← All myths

"If we lose the keys, it's gone."

The short answer

This is true if custody is poorly designed. With shared approvals, tested backups and written procedures, no single lost key, laptop or person can lock a company out.

What people are really asking

With Bitcoin there is no help desk. If the access is lost, nobody can reset the password. Executives picture a lost device or a departed colleague and the entire treasury locked away.

What is true in the myth

Control of Bitcoin means control of the private keys. Lose them, with no backup, and the coins are unrecoverable. That is the cost of an asset with no central authority, and it is a serious operational risk. Many individual holders have learned this the hard way.

Where the myth breaks down

A company does not need to rely on one key held by one person. The standard answer is multi-signature custody: for example, any three of five keys are needed to approve a payment. Keys sit in different places and with different people. Any one can be lost, and the funds still move. Any one can be stolen, and the thief gets nothing.

It is the same logic companies already use with a safe and two signatories on a bank mandate. We are translating familiar controls into a new system, not inventing a new kind of risk.

What a resilient setup includes

  1. Several keys, in separate places and held by separate people.
  2. A threshold that survives loss. If you need three of five, two can disappear and the company still has access.
  3. Written procedures. Who approves, who signs, what happens when someone resigns.
  4. Backups kept offline and checked. Keep copies in separate locations and verify them on a schedule.
  5. A recovery drill. Move a small amount, restore from the backup and confirm it works before any large amount moves.
  6. Succession. Name who inherits each role, and review it when people change.

What we do with your team

We help you choose the structure, document the procedures and rehearse the recovery. If a company prefers to hand custody to a regulated provider, we explain the trade-offs, since that moves some risks and adds others.