Course 2 Final Review: Building Your Personal Wallet Strategy

This course took you from what a Bitcoin wallet is to holding your savings on a hardware wallet you set up and tested yourself, moving coins off an exchange, recognising the scams aimed at people who hold their own keys, and paying with Lightning. This review recaps all twelve lessons, turns them into a wallet plan you can use now, and ends with a ten-question quiz. If an answer feels shaky, the link takes you back to the lesson.

Course 2 Review: Bitcoin Wallets and Self-Custody

The twelve lessons fall into three parts: who holds the keys, your device and its backup, and using your wallet safely.

Part 1: Keys and Recovery Words

Lesson 2.1 — What Is a Bitcoin Wallet?
A wallet stores the private keys that control bitcoin recorded on the blockchain, not the bitcoin itself. You met private keys, public keys and addresses, the difference between hot, cold and custodial wallets, and how one seed produces every key in a wallet.

Lesson 2.2 — Custodial vs Non-Custodial Wallets
Whoever holds the keys controls the bitcoin. An exchange account is a claim on a company, as customers of Mt. Gox, QuadrigaCX and FTX found out; a non-custodial wallet puts the keys, and the backup, in your hands. Three questions tell you which kind any app is: did it show you recovery words, could you get your bitcoin back if the company vanished, and can you withdraw to any address whenever you like?

Lesson 2.3 — Seed Phrases Explained
How BIP39 turns randomness into 12 or 24 words with a built-in checksum, how those words become keys and addresses, and how to restore a wallet from them. Not every recovery phrase is BIP39: Trezor Safe devices make a 20-word SLIP-39 backup by default, Electrum uses its own format, and a Lightning wallet’s words tell only part of the story. Your words go on paper, never into a photo or a file.

Part 2: Your Device and Your Backup

Lesson 2.4 — Hardware Wallets Explained
A hardware wallet creates your keys and signs payments inside a device built for that one job, so the keys stay off your phone and computer. The companion app is a window, not a vault, and secure elements and air gaps each guard against different attacks. Its protection rests on two habits: your words go into nothing but the device, and you check every address on its own screen.

Lesson 2.5 — Ledger vs Trezor and Beyond: Choosing the Best Hardware Wallet
Ledger, Trezor, Coldcard, BitBox, Blockstream Jade and Keystone compared on security design, ease of use and backup format, with the Trezor Safe 5 as this course’s pick for beginners. Where you buy matters as much as what you buy: new, from the maker’s own store.

Lesson 2.6 — How to Set Up a Hardware Wallet
First the checks: where the device came from, what arrived in the box, and the app from the official website. Then seven steps: update the firmware, create the wallet and set a PIN, write down your words, pass the device’s word check, connect the app, receive a small test payment to an address you checked on the device’s screen, and test your backup with the built-in check, which erases nothing.

Lesson 2.7 — Seed Phrase Storage
Paper first, then metal; two or three complete copies in separate places rather than split words; the optional passphrase, kept apart from the words; testing from your written backup, because the device’s own copy proves nothing about your paper; and a checklist that ends with five questions to check your seed.

Part 3: Using It Safely

Lesson 2.8 — Bitcoin Address Types and Derivation Paths
How to read addresses starting with 1, 3, bc1q and bc1p; why Native SegWit (bc1q) is the safe default for receiving and Taproot (bc1p) a good choice when your whole setup supports it; what each type costs in fees; how derivation paths, accounts and gap limits decide which addresses a wallet looks at; and a calm checklist for the day a restore shows zero, which usually means the wallet is looking in the wrong place.

Lesson 2.9 — Your First Withdrawal: From an Exchange to Your Own Wallet
Five steps: take a fresh address and confirm it on your wallet’s own screen, choose the Bitcoin network, read the minimum and the fee, send a small test and wait for it to confirm, then send the rest. Along the way: what “processing”, a transaction ID and confirmations mean, why the middle of an address is where a fake shows itself, and what to do when a withdrawal seems stuck.

