TLDR
Kentuckys HB 380 would require hardware wallet makers to help reset seed phrases, which critics say effectively forces a backdoor into self custody wallets.
- The bills Section 33 tells hardware wallet providers to provide mechanisms to reset passwords, PINs, and seed phrases for users.
- Advocacy groups argue this is technically impossible for non custodial wallets and would undermine Bitcoin style self custody security.
- The bill has passed Kentuckys House and is now in the Senate, where industry groups are pushing to strip the seed recovery requirement.
Deep Dive
1. What The Kentucky Bill Actually Does
House Bill 380 is a 77 page Kentucky bill primarily aimed at regulating virtual currency kiosks, such as Bitcoin ATMs, with licensing, limits, and disclosure rules that have broad support.
A last minute floor amendment, Section 33, adds a very different provision: hardware wallet providers shall provide a mechanism to help any owner reset any password, PIN, seed phrase, or similar access information needed to open a hardware wallet. Multiple reports highlight that requirement as the core controversy around seed recovery.
If passed unchanged, Kentucky would be the first state to legally mandate recovery protocols for private keys, according to one detailed breakdown of the bill.
2. Why Seed Recovery Breaks Self Custody
Hardware wallets like Ledger or Trezor are designed so only the user, not the manufacturer, ever sees the seed phrase; keys are generated and kept locally and offline. In a true non custodial model, no one can reset your seed for you.
The Bitcoin Policy Institute (BPI) calls Kentuckys requirement technologically impossible for non custodial wallets and warns it effectively demands a backdoor that lets manufacturers recover or reset credentials, undermining Bitcoins self custody model. One analysis argues that this would push users toward centralized custodians that are more exposed to hacks and failures.
the bill tries to solve the lost seed problem by turning hardware wallet makers into recovery custodians, which conflicts with how secure self custody is supposed to work.
3. Who Is Affected And What To Watch
HB 380 passed the Kentucky House 850 and is now before the state Senate, with groups like BPI urging senators to strip Section 33 from the bill. A Decrypt report notes experts expect many hardware wallet providers would rather stop serving Kentucky than redesign products to comply.
If the seed recovery mandate survives, Kentucky residents could see reduced access to true hardware self custody, with more reliance on custodial platforms or out of state workarounds. Other states watching Kentuckys approach might copy or reject similar language, shaping the broader U.S. self custody landscape.
Conclusion
Kentuckys HB 380 started as a consumer protection bill for crypto kiosks but its seed recovery amendment has turned it into a frontline fight over self custody. If legislators keep Section 33, they could unintentionally outlaw the very hardware wallets that best protect users, while nudging them toward more fragile custodial options. The key hinge now is whether the Senate removes or rewrites the seed recovery requirement before the bill becomes law.
