← Back to Demos
Start Training

Bitcoin Security Training Lab

Hands-On Practice for Real-World Bitcoin Security

Stop reading about security. Start practicing it.
Answer a few quick questions so we can match you with the right training stations, then work through hands-on scenarios, real attack simulations, and practical exercises.

⚠️ Real Money, Real Risk

Each year, billions in crypto are lost or stolen (Chainalysis estimated about $2.2 billion in 2024). The most common cause? User error, not protocol failure. Poor key management, weak OPSEC, and lack of security knowledge.

$15B+ Lost to exchange hacks
20% Of all BTC may be lost forever (estimate)
Rising Physical coercion ("wrench") risk
Most Losses trace to user error
`, hardware: `

Hardware Wallet Masterclass

Choose, set up, and secure your hardware wallet properly.

Hardware Wallet Comparison

Device Security Price Best For
Coldcard Q
(Mk4 still sold as budget option)		 ★★★★★ $239 (Q) / $160 (Mk4) Bitcoin-only, air-gapped
Trezor Safe 3 / Safe 5
(Model T discontinued 2024)		 ★★★★☆ $79 (Safe 3) / $169 (Safe 5) Multi-coin, secure-element
Ledger Nano X ★★★★☆ $149 Bluetooth, multi-coin
Passport ★★★★★ $259 Air-gapped, beautiful UX
Jade ★★★★☆ $65 Budget-friendly, open-source

⚠️ Supply Chain Attacks

ALWAYS verify your device:

  1. Buy directly from manufacturer or authorized reseller
  2. Check tamper-evident seals
  3. Verify device authenticity using manufacturer's process
  4. NEVER use a device that comes with a pre-written seed phrase
  5. Generate seed phrase ON THE DEVICE, not on computer

🛒 Trusted Sources

Coldcard (Coinkite)

Bitcoin-only hardware wallet - Maximum security

Official Site

Trezor

Original hardware wallet - Open source

Official Site

Foundation Devices (Passport)

Premium air-gapped hardware wallet

Official Site

Blockstream Jade

Affordable, fully open-source

Official Site
`, opsec: `

🕵️ OPSEC & Privacy Training

Operational security mistakes have cost billions. Learn to protect yourself.

Real OPSEC Failures

Case Study: $5M Wrench Attack
Bitcoin trader posted screenshots with holdings on Twitter. Three months later, armed robbers broke into his home. Forced to transfer 100 BTC at gunpoint.
Case Study: Address Reuse
Developer reused Bitcoin address on GitHub donations page. Blockchain analysis revealed $2M+ holdings. Now public knowledge, permanent security risk.

OPSEC Scenarios

Your friend asks: "How much Bitcoin do you have?"

Should you show your Bitcoin balance on social media?

🧅 Privacy Tools

🚨 CRITICAL: Verify All Links Before Use

ALWAYS verify the authenticity and current validity of any Bitcoin-related links before clicking or downloading.

The Bitcoin security landscape changes constantly. Never trust blindly, verify everything.

Tor Browser

Browse anonymously and run Bitcoin Core over Tor

Download

Sparrow Wallet

Desktop wallet with coin control and privacy features

Download

✅ OPSEC Checklist

`, attacks: `

⚔️ Attack Vector Simulator

Experience common attacks in a safe environment. Learn to defend.

💀 Clipboard Hijacking Attack

This malware monitors your clipboard and replaces Bitcoin addresses.

You copy this address:

bc1qxy2kgdygjrsqtzq2n0yrf2493p83kkfjhx0wlh

Malware changes it to:

bc1qATTACKER1234567890abcdefghijk

⚠️ If you don't verify the address before sending, funds go to attacker!

Defense:

📱 SIM Swap Attack

Attacker calls your phone carrier, pretends to be you:

Attacker: "I lost my phone, can you transfer my number to this new SIM?"

Carrier: "Sure, what's your name and address?"

Attacker: [Provides your leaked data from a breach]

Result: They now receive your 2FA codes via SMS
Defense:

🖥️ Evil Maid Attack

Someone with physical access installs keylogger or modifies your device.

