Private Key Succession Planning

1 min readBy Jake Claver

Two things have to be true at once: the right person can reach the keys after you die or lose capacity, and nobody can reach them before. Most plans solve one and quietly fail the other. The working version separates the authority to act, which belongs in documents, from the material needed to act, which belongs somewhere a named person can physically get to without you.

Part of our guide: Digital Asset Custody.

The short version

  • Possession of a device is not access. A passphrase held in one person’s head defeats a hardware wallet the estate legally owns.
  • Authority and capability are separate problems. A trustee with perfect legal authority and no seed phrase controls nothing.
  • Probate is public in most states. A plan that puts key material into a filed document trades one failure for another.
  • The test is a rehearsal, not a document review. If the recovery path has never been walked by the person who would have to walk it, its condition is unknown.
  • Wyoming’s statutes define a private key by possession, “held by a person” (W.S. 34-29-101(a)(v)), and never say the holder owns what it controls.

Why this is harder than a normal estate asset

Every other asset has a custodian who can be compelled. A bank will honor letters testamentary. A brokerage will retitle on proof of death. A registrar will transfer shares.

A self-custodied wallet has no such counterparty. There is no institution to present documents to, and no process that can compel a network to recognize an executor. If the material required to sign is gone, the assets remain visible forever and are recoverable by nobody. Courts cannot order mathematics to cooperate.

That is the whole difficulty. Estate planning normally allocates entitlement, on the assumption that some institution will enforce it. Here the plan has to deliver capability, and capability cannot be granted retroactively.

Wyoming’s own drafting acknowledges the split. It defines a private key entirely in terms of who holds it:

“‘Private key’ means a unique element of cryptographic data, or any substantially similar analogue, which is: (A) Held by a person; (B) Paired with a unique, publicly available element of cryptographic data; and (C) Associated with an algorithm that is necessary to carry out an encryption or decryption required to execute a transaction.”

Wyo. Stat. Ann. § 34-29-101(a)(v)

Nothing in that says the holder owns anything. The statute describes a capability and leaves entitlement to be settled elsewhere, which is precisely the gap a succession plan exists to close.

The case that makes the point

The clearest illustration is a federal prosecution rather than an estate. The government seized a hardware wallet in a forfeiture and could not open it, because the passphrase protecting it was not on the device and was known to someone else. Possession of the hardware, lawfully obtained and physically held, was worth nothing.

Read that as an estate scenario and the lesson transfers exactly. An executor who inherits a drawer containing a hardware wallet, with no passphrase and no instructions, is in the same position the government was: holding an object that proves assets exist and confers no ability to reach them.

The mirror case is Ruscoe v Cryptopia, where account holders kept their coins after an exchange collapsed because the company’s own records established who held what. Max Avery’s account of what the judgment actually decided is the clearest one available. Records established entitlement there. Neither case tells you anything useful about capability, which is the half a succession plan has to supply.

The four pieces

Authority. Who is permitted to act, from what document. A trustee under a trust instrument, a successor manager under an operating agreement, an agent under a durable power of attorney for incapacity. Incapacity is the case people skip, and it is more likely than death.

An inventory. What exists and where. Every wallet, account, device, and custodian, with enough detail that a competent stranger could work out the scope. This carries no secrets and should be findable.

The recovery material. Seed phrases, passphrases, hardware locations, and any device PINs. This is the part that must be reachable by the right person and nobody else, and it should never appear in a document that gets filed with a court.

A triggering procedure. How the successor learns it is time, and what the first three steps are. A plan that depends on someone noticing is not a plan.

Approaches, and what each actually costs

Sealed instructions with a fiduciary. Attorney or corporate trustee holds sealed recovery material with instructions on when to open it. Straightforward, auditable, and dependent on that firm’s own continuity and internal controls.

Split material across people. Divide the seed so no single holder can act alone. Removes the single point of theft and introduces coordination risk, which is the same quorum problem multi-sig has. Every holder must know they hold something and what to do.

Multi-sig with a successor signer. A key held by a trustee or family member who becomes able to act with the others. Strong when rehearsed, and it needs the operating agreement or trust to say who may use it.

Custodian with named successors. The simplest arrangement, because a regulated custodian has a process for death and will honor documents. You trade self-custody for an institution that can actually be compelled.

Most workable plans mix these by asset tier: a custodian for the bulk, self-custody for a smaller amount, and one documented path for each.

What I actually see

Plans are written for death and fail on incapacity. Death has a clear trigger and a legal process behind it. A stroke does not. The person is alive, cannot act, and has granted nobody authority, so the assets are frozen until a court appoints a conservator, which is slow and public.

The second pattern: everything is documented except the one fact that matters. The inventory is thorough, the trust is well drafted, the trustee is named, and the passphrase exists only in the founder’s memory because writing it down felt dangerous. That instinct is right about theft and wrong about the larger risk, which is that the material is unavailable when needed.

The thing I would insist on is a rehearsal. Have the successor, using only what they would actually have, recover a small amount from a real wallet. Not a discussion. A transaction. Almost every plan that has never been rehearsed has a defect, and the rehearsal is how it is found while it is still cheap to fix.

The last thing worth saying: tell the people. A successor who does not know they are a successor cannot act, and a beautifully drafted document nobody has read is not a plan.

Where this goes wrong

The material and the authority sit with different people, and neither is sufficient alone.

The specific failures: recovery material in a safe deposit box the executor cannot open without a court order, which takes months. A seed split among three people, one of whom moved abroad and one of whom did not know what they were holding. Instructions that reference an exchange account closed two years ago. A passphrase that existed only in memory. And key material written into a will, which becomes a public record on probate in most states.

That last one deserves emphasis. A will is filed. Anything inside it can become readable by anyone who asks the court.

The decision rule

Separate the two halves and test both.

  1. Grant authority in documents: trustee, successor manager, and an agent for incapacity as well as death.
  2. Write an inventory with no secrets in it, and keep it current.
  3. Place recovery material somewhere a named person can reach without a court order, and never in a document that gets filed.
  4. Tell the successors they are successors, and what the first three steps are.
  5. Rehearse with a small real amount, using only what the successor would have.
  6. Re-run it annually and whenever a device, a custodian, or a person changes.

If you cannot complete step 5, treat the plan as untested rather than finished.

Where this sits

Succession is one of four decisions that have to agree. It settles what happens when the person holding everything together is unavailable. The entity settles ownership, and a membership interest passes far more easily than a private key does, which is much of the reason to hold assets in one. The signing policy settles who can act day to day, and a successor signer is where that policy meets this one. Records are what a successor reads to work out what exists.

This is the decision where the cost of getting it wrong is total rather than expensive, which is why it deserves attention before the structure work that feels more urgent.

Sources

Related

Last updated: 3 August 2026.

This article is general education, not legal, tax, or investment advice. Succession arrangements can reduce certain risks but do not eliminate them, and outcomes depend on your facts, your jurisdiction, and your documents. Talk to a qualified estate attorney about your own situation.

Sources

    Jake Claver

    Written by

    Jake Claver

    Family office professional working on how substantial holdings are held, structured and passed on. Qualified Family Office Professional. Finance degree, University of North Texas. Board member, Arkansas Blockchain Council. Author of Wealth in Numbers and Infinite Banking for Crypto Investors.

    Full background Media kit Speaking

    More from the record

    The full record