# Umbrel/Lightning Physical Security

**URL:** <https://community.umbrel.com/t/umbrel-lightning-physical-security/12140>\
**Category:** Bitcoin and Lightning\
**Created:** [April 17, 2023, 4:44am UTC](https://community.umbrel.com/t/umbrel-lightning-physical-security/12140 "2023-04-17T04:44:01Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![kenwdelong](https://avatars.discourse-cdn.com/v4/letter/k/4bbf92/32.png) [@kenwdelong](https://community.umbrel.com/u/kenwdelong)\
**Post date:** [April 17, 2023, 4:44am UTC](https://community.umbrel.com/t/umbrel-lightning-physical-security/12140/1 "2023-04-17T04:44:01Z")

</div>

I’m still wrapping my head around Lighting…if I am using my Lightning node on my Umbrel, and it has channels open with sats in them, and someone steals the Umbrel…do I lose my sats? Can they take my sats?

---

<div class="post-metadata">

**Author:** ![usernameisJim](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.umbrel.com/usernameisjim/32/3309_2.png) [@usernameisJim](https://community.umbrel.com/u/usernameisJim)\
**Post date:** [April 17, 2023, 10:23am UTC](https://community.umbrel.com/t/umbrel-lightning-physical-security/12140/2 "2023-04-17T10:23:35Z")

</div>

Hey @kenwdelong, they would need your Umbrel dashboard password. If you have 2FA enabled they’d also need your authenticator app. Or they’d need your login and find your seed phrase.

When you notice it is stolen it would be advised to spin up a new instance of Umbrel and recover using your 24-word aezeed seed phrase. One way to do this quickly is to load up Umbrel in a virtual machine, on a spare laptop/desktop, or even on some service that will allow you to run Ubuntu and you can recover all your funds as soon as you have a new Umbrel working with your 24-words.

---

<div class="post-metadata">

**Author:** ![kenwdelong](https://avatars.discourse-cdn.com/v4/letter/k/4bbf92/32.png) [@kenwdelong](https://community.umbrel.com/u/kenwdelong)\
**Post date:** [April 17, 2023, 3:31pm UTC](https://community.umbrel.com/t/umbrel-lightning-physical-security/12140/3 "2023-04-17T15:31:39Z")

</div>

Interesting. Could they not bypass the password by plugging the SD card and/or SSD into a different machine as non-boot drives? I assume storage is not encrypted…

---

<div class="post-metadata">

**Author:** ![usernameisJim](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.umbrel.com/usernameisjim/32/3309_2.png) [@usernameisJim](https://community.umbrel.com/u/usernameisJim)\
**Post date:** [April 19, 2023, 4:04pm UTC](https://community.umbrel.com/t/umbrel-lightning-physical-security/12140/4 "2023-04-19T16:04:04Z")

</div>

The MicroSD card would just have Umbrel OS and no data, all data is stored on the SSD and it would still require a password to access your Umbrel dashboard and SSH in
