Security
Last reviewed: 7 September 2026
Your bitcoin is the collateral behind your loan, so keeping it safe is the most important thing we do. This page explains how we hold your collateral, how we protect your account, and how to reach us if you ever spot a problem.
Bitcoin custody
Collateral is held in a 2-of-3 cold multisig vault. The keys are generated and stored offline, held by separate key-holders, and never all sit in one place. We do not lend out, rehypothecate, or otherwise reuse your bitcoin. It stays in custody as your collateral and is returned to you when you repay.
We never hold your keys online
The GetBitcoinLoans application never holds private keys, never signs transactions, and never broadcasts transactions. Deposit addresses are derived offline. Any movement of collateral requires at least 2 of the 3 key-holders to approve and sign it in cold storage. There is no single button that can move your coins.
Don't trust, verify
Every deposit and release of collateral happens on-chain, so you can independently verify it. Your dashboard shows the exact collateral held against your loan, and you can check the corresponding addresses on any public block explorer at any time.
Real-time monitoring and margin calls
We watch your loan-to-value continuously against the live bitcoin price, and we let you know as it rises. Your first margin call comes at 65% and starts a 72-hour window to top up collateral or repay, with further warnings at 70% and 75%. If your LTV reaches 80%, we liquidate just enough collateral to bring the loan back to a safe level. The full margin-call ladder and cure window are set out in your loan agreement.
Account security
You can protect your account with two-factor authentication, and set a strong password that we store only as a salted hash, never in plain text. All traffic to and from the app is encrypted in transit (TLS). Identity verification (KYC) is handled by a specialist provider, and access to customer data inside our systems is restricted and logged.
Your part
Keep two-factor authentication switched on and use a unique password you don't reuse elsewhere. We will never ask you for your password, your one-time codes, or private keys. If anyone does, it isn't us.
Reporting a vulnerability
Found a security issue? We want to hear about it. Email security@getbitcoin.loans with the details and steps to reproduce, and we will investigate and keep you posted. We follow coordinated disclosure: give us a reasonable chance to fix the issue before it is made public, and we will work with you on timing. Thank you for helping keep our customers safe.
Contact
For any questions about security, email security@getbitcoin.loans.