You can link your Bitkey self-custody hardware wallet to your bitcoin auto-withdrawals on Strike. This lets you move your bitcoin into self-custody automatically while keeping your withdrawals secure.

Normally, setting a withdrawal address means manually copying and pasting it, which is tedious, error-prone, and vulnerable to clipboard attacks. Linking your Bitkey solves those problems for auto-withdrawals — but it also introduces two important security questions:

Who is asking for the address?
Bitkey will not share your address with just anyone. When you request to link your wallet, Strike generates a one-time secret and gives it to your device. During the app handoff, that secret is passed to Bitkey. Bitkey will only return an address if the correct secret is provided, which proves the request came from you through Strike. This prevents attackers from probing your account or monitoring your activity.

Who is providing the address?
Similarly, Strike will not accept an address from just anyone. Bitkey sends the address back to Strike only through a secure, authenticated channel between their backends. Strike will only accept an address that comes through this verified channel, which proves it really came from Bitkey. This prevents attackers from inserting their own address to steal your bitcoin.

Because both sides verify each other, even if someone got hold of the secret, they couldn’t send it over the right channel — and even if they had the channel, they wouldn’t have the right secret. No one can intercept or swap your address. This protects against clipboard attacks, address spoofing, and impersonation.

Please note that Bitkey is only available in certain countries.