Wealth Security Protocol
Go to Casa Home
Search…
Overview
💜Casa vs. Alternatives
Introduction
Option #1: Do-it-yourself
Option #2: Custodial Storage
Option #3: Commercial Systems
🔑System Design Principles
Introduction
Minimal Knowledge
High Security
Usability is Security
Expert Support
Redundancy
Sovereignty
Incentive Alignment
Bitcoin First
🚨Threat Overview
Introduction
Data and Credential Loss
Phishing
SIM Hijacking
Network Attacks
Malware
Supply Chain Attack
Physical Coercion
Child/Pet Attack
Internal Service Provider Attack
Platform / Hosting Provider Attack
Code Dependency Attack
Official Seizure
Inheritance Failure
🔐Chosen Features
Introduction
Hardware Wallet Signing
Multi-signature
Multi-location
Heterogeneous Hardware and Software
Seedless Hardware Wallets
Emergency Recovery Key
PIN or Biometrics for Mobile Key only
PIN for every device
Sovereign Recovery Instructions
Emergency Lockdown Button
Health Check
Identity Verification for Account Recovery
✅Chosen Key Schemes
3-of-5 Key Shield
2-of-3 Basic Multisig
Single-Key Wallet
❌Rejected Key Schemes
Key Sharding (Shamir’s Secret Sharing)
2-of-2
1-of-2
❌Rejected Features
Biometrics General Usage
Seed Phrase Backups
Financial Products and Services Integration
Brain Wallet -- Memory Based Solutions
Web-Based Key Management
Hardened Addresses
🔧Remaining Attack Vectors
Address Spoofing
Malicious Insider Key Theft
Extreme disaster scenarios
Extortion
👨‍🚀Future Improvements
Taproot/MAST
Schnorr Signatures
Powered By GitBook
Incentive Alignment
Casa as a company is incentivized to help our clients store their funds securely, both by keeping them safe from thieves and by preventing user error. Our users’ success is directly related to our commercial success or failure as a company. Open-source storage systems don’t have this incentive. They are usually created on a volunteer basis and have no personal stake in the success of their users.
We want it to be clear how we make money and we want our incentives to be aligned with the best interest of our customers. We charge flat, annual subscription fees for our services for this reason.
There is a saying in the software industry that if you aren’t paying for a product, then the product is you. “Free” services are inherently untrustworthy. They may change their terms down the line, in which case you don’t know the deal you are going to get. Or they collect and sell large amounts of invasive user data for ad targeting purposes.
In contrast, Casa’s commitment to incentive-aligned business models allow us to maintain a Privacy and Data Protection Policy that collects and stores as little customer data as possible.
🔑System Design Principles - Previous
Sovereignty
Next - 🔑System Design Principles
Bitcoin First
Last modified 2yr ago
Copy link