The best way to hold bitcoin long term

Every recommendation about long-term bitcoin storage is really a claim about which failure you should be protecting against, and the honest answer changes with the amount. A setup that is right for $2,000 is careless at $200,000, and a setup that is right at $200,000 is a liability at $2,000 because its complexity is itself a risk.

Here is the ladder, with what each rung actually buys.

Rung 0: on the exchange

Correct only for the balance you are actively trading. A balance held by a company is a claim on that company, and only a minority of venues publish evidence that customer balances are backed — we walk through what that evidence looks like in how to check an exchange is holding your money.

For a long-term holding, this rung protects against nothing you actually face and exposes you to the one loss that is total.

Rung 1: a software wallet on a phone or computer

Removes the counterparty entirely. Introduces two new jobs: backing up a recovery phrase properly, and living with the fact that the keys sit on a device that browses the internet.

Reasonable for amounts where a total loss would be annoying rather than serious. Above that, the exposure is not theoretical: a compromised computer can sign a transaction without you.

Rung 2: a hardware wallet

This is the step that matters most, and it is cheap relative to what it protects. The keys never leave the device, and the device has a screen — so a compromised computer can propose a transaction but cannot complete one you did not read and approve.

The threshold for stepping up is not really an amount. It is whether the loss would change your life. Our hardware wallet rating is led by Coldcard Q for bitcoin-only holders, with Trezor Safe 5 the strongest open general-purpose device — fully open firmware and hardware, reproducible builds, an EAL6+ secure element.

Rung 3: fixing the backup, not the device

Most people stop at rung 2 and leave the real single point of failure untouched: one recovery phrase, on paper, in one building. A hardware wallet does nothing about a house fire.

• A metal backup, checked word for word against the device. Cheap, and it removes water and fire.
• A second copy in a different building, once the amount justifies the logistics.
• Or a threshold scheme — Cypherock X1 splits the seed across a device and four cards with a two-of-five threshold, so no single object can steal it and no single loss is fatal.

The seed phrase mistakes that cost people money almost all live on this rung, not the one above it.

Rung 4: multisig

Two of three keys, held in different places, sometimes with different people. It removes the single-key failure completely: no one device, one phrase or one location loses the coins, and no single compromise takes them.

It also adds real operational burden — three backups to maintain, a wallet descriptor that must itself be backed up, and a recovery process your heirs will not work out unaided. It is the right answer above the amount where a single-key mistake would be catastrophic, and the wrong answer below it, because complexity you do not maintain is a failure mode of its own.

What none of this protects against

Signing something you should not have. A hardware wallet stops a compromised computer; it does not stop you approving a malicious transaction on a page that looked right. That is a separate discipline, and for anything beyond simple bitcoin holding it is the more likely loss — see token approvals.

Every step up removes one failure and adds one job. Take the step when the failure outweighs the job, not before.

The short version

Move long-term holdings off the exchange. Buy a hardware wallet the moment a total loss would seriously hurt. Then spend your attention on the backup rather than the device, because that is where the losses actually happen. Consider multisig only when a single-key mistake would be catastrophic and you will genuinely maintain it. Test your recovery before you rely on it.