Dossier seed phrase: backup and security.

A recovery phrase is a sequence of words from a fixed word list from which your wallet derives every private key. Order matters: the same words in a different order produce a different set of funds. Because the phrase follows an open standard, you can restore it in almost any wallet, including another brand.

That universality is exactly what makes it dangerous to store digitally. A photo in your camera roll, a note in a cloud app, a screenshot or a text file on your desktop will sooner or later sync to a server or end up in a backup. Malware that specifically hunts for word sequences has been common for years; only one infected device is needed.

Always let the device generate the phrase, and never type it into a website or app that asks for it. No legitimate wallet, exchange or support desk ever asks for your recovery phrase; anyone who does is trying to rob you.

Paper is free and immediately available, and for small amounts it is a defensible solution. Write the words down numbered and legibly with a pen that does not fade, note the wallet type and whether there are twelve or twenty-four words, and keep it in a sealed envelope somewhere visitors never go.

The weaknesses are well known: fire, damp, mould, fading, rodents and house moves. A card in a kitchen drawer does not survive a house fire, and printed ink in a damp basement can become half unreadable within a few years. Paper is fine as a first copy but rarely wise as the only copy.

Make at least two paper copies and do not keep them in the same building. A fire, burglary or flood then costs you at most one of the two. Never note on either copy how much crypto is involved or which platform you use.

A metal backup stores the words in stainless steel or titanium by stamping letters, engraving plates or sliding punched tiles into a holder. Products such as Cryptosteel, Billfodl, Blockplate, Keystone Tablet and the NGRAVE plate all work on the same principle: no ink, no paper, no electronics.

The gain is that the backup survives fire, firefighting water, flooding and decades of time. Stainless steel holds well above the temperature of an average house fire, and there is no battery or chip to degrade. The first four letters of each word are usually enough, because the standard word list is already unambiguous at that point.

When stamping, watch two things: verify every word twice before moving on, because a wrong letter in steel cannot be corrected, and do not store the plate in the same cupboard as your hardware wallet. Metal protects against natural disaster, not against a thief who takes everything at once.

An extra passphrase, often called the twenty-fifth word, is added to the seed and produces a completely different set of addresses. Anyone who finds your metal plate but does not know the passphrase gets nowhere. The downside is equally hard: forget it and the funds are gone. Store it separately and make sure one trusted person knows it exists.

To spread risk without a passphrase, a Shamir backup is an alternative. The seed is split into, say, three shares of which two are needed to restore. One lost share is then no problem, and one found share gives a thief nothing. Distribute shares across locations with different risks: home, family in another city, and possibly a bank vault.

Finally, remember that most losses are caused by carelessness rather than hackers: a moving box thrown away, a vault key nobody could find, an heir who did not know what the metal plate was. Record in plain language what is kept where and who may know what, without putting the words themselves in that document.

You verify a recovery phrase by actually restoring it. Reset the hardware device to factory settings and restore from your backup, or use a second empty device and check that the first address matches exactly. Do this once at setup and then annually, together with a quick check that the plate is still readable and present.

With a new setup, send a small amount first, restore the wallet from the backup and move that amount again before transferring a large balance. Those ten minutes prevent the most common self-custody disaster: a correctly written phrase that still returns nothing because of a typo or a missing twenty-fifth word.