Your hardware wallet is not just a Bitcoin storage device. For estate planning purposes, it is a component of your estate — one that must be findable, accessible, and fully documented for whoever inherits your Bitcoin. Without proper documentation, a hardware wallet represents millions of dollars locked inside a small plastic device that your heirs have no legal or technical means to open.
The good news: hardware wallet inheritance is a solvable problem. The devices are well-engineered, the standards are reliable, and the documentation requirements are manageable. The bad news: most Bitcoin holders have not done the documentation work, and the consequences of that oversight are permanent and irreversible.
This article walks through the three most widely used hardware wallets — Coldcard, Trezor, and Ledger — and what each one means specifically for your estate plan. We cover the seed phrase, the hidden passphrase trap, the LOI checklist your executor will need, and how hardware wallet inheritance compares to exchange custody. By the end, you'll know exactly what your estate plan is missing and how to fix it.
Why Hardware Wallets Matter for Estate Planning
A hardware wallet is a dedicated device — typically the size of a USB drive or small calculator — designed to store Bitcoin private keys in an offline, air-gapped environment. When you own Bitcoin on a hardware wallet, the keys never touch an internet-connected device. Your private key is generated on the hardware wallet, stored on its secure chip, and never exported in unencrypted form. This is why hardware wallets are considered the gold standard for Bitcoin security.
But here's the estate planning implication: Bitcoin on a hardware wallet is controlled entirely by whoever possesses the private key. There is no password reset. There is no customer service department. There is no court order that can compel the Bitcoin network to reassign ownership. If your executor finds your hardware wallet and cannot unlock it, or finds the seed phrase but doesn't know a critical passphrase, the Bitcoin is gone.
This is categorically different from how other assets work. A bank account can be transferred by probate court order. A brokerage account can be retitled with a death certificate. Bitcoin on a hardware wallet responds to none of those mechanisms — it responds only to cryptographic keys.
A hardware wallet without documented seed phrase access is not an inheritable asset. It is a locked box that no one on earth can open — not your heirs, not your attorney, not any government. Proper documentation transforms it from a security vulnerabBitcoin Irrevocable Life Insurance Trusty into a secure, inheritable asset. That documentation gap is what this article is designed to close.
The Three Major Hardware Wallets: Estate Implications
Coldcard, Trezor, and Ledger together account for the vast majority of self-custody hardware wallets in circulation. Each has different security architectures, and each creates different risks — and different documentation requirements — for your estate.
The Coldcard is the hardware wallet most often chosen by security-conscious Bitcoin holders. It is Bitcoin-only by design, air-gap capable (transaction signing via QR codes or microSD cards, never USB), and equipped with a dedicated secure element chip that makes physical tamper attacks exceptionally difficult. It is widely regarded as the most security-hardened consumer hardware wallet available.
PIN Protection: The Coldcard is protected by a PIN you set during initialization. Entering too many incorrect PINs causes the device to brick or wipe permanently — protecting the device against brute-force attempts. This is good for security, and potentially catastrophic for inheritance if the correct PIN is not documented.
The Duress PIN: One of Coldcard's advanced features is a duress PIN — a second PIN that, when entered, displays a decoy wallet with a small balance. This feature is designed to protect against physical coercion ("tell me your PIN or else"). For estate planning, it creates a specific risk: if your executor finds a PIN documented somewhere and it turns out to be the duress PIN rather than the correct PIN, they will see a decoy wallet with a small balance and assume there's nothing more to find — while the real wallet remains inaccessible.
Estate implication: Document the correct PIN explicitly and separately from the device, and note clearly which PIN is correct vs. which is the duress PIN (if you've set one). If the device is lost or destroyed, the Bitcoin is fully recoverable from the seed phrase alone — so the seed phrase documentation is ultimaterially more important than the PIN. But if the device is present and the wrong PIN is entered too many times, access is lost permanently.
