Your recovery phrase (seed phrase) is a 12, 18, or 24-word phrase that can restore access to your wallet. Anyone with these words controls your crypto forever.
The Golden Rules
| Rule | Why |
|---|---|
| Never type it online | Keyloggers or malware could steal it |
| Never screenshot it | Photos can be synced to cloud |
| Never enter it in a website | Fake wallets steal it |
| Never share it | No support person ever needs it |
| Never store it digitally | Any digital copy can be hacked |
Storage Methods Ranked
| Method | Security | Convenience | Recommendation |
|---|---|---|---|
| Steel plate engraved | Excellent | Low | Best for main holdings |
| Fireproof safe (paper) | Good | Medium | Good for moderate amounts |
| Bank safety deposit box | Excellent | Low | Best backup location |
| Split + multi-location | Excellent | Low | For large holdings |
| Password manager | Poor (digital) | High | Not recommended |
| Cloud storage (photo) | Very poor | High | Never do this |
| Digital file on computer | Poor | Medium | Never do this |
The Steel Plate Method
Engrave your seed phrase onto a metal plate.
| Product | Material | Price |
|---|---|---|
| Cryptosteel | Stainless steel | £60-100 |
| Ledger Recover | Carbon + steel | £40-60 |
| Billfodler | Titanium | £50-80 |
| DIY steel stamp | Steel washers + stamp | £10-20 |
Metal protects against:
- Fire (paper burns at 233°C)
- Water (paper disintegrates)
- Flood, mould, corrosion
The Split Backup Method
Divide your seed phrase and store in multiple secure locations.
| Approach | How It Works |
|---|---|
| 2-of-3 multisig | Store 3 parts, need any 2 to recover |
| Shamir Backup (SLIP-39) | Split into shares, set threshold |
| Physical split | Half in a safe, half in a bank box |
With Shamir:
- 1 share in your home safe
- 1 share in a bank deposit box
- 1 share with a trusted family member
- Need 2 of 3 to recover
What NOT to Do
| Bad Practice | Risk |
|---|---|
| Storing in a text file on your computer | Malware |
| Taking a photo with your phone | Cloud sync, lost phone |
| Saving in Google Drive / iCloud | Account hack |
| Typing into any website | Phishing |
| Showing it on video call | Recorded |
| Telling anyone | Trust can be broken |
| Only one copy | Fire, flood, theft |
The Passphrase (25th Word)
Many wallets support an additional passphrase (BIP39):
| Without Passphrase | With Passphrase |
|---|---|
| 24 words = full access | 24 words + passphrase = full access |
| Anyone with 24 words gets everything | 24 words alone reveal a decoy wallet |
| No extra security layer | Extra layer of security |
How to use:
- Create a passphrase (at least 8 characters, not a dictionary word)
- Store passphrase SEPARATELY from seed phrase
- Even if seed phrase is found, passphrase protects funds
Testing Your Backup
| When | Action |
|---|---|
| After creating | Restore the wallet from seed phrase to verify |
| Every 6-12 months | Check that backup is still accessible |
| After any change | Re-verify if you added a passphrase or new wallet |
| Before large deposits | Test recovery with small amount first |
Inheritance Planning
| Step | Action |
|---|---|
| 1 | Document seed location and instructions |
| 2 | Tell trusted person how to access (but not the words) |
| 3 | Consider a lawyer or will storage |
| 4 | Include passphrase if used |
| 5 | Review instructions annually |
Bottom Line
Your seed phrase is the single most important piece of information in your crypto security. Store it on metal, never digitally, and keep multiple backups in different physical locations. Add a passphrase for extra protection. Test your backup before needing it. And never, ever share it with anyone.
A practical storage plan
Putting the rules into action does not need to be complicated. Start by generating your wallet and writing the phrase directly onto the manufacturer’s card or a metal plate, in a room with no cameras and no one watching over your shoulder. Do not let the words be typed anywhere — no text file, no notes app, no password manager, no screenshot. A sheet of paper hidden in a book is better than a digital copy, but metal engraving is the standard for anything you intend to hold for years, because it survives the fire and water that destroy paper.
For most people the right layout is two physical copies in two different buildings: one plate or card in a fireproof safe at home, and a second in a bank safety deposit box or with a trusted family member. If the amount is large, split the phrase using Shamir (SLIP-39) with a threshold you define — store shares so that losing one, or falling for one compromised location, does not cost you everything. Choose a 2-of-3 setup so you never need a single point of access to recover.
What to avoid
The failures that lose people their crypto are consistent and avoidable. Keeping the phrase in a cloud-synced photo or a note file is the most common — the same photo that syncs to iCloud or Google Photos gives an attacker everything. Typing the phrase into any website, even one that looks official, is how phishing drains wallets, because no legitimate service ever asks for your seed. Showing the words on a video call, or telling a friend who then repeats them, turns a private secret into shared knowledge you cannot take back.
There is also the quieter risk of relying on a single copy. A fire, flood, or theft that destroys your only backup is permanent, and no recovery service can help you. Split the storage, keep one copy in a different physical location, and do not let convenience talk you out of a second backup. Finally, never reuse a phrase you suspect has been exposed — the cost of generating a fresh wallet and moving funds is trivial compared with the value of the private keys you keep.
Planning for the worst case
Few people consider what happens to their crypto if they become unable to manage it. Inheritance planning matters more than most realise: without a documented plan, your funds can sit in an inaccessible wallet forever. Prepare a sealed document that states where the seed phrase (and passphrase, if used) is stored and the steps needed to restore it, and place it with a lawyer or in a will storage service. Tell a trusted person that the plan exists and where the document lives — without revealing the actual words. Review the plan once a year and update it whenever you add a passphrase, change a wallet, or move the storage location.
Why it all comes back to the phrase
Every security gadget you layer on top — hardware wallet, 2FA, encrypted device — ultimately points back to one thing you must protect: the recovery phrase. It is the only copy of your private keys in many real-world scenarios, and the moment it leaks or is lost, all the other protections become irrelevant. Protect it with the same care you would give to the combination of a vault holding your life savings, because that is effectively what it is. Store it well, back it up in more than one place, add a passphrase for larger holdings, test that your backup works, and plan for the day you might need to pass it along.