Lesson 2.10 — The Scams That Empty Self-Custody Wallets
One threat model: attackers want your recovery words, your approval of a payment to their address, or you in person. One rule stops most of them: your recovery words are typed only on the hardware wallet itself. Its twin covers payments: you approve the address and amount you read on the device’s screen. The lesson walks through fake apps and update prompts, fake support, phishing sites, address poisoning, clipboard malware, tampered devices and the $5 wrench attack, and what to do if one has already happened.

Lesson 2.11 — Electrum Wallet: The Complete Guide
Electrum as the desktop interface for a hardware wallet, or as a small hot wallet on its own; its own seed format; coin control, custom fees and fee bumping (RBF and CPFP); watch-only wallets; connecting to your own server; and the October 2026 fake-transaction flaw, fixed in Electrum 4.8.3.

Lesson 2.12 — Wallet of Satoshi, Phoenix and the Best Lightning Wallets
Lightning in two minutes: payments move inside channels and hop across the network for small fees, and each one either arrives in full or fails with the money where it was. Then the wallets: Phoenix for self-custody on your phone, Zeus for your own node, Alby for the web, and Wallet of Satoshi and Blink for small amounts only.

Building Your Personal Wallet Strategy

No single wallet does everything well. A simple approach is tiers: different wallets for different jobs. Think of personal finance: you don’t carry your savings in your pocket, and you don’t pay for coffee from your retirement account.

Tier 1: Phone Wallet — Daily Spending

• Recommended wallet: Phoenix. You hold the keys, it manages its Lightning channel for you, and it can also receive ordinary bitcoin. If you choose Wallet of Satoshi for its simplicity, check which mode you have: in some regions new accounts are custodial by default, and only its self-custody mode gives you 12 words, a Spark recovery phrase that won’t restore in a hardware wallet or other BIP39 wallet. Either way, keep the balance small.
• Typical balance: what you’d carry in cash.
• Use cases: coffee, tips, online purchases, splitting bills.
• Security: phone lock and app PIN. If the phone is lost or stolen, this amount is at risk until you restore it elsewhere.

Tier 2: Desktop Wallet — Managing Your Coins

• Recommended wallet: Electrum or Sparrow, ideally as the interface for your hardware wallet. On its own, a desktop wallet is a hot wallet: keep only small amounts in it.
• Use cases: larger payments, coin control (choosing which coins to spend), fee bumping, labelling, watching your savings without plugging in the device.
• Security: with a hardware wallet, the keys stay on the device; without one, a strong file password and full-disk encryption. Keep the software updated (Electrum 4.8.3 or later).

Tier 3: Cold Storage (Hardware Wallet) — Long-Term Savings

• Recommended wallet: a hardware wallet chosen with Ledger vs Trezor and Beyond, bought new from the maker’s own store.
• Typical balance: everything you don’t need for spending.
• Use cases: long-term saving, regular buying (dollar-cost averaging), withdrawals from exchanges, savings for your family.
• Security: words on paper and metal in separate places, each copy tested from the copy itself; a Native SegWit (bc1q) account for receiving, or Taproot (bc1p) if your whole setup supports it; the device kept safe; optionally a passphrase, stored apart from the words.

How much in each tier? Start from your spending, not from a percentage. Keep in your phone wallet roughly what you’d spend in bitcoin over a few weeks, keep coins in a desktop hot wallet only if you actively need to, and put everything else in cold storage. For example, if you spend about $100 a month in bitcoin, $50–$100 in Phoenix is plenty and the rest belongs on the hardware wallet. Every dollar on a phone or computer is one malware infection or lost phone away from being gone.

One completed plan, then your paper rehearsal

This example is fictional; do the activity on paper only.

Do not open, fund, erase or restore a wallet, generate recovery words, or write real recovery words, PINs, passphrases, addresses or hiding places.