Trezor was the first consumer hardware wallet, and its models remain among the most widely used by individual holders. Trezor is known for being open-source, user-friendly, and well-supported by third-party software including Sparrow Wallet and Electrum. It is available in Bitcoin-only firmware vants for holders who prefer a more focused security profile.
PIN Protection: Trezor devices use a PIN randomized on the device screen, requiring the user to enter positions on a grid rather than the actual numbers. This protects against keyloggers on the connected computer. If the PIN is entered incorrectly too many times, the device wipes. However, unlike the Coldcard, a wiped Trezor can be restored from the seed phrase.
The Passphrase ("25th Word") Feature: This is the most dangerous Trezor feature for estate planning. Trezor supports an optional BIP-39 passphrase — sometimes called the "25th word" — which creates an entirely separate hidden wallet derived from the same seed phrase. If you use a passphrase, the hidden wallet containing your Bitcoin is only accessible when both the seed phrase AND the passphrase are entered together. Restoring from the seed phrase alone will show the standard wallet, which may be empty.
Estate implication: If a Trezor holder uses a passphrase and fails to document it, the executor will restore the wallet from the seed phrase, find an empty standard wallet, and conclude the Bitcoin is gone. The hidden wallet — potentially containing the entire inheritance — remains permanently inaccessible. The passphrase is the single most common technical way Bitcoin is lost in inheritance.
Ledger is the market leader by volume, largely because of its polished user interface, the Ledger Live software, and its support for thousands of cryptocurrencies beyond Bitcoin. For holders who keep multiple digital assets — Bitcoin, Ethereum, stablecoins — Ledger offers a unified management experience. Ledger devices use a certified secure element chip similar to those found in credit cards.
PIN Protection: Ledger devices are PIN-protected, and entering three consecutive incorrect PINs causes the device to wipe itself. Unlike the Coldcard, this wipe is recoverable — the device can be restored from the seed phrase. This means the PIN is less critical to document than on the Coldcard, as a wiped Ledger does not result in permanent loss if the seed phrase is intact.
Ledger Recover Controversy: In 2023, Ledger announced an optional cloud-based seed phrase backup service called "Ledger Recover." The service attracted significant criticism from the Bitcoin security community because it involved sharding and transmitting the seed phrase to third parties. For estate planning purposes, Ledger Recover is not a substitute for a proper offline seed phrase backup — the self-custody backup remains the essential document.
Estate implication: Like all hardware wallets, the seed phrase is the critical document. A Ledger device destroyed in a fire is not a loss as long as the seed phrase survives — any new hardware wallet can restore from the same 24-word seed. Document the seed phrase on a durable metal backup; the PIN is secondary since device resets are non-destructive when the seed phrase is present.
Quick-Reference Comparison
| Feature | Coldcard | Trezor | Ledger |
|---|---|---|---|
| PIN wipe behavior | Permanent brick / wipe | Wipe (seed-recoverable) | Wipe after 3 attempts (seed-recoverable) |
| Duress PIN risk | Critical — document real PIN | Not applicable | Not applicable |
| Passphrase / hidden wallet | Supported (optional) | Common feature — major inheritance risk | Supported (optional) |
| Document PIN in LOI? | Yes — critical | Helpful but not critical | Optional — reset with seed |
| Seed phrase recovers all Bitcoin? | Yes (without passphrase) | Yes (standard wallet only — passphrase required for hidden wallet) | Yes (without passphrase) |
| Bitcoin-only option? | Yes (default) | Yes (optional firmware) | No |
The Seed Phrase: Your Bitcoin Inheritance
Regardless of which hardware wallet you use — Coldcard, Trezor, Ledger, or any other BIP-39 compatible device — the seed phrase is the master key to your Bitcoin. It is typically 12 or 24 words selected from the BIP-39 word list, generated by the device when you first set it up, and impossible to guess or brute-force. With these words and the correct passphrase (if used), anyone can restore your wallet on any compatible hardware wallet and access all the Bitcoin inside.