Scenarios:
  • Hotel room - someone enters while you're out
  • Coffee shop - stepped away for bathroom
  • Airport security - device out of sight
  • Repair shop - "fixing" your device
Defense:

🛠️ Security Tools

Malwarebytes

Anti-malware protection for your devices

Download

YubiKey

Hardware security key for 2FA

Buy Now

VeraCrypt

Free disk encryption software

Download
`, inheritance: `

👨‍👩‍👧‍👦 Estate Planning & Inheritance

With The Bitcoin Adviser, inheritance is no longer a dilemma - it's a solved problem.

💀 The Inheritance Dilemma

The Problem with Traditional Solutions:

The core problem: How do you protect Bitcoin during your life while ensuring heirs can access it after your death?

How a Collaborative Security Model Handles Inheritance

A collaborative security model can address the inheritance gap by combining independent keyholders with beneficiary education. Instead of heirs being handed raw access, they are prepared in advance for the role they will need to play. The Bitcoin Adviser is one example of a provider that works this way; it is not the only option.

How It Works: The Complete Inheritance Solution

1️⃣ During Your Life: Full Control
• You hold Key 1 and control all spending decisions
• The Bitcoin Adviser holds Key 2 (never spends without your approval)
• Wallet provider holds Key 3 (technical infrastructure)
• No one can access your Bitcoin without you
2️⃣ Beneficiary Education Program
• The Bitcoin Adviser educates your heirs BEFORE inheritance
• Beneficiaries learn Bitcoin basics, wallet security, and transaction signing
• Regular check-ins ensure knowledge stays current
• They're prepared to manage wealth, not just receive it
3️⃣ After Your Death: Smooth Transition
• Death certificate triggers inheritance protocol
• The Bitcoin Adviser + Wallet Provider (Keys 2 & 3) work with beneficiaries
• Your EDUCATED heirs can take control using their training
• No panic, no confusion, no lost Bitcoin
4️⃣ Ongoing Support for Heirs
• The Bitcoin Adviser continues advising your family after inheritance
• Helps set up new security structure for next generation
• Ensures wealth preservation across generations
• Multi-generational Bitcoin planning

Why This Reduces Inheritance Risk

✅ No "What if I forget to tell them?"
The Bitcoin Adviser maintains the relationship with your beneficiaries throughout your life. They know the plan and are trained to execute it.
✅ No "What if they don't understand Bitcoin?"
Beneficiary education program ensures heirs understand Bitcoin security, transactions, and self-custody BEFORE they need to use it.
✅ No "What if I die suddenly?"
Death certificate triggers known protocol. The Bitcoin Adviser and wallet provider (Keys 2 & 3) can work with trained beneficiaries to access funds immediately.
✅ No "What if service goes out of business?"
The Bitcoin Adviser has been operating since 2016 and reports $1B+ AUM with zero losses. But even if they disappeared, you + wallet provider still control funds.
✅ No single key can move funds, even after death
Multiple parties involved (adviser, wallet provider, beneficiaries), all trained and coordinated. System works even if any single party fails.

Comparison: Single-Sig, DIY Multisig, and Collaborative Security

No column is the right answer for everyone. The fit depends on balance size, who needs to recover, and how much continuity matters.

Aspect Single-Sig DIY Multisig (one operator) Collaborative Security
Who controls the keysOne personOften one person, even with several keysClient plus independent keyholders
Loss of one keyFunds may be goneUsually survivable with good backupsSurvivable by design
After death or incapacityPlan dies with the personOften fails: one person held the knowledgeDocumented recovery for heirs
Beneficiary preparationHeirs need the seed itselfHeirs face a system nobody else understandsRecovery built for heirs and fiduciaries
Single point of failureYes: the one keyholderCan persist: the one operatorReduced when designed and maintained correctly
False sense of security"It is a hardware wallet"Highest: technically multisig, humanly centralizedLower if keyholder independence is real
Main tradeoffFragile if the one key failsComplexity and a still-centralized human systemLess unilateral control, coordination, fees
Best fitSmall balances, learning, spendingCareful users who document and test recoveryFamilies, estates, businesses, fiduciaries

Real-World Scenario

"John, 55, has 10 BTC. He's worried about sudden death leaving his wife and children unable to access his Bitcoin."