Mina’s completed plan

1. Job: saving, with no regular bitcoin spending. A Trezor Safe 5 holds her keys; Trezor Suite is its desktop interface, not a second pot of savings. Phone, Lightning and desktop hot wallets: not needed for this job.
2. Recovery note: Trezor Safe 5, Trezor Suite, 20-word single-share SLIP-39 backup, first Native SegWit (bc1q) Bitcoin account. Replacement must support this backup format; a BIP39-only wallet is unsuitable.
3. Copies: two complete physical copies, each numbered 1–20, with spelling and order checked. Paper is in secured Place A; metal is in secured Place B, in another building. These labels reveal no actual location.
4. Test record: after the small test payment and before her savings went in, each copy separately passed the Safe 5’s built-in Check backup, with the words typed from that copy on the device. The check erased nothing.
5. Passphrase: none. If she later chooses one, it needs two exact written copies, kept in places that hold no copy of the words, and a separate check that it reopens the intended wallet before funding. A successful word check does not test a passphrase.
6. Payments: for her own deposits, she takes a fresh Receive address, compares the whole address on the device’s screen with the exchange’s withdrawal page, and sends a small test the first time. To pay someone, she asks for a fresh address, then compares the whole address on the device’s screen with the recipient’s original (their own screen, their invoice, or the address read aloud over a second channel) and the amount with what she means to pay, before approving. Any mismatch means stop. The first time she pays a new address, she sends a small test first.
7. Continuity: her sister knows how to find her private recovery instructions if needed. Her next study step is inheritance planning; this activity does not share recovery words.

Write your non-secret plan

Copy Mina’s seven headings (Job, Recovery note, Copies, Test record, Passphrase, Payments, Continuity) and fill in each one for your own plan: what the wallet is for and which app is only its interface; the backup format, address type and account, and a replacement that supports them; invented labels for your copies and whether each passed its check; your passphrase choice; how you check addresses; whom you trust and your next lesson.

Use invented place labels; mark checks “not yet” unless actually completed previously. If you have no hardware wallet, mark its checks “not yet”; do not apply hardware-only instructions to a phone wallet.

Your plan holds no secrets, but it shows that you hold bitcoin and which device you use. Keep it private and show it only to the person you trust: the fewer people who know you hold bitcoin, the safer you are.

Check your plan

Every heading needs an answer or an explicit “not yet” with a next step. Extra hot wallets (phone, Lightning, or a desktop wallet used on its own) are optional, according to your intended use. A paper plan is not evidence that a real backup works.

Missing wallet roles? Revisit wallet basics. Missing format or account details? Revisit restore compatibility. Missing copy checks? Revisit backup storage. Missing payment checks? Revisit recipient verification. For the trusted-person step, read inheritance planning.

Rehearse one failure

Mina’s device is destroyed; her computer and both backups are intact. On paper, explain which replacement works and where to buy it, what restores the wallet, where the words are typed, and what would show that recovery found the intended account. Explain why the desktop interface alone is not enough.

Check the recovery explanation

A hardware wallet that supports her 20-word single-share backup (another Trezor Safe, or another SLIP-39 hardware wallet such as Keystone), bought new from the maker’s own store and checked on arrival as the setup lesson shows. One complete copy restores the wallet; the two copies are duplicates, not pieces. She types the words only on the new device’s own screen, never into Suite or a phone. Connected to Suite (or, with a Keystone, to a wallet app that supports it, such as Sparrow), her first Native SegWit (bc1q) account should show the same first receiving address and the same balance as before. Even if Suite still shows her balance, it never held her keys, so it can’t sign a payment or restore the wallet: only the backup can.

Do not wipe a device that holds your savings to practise. The setup lesson’s optional full restore belongs before your savings go in, and only after the built-in check passes. If a real backup check fails, keep the device as it is and follow the setup lesson’s correction steps; do not erase it and hope recovery works.

If your explanation needs a safe checking sequence, revisit hardware-wallet setup; if the restored account differs, revisit the restore checklist.

Finish when every plan heading is covered and your failure explanation names a compatible device bought new from the maker, one complete copy, words typed only on the new device, and the same address and balance afterwards. Revisit any missing step before calling the paper rehearsal complete.

Self-Custody Checklist

Item 11 is only for Lightning payments: if your plan has none, skip it. Every other item applies to you, including every backup and address check.