The seed phrase is not tied to a specific device. It is tied to the keys. If you burn the hardware wallet, buy a new one, enter the seed phrase, and the wallet is restored identically. This is both the seed phrase's greatest strength and its greatest security risk: whoever has the seed phrase has the Bitcoin.
How to Store a Seed Phrase
Most hardware wallets come with a paper card for writing down the seed phrase. Paper is a starting point — not a durable solution. Paper burns, floods, and deteriorates. For anything beyond a small amount of Bitcoin, the standard is a metal backup.
Metal seed phrase backups — such as the Cryptosteel Capsule, Seedplate, or similar stamped/engraved steel products — store each word in fire-resistant, waterproof metal. They survive house fires at temperatures that would incinerate paper and survive flood events that would destroy a safe's paper contents. If your Bitcoin is meaningful to your estate, a metal backup is not optional.
Store the backup in a fireproof safe or a bank safe deposit box. Many holders use both — with the caveat that multiple copies of a seed phrase increase security against loss but increase security risk against theft. A backup in a safe deposit box that is not specifically mentioned in your estate plan or Letter of Instruction may never be found by your executor.
Email, iCloud, Google Drive, Dropbox, or any cloud service: A cloud-stored seed phrase is a hack waiting to happen. A single compromised email account means your Bitcoin is gone — instantly, irreversibly, with no recourse.
Your will: Wills become public record after probate. Your Bitcoin seed phrase in a public document is an invitation to theft. Use a Letter of Instruction or a separate sealed document held by your attorney — not your will.
The Passphrase Problem: Bitcoin's Hidden Inheritance Trap
The BIP-39 passphrase — often called the "25th word" — is the single most common technical reason Bitcoin is lost in inheritance. Understanding it is essential for any Bitcoin holder building an estate plan.
When you a hardware wallet, you generate a seed phrase (12 or 24 words). Optionally, you can add a passphrase — an arbitrary string of characters that is combined with the seed phrase to derive a completely different set of private keys. The resulting "hidden wallet" is mathematically separate from the standard wallet derived from the seed phrase alone. Someone who enters just the seed phrase will see the standard wallet — which may have a small balance or be empty — while the hidden wallet (which may contain the bulk of the Bitcoin) remains invisible.
This feature is powerful for security: even if your seed phrase is compromised, an attacker who doesn't know the passphrase cannot access the hidden wallet. But for estate planning, it creates a critical documentation requirement: your executor must know (1) whether you use a passphrase, and (2) what that passphrase is or where to find it.
Executor finds seed phrase backup. Purchases new Trezor. Enters 24 words. Sees wallet with 0.005 BTC (the small standard wallet used to test the setup). Concludes the rest was already spent. Files estate paperwork. The 12 BTC in the hidden wallet is never accessed and is permanently lost.
LOI states: "Passphrase is in use on this wallet. The passphrase is documented in a sealed envelope held by [attorney name] at [firm]. Do not restore wallet without locating this document first." Executor contacts attorney, receives passphrase, restores full wallet. Estate is complete.
If you use a passphrase on any hardware wallet, your LOI must explicitly state that a passphrase is in use and provide either the passphrase itself or the precise location where it is documented. Do not assume your heirs will know to look for it. Do not assume your heirs know what a passphrase is. Make it unmissable.
Hardware Wallet LOI Documentation Checklist
Your Letter of Instruction is the document that transforms your hardware wallet from a security device into an inheritable asset. For every hardware wallet in your estate, your LOI must document the following:
-
Device name and modelE.g., "Coldcard Mk4," "Trezor Model T," or "Ledger Nano X." Include the serial number if available. Different hardware devices and firmware versions may have different recovery procedures.
-
Location of the physical deviceSpecify exactly: room, safe brand/model and combination, drawer, or safety deposit box (bank name, branch, and box number). If there are multiple devices loaded with the same seed phrase, document each location.
