Wealth Security Protocol
The security architecture behind every Casa Vault. It explains each threat, each design choice and the reason for it. Free for anyone to read.
Read the Protocol (opens in new tab)Built for the day
something fails.
Every Casa Vault is built on the Wealth Security Protocol, the security architecture we designed to help you protect your bitcoin against multiple threats, from a lost phone to an attack on Casa.
The Bell Rock Lighthouse, standing since 1810. Engraving after J. M. W. Turner, 1824.
- Robust self-custody for individuals and institutions
- Casa secures billions
- A track record of security through years of market cycles
- Founded in 2018
- Clients protected around the globe
- 46+ countries
- An independent audit of our controls
- SOC 2 Type II
How your vault answers each threat
The Wealth Security Protocol plans for each of these threats. See what happens to your bitcoin in a 3-key vault and in a 5-key vault.
Your phone and your signing device come from different makers. A tampered device gives access to 1 key, and a 3-key vault needs 2 keys to move funds.
Your keys are on signing devices from different makers. A tampered device gives access to 1 key, and a 5-key vault needs 3 keys to move funds.
To move funds, someone would have to trick you more than once. You check each transaction on the screen of your signing device, so a fake app or website cannot hide what you sign. Casa never asks for a seed phrase.
To move funds, someone would have to trick you more than once. You check each transaction on the screen of each signing device, so a fake app or website cannot hide what you sign. Casa never asks for a seed phrase.
2 of your 3 keys stay offline, so they cannot be stolen over the internet. 1 key cannot move funds.
4 of your 5 keys stay offline on signing devices, so they cannot be stolen over the internet. 1 key cannot move funds.
Keep your signing device in a different place from your phone. Then an attacker who takes your phone gets 1 key, and 1 key cannot move funds. In an emergency, you can also lock your account from the app. In a 5-key vault, no more than 2 keys are in 1 place.
In a typical setup, no more than 2 keys are in 1 place. An attacker at your home cannot get enough keys to move funds. They would have to travel with you to other places. In an emergency, you can also lock your account from the app.
Your keys are in different places, so a fire or flood destroys 1 key at most. Your other 2 keys still work, and you can set up a new key.
Your keys are in different places, so a fire or flood destroys 1 key at most. Your other keys still work, and you can set up a new key.
Your keys are offline or on your phone, not on Casa's servers. Casa holds 1 key, and 1 key cannot move funds. Casa, or someone who attacks Casa, can never access or block your bitcoin.
Your keys are offline or on your phone, not on Casa's servers. Casa holds 1 key, and 1 key cannot move funds. Casa, or someone who attacks Casa, can never access or block your bitcoin.
You never depend on Casa to get to your bitcoin. Your 2 keys can move funds without Casa. With Sovereign Recovery, you use open-source wallet software.
You never depend on Casa to get to your bitcoin. Your 4 keys can move funds without Casa. With Sovereign Recovery, you use open-source wallet software.
With Casa Inheritance, you name a recipient. While you are alive, only you control your funds. After you pass away, your recipient can claim the vault when a 6-month verification period ends without an objection from you.
With Casa Inheritance, you name a recipient. While you are alive, only you control your funds. After you pass away, your recipient can claim the vault when a 6-month verification period ends without an objection from you.
Private Client with Enhanced Verification has no 6-month wait. Enhanced Verification is for clients in the US.
Included in every planIncluded in Premium and Private Client
Your phone and your signing device come from different makers. A tampered device gives access to 1 key, and a 3-key vault needs 2 keys to move funds.
Your keys are on signing devices from different makers. A tampered device gives access to 1 key, and a 5-key vault needs 3 keys to move funds.
To move funds, someone would have to trick you more than once. You check each transaction on the screen of your signing device, so a fake app or website cannot hide what you sign. Casa never asks for a seed phrase.
To move funds, someone would have to trick you more than once. You check each transaction on the screen of each signing device, so a fake app or website cannot hide what you sign. Casa never asks for a seed phrase.
2 of your 3 keys stay offline, so they cannot be stolen over the internet. 1 key cannot move funds.
4 of your 5 keys stay offline on signing devices, so they cannot be stolen over the internet. 1 key cannot move funds.
Keep your signing device in a different place from your phone. Then an attacker who takes your phone gets 1 key, and 1 key cannot move funds. In an emergency, you can also lock your account from the app. In a 5-key vault, no more than 2 keys are in 1 place.
In a typical setup, no more than 2 keys are in 1 place. An attacker at your home cannot get enough keys to move funds. They would have to travel with you to other places. In an emergency, you can also lock your account from the app.
Your keys are in different places, so a fire or flood destroys 1 key at most. Your other 2 keys still work, and you can set up a new key.
Your keys are in different places, so a fire or flood destroys 1 key at most. Your other keys still work, and you can set up a new key.
