That is an opinion editorial by Josef Tětek, a Bitcoin analyst at Trezor.
Self-custody is an absolute should for each bitcoiner. After the collapses of FTX, BlockFi, Celsius and lots of others, the advantage of the “not your keys” mantra is past apparent. Nevertheless, self-custody is available in many kinds, and the safety properties of a single-seed setup should not that nice. That’s the reason superior bitcoiners ought to think about upgrading to a Shamir backup.
What’s Shamir backup?
Shamir backup is a technique for securely splitting a restoration seed whereas including a component of redundancy. For instance, with Shamir backup it’s doable to have a 3-of-5 restoration seed, the place the consumer writes down 5 lists of restoration phrases, and later wants solely 3 of these lists to get better the pockets. In comparison with a setup primarily based on a single record, this brings some critical advantages.
Fail-safe setup
An abnormal single-list seed is vulnerable to a catastrophic loss in case a consumer loses the record or when a malicious actor discovers it. Mitigating each of those dangers concurrently is not possible within the single-seed state of affairs: the danger of loss will be decreased by creating a number of copies, however that will increase a danger of theft; the danger of theft will be decreased by having a single copy, however that will increase a danger of loss. Shamir backup addresses each of those dangers, as there are a number of lists (reducing the danger of loss), whereas a predefined quantity of lists is required to get better the pockets (reducing the danger of theft).
Geographical distribution
For Shamir to really enhance the safety properties of a seed setup, the person lists should be stored separate in numerous places. This supplies a further profit: elimination of a danger of counting on a single location. In case of securing greater quantities of bitcoin, that is one thing to think about, as you don’t need to be reliant on a single bodily location that may develop into out of the blue inaccessible. Whereas such danger might sound far-fetched at a primary look, the current expertise of a Russian invasion of Ukraine proves that such danger could certainly materialize. With a enough geographical distribution involving places in a number of international locations, Shamir backup brings peace of thoughts coming from the data that no matter occurs, a consumer will be capable of get better their funds.

Distributed restoration
Shamir backup permits for a distributed restoration – a pockets will be recovered with out combining the person lists in a single place. The best way to try this can be to successively go to all of the places with a Trezor Mannequin T machine. The machine in a restoration mode remembers the progress of the restoration, in order that the consumer can plug it in (e.g. to an influence financial institution), enter the Shamir record, unplug it, and proceed to a different location. This eliminates the danger of somebody observing the total restoration seed throughout the restoration course of – at most, they might solely observe one Shamir record, which is ineffective by itself.
Inheritance planning
Each accountable Bitcoiner ought to have a plan in place to ensure that their family members will be capable of entry household bitcoin financial savings in case one thing occurs. Then again, no bitcoiner is snug with the data that their bitcoin is accessible by others whereas they’re nonetheless alive and in charge of their schools. With a single-list seed, inheritance planning is hard. But once more, Shamir involves a rescue.
The best way to deal with the issue of inheritance planning with a Shamir backup is to distribute the lists (amongst members of the family, secure deposit packing containers, an legal professional, and so forth.), and write down a will pointing to a separate doc detailing the situation of the lists and the method to get better the pockets. I’ve described this methodology in larger element in a characteristic article on Bitcoin Journal. The benefit of utilizing Shamir for inheritance planning is you could ensure that no one will be capable of get better your pockets when you’re alive and effectively.
Full privateness and consumer sovereignty
Shamir backup, when carried out accurately akin to with Trezor Mannequin T machine, permits for full consumer management and privateness. The keys by no means go away the offline atmosphere and no firm or different third events know in regards to the consumer’s setup. Different seemingly related options akin to Ledger Get well or sure assisted multisig plans require full consumer identification, introducing a danger of delicate knowledge leak, which could in flip have critical penalties for customers of such providers.
Learn how to improve to a Shamir backup?
Switching to a Shamir backup entails making a recent new pockets the place the funds should be transferred to by way of an on-chain transaction. As with all operations involving non-public keys, it’s advisable to make use of a {hardware} pockets. Shamir backups have been standardized for the {hardware} pockets use in 2017 by SatoshiLabs’ SLIP39 customary, and later applied in Trezor Mannequin T, in addition to a number of different wallets. When organising a brand new pockets with Trezor Mannequin T, simply select the “Shamir Share Backup” possibility when prompted for the backup sort, and proceed to decide on a selected setup (e.g. 2-of-3, 3-of-5, 4-of-6, and so forth.) and punctiliously write down the person lists on paper, or ideally use a extra sturdy supplies akin to quite a few metal backup options.
Editors Observe: Trezor units implement a model of Shamir secret sharing standardized by Trezor. The one different {hardware} machine supporting this customary is Keystone, along with a couple of software program wallets.
It is a visitor put up by Josef Tetek. Opinions expressed are solely their very own and don’t essentially replicate these of BTC Inc or Bitcoin Journal.