Seed Phrase Backup: Best Practices That Actually Protect You

Your recovery phrase — the 12 to 24 words your wallet showed you at setup — is the single most important thing to protect in all of crypto, because it is the real key to your money. The best practice is simple to state and easy to underrate: write it by hand offline, ideally stamp it into steel, store it privately and durably, never let it touch anything digital, and never share it with anyone or any website. Everything below is detail on doing that well.

What a seed phrase is, and why it's the real key

A seed phrase (also called a recovery or mnemonic phrase) is a human-readable form of your wallet's master key, drawn from a standard list of 2,048 words. From those words, your wallet can regenerate every private key and address it controls, on any compatible device. That's what makes it so powerful and so dangerous: it means you can restore your funds on a new wallet if your device is lost or broken — and it means anyone who obtains the words can recreate your wallet and drain it, from anywhere, with no device and no password. The hardware is just a lock; the seed phrase is the master key.

Paper vs steel

Paper is fine to start and far better than anything digital, but it burns, fades and dissolves — and house fires and floods are a more common cause of lost backups than hackers are. For any holding that matters, upgrade to a metal backup: a stainless-steel plate you stamp or engrave the words into, which survives fire, water and time. Several purpose-made steel backup products exist, or a simple washer-and-punch kit works. Whatever the medium, record the words in order, double-check every one against the device, and note which wallet and derivation it belongs to if you run more than one.

Where to store it

Store your backup somewhere private, secure and not obvious — a home safe bolted down, or a bank safe-deposit box, are common choices. For meaningful amounts, keep two copies in two separate locations so a single fire or theft can't wipe out both, but remember that every copy is another place it can be stolen from, so more copies is not automatically safer. Keep the backup physically separate from the device itself, and don't label it "crypto seed" — a plain, boring container attracts less attention. Think about inheritance too: someone you trust should be able to find and understand your setup if the worst happens, without that access creating a theft risk while you're alive.

Splitting, Shamir and passphrases (advanced)

There are stronger schemes if you have more to protect. A passphrase (a "25th word") creates a separate hidden wallet on top of your seed, so finding the seed alone isn't enough to steal your funds — but forget it and that wallet is gone. Shamir Backup, supported on some Trezor models, splits your secret into several shares where a chosen threshold (say, three of five) is needed to recover, so no single lost or stolen share is a disaster. Do not invent your own splitting scheme — a naive "half the words here, half there" can leave you unable to recover while barely slowing an attacker. Whatever you choose, practise the recovery, and see our setup guide for where these fit in the process.

Common mistakes that lose funds

• Storing the phrase digitally — a photo, a note, a password manager. One device breach and it's gone.
• Typing it into a 'wallet' pop-up or website — the defining move of nearly every drain. Only ever enter it on the device itself, during a genuine restore.
• Keeping the only copy in one fire-prone spot, or keeping the backup next to the device so a single theft takes both.
• Never testing recovery, then discovering a mis-copied word only when the device is already lost.

Get the backup right and the device almost stops mattering — you can replace any hardware wallet from our recommended list and restore in minutes. That's exactly what happens when a device is lost or broken, which is the true test of whether your backup was done properly.

Test your backup before you trust it

A backup you've never tested is a hope, not a plan. The most gutting way to lose crypto is to do everything right, then discover — only when your device is already lost — that a word was mis-copied or a step was skipped. Avoid that by verifying recovery while you still have the working device. The safe way to test is to use a spare or reset device and perform a dry-run restore from your written phrase, confirming the same addresses appear, then wipe it again. If you only own one device, at minimum re-read every word against the wallet's checklist and confirm the checksum by re-entering it during a guided check.

Build a small review habit, too. Once a year, check that your backup is still legible, still where you think it is, and still complete, and that anyone who'd need to find it in an emergency still can. Metal survives, but paper fades and memories of "where did I put it" fade faster. Five minutes annually turns a fragile one-time act into a backup you can actually rely on for years.