-
Location of the seed phrase backupWhere is the metal (or paper) seed phrase stored? Note the medium (paper, Cryptosteel, Seedplate, etc.), the exact location, and any access requirements (safe combination, key to safe deposit box).
-
Device PIN (especially critical for Coldcard)Document the correct device PIN. For Coldcard holders: clearly label which is the correct PIN and which (if used) is the duress PIN. Store separately from the device and seed phrase.
-
Passphrase / 25th word (YES or NO — and if YES, where it is)Explicitly state whether a BIP-39 passphrase is used. If YES, document either the passphrase itself or its exact location. This is not optional — it is the most critical documentation item for passphrase users.
-
Single-sig or multisigIs this a standard single-signature wallet or part of a multisig setup? If multisig, reference your multisig LOI and documentation — see our multisig inheritance guide for additional requirements.
-
Software used to manage the walletLedger Live, Trezor Suite, Sparrow Wallet, Electrum — note what software you use and, if possible, which version. Your executor will need this to reconstruct the wallet and verify the balance before making any transactions.
-
Account derivation path (if non-standard)Most users don't change the default derivation path. But advanced users who use custom paths (e.g., m/84'/0'/1' instead of m/84'/0'/0') must document this explicitly — otherwise the restored wallet will appear empty even with the correct seed phrase.
-
Whether multiple wallets exist on the same seed phraseSome holders use the same seed phrase with multiple passphrases to create multiple independent wallets. If you have more than one wallet (standard + hidden, or multiple hidden wallets), document each one separately.
Your LOI should be stored in a location your executor knows about — typically with your will (in a fireproof safe or with your attorney), but not inside the will itself. For maximum security, store the seed phrase and the LOI in separate locations, so a single discovery event does not expose everything simultaneously. Tell your executor where the LOI is. Consider a sealed letter in your attorney's files with a note in your will that it exists.
Device Death vs. Seed Phrase Loss: What Actually Matters
One of the most important conceptual clarifications for Bitcoin estate planning: the hardware wallet device is replaceable; the seed phrase is not.
Your house burns down. The Ledger Nano X melts. But the Cryptosteel capsule in the bank safe deposit box survives. Buy any BIP-39 compatible hardware wallet, enter the 24 words, and the Bitcoin is fully recovered. Zero loss.
The device is intact and accessible. The seed phrase backup was in the same safe and burned. While the device survives and the PIN is known, the moment the device is lost, stolen, or fails, the Bitcoin is permanently gone. This is a race against device hardware failure.
For estate planning purposes, this means: prioritize seed phrase documentation over device preservation. Your executor should never need to retrieve the physical hardware wallet if the seed phrase is well-documented — they can purchase any hardware wallet, enter the seed phrase, and have access. The device is a convenience; the seed phrase is the inheritance.
Multi-Device Setups
Many serious Bitcoin holders use more than one hardware wallet loaded with the same seed phrase. A common setup is one device at home for regular use and a second device at a bank safe deposit box or offsite location as a backup — both running from the same 24 words.
For estate planning, this approach has real advantages: if one device is lost or inaccessible, the executor can use the other. But it also requires clear documentation: your LOI must specify all device locations and clearly indicate which is the primary signing device and which are backups. An executor who finds two hardware wallets and doesn't understand that they share a seed phrase may attempt to account for two separate Bitcoin wallets when there is only one.
Note that multiple hardware wallets loaded with the same seed phrase are not the same as a multisig setup. They are multiple access points to the same single-signature wallet. All devices share the same keys and the same balance. Spending from any one device reflects on all of them. If you hold a multisig setup — a fundamentally different architecture — see our multisig inheritance guide for the additional documentation requirements that structure demands.