Your keys are offline or on your phone, not on Casa's servers. Casa holds 1 key, and 1 key cannot move funds. Casa, or someone who attacks Casa, can never access or block your bitcoin.
Your keys are offline or on your phone, not on Casa's servers. Casa holds 1 key, and 1 key cannot move funds. Casa, or someone who attacks Casa, can never access or block your bitcoin.
You never depend on Casa to get to your bitcoin. Your 2 keys can move funds without Casa. With Sovereign Recovery, you use open-source wallet software.
You never depend on Casa to get to your bitcoin. Your 4 keys can move funds without Casa. With Sovereign Recovery, you use open-source wallet software.
With Casa Inheritance, you name a recipient. While you are alive, only you control your funds. After you pass away, your recipient can claim the vault when a 6-month verification period ends without an objection from you.
With Casa Inheritance, you name a recipient. While you are alive, only you control your funds. After you pass away, your recipient can claim the vault when a 6-month verification period ends without an objection from you.
Private Client with Enhanced Verification has no 6-month wait. Enhanced Verification is for clients in the US.
The Wealth Security Protocol
We publish our security architecture, so you can see how we help you protect your bitcoin and why. These are the principles behind every Casa Vault.
Redundancy
No single point of failure. 1 lost or stolen key cannot move your bitcoin.
Sovereignty
Casa cannot move your bitcoin, and Casa cannot stop you from moving it.
Minimal knowledge
We collect as little data about you as we can.
High security
Simple setups are easier to keep secure, so we keep each part simple.
Usability is security
Security works only when it is easy to use, so the app guides each step.
Expert support
You do not have to be an expert. Our team helps you set up and recover.
Incentive alignment
We do well only when your bitcoin stays safe.
Remaining attack vectors
Our threat model does not always protect you against these attack vectors. Be aware of them, so that you can plan against them.
Address Spoofing
Malware shows you a wrong address outside the Casa app, for example in your browser or email. Always verify the address on your signing devices before you move funds.
Malicious Insider Key Theft
In the worst case, an insider attacker could give you a fake app and fake devices. The Casa app comes from the App Store or Google Play, and our onboarding devices come directly from their makers.
Extreme Disaster Scenarios
A disaster can destroy a whole city. Store at least 1 key in a different city, state or country, so that your vault is geographically distributed and protected against extreme disasters.
Extortion
Someone threatens your family to get your bitcoin. Our systems cannot stop it directly. When you keep your wealth private, you lower the risk.
How Casa defends you against scams
Social engineering is the fastest-growing attack that we see. A scammer calls with your name and a good story, and pushes you to send funds before you can check. Your vault needs more than 1 key, so a scammer has to trick you more than once, and these features add more checks.
Built in
Every member has these.
Verification codesEvery plan
Casa never calls you first. On a call that you booked, you can check that the advisor is real with the code in your app.
Phone Call DetectionEvery plan
If you start to send funds during a phone call, the app stops you until you hang up or enter a code from a real Casa advisor.
Emergency lockdownEvery plan
If something feels wrong, lock your account from the app. Nobody can send funds from the Casa app while it is locked.
Optional
These are off until you turn them on in your account.
Suspicious Account ActivityEvery plan
We send you an email when someone signs in from a place that you could not have reached.
WhitelistingEvery plan
Your account sends only to addresses that you approved, and a new address waits 48 hours.
Guardian ModePremium and Private Client
Each transaction from the vault needs a video call with 2 Casa advisors first.
- 00:06Caller
“Hi, this is the security team at Casa. Someone signed in to your account from another country.”
Suspicious Account Activity
When it is on, we send you an email when someone signs in from a place that you could not have reached. Casa never calls you about it. Check your sign-in activity in the app yourself.
- 00:48Caller
“To keep your bitcoin safe, send it to a new secure vault. Stay on the line with me while you do it.”
Phone Call Detection
If you start to send funds during a phone call, the app stops you with a warning. To go on, you hang up, or you enter a code that only a real Casa advisor can give you. The app knows only that a call is active. It does not listen to the call.
- 01:57Caller
“Here is the address of your new vault. Add it now. We have to move fast.”
Whitelisting
When it is on, your account sends only to addresses that you approved before. A new address waits 48 hours, and we send you an email when someone adds one.
- 02:41Caller
“Sign the transaction now, before the attacker gets to your funds.”
Guardian Mode
When it is on for a vault, each transaction needs a video call with 2 Casa advisors, who check that you are acting freely. Then the Casa Key adds its signature within 2 business days. Casa never asks you to turn it off.
- 03:19Caller
“Do not hang up, and do not tell anyone about this call.”
Emergency lockdown
Hang up. Lock your account from the app, then contact Casa support. While your account is locked, nobody can send funds from the Casa app.
