The one footgun in Bitcoin inheritance

There’s exactly one mistake you can make with a pre-signed Bitcoin inheritance plan: you can accidentally cancel it.

Bitcoin transactions spend specific UTXOs as inputs. When you build the inheritance, the signed transaction names those UTXOs by their txid:vout. If you spend one of them later for anything else — paying a merchant, consolidating dust, sweeping to a new wallet — the inheritance tx becomes invalid the moment your heir tries to broadcast it. The network sees “those UTXOs don’t exist anymore” and rejects it.

This is both the cancel mechanism and the footgun

The cancel side: spending a committed UTXO is how you cancel the inheritance. No permission needed, no third party. You transact normally, the plan dies, no funds at risk.

The footgun side: you can do this without meaning to. Consolidate your wallet to clean up small change. Pay a merchant from your only wallet. Sweep to a new wallet because you’re upgrading hardware. Each is a normal Bitcoin operation. Each kills your inheritance silently.

There’s no way around this in the architecture. The whole non-custodial property comes from “sign once, network handles the rest.” Letting the inheritance track your balance dynamically would require ongoing access to your private keys, which is the world we’re explicitly avoiding.

So: deal with it operationally.

Two ways

Dedicated fresh wallet — what to actually do. Make a new wallet. Send the inheritance amount to it. Build the plan from there. Don’t touch it again until the unlock block.

Pros: zero chance of accidental invalidation. Clear mental model — “this wallet is for my heir, my main wallet is for me.” Easy to update (send more BTC, build a new plan).

Cons: one more wallet to secure. One extra on-chain transaction. That’s it.

Cold UTXOs from your existing wallet — for the disciplined. Use specific UTXOs you’ve mentally labeled as “savings” — old, large, untouched. Requires explicit coin control in your wallet, every time you spend, forever.

Pros: no new wallet.

Cons: every outgoing transaction in your daily-driver wallet is now an exercise in not-clicking-the-wrong-UTXO. Wallets default to smart selection that will gleefully grab the cheapest UTXO available — including the one you’d labeled “for my heir.”

For most people: dedicated fresh wallet. Cold UTXOs work for sufficiently paranoid users who already do coin control by reflex; most don’t, and the cost of getting it wrong is finding out years later that your plan is invalid.

If you’ve already invalidated

It happens. Three steps:

1. Open the plan in Bitheritance. The chain-status check tells you definitively (valid, or inputs-already-spent).
2. If invalidated: build a new plan from current UTXOs. The old signed transaction is just useless data — it can’t fire accidentally, the network rejects it.
3. Re-share with your heir. Update wherever the old PDF / JSON / share link lives. Especially the printed copy in the safe deposit box.

Invalidation isn’t a disaster, it’s a rebuild. The cost is doing the wizard again plus updating the handoff. The savings, if you genuinely changed your mind, is that you got the cancel for free as a side effect of normal spending.