not to losses caused by user error, market decline, or regulatory action.

Coverage limits vary and are often far below the total value held on the platform. A provider might carry $100M in aggregate coverage across all clients, which means a catastrophic breach could exceed policy limits. Individual claim caps may apply.

For estate planning purposes, custody insurance provides an additional layer of protection but should not be treated as a substitute for proper key management and geographic distribution. The insurance protects against provider-side failures. Your estate plan must independently protect against user-side failures—lost keys, incapacitated key holders, disputed succession.

Review the insurance policy terms carefully. Key exclusions to watch for: social engineering attacks on the user (not the provider), voluntary transfers (even if made under duress), losses during the inheritance transfer process, and losses caused by software bugs in the signing interface.

Integration with Estate Documents

Collaborative custody does not replace your estate plan. It is one component of a comprehensive Bitcoin estate planning framework that includes legal documents, tax structuring, and heir preparation.

The trust instrument or will should include the following provisions specific to collaborative custody:

1. Authorized custody providers. Name the specific provider (Casa, Unchained, or both) and the account identifiers. Authorize the trustee to maintain the relationship and pay provider fees from trust assets.
2. Key holder designations. Specify who holds each key in the multisig configuration, where backup keys are stored, and the succession order if a key holder becomes unavailable.
3. Key rotation procedures. Authorize and require periodic key rotation. Specify the cadence (annual recommended), the process, and who approves rotation events.
4. Provider failure contingency. If the collaborative custody provider ceases operations, the trust instrument should authorize the trustee to migrate to an alternative provider or convert to a self-custody multisig arrangement, specifying the decision-making process and technical resources available.
5. Technical advisor designation. Name a technical advisor (individual or firm) authorized to assist the trustee with custody operations. This person does not hold keys but provides guidance on signing, verification, and troubleshooting.

The Custody Spectrum: Self-Custody vs. Collaborative vs. Institutional

Collaborative custody sits between two extremes, and understanding the full spectrum clarifies where it fits in your estate plan.

Pure Self-Custody

Maximum sovereignty, maximum responsibility. You hold all keys. No third party can access, freeze, or surveil your Bitcoin. The estate planning challenge is severe: everything depends on your heirs’ ability to execute a technical recovery process using only the documentation you left behind. For technically sophisticated families with robust operational security practices, self-custody may be appropriate for a portion of holdings. For most families, it is a time bomb for inheritance.

Collaborative Custody

You hold the majority of keys. A trusted company holds one. You retain sovereignty (you can always move funds without the provider) while gaining a structured inheritance path and professional support. The provider knows your balance and activity. You depend on the provider for the inheritance protocol but not for day-to-day access. This is the sweet spot for most HNWI estate plans.

Full Institutional Custody

A qualified custodian holds your Bitcoin on your behalf. You have no keys. Access is controlled by the custodian’s internal policies and regulatory framework. Estate transfer follows traditional custodial account succession (beneficiary designations, letters testamentary). Simple and familiar for attorneys and trustees, but you have fully surrendered sovereignty. Your Bitcoin is subject to the custodian’s solvency, regulatory compliance, and operational integrity. For families who prioritize simplicity over sovereignty and trust institutional infrastructure, this works. For families who hold Bitcoin specifically because they distrust institutional infrastructure, it defeats the purpose.

The Hybrid Approach

Many well-structured estate plans use multiple custody models. A common allocation: 60–70% in collaborative custody (the inheritance-planned core holding), 20–30% in self-custody (the sovereign reserve, with separate inheritance documentation), and 10% or less in institutional custody (for trading, lending, or immediate liquidity needs). This diversifies custody risk the same way you diversify investment risk.

Case Study: The Andersen Family

Names and identifying details changed. Structure and figures are representative of a real client engagement.

Erik and Maren Andersen accumulated approximately $8 million in Bitcoin between 2017 and 2024. Both in their early 50s with two adult children, they faced the standard HNWI estate planning challenge: how to transfer generational wealth while minimizing estate tax exposure and ensuring their heirs could actually access the Bitcoin.

The Structure

The Andersens established an irrevocable trust funded with Bitcoin, taking advantage of the current $15 million per person lifetime exemption. They chose Casa’s 3-of-5 multisig Premium tier for the trust’s Bitcoin custody.

