BitLo on Nostr: In the wake of the Coldcard disaster, I’ve been looking into Bitkey as a possible ...
In the wake of the Coldcard disaster, I’ve been looking into Bitkey as a possible self-custody option. Here is what an associate passed along when I inquired about how entropy is derived with a Bitkey…
Bitkey doesn't use a single seed phrase to protect your wallet. Instead, it's a 2-of-3 multisignature wallet, which means your funds are protected by three independently generated keys—one on your phone, one on your Bitkey hardware device, and one in our server-side secure module (WSM). No single key can move funds on its own.
Each key is generated locally on its own device using a cryptographically secure random number generator, with no shared or coordinated knowledge. The entropy protecting your wallet comes from the combination of three independent sources.
The App Key is derived from a 256-bit seed generated by your phone's operating system cryptographic random number generator.
The Hardware Key is generated entirely on your Bitkey device from a 256-bit seed produced by the hardware true random number generator (TRNG) inside the secure element. That seed never leaves the secure element.
The Server Key is generated inside an AWS Nitro secure enclave from a 512-bit master seed produced by the enclave's cryptographic random number generator.
Because Bitkey is open source, you can review the implementation yourself here:
https://github.com/proto-at-block/bitkey Published at
2026-08-06 13:36:16 CESTEvent JSON
{
"id": "dd2da8d46ab64a7133840a751cb5cc4a199484c5859688d435118defcdd3292f",
"pubkey": "e6f713f35a15983f21cf9165c1187131be7316dc9a6985fc35e5f703be07f7cb",
"created_at": 1786016176,
"kind": 1,
"tags": [
[
"client",
"Primal iOS"
]
],
"content": "In the wake of the Coldcard disaster, I’ve been looking into Bitkey as a possible self-custody option. Here is what an associate passed along when I inquired about how entropy is derived with a Bitkey…\n\nBitkey doesn't use a single seed phrase to protect your wallet. Instead, it's a 2-of-3 multisignature wallet, which means your funds are protected by three independently generated keys—one on your phone, one on your Bitkey hardware device, and one in our server-side secure module (WSM). No single key can move funds on its own.\n \nEach key is generated locally on its own device using a cryptographically secure random number generator, with no shared or coordinated knowledge. The entropy protecting your wallet comes from the combination of three independent sources.\nThe App Key is derived from a 256-bit seed generated by your phone's operating system cryptographic random number generator.\n\nThe Hardware Key is generated entirely on your Bitkey device from a 256-bit seed produced by the hardware true random number generator (TRNG) inside the secure element. That seed never leaves the secure element.\n\nThe Server Key is generated inside an AWS Nitro secure enclave from a 512-bit master seed produced by the enclave's cryptographic random number generator.\n \nBecause Bitkey is open source, you can review the implementation yourself here:\nhttps://github.com/proto-at-block/bitkey\n ",
"sig": "5eb1fa1db6dd3ec9c1cb45db6141d8c1024d4df8b7fbba730fb5213d3d76b65692c604c642e01b0d60f0541d70f9e493200fba17f0e4f667060b5191ea97086e"
}
