Welcome to Advanced Bitcoin Security & Privacy
By now you can hold your own keys, run your own node, and verify your own transactions. This final course is about defending what you've built — turning a working self-custody setup into one that resists key compromise, surveillance, and single points of failure over a multi-decade horizon. The focus is durable operational discipline, not any single product: multisignature key management, UTXO management and coin control, network-level privacy with Tor, chain-analysis awareness, and a tested inheritance plan.
Who this course is for
This is the most advanced course in the series. It assumes you have completed (or already understand) the earlier material: you are comfortable with hardware wallets, seed phrases, BIP39 passphrases, running a full node, and connecting a wallet like Sparrow or Electrum to it. If those concepts are new, work through Courses 1–4 first — the techniques here build directly on that foundation.
What you'll cover
- Chain analysis and the privacy threat model — how surveillance firms cluster addresses and deanonymize on-chain activity, so you know what you're actually defending against.
- UTXO management and coin control — labeling outputs by origin, never carelessly merging coins of different privacy levels, and choosing inputs deliberately on every spend. This is the privacy habit that pays off every day, with no third party involved.
- Multisignature setups — eliminating single points of failure with 2-of-3 (or higher) quorums, output descriptors, and coordinators such as Sparrow, Nunchuk, Casa, and Unchained.
- Network-level privacy — routing your node and wallet over Tor to stop your IP from being correlated with your transactions.
- Collaborative-transaction privacy — what CoinJoin and PayJoin do, how the tooling changed after the 2024–2025 enforcement actions, and what the realistic options are today (covered in Lesson 5.2).
- Inheritance planning and operational security — making your bitcoin recoverable by your heirs without weakening its security while you're alive, plus the OpSec practices that keep your stack safe from both digital and physical threats.
A note on the privacy-tooling landscape
The collaborative-mixing tools that dominated earlier guides changed dramatically in 2024–2025. Samourai Wallet's Whirlpool coordinator was seized by U.S. authorities in April 2024, and its founders were sentenced to prison in November 2025; treat anything pointing at the old Samourai domains as dead and potentially hostile. zkSNACKs shut down the central Wasabi coordinator on 1 June 2024. What remains usable in 2026 is decentralized or community-run — for example JoinMarket's peer-to-peer market, third-party Wasabi-protocol coordinators, the Ashigaru fork of Samourai, and Nostr-based approaches like Joinstr — and, above all, everyday coin control and disciplined UTXO management, which depend on no coordinator at all. We mark dead tools as dead and keep the durable skills front and center. Always re-verify a tool is alive and trustworthy before moving real funds.
Key Takeaways
- This course fortifies the self-custody stack you built in Courses 1–4 — its real subjects are key management, privacy discipline, and resilience, not any one app.
- The most durable privacy win is operational: coin control and UTXO labeling that you practice on every transaction, with no third party in the loop.
- Multisig removes single points of failure; Tor removes IP-level correlation; an inheritance plan ensures your bitcoin outlives you.
- The mixing-tool landscape shifted hard in 2024–2025 (Samourai/Whirlpool seized, founders sentenced; zkSNACKs' Wasabi coordinator closed). Always confirm a tool is alive and trustworthy before using it.