Coinhost is assembled from the most reviewed standards in Bitcoin custody — arranged so that no single failure, including ours, can cost you your funds. Here is what protects you, and exactly how it works.
We don't invent security; we apply the practices serious custodians have trusted for years. Every claim below maps to a specific, auditable mechanism — no black boxes, no "trust us".
Every vault is 2-of-3 multisig across your phone, your hardware wallet, and our recovery key. Any two authorize a spend — and no single key, including the one we hold, can ever move funds alone.
2-of-3 · P2WSH multisigBuilt only on primitives the careful custody world already trusts and reviews in the open — never homegrown cryptography you'd have to take on faith.
BIP48 · BIP67 · bitcoinjs-libYour keys live in your phone's secure element and on your own hardware wallet; our recovery key is generated inside a FIPS-validated HSM and is non-exportable by design.
Secure Enclave · FIPS 140-2 L3Recovery opens a seven-day window with daily alerts and one-click cancellation, and emergency lockdown freezes every vault on demand. Coercion needs time it doesn't get.
7-day cooling · lockdownExport a standard output descriptor at any time and rebuild the vault in Sparrow, Electrum, or Specter. No lock-in, no migration, no permission required from us.
Exportable descriptorAn external security audit and a coordinated disclosure programme keep us honest — published and PGP-signed before launch, not merely asserted on a marketing page.
External audit · disclosureFor the technically inclined — every primitive, spelled out. If this isn't your language, the six guarantees above are the part that matters.
The moment you request a recovery signature, a seven-day window opens. Every participant on the vault receives an alert, followed by a reminder each day. One click cancels the request. If nothing cancels it, the HSM releases its co-signature on day seven — and not a minute earlier.
Your security questions are verified, the seven-day clock starts, and every participant on the vault is alerted immediately.
Recovery requestedA reminder lands every day, with a final warning on day six. One click from anyone on the vault cancels the request — so a coerced or fraudulent recovery never goes unnoticed.
One-click cancellationOnly if nothing cancelled it. The recovery key releases its signature on day seven — and not a minute earlier.
Co-signature releasedCoinhost is only useful if leaving is credible. Export the full vault descriptor from the app at any time — and we also email you a signed copy every month. Any wallet that speaks P2WSH (Sparrow, Electrum, Specter) will reconstruct the vault and derive the same addresses.
Full code review and threat-model analysis by a Bitcoin-native security firm. The complete report will be published and PGP-signed before mainnet.
Every CloudHSM operation is streamed to write-once storage. Each signature carries a correlation ID tying it back to the originating recovery request and the responsible reviewer.
A coordinated disclosure programme with published scope, bounty tiers, and a PGP key. We will not pursue researchers who follow the policy in good faith.