Seed Phrase Storage: Metal Backups, Passphrases and Best Practices

Proper seed phrase storage is the difference between holding bitcoin securely for decades and losing it in a single house fire. In Lesson 2.3, you learned what a seed phrase is and why it matters. Now you need to protect it. Your seed phrase is your bitcoin — if those 12 or 24 words are destroyed, stolen, or lost, your funds go with them. This lesson covers every major storage method, from paper to metal to multi-location strategies, along with the BIP39 passphrase and a complete best-practices checklist.

Why Seed Phrase Storage Matters

Self-custody means accepting full responsibility for your own backup. There is no bank to call, no “reset password” link, no customer support that can recover your funds. The security of your bitcoin is directly equal to the security of your seed phrase backup.

The threats your backup must survive:

• Fire. House fires reach 600°C (1,100°F) within minutes. Paper ignites at roughly 230°C (450°F). A paper seed backup in a burning house is gone.
• Water. Flooding, burst pipes, or even a spilled drink can destroy ink on paper. Many types of ink run, smear, or become illegible when wet.
• Time. Paper yellows, ink fades, pencil graphite smudges. A backup that’s unreadable in 10 years is no backup at all.
• Theft. Anyone who finds your written seed phrase can sweep your wallet in minutes from anywhere in the world.
• Loss. Moving houses, forgetting where you put it, a relative throwing away “that piece of paper” — physical backups can simply disappear.

The goal is a storage strategy that protects against all five threats simultaneously. No single method is perfect, but combining methods gets you very close.

Paper Backups: The Starting Point

Paper is where every seed phrase backup begins. When your wallet generates your seed phrase, you write it down immediately — this is your first line of defense.

How to Create a Paper Backup Correctly

1. Use the card provided with your hardware wallet. Most hardware wallets (Coldcard, Trezor, Ledger, BitBox02) include pre-formatted backup cards with numbered lines. Use them.
2. Write with a ballpoint pen, not pencil. Pencil fades and smudges over time. Gel pens and felt-tips can bleed or run when wet. A standard ballpoint pen on quality paper is the most durable ink-on-paper combination.
3. Use block capitals. Handwriting ambiguity is a real risk. Write clearly in uppercase letters to eliminate confusion between similar characters.
4. Number every word. Write “1. ABANDON 2. ABILITY 3. ABLE …” — never a list without numbers. Word order is critical data.
5. Double-check against the BIP39 word list. Verify that every word you wrote is actually on the list and spelled correctly.
6. Store in a secure, dry location. A fireproof home safe, a locked filing cabinet, or a safety deposit box at a bank.

Limitations of Paper

Paper is a starting point, not a permanent solution. Its weaknesses are significant:

• Burns at approximately 230°C — well below house fire temperatures
• Degrades when exposed to moisture or humidity
• Ink fades over years, especially in varying temperatures
• Acid in standard paper causes yellowing and brittleness over decades

If you plan to hold bitcoin for years, you need something more durable. That means metal.

Metal Seed Phrase Backups

A metal seed phrase backup solves the durability problem. Steel and titanium survive conditions that destroy paper: house fires, floods, and the passage of time. Metal backup devices have become a standard recommendation for anyone serious about Bitcoin self-custody.

Why Metal?

• Fire resistance. Stainless steel melts at approximately 1,400–1,500°C (2,550–2,730°F). Titanium melts at 1,668°C (3,034°F). House fires typically peak at 600–800°C. Your seed phrase on metal will survive.
• Water resistance. Steel and titanium are unaffected by freshwater flooding. Stainless steel resists corrosion from saltwater. Your words won’t smudge, run, or dissolve.
• Time resistance. Stamped, engraved, or punched metal doesn’t fade. A properly made metal backup will be readable in 100 years.

Stamping and Punching Plates

These devices use individual letter tiles or a punch/stamp mechanism to record each word (or its first four letters) onto a metal surface.

• Cryptosteel Capsule: A stainless steel tube with sliding letter tiles. Durable and compact, but assembly requires patience.
• Billfodl: Similar tile-based design in stainless steel. Well-known and widely available.
• Blockplate: A steel plate where you mark specific positions with a center punch. Simple, fast, and very durable. No loose parts.

Engraving Plates

These are flat metal plates where you engrave or etch your words using a scribe tool or electric engraver.

• SeedPlate by Coinkite: Stainless steel plate designed for the Coldcard ecosystem. You mark letters by punching dots at grid positions.
• SteelWallet: An automatic letter punch set with a steel plate.

The Washer Method (DIY)

The budget option: buy stainless steel washers from a hardware store, stamp each word onto a washer using a letter punch set, and thread them onto a bolt in order. Cost: under $20. Effectiveness: comparable to commercial products. This method is popular among Bitcoiners who value simplicity and low cost.

