Seed Phrase Safety: Storage Practice, Sourced

What this page is

This page states seed phrase practice from maker docs and practitioner protocols, with dates. It is expert-gated, and the reason is in the sources themselves. No regulator or standards body defines wallet best practice. The closest authorities are the device makers and the documented protocols. This page attributes every rule to them rather than voicing its own. Where they disagree, the disagreement is printed, not settled.

What a seed phrase is

The BIP-39 specification defines the object. A group of easy to remember words encoding computer-generated entropy. The entropy runs 128 to 256 bits, rendered as 12 to 24 words. A wallet derives its keys from them ^[9]. The spec is narrow about what it is for. It transports computer-generated randomness in human-readable form. It is explicitly not a way to process user-created sentences ^[9]. Makers call it the wallet backup, the list of words that restores access if the device is lost ^[3].

The stakes are absolute. A complete backup provides the same access as the device itself, per Trezor. Whoever gains it can access the wallet without the device ^[3]. BitBox agrees. Anyone holding a usable backup may reach the funds ^[6]. Store it like the money it is.

Generation and transcription

Generate the phrase on the device. Ledger states the phrase comes from the device’s own secure screen during setup. It does not come in the box ^[1]. A phrase generated online is not secure, in that source’s words ^[1].

Transcribe by hand. Number each word, in order, spelled correctly, checked against the BIP-39 wordlist ^[1]. The wordlist has a tolerance. The first four letters of each word identify it uniquely ^[7]. The tolerance helps reading. It does not excuse a wrong word, which silently produces a different wallet.

The offline rule

Three makers state the same rule in their own words. Do not make a digital copy. Do not take a picture. Do not save it in a password manager. It needs to stay strictly offline ^[1]. Keep the backup offline and never upload, photograph, scan, email, or save it in a cloud service ^[6]. Never type the backup into a phone or computer ^[5]. The 2026 edition adds a surface. Do not enter recovery words into a computer, smartphone, website, browser extension, or AI chatbot ^[6]. One violation widens the attack surface to malware, sync, and clipboard interception, permanently ^[6].

Paper, steel, or both

The medium follows the threat model. Paper is the practical baseline, through bitter experience, in the wiki’s phrasing ^[7]. Steel is more resistant to fire, water, corrosion, and deterioration. It costs more and needs careful setup ^[6]. The choice is protective, not computational. Paper and steel do not create different wallets, they protect the same information differently ^[6]. Metal is indicated when the threat model includes fire, water, temperature extremes, or physical stress ^[7].

Copies, counts, and locations

Two secure locations is the documented baseline. Redundancy should be deliberate, not automatic ^[2]. The counterweight is BitBox’s. Every additional copy is another secret that can be found or stolen ^[6]. bitcoin.org frames it as avoiding single points of failure across more than one physical place ^[8]. The count is a trade-off, not a number to maximize.

Two placement rules are uniform. Store the backup separately from the device, so one incident cannot take both ^{[6] [3]}. And never split one phrase across locations. Two halves are each lethal. One discovered set of six words makes the rest brute-forceable. The wiki’s stated alternative for multi-location storage is multisignature ^[7].

The passphrase question, both sides

A passphrase is an optional string combined with the seed phrase. Every unique passphrase creates a completely new wallet, typos included ^[4]. It is distinct from the device PIN ^[11]. The mechanics are unforgiving. Passphrases cannot be changed, removed, or recovered. A lost passphrase loses the wallet it protects ^[4]. A wrong passphrase opens a valid but empty wallet. No error is shown.

Whether to use one is an open, official-source conflict, printed here without resolution. Trezor’s August 2026 FAQ holds that most users do not need one. It prefers Shamir backup for advanced setups. It states a passphrase does not remove single points of failure. It adds one ^[4]. Coldcard’s advisory, verified 4 September 2026, tells users to employ a strong, unique BIP-39 passphrase where loss would be materially harmful ^[10]. Two manufacturers, opposite defaults. If you use one, record it physically, separately from the seed. Rehearse its use ^[4].

Test recovery before funding

The practice every source shares. Run a recovery check right after setup, before loading funds ^[2]. Send a small amount. Close. Re-enter from what was written down. Confirm the funds appear ^[4]. Complete a power-cycle and recovery test before depositing, in Coldcard’s phrasing ^[10]. An untested backup can be wrong. The error surfaces exactly when the device is gone.

The device around the phrase

Choose the PIN yourself, make it strong, and never store it digitally ^[1]. Lockout behavior is manufacturer-specific and stated as such. Ledger resets the device after three wrong PINs ^[1]. Trezor doubles the wait after each wrong attempt. It wipes after sixteen ^[3]. Those numbers belong to those makers only.

Buy from the official source and verify authenticity on arrival ^[5]. Keep firmware current. Two 2026 facts sharpen both rules. Coldcard’s advisory documents predictable seeds on affected firmware. It warns that an update is not a seed migration ^[10]. And phishing remains the dominant theft path. Anyone asking for the recovery phrase is a scammer, in Ledger’s flat phrasing, whatever urgency they manufacture ^[1].

If exposure is ever suspected, the documented response is immediate. Move the funds to a freshly generated wallet ^{[3] [6]}.

Continuity and portability

Plan for the people who outlive the holder. bitcoin.org’s line is plain. Bitcoins can be lost forever without a plan for family ^[8]. A passphrase wallet becomes permanently inaccessible if the holder is gone, per Trezor’s inheritance answer ^[4]. Portability cuts the other way. A phrase generally works with the wallet software that created it. Record the wallet’s name alongside a long-term backup ^[7]. Confirm compatibility before an emergency. Do not assume it ^[6].

Where this page sits

The cold versus hot comparison covers the custody models these phrases back up. The cryptocurrency introduction defines the assets. The basics hub frames the cluster. The stablecoins hub covers the tokens most often secured this way. Every practice above carries its source and date.