Photographing Hardware Without Exposing Key Material

Many custody policies prohibit photographing wallet screens or any display that might reveal balances, addresses, or recovery phrases. This is prudent. It also creates a documentation challenge: how do you prove the device was powered on and verified without a screen photograph?

Exterior Documentation

Photograph the device from multiple angles showing serial number labels, tamper-evident seal states, and cable connections. Include a wide shot of the workspace showing the device in context without capturing screen content.

Screen State by Reference

When screen photography is prohibited, the ceremony log records the screen state by textual description, referencing the participant’s verbal confirmation. Example: “At 14:32 KST, Participant A confirmed the firmware version displayed as 2.6.0. Witness B independently verified the display from an angle that did not reveal wallet interface elements.”

Cable and Connection Evidence

Photograph USB connections, cable routing, and any air-gap arrangements. These images demonstrate the physical setup without revealing on-screen content.

Redaction Before Delivery

Even when policies permit screen photography, we redact any visible addresses, balances, or recovery-related content before including images in the witness packet. The redaction itself is noted in the photographic annex.

Consent Boundaries

Before the ceremony begins, confirm which photography categories are permitted. Document the agreed boundaries in the scope letter. If a participant objects to a specific photograph during the ceremony, note the objection and omit the image rather than overriding their concern.