The standard advice — “paper and metal only, never digital” — is good for beginners, but it’s not the whole story. Paper burns, metal costs money, and both sit in a physical world that can be robbed or destroyed. Digital backups have real strengths if the method is sound. This guide separates the safe digital methods from the traps.
For the physical side, see our paper vs metal backup guide.
The Threat Model First
Every backup method trades off three risks:
| Threat | Paper | Metal | Digital |
|---|---|---|---|
| Fire / flood | Very exposed | Resistant | Survives (if not the only copy) |
| Physical theft | Exposed | Exposed | Exposed if unencrypted |
| Remote hacking | Immune | Immune | Exposed if done badly |
| Family discovery | Common | Common | Depends on method |
Digital methods win on fire, flood, and remote access for your own use — they lose hard when done carelessly. The danger isn’t digital; it’s unencrypted digital.
Safe vs Dangerous Digital Methods
| Method | Risk Level | Verdict |
|---|---|---|
| Encrypted password manager (Bitwarden/1Password vault) | Low–Medium | Safe, with a strong master password + 2FA |
| Encrypted USB (VeraCrypt/Cryptomator container) | Low–Medium | Safe, if the device is offline most of the time |
| Shamir split across multiple locations | Very low | Safest digital option |
| Unencrypted USB / text file | High | Avoid |
| Screenshot on your phone | Very high | Never — iCloud/Google Photos syncs it |
| Email to yourself / cloud note | Very high | Never — visible to anyone with account access |
| AI chatbot or note app | Very high | Never |
Password Managers in Practice
A password manager is safe when the vault itself is the security boundary:
- Use a long, unique master password (16+ characters) you have never used anywhere
- Enable 2FA on the account — but store the backup codes on paper, not in the same vault
- Split the entry: store half the seed phrase in the vault and the other half on metal — an attacker needs both
Encrypted USB: The Air-Gapped Route
- On an offline computer, create an encrypted container (VeraCrypt or Cryptomator)
- Write the seed phrase into a text file inside the container
- Close the container, verify it reopens, then unplug the USB
- Store the USB in a location separate from your hardware wallet
- Never plug the USB into an internet-connected machine except for a recovery drill
Shamir Backup: Splitting the Seed
Shamir’s Secret Sharing (SLIP-39) splits your seed into shares — no single share is meaningful alone. It’s the strongest digital answer to “one location will fail.”
| Setup | Meaning | Typical Use |
|---|---|---|
| 2-of-3 | 3 shares, any 2 rebuild | Personal: home, office, family member |
| 3-of-5 | 5 shares, any 3 rebuild | Business or family with several trusted locations |
| 5-of-9 | 9 shares, any 5 rebuild | Max redundancy, high coordination |
Why the threshold matters: lower thresholds (2-of-3) are easier to recover from but easier for two colluding holders to attack. Pick 2-of-3 for personal use, 3-of-5 for shared groups.
Step-by-Step 3-of-5 Split Walkthrough
- Pick the tool. Hardware wallets with SLIP-39 support (Trezor, Keystone) or dedicated software on an offline computer
- Choose 5 share locations — home safe, bank box, two family members, your lawyer
- Generate the shares on the device; each share is a list of words (like a mini seed phrase)
- Back up each share on paper or metal in its assigned location — a share stored in a password manager defeats the geographic split
- Test the rebuild: wipe a test wallet, rebuild it from any 3 of the 5 shares, confirm the balance
- Label shares by location (e.g., “Share B — bank box”) without ever writing which words they contain
Comparison: Which Backup Media Fits Where
| Feature | Paper | Metal | Password Manager | Encrypted USB | Shamir Split |
|---|---|---|---|---|---|
| Cost | Free | $30–120 | Free–$40/yr | $10–30 | Free (software) |
| Fire/water | Poor | Excellent | Excellent | Excellent | Excellent |
| Hack risk | None | None | Low (encrypted) | Low (encrypted) | None (shares useless alone) |
| Recovery speed | Fast | Slow (stamping) | Fast | Medium | Medium |
| Tech skill needed | None | Low | Medium | Medium | High |
| Best for | Small amounts, temporary | Primary physical backup | Daily-accessible copy | Offline digital copy | Large amounts, multi-person |
The Digital Backup Safety Checklist
- Every digital copy is encrypted (password manager vault or VeraCrypt container)
- Master password and 2FA codes are not stored with the seed
- No screenshots, no email, no cloud notes — ever
- Shamir shares live in different physical locations, not different apps
- A recovery drill proves the digital backup actually restores the wallet
Bottom Line
Digital seed backups aren’t inherently unsafe — unencrypted ones are. Use an encrypted password manager or USB for a convenient second copy, and use a Shamir split when you need geographic redundancy with no single point of failure. Paper and metal remain the best primary backups; treat digital as the recovery layer that survives fire, flood, and theft of a single location.