1. Know what your wallet stores: keys, not bitcoin. (What Is a Bitcoin Wallet?)
2. Hold your own keys. Leave on an exchange only what you’re actively trading. (Custodial vs Non-Custodial Wallets)
3. Know what kind of backup you hold (BIP39, Trezor’s 20-word SLIP-39 or an app’s own format), and keep it on paper or metal only: no photos, cloud, password managers or notes apps. (Seed Phrases Explained)
4. Buy a hardware wallet for amounts you can’t afford to lose, new, from the maker’s own store. (Hardware Wallets Explained, Ledger vs Trezor and Beyond)
5. Set it up properly: firmware updated from the official app, seed created by the device, receiving address checked on its screen, small test payment received. (How to Set Up a Hardware Wallet)
6. Test your backup from the paper with the device’s built-in check, then keep a second complete copy in a separate place, and at least one copy on metal, testing each new copy the same way, from that copy, before you store it. One fire, flood or burglary shouldn’t be able to destroy your only backup. (Seed Phrase Storage)
7. Receive on Native SegWit (bc1q), or Taproot (bc1p) if your whole setup supports it, and note next to your words which wallet made them, its standard and its address type. Keep the passphrase off that note. (Bitcoin Address Types and Derivation Paths)
8. Withdraw the same way every time: a fresh address confirmed on the device’s screen, the Bitcoin network, a small test the first time, and the whole address compared. (Your First Withdrawal)
9. Live by the one rule: your recovery words are typed only on the hardware wallet itself, and you start every support contact yourself. (The Scams That Empty Self-Custody Wallets)
10. Learn coin control and fee bumping in a desktop wallet paired with your hardware wallet, and keep it updated. (Electrum)
11. Set up a Lightning wallet for small payments: Phoenix, funded with a small amount. (Lightning wallets)
12. Review once or twice a year: backups intact, firmware and wallet software current, our security advisories checked for your devices, tiers still sensible, and someone you trust knows how to find your backup if something happens to you (Course 5 covers inheritance planning).

What’s Next? Course 3: Bitcoin Mining and Economics

You now know how to hold, move and spend bitcoin safely. But where does new bitcoin come from, and what keeps the network secure without anyone in charge?

Course 3: Bitcoin Mining & Economics covers how mining works and secures the network, the ASIC machines and mining pools behind it, the halving schedule that caps the supply at 21 million, how transaction fees pay for security as the block subsidy shrinks, whether mining at home makes sense and which mining offers are scams, and where bitcoin ETFs and regular buying (dollar-cost averaging) fit in.

Key Takeaways

• Use tiers: a phone wallet for spending, a desktop wallet as the interface for your hardware wallet, and cold storage for savings.
• Self-custody is a skill you build in small steps: start with a small amount in a non-custodial phone wallet, then move your savings to a hardware wallet as you learn. Leave on an exchange only what you’re actively trading.
• Your words are everything: physical copies only, in separate places, each tested from the copy itself, and typed only on the hardware wallet itself.
• Trust the device’s screen: take every address fresh from Receive and compare all of it, not just the ends, on the hardware wallet before you send or approve.
• Security is ongoing: check backups, update firmware and wallet software, and watch for advisories that affect your devices.

Check Your Understanding

1. Your exchange app shows 0.2 BTC and your phone wallet shows 0.01 BTC. Where is each amount, and who controls it?

Answer

The bitcoin behind both is recorded on the blockchain; no app holds coins inside it. The 0.2 BTC is a balance on the exchange’s books: the bitcoin behind it sits in the exchange’s own wallets, under keys the exchange holds, so what you own is a claim on the company, which a hack, a frozen account or a bankruptcy can take from you. The 0.01 BTC sits at addresses whose keys your phone wallet holds, backed up by recovery words only you have. You control it, and keeping that backup safe is your job.

2. A marketplace seller offers your chosen hardware wallet “sealed” at 30% off. Why buy from the maker’s own store instead, and what should make you stop when a device arrives?

Answer

A device tampered with before it reaches you can steal everything you later put on it: it can come with a seed the seller already knows, carry hidden hardware, or be a counterfeit. In October 2026 Ledger confirmed a hidden implant that copied the recovery words during setup in a device sold by CryptoBilis, an authorised reseller of Ledger and Trezor in Southeast Asia, and the maker’s authenticity check can’t detect every physical modification. Buy new from the maker’s own store, or, if it doesn’t deliver to you, from a reseller the maker lists, after checking our advisories. Stop if a device arrives with recovery words, a PIN or a wallet already set up: don’t use it, and contact the maker.

