How secure is your Bitcoin, really?

Answer a few questions about how you hold your Bitcoin. You'll get a personalized security score, a check against known hardware-wallet advisories, and a prioritized list of what to fix first — all computed in your browser.

🧮 5-category score 🔒 Runs entirely in your browser 🆓 Free — no account needed

1What do you use to hold your Bitcoin?

How it works

A few questions, one clear score.

1

Tell us your setup

Hardware wallet, software wallet, both, or exchange-only — the checklist adapts to what you actually use.

2

Walk through the checklist

Backup, seed secrecy, firmware hygiene, advanced protection, and contingency planning, in plain language.

3

Get your score & fix list

See a 0–100 security score with a prioritized list of what to fix first, plus any known device advisories.

Why use this checker

🔒

Runs entirely in your browser

Your wallet type, brand, and checklist answers are never transmitted, logged, or stored.

🎯

Personalized to your setup

Hardware, software, or both — the questions and scoring adapt to what you actually use.

⚠️

Known-advisory cross-check

Flags whether your device and seed age fall into a disclosed hardware wallet advisory window.

📋

Prioritized fix list

Unaddressed items are ranked by impact, so you know what to fix first, not just what's missing.

🧮

Five security categories

Backup & recovery, seed secrecy, firmware hygiene, advanced protection, and contingency planning.

🆓

Free, no sign-up

No account, no limits, works for any wallet type or brand.

Understanding Bitcoin wallet security

Why good intentions aren't the same as a good setup, and what actually reduces risk.

Self-custody means you are the bank

Holding your own Bitcoin removes counterparty risk — no exchange can freeze, lose, or mismanage funds you control yourself. But it also removes the safety net: there's no customer support line if a seed phrase is lost, damaged, or exposed. Security becomes entirely a function of your own habits and setup.

Why backups fail silently

A recovery seed that has never been tested is an assumption, not a backup. Metal or paper copies degrade, get misplaced, or turn out to have a transcription error that only surfaces during an actual restore — often after the original device is already gone. Testing a restore once, on a spare device, is what turns a backup from a hope into a fact.

The weak-randomness problem

Occasionally a hardware wallet vendor discloses a firmware issue where seeds were generated with predictable rather than truly random data. When that happens, no amount of good day-to-day habits fixes it — the fix is updating firmware and migrating to a freshly generated seed. That's why this checker asks about your device and roughly when your seed was created, separately from the general checklist.

What actually helps

  • Keep a physical backup of your seed in more than one secure location, and test restoring from it at least once.
  • Never type, photograph, or store a seed phrase on any internet-connected device.
  • Keep wallet firmware and apps updated, and verify addresses on the device's own screen before trusting them.
  • For meaningful balances, consider multisig so no single device or backup is a single point of failure.

Frequently asked questions

What does this tool actually check?
+
You answer a few questions about your wallet type and specific security habits across five categories — backup & recovery, seed secrecy, software/firmware hygiene, advanced protection, and contingency planning. Those answers are combined into a weighted 0–100 security score plus a prioritized list of what to fix first.
Is my information sent anywhere?
+
No. Every answer you give and the resulting score are computed entirely in your browser with JavaScript. Nothing is transmitted, logged, or stored by Cointikka — refreshing the page clears everything.
What's a good wallet security score?
+
85 or above means your setup covers the fundamentals well. 65–84 means solid basics with real gaps worth closing. 40–64 flags a few foundational gaps. Below 40 means several core protections are missing, starting with backup and seed secrecy.
Why does it ask when I generated my Coldcard seed?
+
A firmware issue disclosed in 2026 affected some Coldcard devices going back to a March 2021 release, where recovery seeds could be generated with predictable rather than truly random data. The tool flags seeds created in that window so you can update firmware and migrate to a fresh seed.
Does a perfect checklist score guarantee my funds are safe?
+
No. Good habits meaningfully reduce risk, but they can't fix a seed generated with weak randomness on an affected device. If a known advisory applies to your setup, it's flagged separately and should be prioritized above the general checklist.
Does this replace professional security advice?
+
No. This is an educational self-check, not a certified security audit. For significant or business holdings, consider consulting a professional in addition to using this checklist.

🎨 Appearance Settings

Choose how the app looks. Your preference is saved automatically and will be remembered the next time you open this tool.

🖌️ Theme
Select a colour scheme that suits your environment. Bitcoin orange branding is preserved across all themes.
Bitcoin Dark
Deep navy blacks with Bitcoin orange accents. The original tracker aesthetic.
Default
Soft Dark
Warmer grey tones that reduce eye strain in low-light environments.
Light
Clean, professional light appearance for bright environments or daytime use.
ℹ️ About Themes
Bitcoin orange is always preserved. All three themes keep the Bitcoin orange accent colour (#F7931A) to maintain the tool's identity regardless of the background scheme.
Preference is saved locally. Your chosen theme is stored in your browser and will persist between sessions.