It’s up to you how you store your seed, nothing says you have to keep it in the clear. When it comes to signing devices like we were originally discussing.. SS or a laptop with TailsOS is the bare-bones best choice because you can verify the seed is cold from the physical hardware to the software. I will never trust or recommend any other company’s device.

Replies (1)

Great setup, but if it's not in the clear you still have to decrypt it to sign. So you are carrying it plus the way to unlock it and it still comes out every time. Same exposure, more steps. If the only safe option is DIY, most people won't self custody. They will sit on exchanges and ETFs and Bitcoin ends up with a handful of custodians. Tin foil hat on, I reckon that's what a lot of these attacks are after.
↑