Wallet security for businesses
If your business holds crypto-assets in a self-hosted wallet (one of the options in custody models explained), the private keys are the money. Anyone who obtains them can move the funds, and a transfer generally cannot be reversed. Wallet security is therefore less about software settings and more about people, procedures and approvals, the same internal controls you would apply to a bank account, adapted for keys.
Key points
- Never share a seed phrase or private key with anyone, including people claiming to be support staff.
- Separate wallets by purpose so that day-to-day funds and longer-term holdings carry different controls.
- Multi-signature setups and approval thresholds stop any one person from moving funds alone.
- Plan backups, recovery and staff departures before you need them.
What you are actually protecting
A wallet is software or hardware that manages private keys. The keys sign transactions; the blockchain records balances against addresses derived from those keys. Many wallets generate keys from a seed phrase, a list of words that can recreate every key in the wallet.
That makes the seed phrase the single most sensitive item your business holds. A copy of it is equivalent to full control of the wallet, on any device, anywhere. Protecting it, and limiting who could ever see it, is the core of wallet security.
For card payments, PCI DSS governs how cardholder data is protected. There is no direct PCI equivalent for accepting crypto-assets; private-key management and wallet security take its place, alongside any FINTRAC or RPAA obligations that apply to your model. See PCI DSS vs crypto.
Never share a seed phrase
Legitimate wallet makers, custodians, processors and support teams do not need your seed phrase to help you. A request for it, however official it looks, should be treated as an attempt to take your funds.
- Record seed phrases offline only, on durable material, and store them in physically secured locations.
- Never photograph a seed phrase or store it in a password manager shared with others.
- Treat any device that has displayed a seed phrase as sensitive until it is wiped or secured.
Do not type a seed phrase into a website, email, chat, form or cloud document, and do not read it aloud on a call. If anyone asks for it, stop and report the attempt to the Canadian Anti-Fraud Centre. The crypto payment scams guide lists common approaches.
Separate wallets by purpose
Using one wallet for everything means one compromise exposes everything. Separating wallets by purpose lets you match controls to risk. The tiers below are a common way to think about it, not a prescribed structure.
| Tier | Purpose | Typical controls |
|---|---|---|
| Receiving | Collects incoming customer payments | Receive-only processes where possible; regular sweeps to the next tier |
| Operating ("hot") | Refunds and routine outgoing payments | Small balance cap; single or dual approval; connected device |
| Reserve ("cold") | Funds awaiting conversion or held longer | Hardware or offline keys; multi-signature; rare, scheduled access |
Multisig and approval thresholds
A multi-signature (multisig) wallet requires several keys to approve a transaction. A "2-of-3" setup, for example, has three keys held by different people or in different places, and any two must sign. Losing one key does not lose the funds, and stealing one key does not let a thief move them.
Multisig only helps when the keys really are independent: different people, different devices, different locations. Three keys stored in one drawer offer little more than one.
Whatever the technology, set written approval thresholds. For example, a business might allow one approver for refunds below a set amount and require two above it. The amounts are yours to choose with your accountant; the point is that the rule exists before the request does. Refunds deserve the same treatment, as refunds on-chain explains.
Segregation of duties
Segregation of duties means no single person can both initiate and complete a sensitive action without someone else seeing it. It is familiar from cheque signing and bank approvals, and it applies directly to wallets.
| Duty | Who might hold it | Why separate |
|---|---|---|
| Prepare outgoing transaction | Operations or finance staff | Creates the request and supporting record |
| Approve and sign | A manager or owner, plus a second signer above threshold | Prevents one person moving funds alone |
| Reconcile wallet to records | Bookkeeper or accountant | Catches errors or unauthorized transfers |
| Hold backup material | Owner or a trusted officer, stored separately | Keeps recovery out of day-to-day hands |
Hardware wallets and devices
A hardware wallet is a dedicated device that keeps keys off general-purpose computers and asks you to confirm each transaction on its own screen. It reduces exposure to malware but does not remove the need for good procedures.
- Buy devices only through the manufacturer's official channels, and check packaging and setup steps for signs of tampering.
- Set up devices yourself; never use one that arrives with a seed phrase already written down.
- Confirm the receiving or sending address on the device screen, not only on the computer.
- Keep device firmware current using the manufacturer's official process.
- Use separate devices for separate signers in a multisig setup.
Backups, recovery and staff changes
Funds can be lost without any theft: a forgotten passphrase, a damaged backup, or a key held by someone who has left can lock a wallet just as permanently. A recovery plan, tested at least once, reduces that risk. The readiness quiz can highlight gaps.
- List every wallet, its purpose, its keys and who holds each one.
- Store backups of seed phrases or keys in at least two separate, physically secured locations.
- Test recovery of a small wallet from backup, and record that the test worked.
- When someone with key access leaves or changes role, move funds to new keys or rotate their key out of the multisig.
- Write an incident plan: who to call, how to move remaining funds, and how to preserve records if a key is exposed.
- Review the list and the controls at least once a year, and after any change in volume or staff.
Questions people ask
Will a wallet provider ever ask for my seed phrase?
A legitimate provider does not need your seed phrase to help you. Treat any request for it as an attempt to take your funds and report it.
Is a hardware wallet enough on its own?
No. It protects keys from malware on your computer, but backups, approvals, segregation of duties and recovery planning still matter.
What happens if we lose the seed phrase?
If there is no other backup and no other key in a multisig setup, the funds are generally unrecoverable. That is why backups and recovery tests matter.
Do we need wallet security if a processor converts to Canadian dollars for us?
If you never hold keys, the key-management burden sits with the provider. You still need controls over account access, payouts and refunds.
Sources
Reviewed October 30, 2026. Educational information only; not financial, legal, tax or investment advice. This site does not process payments or hold funds.