A seed phrase — twelve or twenty-four ordinary words — regenerates every private key in a wallet. Anyone holding it controls the funds, on any device, forever. There is no second factor, no revocation and no support line.

That makes seed phrase storage a genuine security problem with two failure modes pulling in opposite directions: someone else gets it, or you lose it. Most advice optimises for one and quietly makes the other worse.

The two things you are defending against

Disclosure. Theft, malware, a photo in cloud storage, a curious relative. Defended by keeping the phrase offline and out of sight.

Loss. Fire, flood, a house move, forgetting where you put it, dying without anyone able to find it. Defended by having more than one copy in more than one place — which increases disclosure risk.

Every storage decision trades one against the other. There is no option that eliminates both, and anyone presenting one is ignoring half the problem.

The options, honestly compared

Paper. Free, instant, offline. Fails at: fire, water, fading ink, being thrown out by someone tidying up. Fine as a starting point, poor as a permanent solution for meaningful amounts.

Stamped or engraved metal. A plate you punch the words into. Survives fire and water, which is what paper does not. Costs something and takes half an hour. This is the standard answer for holdings worth protecting, and the cost stops being a consideration quickly.

Two copies in two locations. Halves the chance of total loss, doubles the number of places that can be compromised. Reasonable when the second location is genuinely secure — a safe at a trusted family member’s home, a deposit box.

Split backups. Dividing the phrase so no single piece is sufficient. Attractive in theory and where most people go wrong in practice: naive splitting can weaken security rather than strengthen it, and it multiplies the ways you can lock yourself out. Proper schemes exist and are supported by some wallets; improvising your own is a mistake.

A passphrase on top of the seed. Many wallets support an extra word only you know, so the seed alone is not enough. Genuinely strong — and if you forget it, the funds are unrecoverable even with the full phrase. Only worth using if you treat the passphrase with the same care as the seed itself.

Anything digital. Cloud notes, photos, email drafts, a synced password manager, a text file. This is where most seed phrase losses come from. A phrase in cloud storage is one account breach away from being someone else’s, and account breaches are routine.

The rules that are not negotiable

  • Never type it anywhere except your own wallet during recovery. No support agent, airdrop check, wallet validator or migration tool ever needs it. Every single one of those requests is theft.
  • Never photograph it. Phone photos sync automatically, usually to an account protected by a password you reuse.
  • Verify the backup before you rely on it. Recover the wallet from the phrase alone, on a different device, with a small amount in it. An unverified backup is not a backup — people discover a wrong word at the exact moment they cannot afford to.
  • Record where it is, without recording what it is. A meaningful share of permanently lost crypto is not stolen. It belongs to people who died or forgot, with a phrase nobody could find or recognise.

Matching effort to amount

Perfect security nobody follows is worse than good security they do. A reasonable ladder:

  • Small holdings — paper, one secure location, verified once.
  • Meaningful holdings — metal, two locations, verified, with someone you trust knowing that something exists and roughly where.
  • Life-changing holdings — metal, geographically separated copies, a passphrase you will not forget, and a documented plan for what happens if you are not around. At that level it is estate planning, not just security.

The related decision is which wallet holds the keys at all — see our guide to hot versus cold wallets.