Choosing a Bitcoin Wallet is one of the most critical factors when using BTCPay Server. Even though the payment processing system is installed on your own server, improperly storing Private Keys or choosing a high-risk wallet could result in the loss of Bitcoin received from customers.
An important thing to understand is that BTCPay Server can work with various types of wallets without necessarily having to store the Private Key on the server.
Choosing a wallet should be based on the value of Bitcoin you wish to store, the convenience of withdrawing funds, and the desired level of security.
1. Hot Wallet (Online Wallet)
A Hot Wallet is a wallet that stores the Private Key on a device or system that is constantly connected to the internet.
BTCPay Server supports generating an internal Hot Wallet, allowing you to view balances, receive Bitcoin, and send transactions directly from the dashboard.
Pros
- Convenient to use; no need to connect external devices every time
- Manage funds and transactions directly from BTCPay Server
- Suitable for merchants with frequent transactions
- Easily integrates and automates with e-commerce systems
Cons
- The Private Key is stored on the server
- If the server is compromised or admin accounts are breached, funds in the wallet are at risk
- Requires strict security measures for the operating system, database, and backups
Recommendation: Only store the amount of Bitcoin in a Hot Wallet that is necessary for daily operations. It should not be used to store all business capital.
2. Watch-only Wallet (Public Key Wallet)
A Watch-only Wallet is a wallet that can check balances and receive Bitcoin, but does not keep the Private Key on the server to sign and authorize outgoing transactions.
Configuring BTCPay Server can be done using an Extended Public Key (xPub) or supported public wallet data to generate receiving addresses without bringing the Seed Phrase or Private Key onto the server.
Pros
- Reduces the risk of Private Key theft through the server
- Ability to monitor balances and transactions
- Ideal for online store systems exposed to the public internet
- Separates the payment receiving server from the device used to authorize withdrawals
Cons
- Cannot send Bitcoin directly from a Watch-only Wallet alone
- Requires an external device or wallet containing the Private Key to sign transactions
- Must maintain the security of the signing device
Recommendation: An attractive choice for online merchants hosting BTCPay Server publicly over the internet without storing Private Keys on the server.
3. Hardware Wallet (Cold Storage)
A Hardware Wallet is a physical device designed to store and manage Private Keys, ensuring the private keys never leave the device even when connected to a computer to create or sign transactions.
Popular examples of Hardware Wallets include:
- Ledger
- Trezor
- Coldcard
- Blockstream Jade
BTCPay Server supports connecting certain Hardware Wallet models via BTCPay Vault, enabling transaction verification and signing directly on the hardware device.
Pros
- Private Keys do not need to be transferred to or stored on BTCPay Server
- Physical confirmation on the device is required for transactions
- Reduces risks from server malware
- Suitable for storing Bitcoin of higher value than daily operational funds
Cons
- Hardware device purchase costs
- Requires safe physical storage of the device and Recovery Seed
- Sending Bitcoin requires manual approval steps on the device
- If the device is lost without a Recovery Seed, funds may be permanently unrecoverable
Recommendation: Ideal for businesses that want to accept Bitcoin via BTCPay Server while keeping Private Keys strictly isolated from the server.
4. Multi-signature Wallet (Multisig)
Multi-signature, or Multisig, is a wallet setup that requires authorization from multiple Private Keys before Bitcoin can be sent.
For example, a 2-of-3 Multisig setup means signatures from at least 2 out of 3 Private Keys are required to authorize a transaction.
Example of key management for a business:
- Key 1: Stored on the business owner's Hardware Wallet
- Key 2: Stored on the finance manager's Hardware Wallet
- Key 3: Kept as a backup key in a secure location
If one person loses their device, the other 2 keys can still be used to approve transactions.
Pros
- Eliminates single points of failure from losing a single Private Key
- Prevents unauthorized withdrawals by any single individual
- Well-suited for businesses holding significant amounts of Bitcoin
- Enables shared responsibility across multiple administrators
Cons
- More complex to set up than standard single-signature wallets
- Requires thorough planning for key backups and recovery procedures
- Transaction approvals take more time and coordination
- The recovery process must be rigorously tested before production use
Recommendation: Ideal for businesses requiring multi-tier treasury management or organizations wanting to prevent unauthorized withdrawals.
Comparison of Bitcoin Wallet Types
| Wallet Type | Stores Private Key on Server | Receives Bitcoin | Sends Bitcoin | Best Suited For |
|---|---|---|---|---|
| Hot Wallet | Yes | Yes | Yes | Operational funds |
| Watch-only | No | Yes | Requires signing device | Online stores |
| Hardware Wallet | No | Yes | Yes, upon approval | Reserve funds |
| Multisig | Not required | Yes | Requires multiple keys | Businesses and organizations |
Recommended Bitcoin Storage Strategy for Online Merchants
For merchants using BTCPay Server, it is recommended to divide fund management into 3 tiers to minimize risks in the event of a server compromise:
Tier 1: Payment Receiving
Use BTCPay Server with a Watch-only Wallet to generate Bitcoin receiving addresses and verify payment statuses without storing Private Keys on the server.
Tier 2: Operational Wallet
Use a wallet with a modest working balance to handle payouts or daily operations, setting an acceptable maximum risk threshold.
Tier 3: Long-term Storage
Sweep Bitcoin that is not needed for short-term operations to a Hardware Wallet or Multisig Wallet completely isolated from the BTCPay Server instance.
This approach mitigates the impact if the payment server is attacked, as attackers cannot directly access the Private Keys for funds stored in cold isolation.
Precautions for Storing Recovery Seeds
A Recovery Seed or Seed Phrase is a sequence of words used to recover a wallet. Anyone who possesses this phrase can access and control the Bitcoin stored within.
Therefore, adhere to the following security practices:
- Write down the Recovery Seed and store it securely offline.
- Never photograph the Seed Phrase or keep photos of it on your phone.
- Never save the Seed Phrase on Google Drive, Dropbox, or any public cloud storage.
- Never send the Seed Phrase via Email, LINE, or Messenger apps.
- Never enter the Seed Phrase into any website or internet-connected server.
- Keep a secondary backup stored in a geographically separate location from the original.
- Test the wallet recovery process before using it to store substantial amounts of Bitcoin.
When connecting an existing wallet to BTCPay Server, only import the Public Key data required to generate receiving addresses. Never input the Recovery Seed of a Hardware Wallet into the server.
Conclusion: Which Wallet Should You Choose for BTCPay Server?
For standard online merchants needing high security while running an internet-facing store, the recommended setup is a Watch-only Wallet paired with a Hardware Wallet.
This method enables BTCPay Server to accept Bitcoin and monitor transactions, while the Private Key remains safely isolated on an external device.
For businesses managing large Bitcoin holdings, consider a Multisig Wallet to enforce multi-party authorization for withdrawals.
The core principle is: never store all funds on an internet-facing server, and never grant the payment gateway system full withdrawal rights over your business capital unnecessarily.
Additional References
It is recommended to include these links at the end of the article so readers can explore wallet setup instructions directly from official sources:
- BTCPay Server – User Guide
- BTCPay Server – Hardware Wallet Integration
- BTCPay Server – Wallet Documentation
- Bitcoin.org – Securing Your Wallet
BTCPay Server documentation indicates that connecting an existing wallet only requires public wallet data without sharing the Private Key with the server, and highly recommends using a Hardware Wallet for enhanced security.