How a collaborative security model handles this:

Result: Zero Bitcoin lost. Zero confusion. Family prepared and empowered.

Professional Bitcoin Estate Planning

The Bitcoin Adviser

Complete inheritance solution: collaborative security + beneficiary education + ongoing support

Schedule Consultation

DIY Guide: Cryptoasset Inheritance Planning

Book by Pamela Morgan for those managing their own estate planning

Buy Book

📋 Questions Worth Asking About Any Setup

Whether you go DIY or use a collaborative security provider, ask:

If several answers are "no" or "only me," that is the gap to close, by documenting and testing a recovery process or by distributing keys to independent people.

Bottom Line: With The Bitcoin Adviser, you don't have to choose between security today and accessibility tomorrow. You get both - the firm reports $1B+ AUM and zero losses since 2016.

` }; return stations[stationId] || '

Station content not available yet.

'; } window.checkPhishing = function(questionNum, correct, element) { const feedback = document.getElementById('feedback-' + questionNum); const allOptions = element.parentElement.querySelectorAll('.scenario-option'); // Disable all buttons allOptions.forEach(btn => btn.style.pointerEvents = 'none'); if (correct) { element.classList.add('correct'); feedback.className = 'scenario-feedback correct show'; if (questionNum === 1) { feedback.innerHTML = '✅ Correct!
Red flags: Suspicious domain (not official MetaMask), urgency tactics, "account closure" threat. MetaMask is non-custodial - there\'s no "account" to close.'; } else { feedback.innerHTML = '✅ Correct!
Only www.ledger.com is the official site. Always verify URLs carefully before entering sensitive information.'; } // Update progress userProgress.stations.phishing = (userProgress.stations.phishing || 0) + 50; saveProgress(); } else { element.classList.add('incorrect'); feedback.className = 'scenario-feedback incorrect show'; if (questionNum === 1) { feedback.innerHTML = '❌ Incorrect.
This is a phishing attack! The domain is fake, and non-custodial wallets like MetaMask can\'t be "closed" by anyone.'; } else { feedback.innerHTML = '❌ Incorrect.
That\'s a fake site. Always double-check URLs. Attackers register similar domains to steal your funds.'; } } }; function updateBeltRank(score) { let belt = 'White Belt'; if (score >= 90) belt = 'Black Belt'; else if (score >= 80) belt = 'Brown Belt'; else if (score >= 70) belt = 'Blue Belt'; else if (score >= 60) belt = 'Green Belt'; else if (score >= 50) belt = 'Orange Belt'; else if (score >= 30) belt = 'Yellow Belt'; userProgress.beltRank = belt; document.getElementById('belt-rank').textContent = `🥋 ${belt}`; saveProgress(); } function saveProgress() { localStorage.setItem('securityDojoProgress', JSON.stringify(userProgress)); } // Close modal on escape document.addEventListener('keydown', (e) => { if (e.key === 'Escape') closeModal(); }); // Close modal on background click document.getElementById('station-modal').addEventListener('click', (e) => { if (e.target.id === 'station-modal') closeModal(); }); // ======================================== // Multi-Level Support // ======================================== // Detect level from URL parameter const urlParams = new URLSearchParams(window.location.search); const currentLevel = urlParams.get('level') || 'beginner'; const currentPath = urlParams.get('path') || 'curious'; // Apply level class to body document.body.classList.add(`level-${currentLevel}`); // Level switcher function function switchLevel(level) { const newUrl = new URL(window.location); newUrl.searchParams.set('level', level); window.location.href = newUrl.toString(); } // Highlight active level button on load document.addEventListener('DOMContentLoaded', () => { const buttons = document.querySelectorAll('.level-btn'); buttons.forEach(btn => { const btnText = btn.textContent.toLowerCase(); if (btnText.includes(currentLevel)) { btn.classList.add('active'); } }); });