SOC 2 Type II
An independent audit firm checked how our systems and controls worked over a period of more than 7 months. Our Compliance Center shows the controls that we monitor, and you can request the report there.
Request the Report (opens in new tab)- Report
- SOC 2 Type II attestation
- Auditor
- Prescient Assurance, an independent firm
- Audit period
- April 1 to November 15, 2025
- Monitoring
- Controls monitored all the time in our Compliance Center
What our clients say
Store ratings as of October 2026. The quotes below are excerpts from public reviews on the App Store, Google Play and Trustpilot.
“True non-custodial multisig so no single key, phone, or company can move your coins.”
FinTechBet, App Store, Sep 2026
“I love Casa! I feel very safe and the app is easy to use.”
M.F., Trustpilot, Sep 2026
“The staff at CASA is excellent. Very helpful. Really know their stuff.”
Hugh G., Trustpilot, Sep 2026
“The multisig vaults are simple to set up, easy to use, and give me real peace of mind.”
João P., Trustpilot, Aug 2026
“Customer support was outstanding, and the assistance I received was extraordinary.”
Oscar C., Trustpilot, Aug 2026
“Their system pretty much ensures that one does not lose their Bitcoin.”
Eric R., Trustpilot, Jul 2026
“The setup was simpler than I expected, and it feels great knowing my btc isn’t all in one place.”
Angelo, Trustpilot, May 2026
“The inheritance product is also amazing, there's nothing like it in the market.”
Barbara P., Trustpilot, May 2026
“The inheritance service is simple and was easy to setup with my family.”
Low Ping, Google Play, Nov 2025
“I’ve been using a Casa vault for over three years now.”
allgoodhodl, App Store, Aug 2025
“Fortunately, you get clear guidance on how you can also access your funds via, for example, Sparrow Wallet, outside of Casa.”
Peter P., Trustpilot, Jun 2025
“Easy to use. Secure. Provides great peace of mind. Love the inheritance solution”
Big Sonos Fan, App Store, Feb 2025
“Casa’s app really is best in class for Bitcoin security.”
Old man finkleman, App Store, Oct 2024
“Taking self custody seriously and giving me safety, security and comfort”
Mark P., Google Play, Jan 2025
“Self-custody benefits with custodial level support, love using Casa”
C W, Google Play, Nov 2024
Learn more about bitcoin security
Guides and stories from our blog.
The Ledger implant: how a sealed device gave up its seed phrase (opens in new tab)
What is a multisig wallet? (opens in new tab)
Hot wallets vs. cold wallets: Which is most secure for bitcoin and ethereum? (opens in new tab)
Report a vulnerability
Email security@team.casa. Our security team reads every report.
Responsible Disclosure Policy
PGP DA13 DC14 8749 6457 C8C3 D66C E648 DD9D 1D0F 9818
Frequently asked questions
Can Casa move my bitcoin?
No. Casa holds 1 key in your vault, and every vault needs more than 1 key to move funds: 2 of 3 keys in a 3-key vault, and 3 of 5 keys in a 5-key vault.
What is the difference between a 3-key vault and a 5-key vault?
A 3-key vault needs 2 of its 3 keys to move funds. A 5-key vault needs 3 of its 5 keys, and you keep no more than 2 keys in 1 place, so an attacker at 1 place cannot get enough keys. In both vaults, 1 lost or stolen key cannot move your bitcoin. Every plan includes a 3-key vault, and Premium and Private Client include a 5-key vault.
How does Casa protect me from scam calls?
Casa never calls you first. If someone calls and says that they are from Casa, hang up and contact Casa support. Your vault needs more than 1 key, so a scammer has to trick you more than once. If you start to send funds during a phone call, the app stops you until you hang up or enter a code from a real Casa advisor. You can also turn on Suspicious Account Activity and Whitelisting, and Premium and Private Client members can turn on Guardian Mode.
What happens if Casa goes away?
You can still move your bitcoin. With Sovereign Recovery, you use open-source wallet software, such as Sparrow Wallet or Electrum, with the keys that you hold.
What happens if one of my signing devices is compromised?
1 key cannot move funds. When your keys are on devices from different makers, a compromised device gives access to 1 key only. Contact support, and our team helps you set up a new key.
Does Casa ever ask for my seed phrase?
No. Casa never asks for a seed phrase, by email, phone or chat. If someone asks you for one, stop and contact Casa support.
Where can I read the Wealth Security Protocol?
The protocol is free for anyone to read: Wealth Security Protocol.
How do I get Casa's SOC 2 report?
Request it in our Compliance Center. Prescient Assurance, an independent audit firm, did the SOC 2 Type II audit for the period from April 1 to November 15, 2025.
How do I report a vulnerability?
Email security@team.casa. Our Responsible Disclosure Policy has the details and our PGP key.