Hardware Wallet vs. Exchange Custody for Estate Planning
If your Bitcoin is held on an exchange — Coinbase, Kraken, Gemini — inheritance works differently. The exchange holds your keys; you hold an account. Your executor can contact the exchange, provide a death certificate and letters testamentary, and request transfer of the account to the estate. The exchange typically has established inheritance procedures for this. It is slower and more administratively complex than inheriting a traditional brokerage, but it functions through normal legal channels.
Hardware wallet inheritance bypasses all of that — in both directions. There is no institution to contact. There is no legal mechanism that compels the Bitcoin network to recognize your executor's authority. But there is also no counterparty risk: no exchange insolvency, no account freeze, no regulatory action can touch self-custodied Bitcoin. For significant holdings, this tradeoff clearly favors self-custody.
| Factor | Exchange Custody | Hardware Wallet Self-Custody |
|---|---|---|
| Inheritance mechanism | Death certificate + legal process through exchange | Seed phrase + proper LOI documentation |
| Executor technical knowledge required | Low | Moderate (with good documentation) |
| Counterparty risk | Yes — exchange must remain operational and cooperative | None |
| Risk of permanent loss | Low (exchange processes the claim) | High if documentation is incomplete |
| Security for large holdings | Lower — you trust the exchange | Higher — you control the keys |
| Recommended for large holdings? | No | Yes — with proper LOI |
Our recommendation: significant Bitcoin holdings belong on a hardware wallet. The documentation burden is real but manageable — the checklist above is completable in an afternoon. Exchange custody for meaningful amounts represents a permanent delegation of your Bitcoin security to a third party that may not be around or cooperative when your heirs need it most. The documentation work of hardware wallet inheritance is a one-time investment; the counterparty risk of exchange custody is permanent.
Bitcoin holders with mining operations face an additional layer of estate complexity — mining proceeds, equipment depreciation schedules, and cost basis tracking all intersect with your inheritance structure. Abundant Mines has published a comprehensive guide to Bitcoin mining tax strategy, covering depreciation, bonus depreciation elections, and how mining operations can be structured to reduce both income and estate tax exposure. If mining is part of your wealth picture, this is required reading.
Practical Steps: Fixing Your Hardware Wallet Estate Plan
If you own a hardware wallet and have not completed the documentation above, here is the sequence to follow:
- Locate your seed phrase backup. If it is on paper, order a metal backup immediately. If you cannot locate your seed phrase, do not continue — address this first. A hardware wallet without a documented seed phrase is not part of your estate.
- Check whether you use a passphrase. Open your wallet software and restore using only your seed phrase (without a passphrase). If the resulting wallet balance is zero or much lower than your actual holdings, you are using a passphrase and it must be documented immediately.
- Write your LOI. Use the checklist above as your template. Our Bitcoin Letter of Instruction tool walks you through each required field.
- Store the LOI correctly. Not in your will. Not in the cloud. In a fireproof safe or with your attorney — in a sealed envelope that your executor is aware of and knows how to locate.
- Tell your executor it exists. The most complete LOI in the world is useless if your executor does not know it exists. At minimum, your will or a note to your executor should reference that a Letter of Instruction for your Bitcoin holdings is stored at a specific location.
- Update it when things change. Changed hardware wallets? Added a passphrase? Moved the device? Updated the LOI. Treat it as a living document that reflects your current setup.
Document Your Hardware Wallet for Your Heirs
The Bitcoin family office works with holders to structure Bitcoin estate plans that are technically complete and legally sound — from seed phrase documentation to trust coordination to executor preparation. If your hardware wallet isn't documented, we can help you fix that.
Explore Our ServicesDisclaimer: This article is for informational and educational purposes only and does not constitute legal, tax, or financial advice. Bitcoin custody and estate planning involves complex technical and legal considerations that vary by individual circumstance. The hardware wallets and services mentioned are examples — conduct your own due diligence before selecting any custody solution. Consult a qualified estate attorney and Bitcoin custody professional before making decisions about your Bitcoin inheritance plan. The Bitcoin Family Office does not provide legal advice.