The standard advice — “paper and metal only, never digital” — is good for beginners, but it’s not the whole story. Paper burns, metal costs money, and both sit in a physical world that can be robbed or destroyed. Digital backups have real strengths if the method is sound. This guide separates the safe digital methods from the traps.
For the physical side, see our paper vs metal backup guide.
The Threat Model First
Every backup method trades off three risks:
| Threat | Paper | Metal | Digital |
|---|---|---|---|
| Fire / flood | Very exposed | Resistant | Survives (if not the only copy) |
| Physical theft | Exposed | Exposed | Exposed if unencrypted |
| Remote hacking | Immune | Immune | Exposed if done badly |
| Family discovery | Common | Common | Depends on method |
Digital methods win on fire, flood, and remote access for your own use — they lose hard when done carelessly. The danger isn’t digital; it’s unencrypted digital.
Safe vs Dangerous Digital Methods
| Method | Risk Level | Verdict |
|---|---|---|
| Encrypted password manager (Bitwarden/1Password vault) | Low–Medium | Safe, with a strong master password + 2FA |
| Encrypted USB (VeraCrypt/Cryptomator container) | Low–Medium | Safe, if the device is offline most of the time |
| Shamir split across multiple locations | Very low | Safest digital option |
| Unencrypted USB / text file | High | Avoid |
| Screenshot on your phone | Very high | Never — iCloud/Google Photos syncs it |
| Email to yourself / cloud note | Very high | Never — visible to anyone with account access |
| AI chatbot or note app | Very high | Never |
Password Managers in Practice
A password manager is safe when the vault itself is the security boundary:
- Use a long, unique master password (16+ characters) you have never used anywhere
- Enable 2FA on the account — but store the backup codes on paper, not in the same vault
- Split the entry: store half the seed phrase in the vault and the other half on metal — an attacker needs both
Encrypted USB: The Air-Gapped Route
- On an offline computer, create an encrypted container (VeraCrypt or Cryptomator)
- Write the seed phrase into a text file inside the container
- Close the container, verify it reopens, then unplug the USB
- Store the USB in a location separate from your hardware wallet
- Never plug the USB into an internet-connected machine except for a recovery drill
Shamir Backup: Splitting the Seed
Shamir’s Secret Sharing (SLIP-39) splits your seed into shares — no single share is meaningful alone. It’s the strongest digital answer to “one location will fail.”
| Setup | Meaning | Typical Use |
|---|---|---|
| 2-of-3 | 3 shares, any 2 rebuild | Personal: home, office, family member |
| 3-of-5 | 5 shares, any 3 rebuild | Business or family with several trusted locations |
| 5-of-9 | 9 shares, any 5 rebuild | Max redundancy, high coordination |
Why the threshold matters: lower thresholds (2-of-3) are easier to recover from but easier for two colluding holders to attack. Pick 2-of-3 for personal use, 3-of-5 for shared groups.
Step-by-Step 3-of-5 Split Walkthrough
- Pick the tool. Hardware wallets with SLIP-39 support (Trezor, Keystone) or dedicated software on an offline computer
- Choose 5 share locations — home safe, bank box, two family members, your lawyer
- Generate the shares on the device; each share is a list of words (like a mini seed phrase)
- Back up each share on paper or metal in its assigned location — a share stored in a password manager defeats the geographic split
- Test the rebuild: wipe a test wallet, rebuild it from any 3 of the 5 shares, confirm the balance
- Label shares by location (e.g., “Share B — bank box”) without ever writing which words they contain
Comparison: Which Backup Media Fits Where
| Feature | Paper | Metal | Password Manager | Encrypted USB | Shamir Split |
|---|---|---|---|---|---|
| Cost | Free | $30–120 | Free–$40/yr | $10–30 | Free (software) |
| Fire/water | Poor | Excellent | Excellent | Excellent | Excellent |
| Hack risk | None | None | Low (encrypted) | Low (encrypted) | None (shares useless alone) |
| Recovery speed | Fast | Slow (stamping) | Fast | Medium | Medium |
| Tech skill needed | None | Low | Medium | Medium | High |
| Best for | Small amounts, temporary | Primary physical backup | Daily-accessible copy | Offline digital copy | Large amounts, multi-person |
The Digital Backup Safety Checklist
- Every digital copy is encrypted (password manager vault or VeraCrypt container)
- Master password and 2FA codes are not stored with the seed
- No screenshots, no email, no cloud notes — ever
- Shamir shares live in different physical locations, not different apps
- A recovery drill proves the digital backup actually restores the wallet
Bottom Line
Digital seed backups aren’t inherently unsafe — unencrypted ones are. Use an encrypted password manager or USB for a convenient second copy, and use a Shamir split when you need geographic redundancy with no single point of failure. Paper and metal remain the best primary backups; treat digital as the recovery layer that survives fire, flood, and theft of a single location.
Building a Layered Backup That Covers Every Risk
The strongest strategy is not to pick a single medium but to combine them so that one failure cannot take everything. A practical layered setup looks like this: keep a metal plate with the seed phrase as your primary backup in a fireproof home safe; hold a paper copy (or second metal plate) in a safety deposit box for disaster recovery; and add an encrypted digital layer — either half the phrase in a password manager or a Shamir split — that survives a house fire or flood should both physical copies somehow fail.
The key is making sure each layer is genuinely independent. The password manager master password must not be stored alongside the seed. A Shamir share kept in the same app as another share defeats the geographic split, so each share should live in a different physical place. And the encrypted USB, if you use one, should stay offline between uses rather than living permanently plugged into an internet-connected machine, which is where encryption gets silently undone.
Finally, treat every backup as something that must be periodically proven, not just created. Run a recovery drill at least once a year — reset a test wallet and restore it from your digital backup or from a fresh set of Shamir shares — to confirm the words, the shares, and the passphrases still reconstruct the wallet correctly. A backup you have never successfully restored is an assumption, not protection. Costs, comfort, and convenience vary, but the discipline of redundancy plus testing is what separates a reliable plan from a false sense of safety.