Key distribution:

• Key 1: Erik (primary trustee) — hardware wallet in home safe
• Key 2: Maren (co-trustee) — hardware wallet in separate home safe
• Key 3: Attorney — hardware wallet in law firm vault
• Key 4: Bank safe deposit box registered to the trust, in a different city
• Key 5: Casa (collaborative custody provider)

Any three of the five keys can sign a transaction. In normal operations, Erik and Maren sign together using Keys 1 and 2, with any third key as backup. If either Erik or Maren becomes incapacitated, the other can sign with the attorney’s key or the safe deposit box key.

The Inheritance Protocol

Casa’s health check runs every six months. Both Erik and Maren are enrolled. If both fail to respond—indicating death or incapacity—their two adult children (designated as successor trustees) contact Casa.

After identity verification, Casa provides Key 5 and guidance. The children, who have been briefed during the annual key ceremony, retrieve Key 3 from the attorney’s vault and Key 4 from the safe deposit box. With Keys 3, 4, and 5, they can access the trust’s Bitcoin without needing Erik or Maren’s personal keys.

Annual Testing

Every January, the Andersen family conducts an inheritance drill. Both children travel to the attorney’s office. They practice the full recovery sequence: contact Casa, verify identity, retrieve the attorney’s key, sign a test transaction. The attorney witnesses the drill and files a memo confirming the process works. This annual test has revealed two issues over three years: a firmware update that changed the signing workflow, and a safe deposit box that had been inadvertently removed from the trust’s access list after a bank merger. Both were corrected before they became actual problems.

Fallback Planning

The trust instrument includes a provider failure contingency. If Casa ceases operations, the successor trustees are authorized to migrate to Unchained, to a different collaborative custody provider, or to a self-managed multisig arrangement. The trust designates a Bitcoin technical advisor (an independent consultant, not a family member) who can guide the migration process. The advisor’s contact information is updated annually as part of the key ceremony documentation.

Tax Integration

By funding the irrevocable trust while the exemption remains at $15 million, the Andersens removed $8 million from their taxable estates. Any future appreciation in the Bitcoin’s value occurs outside their estates entirely. If Bitcoin doubles in value, the trust holds $16 million—but $0 of that growth is subject to estate tax. The annual gift exclusion of $19,000 per recipient is used separately for direct Bitcoin gifts to their children’s personal wallets.

Implementation Checklist

If you are ready to implement collaborative custody as part of your Bitcoin estate plan, here is the sequence:

1. Choose your provider. Casa for inheritance-focused families; Unchained for families who also need IRA integration or lending. Consider both if your holdings justify the redundancy.
2. Select your multisig configuration. 3-of-5 for holdings above $2M. 2-of-3 for smaller holdings or simpler estate structures.
3. Draft or update your trust instrument. Include the digital asset custody addendum with all five provisions listed in the estate documents section above.
4. Schedule the key ceremony. All key holders, the estate attorney, and (ideally) successor trustees should attend.
5. Distribute and document keys. Geographic separation. Multiple storage types. Written documentation sealed and distributed to all participants.
6. Configure the inheritance protocol. Designate heirs or successor trustees. Verify their identity information with the provider. Test the notification mechanism.
7. Fund the wallet. Transfer Bitcoin to the new multisig wallet in stages. Verify each deposit arrives correctly before sending more.
8. Schedule annual verification. Put it on the calendar now. Every year, same month, full key ceremony with recovery test.
9. Document the fallback. Write the provider-failure recovery procedure. Store it with the estate documents. Ensure at least one person in the succession chain can execute it.

---

Collaborative custody does not make Bitcoin estate planning simple. Nothing does—Bitcoin is a bearer asset secured by cryptography, and that reality imposes obligations that no provider can fully abstract away. What collaborative custody does is eliminate the single point of failure that makes pure self-custody a generational risk, while preserving the sovereignty that makes Bitcoin worth holding in the first place.

The provider holds one key. You hold the rest. Your estate plan specifies what happens to those keys when you can no longer hold them yourself. And every year, you test the whole thing to make sure it actually works.

That is the architecture of a Bitcoin estate plan that survives contact with reality.