3. Your only backup is the paper you filled in during setup, kept in a desk drawer. What turns it into a backup you can rely on?

Answer

First, test it from the paper: type the words on your hardware wallet using its built-in check, which erases nothing and tells you whether they match. Anything the device shows comes from its own copy and proves nothing about what you wrote. Then make a second complete copy, test it the same way from that copy, and keep it in a separate place, so one fire, flood or burglary can’t take your only backup. Put at least one copy on metal, and test it from the metal too. Keep every word numbered and every copy physical: no photos, cloud, notes apps or password managers. A passphrase can come later, once the words are stored and tested, with its own backup kept apart from them.

4. Your hardware wallet falls in a river tomorrow. What do you do, and is your bitcoin lost?

Answer

It isn’t lost: the bitcoin is on the blockchain and your backup holds the keys. Buy a new device from a maker’s own store, restore your words on it (a BIP39 backup works on most brands; a Trezor 20-word backup needs a Trezor or a SLIP-39 wallet), enter your passphrase if you use one, and check that your addresses and balance are back.

5. Which address type do you receive your savings on, and what do you note next to your words so that a future restore finds your coins?

Answer

Native SegWit (bc1q) is the safe default: it has been standard since 2017, it’s widely supported and it gives the smallest everyday payment. Taproot (bc1p) is a good choice when your wallet app, your hardware wallet and the services that pay you all support it. Coins already at addresses starting with 1 or 3 are safe and spendable; just stop creating new addresses of those types. Next to your words, note which wallet made them, which standard they use (BIP39, SLIP-39 or an app’s own format), the address type and the account, plus your master fingerprint if you know it. Keep the passphrase off that note, in a separate place. If a restore ever shows zero, the note tells you which address type and account to choose.

6. Before you send your savings from an exchange to your hardware wallet, which address do you use, and how do you check it?

Answer

A fresh one from your wallet’s Receive screen, never one copied from your transaction history, an old email or a note, where an attacker can plant a look-alike (address poisoning). Show it on the hardware wallet’s own screen and compare every character with the exchange’s form, four at a time, from start to finish: malware can swap a copied address and change what your monitor shows, but not what the device displays. The ends alone prove nothing, because every address of a type starts the same way and an attacker can match four end characters in about a million tries; the middle is where a fake shows itself. Choose the Bitcoin network, and send a small test the first time.

7. Your first withdrawal has shown “processing” for three hours, with no transaction ID. A friendly stranger messages you offering to speed it up. What’s going on, and what do you do?

Answer

Until a transaction ID (txid) appears, nothing has happened on the Bitcoin network: the withdrawal is still with the exchange, for a review, a batch with other customers’ withdrawals or a hold on a newly added address, and the coins are safe there. Wait, then contact support through the exchange’s own app or website. The stranger is a scammer, like anyone who writes to you first offering to “unlock” or “speed up” a transfer, and every real fix works without your recovery words.

8. Someone in a support chat asks you to “verify your wallet” by typing your recovery words into a website. What do you do?

Answer

Refuse and close the chat. No company, support agent or moderator ever needs your words: a request for them proves it’s a scam, however real the sender looks. Your words are typed only on your hardware wallet itself, at three moments you start yourself: confirming them during setup, running the built-in backup check, and restoring a wallet. If you already typed them somewhere, treat the seed as exposed: create a new wallet with a brand-new seed on a device you trust, and move your funds to it now.

9. You use Electrum with your hardware wallet, and a payment you sent looks stuck. Before you raise the fee, what do you check, and why?

Answer

The whole destination address and the amount, on your hardware wallet’s screen, against the address you meant to pay. In October 2026 Electrum’s developers reported malicious servers that hid a real payment and showed a fake “stuck” one, paying an address made to end in the same four characters; raising its fee signed a real payment to the attacker. Run Electrum 4.8.3 or later, downloaded from electrum.org, and connect to your own server if you can.

10. Why keep only spending money in Phoenix and the rest on a hardware wallet?

Answer

Phoenix’s keys live on your phone, which is internet-connected and easy to lose, so it’s a hot wallet. A hardware wallet keeps the keys off your phone and computer and makes you approve each payment on its own screen, which is the right protection for savings.