Naar hoofdinhoud
Live markt
Block #9

Opinion

Twelve words on paper are a design flaw

We ask ordinary people to keep a list of words safe for thirty years, with no cloud copy, no photo, no help. In any other field that would be called unacceptable.

Bram Hoekstra
Bram Hoekstra

Redacteur security · Eindhoven

Published 2026-04-22 · reviewed 2026-07-14

This is an opinion piece. It reflects the author's view and is not investment advice.

One failure point, no second chance

A bank card can be blocked, a password reset, a key copied. A seed phrase has none of those safety nets: loss is final and theft is immediately total.

The result is a user forced to choose between two bad options: store it unsafely so it can be found, or store it so safely that they lose it themselves.

Recovery by system

SystemLossTheft
Bank cardNew card within daysBlock and dispute
PasswordReset by emailChange and log out
Seed phrasePermanent lossImmediate and total
Multi-key setupRecover with a backup keyOne key is not enough

Alternatives do exist

Setups where two of three keys suffice have existed for years. One key with you, one with a trusted person or service, one in a vault: losing a single key stops being a disaster.

Social recovery on smart contracts also works in practice. It is simply rarely the default in the app, and what is not default is barely used.

How robust are custody models?

Editorial scoring out of 100, focused on everyday use.

  • Two-of-three keys86 /100
  • Licensed custodian72 /100

    Different risk: counterparty

  • Hardware wallet with tested backup68 /100
  • Single seed phrase on paper34 /100
  • Seed phrase in a notes app9 /100

What a manufacturer can do tomorrow

Make the recovery model the first question at setup, not a hidden option. Require a backup test before any funds arrive. Send a yearly reminder to repeat that test.

And write out the inheritance question in the manual. Today families discover after a death that the device was found but the words were not.

  • Choose the recovery model at setup
  • Mandatory backup test before the first deposit
  • Yearly reminder to retest
  • Ship inheritance instructions as standard

Self-custody remains valuable

This is not an argument against self-custody. It is an argument against assuming a slip of paper is a finished product.

If you self-custody today, find the weakest link and double it: two locations, a tested procedure, and someone who knows it exists.

Najczęstsze pytania

Should I stop using a seed phrase?

Not necessarily. Do keep two separate physical copies and a tested recovery procedure.

What is a two-of-three setup?

A wallet with three keys where two signatures suffice, so losing one key does not mean losing access.

Is social recovery safe?

It lowers loss risk but introduces dependence on your chosen contacts. Choose them carefully.

About the author

Bram test wallets, hardware devices en self-custody-setups. Hij schrijft over phishing, scams en hoe je je sleutels veilig beheert.

Czytaj dalej

Newsletter

Bitcoin for breakfast, Brussels for lunch

One short email with what actually matters: prices, regulation and the banks that move. No hype, no noise.

  • Daily at 07:00
  • 2 minute read
  • No spam

Free. Unsubscribe in one click.