Wallet Private Key Security, Explained
Private key security is the single most consequential part of using any crypto wallet, and it is worth understanding precisely, not just trusting the word “secure”.
At setup, BMIC generates your key pair locally, on your own device, using a post-quantum key-generation routine. The private key is never transmitted anywhere and never stored on a BMIC server -- there is simply nothing on the server side for a breach to expose, because the server never held it in the first place.
Recovery works the same way every self-custody wallet works: a seed phrase, shown once at setup, that can regenerate the same key pair on any device. It is the only backup mechanism, by design -- there is no password reset and no support desk override, because neither BMIC nor anyone else holds a second copy to fall back on.
That is the trade every self-custody wallet makes deliberately: no third party can freeze, recover, or leak your key on your behalf, which also means no third party can rescue you if the seed phrase itself is lost or exposed. Treating that seed phrase with the seriousness of a physical vault key -- offline, backed up, never typed into a screen -- is the entire practical discipline this requires.
FAQ
Does BMIC ever see or store my private key?
No. It is generated on your device and never leaves it in plain form; BMIC's servers never receive or store a copy.
What happens if I lose my seed phrase?
Access cannot be restored by BMIC or anyone else -- the seed phrase is the only backup mechanism, by design, with no override.
Is a private key the same thing as a password?
No. A password can typically be reset by a service provider. A private key has no reset mechanism -- whoever holds it controls the funds, permanently.
Why generate the key on-device instead of on a server?
So there is nothing for a server-side breach to leak. It is a structural protection, not a policy promise.