What you need before creating a Vault

Before you create a GuardBlock vault, you need a suitable initialised hardware wallet with a private key generated, its backup set up properly, and enough time to review and verify the vault descriptor as part of the vault creation process.

GuardBlock vaults are built around hardware wallet keys. When you create a vault, your key stays on your device, GuardBlock adds a co-signing key for normal use, and the recovery path is built into the vault. That means setup is not simply just creating an account: You should ensure you have enough time and headspace to create and verify the vault policy on your device before depositing any Bitcoin.

Don't worry! Our vault creation process walks you through how to verify things. Give yourself an hour to get through things with enough time to verify as you go.

Before you start

You should have:

A supported hardware wallet

As of May 2026, we support Ledger Nano S+, Ledger Nano X, BitBox02, BitBox02 Nova, Coldcard Mk4, and Coldcard Q.

Your device set up and working

Your hardware wallet should be updated to the latest official firmware from your manufacturer, initialised, with its seed phrase backed up and its PIN confirmed. Optionally, you can set up a passphrase as well (check the wallet setup docs for each device for detailed setup and to learn how passphrases work in conjunction with GuardBlock). GuardBlock can help structure a vault, but it cannot recover your private keys or seed phrase for you.

Your backup stored safely

If your device is lost, damaged or reset, your backup is what allows you to restore access to your key. GuardBlock reduces single points of failure, but it does not remove the need to protect your own backup properly.

A computer and browser you trust

During setup, GuardBlock derives your xpub from your device and constructs the vault policy for you to verify. Your seed never leaves the hardware wallet, but you still want to go through setup on a clean, trusted machine.

Time to read what your device shows you

This part matters. GuardBlock’s model depends on you verifying the actual policy on your hardware wallet screen, not just trusting what the website says. If anything looks wrong, do not approve it.

What you should understand first

Before creating a vault, you should know three basic things:

1. GuardBlock is not a custodian

GuardBlock cannot move your Bitcoin alone. Normal spending requires your hardware wallet signature.

2. Your vault includes a recovery path

GuardBlock vaults include a timelocked self-recovery path enforced by Bitcoin script. If GuardBlock disappears, the recovery path still exists on-chain.

3. This is built for long-term storage

GuardBlock is designed for secure long-term holding with robust recovery paths, not frequent trading or everyday spending. Use it for savings, inheritance or business treasuries, and consider having a separate bitcoin wallet for your spending needs.

What to check before funding

Before depositing any Bitcoin into a new vault, you should be able to:

• Connect your hardware wallet successfully
• See and confirm your key fingerprint or fingerprints
• Review the policy shown on the device
• Confirm the timelock is present (via the vault descriptor)
• Understand which key is yours and which key belongs to GuardBlock

A good rule is to slow down here. The critical path is hardware wallet verification: you approve on the device, not on the website.

Important

Despite the recovery pathways that GuardBlock grants you, you should still practice sound self-custodial practices. Ensure your hardware wallet backup is created and stored safely, and you are confident you can access it if needed.

GuardBlock can help reduce risk, but it does not replace basic self-custody discipline. Your device, your backup, and your verification of the details of the vault are all part of the vault setup.