Every confirmation is checked with a Merkle proof against a block that carries real proof of work. Not just taken from the server.
Multisig & vaults
2 of 3 today, 1 of 3 after a year. Miniscript paths that open one after another.
Not a video, not a mock-up. This is Firestead itself, running on play money in your browser.
Play money. Any password works. Nothing leaves this page, and the addresses are deliberately invalid, so no real coins can ever be sent to them.
One wallet for the whole life of your coins. Stack in jars, hold with your own keys or a hardware wallet, and leave a way in for the people who come after you. No company in between, no account, no server of ours.
See what it doesStack towards a whole coin, a rainy-day fund, the house. Each jar is its own account from your seed, with its own addresses. Recoverable from your words.
A time lock that only opens for your heir when your coins sit still.
2 of 3 today, 1 of 3 after a year. Miniscript paths that open one after another.
Ledger and Coldcard over USB. Firestead prepares, the device signs.
Electrum or Esplora, Umbrel, Start9. Tor built in, one switch.
Pick the coins, freeze the rest, label everything. BIP78 PayJoin with fallback.
Standard BIP39 words. If Firestead vanished tomorrow, any BIP84 wallet opens your coins.
No service fee, no spread, no hidden output. Miners get the network fee, that's it.
Bitcoin. Nothing else will ever be added.
No sign-up, no email, no analytics. We can't lose what we don't have.
The only number that matters. Firestead counts in sats by default.
Every confirmation is checked with a Merkle proof against a block that carries real proof of work. Not just taken from the server.
Your recovery phrase is encrypted with XChaCha20-Poly1305, the key stretched from your password with Argon2id. It never leaves your Mac.
Password, review, hold. Exactly the payment you reviewed gets signed, and fees above 2,000 sat/vB are refused.
Shared accounts are signed and versioned. An old copy put back by malware won't load.
Updates install only when you say so, and only if signed with the Firestead update key.
Reviewed internally in several independent passes, every finding fixed and tested. No external audit yet. Start with small amounts.
A time lock, enforced by Bitcoin itself. As long as you move your coins now and then, nothing changes. If they sit still for the time you chose, your heir can claim them with their own key. No custodian involved.
Check the signature, then open Firestead on your Mac.
12 or 24 words on paper. They are your bitcoin, everything else is replaceable.
A fresh address for every payment. From an exchange, a friend, or your own stack.
macOS, Apple silicon (M1 and later). iPhone in progress.
Not notarised by Apple yet. On first launch: System Settings → Privacy & Security → “Open Anyway”.
Verify before you run it. Get SHA256SUMS, SHA256SUMS.sig and allowed_signers, then:
ssh-keygen -Y verify -f allowed_signers -I release@firestead \ -n file -s SHA256SUMS.sig < SHA256SUMS shasum -a 256 -c SHA256SUMS
SHA256:nkx2fjtb8o4AKeE6uMCliQqzyBSA4HlMXRcL8e7brl8
7e09c71191bd5f397eebe1532bb7ddd1d5475819f09c5bfdbf5f48793486635b
Free and self-custodial. A Bitcoin wallet for the Mac. Your keys stay with you, your heirs get a way in, and nobody else is involved.