If you take for granted that your phone is not compromised, you don't even need bitkey.