Compare evidence, not a single security label

A useful comparison asks where randomness originates, how independent inputs are combined, what happens when generation fails, and how the result can be checked. A secure chip, open repository or long seed phrase answers only part of that question. The setup and recovery process you can actually perform matters too. Do not assume two products with the same marketing term use the same implementation.

Current sources for specific workflows

Start with the COLDCARD security record, Trezor entropy-check explanation, and BitBox Diceware documentation. Trezor describes checking discarded candidate wallets against committed contributions. BitBox describes a specific printed-table workflow for people who choose dice. These are different controls with different scopes. This page does not certify a wallet or provide an exhaustive current comparison of every Ledger, Trezor, BitBox or COLDCARD model.

Questions for the setup and recovery test

Can you authenticate the source of the software? Can you find the instructions for your exact model and firmware? Do you understand which values may be entered on a computer and which must stay on the device? Can you verify the receiving address on the device? Can you recover an empty practice wallet without guessing? Can another authorised person follow the plan without exposing secrets to a search engine or support impersonator? Write down uncertainties before choosing a process for valuable assets.

Plan for operational mistakes as well as cryptography

Extra devices and more elaborate custody can introduce extra failure points if nobody understands the arrangement. Keep an inventory of the tools and people involved, identify which records must stay separate, and rehearse changes with harmless material. Review the plan when a device, adviser or software workflow changes. There is no substitute for checking that the actual recipient can understand the instructions you leave.

Prepare the instructions your person would need

Keep wallet seed words and master passwords out of a general handoff message. Start with a non-secret inventory, document locations and a person to contact. ZeroLatch is an online conditional delivery service: check-ins keep a delivery on hold, and a missed deadline plus the safety period can make it eligible for release. Recipient access also depends on verification and service availability. Simple uses service-managed key recovery; Private requires a separate secret. Neither mode guarantees a financial or legal outcome.

Save the free handoff checklist, or try a fictional delivery without signup. The sample uses no real wallet data.