Storing a seed phrase: the four options and their failure modes
Every method trades loss against compromise, and ordinary loss is what actually happens. How to choose, where to put copies, and the two tests nobody runs.
Riskira
Short answer
Seed phrase storage trades two failures against each other: loss, where you cannot reach the phrase, and compromise, where someone else can. The four options are a single paper copy, several paper copies in separate locations, a metal backup, and a proper splitting scheme. For most people, two or three copies in genuinely separate places is the largest improvement available.
On this page
Everyone tells you to write the seed phrase down and keep it safe. Nobody tells you what "safe" means, which is why the two most common outcomes are a photograph in a cloud album and a piece of paper nobody can find after a house move.
Seed phrase storage is the problem of keeping twelve or twenty-four words available to exactly one person — you — for years, through fire, theft, moving house and your own forgetfulness. There are four practical approaches, and the useful way to choose is by asking which failure you are most likely to actually suffer.
The two failures you are choosing between
Every seed phrase storage method trades one against the other, and no option eliminates both.
Loss. You cannot reach the phrase when you need it. Destroyed, forgotten, misplaced, inaccessible.
Compromise. Someone else reaches it. Theft, a photograph synced somewhere, a person who knew where to look.
Protecting hard against one failure usually increases the other. A phrase in a bank vault is safe from theft and unreachable in an emergency; a phrase in your desk is the reverse.
Most people optimise entirely against theft and are then lost to the other. Statistically, ordinary loss — a move, a flood, a family member clearing a drawer — accounts for far more permanently inaccessible funds than targeted theft does.
Which seed phrase storage method should you use?
| Method | Resists loss | Resists compromise | Cost |
|---|---|---|---|
| Paper, one copy | Poorly | Reasonably | Nothing |
| Paper, several locations | Well | Less well | Nothing |
| Metal backup | Very well | Same as paper | Modest |
| Split across locations | Depends on scheme | Very well | Complexity |
Paper, single copy. The simplest seed phrase storage, and fine for a small amount, and its failure mode is the common one: fire, water, or simply not being where you thought. Paper in a drawer survives a decade and does not survive a burst pipe.
Paper, multiple copies in different places. The most practical upgrade for most people, and the biggest improvement per unit of effort. Two or three copies in genuinely separate locations — not two drawers in one house — removes single-point loss entirely. The trade is that each copy is a full credential, so location choice is the whole security model.
Metal. A steel plate with the words stamped or engraved. It solves fire and water, which are the failure modes paper cannot survive, and it costs a small amount once. It changes nothing about who can read it.
Splitting. Schemes where several shares are needed to reconstruct the phrase. Genuinely strong against compromise and the most dangerous option for ordinary users, because complexity is itself a loss risk: a scheme you half-remember in five years is a scheme that has already failed.
What not to do, and why precisely
Five things to keep out of your seed phrase storage, and the first two are near-universal.
- Do not photograph it. A photo enters the cloud album, which is protected by an account password and a recovery flow — meaning your funds are now protected by your email account rather than by the seed phrase.
- Do not type it anywhere. Notes apps, password managers, a text file, a message to yourself. Anything typed is backed up, synced and searchable, and it converts an offline secret into an online one.
- Do not store it with the device. A hardware wallet and its phrase in the same drawer is one theft, not two.
- Do not enter it into a website. Ever, for any reason. No legitimate service, wallet or support process requires it, and every "validation" or "migration" page that asks is a theft.
- Do not split it in half yourself. Half a phrase leaks meaningful information and neither half recovers anything — the worst of both failures at once. Proper splitting uses a scheme designed for it.
The second point deserves emphasis because it feels safe. A password manager is a good place for passwords precisely because it syncs; that same property makes it the wrong place for the one secret that should never be online.
Choosing locations, which is the real decision
For seed phrase storage using multiple paper or metal copies, the security is entirely in where they are.
