Structure

Lessons from the LA Fires: Protecting Your Bitcoin Against Physical Disaster

14 January 2025 Steffen Feike

The Los Angeles wildfires destroyed homes, memories, and — for some — irreplaceable private keys. The lesson is not that Bitcoin is unsafe. It is that single points of failure are.

Lessons from the LA Fires: Protecting Your Bitcoin Against Physical Disaster

The Los Angeles wildfires caused widespread destruction of homes and livelihoods. Among the less-reported losses were cryptocurrency holdings made permanently inaccessible when private keys — stored on paper or on devices in homes that burned — were destroyed along with everything else.

This is not a fringe scenario. It is a foreseeable consequence of a storage approach that treats a single physical location as adequate protection for an irreplaceable asset.

The Core Problem

Bitcoin’s independence from banks and intermediaries is one of its defining strengths. It is also the source of its primary custody risk: there is no recovery mechanism. No helpline, no branch, no institution that holds a duplicate. If the private key is destroyed and no backup exists elsewhere, the Bitcoin is gone permanently.

Natural disasters make this risk concrete. A paper wallet in a drawer, a single hardware wallet on a desk, or a seed phrase written on a single sheet of paper — each is a single point of failure. Individually, they may seem adequate. Against a wildfire, flood, or earthquake that destroys an entire property, they are not.

What Adequate Protection Looks Like

The principles of sound Bitcoin custody under physical threat are the same principles that underpin physical security more generally: distribution, redundancy, and no single point of failure.

Multi-signature wallets. A multisig arrangement distributes control across multiple keys, held in multiple locations. If one key is destroyed — by fire, flood, or any other means — the threshold of remaining keys is sufficient to recover the holding. A 2-of-3 structure, for example, tolerates the loss of any single key without loss of access to the Bitcoin.

Geographically distributed backups. Seed phrases and key backups should be stored in at least two physically separate locations — ideally in different cities or countries, and in different types of storage (a safety deposit box, a fireproof safe at a trusted family member’s property, a professional custody facility). The relevant question is: if everything within a five-kilometre radius were destroyed, would access to the holding survive?

Durable storage media. Paper degrades, burns, and floods. Steel seed phrase storage — metal plates on which the seed phrase is stamped or engraved — is resistant to fire and water damage at temperatures and conditions that destroy paper and most electronics. For any holding of meaningful size, the medium on which the seed phrase is stored matters.

Hardware wallets as one layer, not the only layer. A hardware wallet provides strong protection against remote attack. It does not protect against physical destruction. It should be part of a multi-layered custody strategy, not the entirety of one.

The Design Principle

The LA fires are a useful stress test to apply to any existing custody arrangement. The question is not whether the current setup is secure against the most likely threat — it is whether it is resilient against the least likely one that would be catastrophic if it occurred.

Single points of failure are acceptable risks when the consequences of failure are recoverable. For Bitcoin custody, they are not. The asset is either accessible or it is not, and there is no institutional mechanism to restore what is lost.

Disaster preparedness for digital assets is not materially different from disaster preparedness for physical ones: distribute, document, and test the recovery procedure before it is needed.


This article is for informational purposes only and does not constitute legal or financial advice. Consult a qualified professional before making decisions about cryptocurrency custody arrangements.