Seed Phrase Storage: What Actually Works

Your seed phrase is the master key to your crypto. Anyone who sees it can move every asset in the wallet; anyone who loses access to it and the hardware that holds the key loses the wallet forever. Storage is the single most important security decision a self-custody user makes, and most people get it wrong in one of two directions — too paranoid (breaking their own backup) or too casual (leaving it where an attacker or a flood finds it).

Threat Models Come First

There's no universally "best" storage. What's right depends on what you're defending against. Most users are protecting against some combination of:

• Remote attackers — malware, cloud breaches, phishing.
• Physical theft — someone breaking into your home or workspace.
• Environmental damage — fire, flood, time.
• Self-destruction — you forgetting where you put it, losing the device, dying without leaving instructions.

Most real losses come from the last two, not the first two. Design your setup accordingly.

Paper: Underrated

Printed or handwritten paper is genuinely good for most users. It's cheap, has no attack surface, can't be hacked, and doesn't require specialized knowledge to recover. Stored inside a fireproof home safe, a bank safe deposit box, or taped into the pages of a book no one else will open, paper holds up surprisingly well.

Common paper failures are avoidable:

• Don't photograph it. The moment a photo exists on a phone, cloud sync, iCloud backup, or Google Photos puts it on someone else's server. This is the single most common compromise an investigator sees.
• Don't type it into any digital device, including a "password manager for convenience," unless you've consciously decided that tradeoff is worth it.
• Protect from water. A zip-lock bag inside the safe adds zero cost and prevents pipe leaks and flood damage.
• Don't store in obvious places. A sticky note labeled "bitcoin seed" taped to your monitor is the joke version; a "Crypto" folder in a desk drawer is the real one people use.

Metal Backups

For holdings above a few thousand dollars — or anywhere with real fire risk — stamped stainless steel or titanium plates are the right upgrade from paper. Options include Cryptosteel, Billfodl, Blockplate, and DIY versions from a number stamping kit.

What to look for:

• Stainless steel or titanium. Aluminum is softer and less fire-resistant.
• Stamping, not marker. Permanent marker on metal is still vulnerable to fire and solvents.
• Only the first four letters of each BIP-39 word are unique. You don't need to fit all 24 full words; stamping the first four of each is sufficient and saves space.
• Test your recovery before it matters. Verify that the plate, interpreted by you, actually reconstructs the wallet. Do not skip this.

Cost has come down to $30–$80 for a solid plate. For any wallet with meaningful balance, the math is easy.

Password Managers and Encrypted Files

Storing a seed phrase in a password manager is conditionally fine, but most users don't meet the conditions.

What conditional means:

• The password manager account itself must be protected by a strong, offline-recoverable master password (written down, not just memorized) AND a hardware security key (YubiKey or equivalent).
• The master password must never have been typed into a compromised device.
• The vault must be end-to-end encrypted (Bitwarden, 1Password, KeePass — yes. Browser-saved passwords — no).
• Account recovery must not fall back to SMS.

For a user running that full setup, a password manager vault is reasonable. For a user who "just uses Gmail 2FA and a memorized master password," the password manager is a single point of failure that defeats the purpose of a hardware wallet.

Shamir Secret Sharing (SLIP-39)

Shamir splits the seed into multiple shares. A typical setup is 3-of-5: any three of the five shares reconstruct the wallet, while fewer than three reveal nothing. Trezor supports SLIP-39 natively; other tools (ssss, Zsplit, Glacier Protocol) can do it on other wallets.

Strengths:

• No single share's compromise breaks the wallet.
• No single share's loss destroys the wallet.
• Shares can live in multiple geographic locations — home safe, bank box, trusted family.

Weaknesses:

• Complexity. Every recipient needs to understand what they're holding and how to use it.
• More surface area. Three or more share locations, each of which needs its own threat model.
• Estate planning becomes harder if heirs don't know the scheme.

Shamir is the right choice for sophisticated users with sizable holdings and trusted collaborators. It is not right for average users trying to back up a single hardware wallet.

Passphrases (the "25th word")

BIP-39 passphrases add a user-chosen word or phrase to the seed. The wallet derived from seed + passphrase is distinct from the wallet derived from seed alone. The passphrase is not stored anywhere and must be remembered or backed up separately.

A well-used passphrase:

• Turns a stolen seed phrase into an incomplete compromise — the attacker has the shell but not the actual wallet.
• Allows plausible-deniability setups (a "decoy" wallet with a small balance under the bare seed; the real wallet under the passphrase).

A badly-used passphrase:

• Gets forgotten. Passphrase loss = full, permanent loss of the wallet. We see this regularly.
• Gets stored in a weak location that defeats the purpose (same drawer as the seed).

If you use a passphrase, back it up somewhere different from the seed — different physical location, different recovery path.

Multi-Signature Wallets

For the highest-value or institutional storage, a multisig wallet replaces single-seed-phrase risk entirely. Instead of one seed that controls everything, you have multiple keys, any m of which are required to authorize a transaction (2-of-3, 3-of-5, etc.). Tools like Casa, Unchained Capital, and Sparrow Wallet make multisig accessible.

Multisig is the right answer for six-figures-plus holdings where either theft or self-loss risk is a genuine concern. It has a learning curve; don't deploy it without a recovery plan that survives any one key's loss. See our wallet comparison guide for which setup fits your balance size.

Estate Planning

A concerning fraction of crypto "loss" cases are actually inheritance failures — the holder died or became incapacitated, and nobody else knew where the seed was. If you hold meaningful crypto:

• Write instructions for a trusted person in plain language.
• Store those instructions separately from the seed itself.
• Consider a lawyer-held copy of recovery instructions under attorney-client privilege.
• Test the recovery path at least once while you're alive and able to correct mistakes.

What to Avoid

• Screenshots of the seed phrase — anywhere, ever.
• Cloud-synced notes without full encryption.
• Emailing it to yourself.
• Third-party "backup services" that take custody of your seed. If they're holding it, so can anyone who breaches them.
• Only one copy. A single point of failure guarantees eventual loss.
• Only two copies in the same physical location. Fire or burglary takes both.

The Bottom Line

For most users: write the seed on paper, store one copy in a home safe and one in a bank safe deposit box, and don't photograph it. For larger holdings: upgrade to metal plates and consider a passphrase or Shamir scheme. For institutional or life-changing balances: multisig.

If your seed phrase may have been exposed — you photographed it, typed it into a site, or left it somewhere that was later accessed — treat the wallet as burned and move to a fresh one immediately. See our first 72 hours after a crypto theft guide for the response sequence.