Three properties make a good location:
Separated by risk. Two places that would not be destroyed by the same event. Different buildings, ideally different areas — a fire, a flood or a burglary should not reach both.
Not obvious. A drawer marked "important documents" is the first place anyone looks. It does not need a hidden compartment; it needs to be unremarkable.
Reachable by you, in a hurry. A vault requiring a weekday appointment fails the emergency case, and emergencies are when people need this.
A common and reasonable arrangement: one copy at home, well hidden; one copy with a trusted person or in a second property. If the second copy is with someone else, they should not know what it is — an envelope described as documents is sufficient, since the words themselves carry no label.
Whatever you choose, write down separately — in a place you look often — that the phrase exists and roughly where. A phrase perfectly stored and forgotten about is lost in the only sense that matters.
How do you know the backup works?
An untested backup is a hope. Two tests confirm your seed phrase storage actually works, and both are worth doing once.
- Verify the words are correct. Restore the wallet from the phrase onto a device with nothing on it, confirm the addresses match, then wipe that device. A transcription error found now costs an evening; found later it costs everything.
- Verify you can find it. In six months, from memory, without a hint. If you cannot, the storage plan has failed and you have discovered it cheaply.
Both tests are more valuable than any upgrade in material. A steel plate with a mistyped word is a very durable record of nothing — 24 words all correct, or the backup is worth 0.
While you are checking on things, it is worth reviewing what the associated addresses actually hold and what permissions stand against them — a scanner such as Riskira gives that view without connecting the wallet, which pairs naturally with a backup review since both are things people intend to do annually and never schedule.
Planning for the case where you are not there
The part most guides omit. If nobody can access these funds after you, they are gone, and this is a common enough outcome to plan for.
Leave instructions rather than the secret. A sealed letter with a lawyer or executor stating that the asset exists, roughly what it is, and how to get expert help. Not the phrase itself.
Tell one person that it exists. They do not need to know where, only that it does — otherwise nobody looks.
Consider a multi-signature arrangement for significant amounts, where a family member holds one key and cannot act alone.
That last option is the only one that genuinely solves inheritance without creating a live compromise risk, and it is worth the setup for amounts that matter.
More on key handling in wallet security, read-only monitoring in risk analysis, and the scams that follow a loss in crypto scams. The word list and derivation are specified in BIP-39 if you want the mechanics.
The short version
Seed phrase storage is a choice between loss and compromise, and ordinary loss is the far more common outcome. Two or three copies in genuinely separate locations is the best improvement most people can make; metal solves fire and water; splitting is strong and adds a loss risk of its own.
Never photograph it, never type it, never store it with the device, never enter it on a website. Then do the two things almost nobody does: verify the words restore correctly onto a blank device, and check in six months that you can still find it.
Frequently asked questions
- Is a photograph of my seed phrase safe if my phone is locked?
- No. The photo syncs to a cloud album protected by an account password and a recovery flow, which means your funds become as secure as your email account rather than as secure as an offline phrase.
- Can I store the phrase in my password manager?
- It is the wrong place. A password manager is good for passwords precisely because it syncs online, and that same property converts an offline secret into an online one.
- Should I split the phrase in half and store the halves separately?
- No. Half a phrase leaks meaningful information and neither half recovers anything, so you get both failure modes at once. Splitting needs a scheme designed for it, and that complexity is itself a loss risk.
- How do I know my backup actually works?
- Restore it onto a device with nothing on it, confirm the addresses match, then wipe that device. A transcription error found now costs an evening; found when you need it, it costs everything.
Sources
- BIP-39: Mnemonic code for generating deterministic keys — Bitcoin Improvement Proposals
- SLIP-39: Shamir's Secret-Sharing for Mnemonic Codes — SatoshiLabs
- Riskira: Wallet Risk Scan — Tecno Blocks

Riskira
Practical guides and insights about crypto wallet risk, blockchain security, suspicious addresses, transaction safety, Web3 scams, and wallet analysis.
About the publication