Metal Backup Comparison

Product	Type	Material	Fire Rating	Price Range	Ease of Use
Cryptosteel Capsule	Letter tiles	Stainless steel (303/304)	~1,400°C	$80–$110	Moderate
Billfodl	Letter tiles	Stainless steel (316)	~1,400°C	$60–$100	Moderate
Blockplate	Center punch	Stainless steel (304)	~1,400°C	$40–$70	Easy
SeedPlate (Coinkite)	Dot punch	Stainless steel (304)	~1,400°C	$35–$50	Easy
DIY Washers	Letter stamps	Stainless steel	~1,400°C	$10–$25	Moderate

For detailed head-to-head comparisons, see Cryptosteel vs. Billfodl: Best Metal Seed Backup and the Metal Seed Phrase Backup Complete Guide.

The BIP39 Passphrase (25th Word)

BIP39 includes an optional feature that adds a powerful extra layer of protection to your seed phrase storage strategy: the passphrase, sometimes called the “25th word.”

How It Works

During the seed derivation process (covered in Lesson 2.3), your seed words are combined with an optional passphrase through the PBKDF2 hashing function. A different passphrase — even a single character difference — produces a completely different wallet with different keys, addresses, and balances. No passphrase (blank) is itself a valid option that produces one specific wallet.

This means the same 24 words with passphrase “alpha” and the same 24 words with passphrase “bravo” are two entirely separate wallets.

Benefits

• Protection against physical seed theft. Even if someone finds your 24 words, they can’t access your funds without also knowing the passphrase.
• Plausible deniability. You can create a “decoy” wallet by entering your seed with no passphrase (or a different passphrase) and keeping a small amount of bitcoin there. Your main holdings sit behind the real passphrase. If coerced, you can reveal the seed words and the decoy passphrase.
• No additional hardware needed. The passphrase is a software feature supported by all BIP39-compatible wallets.

Risks

• If you forget the passphrase, your bitcoin is gone. There is no recovery mechanism. The passphrase is not stored anywhere — it exists only in your memory and your backup.
• You must back up the passphrase separately from the seed words. Storing them together defeats the purpose. But this means you now have two things to protect instead of one.
• Complexity increases the chance of human error. Mistyping the passphrase, forgetting capitalization, or adding an accidental space can lock you out of your funds permanently.

The Decoy Wallet Strategy

A common setup works like this:

1. Create a wallet with 24 words and no passphrase. Send a small amount of bitcoin to it (the “decoy”).
2. Enable a passphrase and create a second wallet from the same 24 words. This becomes your main wallet holding the majority of your bitcoin.
3. Store the 24 words on metal in a secure location. Store the passphrase separately — written down in a different location, or memorized.

If someone finds your seed words and restores the wallet without the passphrase, they see only the decoy amount. Your main balance remains hidden behind the passphrase.

For a complete guide to implementing this strategy, read Seed Phrase Passphrase: The 25th Word Guide.

Multi-Location Storage Strategies

A single backup in a single location is a single point of failure. Distributing backups across multiple physical locations protects against localized disasters — fire, flood, theft, or natural catastrophe affecting one site.

Don’t Split Your Seed Phrase

A common but dangerous idea is splitting a 24-word seed into, say, three groups of 8 words and storing each part in a different location (a “2-of-3 split”). This is a bad strategy for several reasons:

• It reduces security. An attacker who finds one 8-word fragment only needs to brute-force 2⁸⁰ remaining combinations — still large, but orders of magnitude weaker than the original 2²⁵⁶.
• It increases recovery complexity. You need access to two of three locations to recover, and if any two locations are compromised simultaneously, you lose everything.
• The passphrase approach achieves the same goal more safely. Keep the full seed in one location and the passphrase in another. An attacker needs both to access funds.

Recommended Multi-Location Approach

For most users holding a meaningful amount of bitcoin, a practical multi-location strategy looks like this:

1. Location A (Home): Metal backup of full 24-word seed in a fireproof safe.
2. Location B (Off-site): Second metal backup or paper backup in a safety deposit box, or at a trusted family member’s home in a sealed, tamper-evident envelope inside their safe.
3. Location C (Optional): Third backup in another geographic location — a different city or region, protecting against regional disasters.
4. Passphrase: Stored separately from all seed backups. This can be memorized (risky if forgotten), written on paper in a different safe, or stored in a different safety deposit box.

Shamir’s Secret Sharing (SLIP39)

For advanced users, an alternative to standard BIP39 is SLIP39 (Shamir’s Secret Sharing). This scheme splits the seed into multiple shares — for example, 3-of-5 — where any 3 of the 5 shares can reconstruct the seed, but fewer than 3 reveal zero information about it. Unlike naive seed splitting, this is mathematically secure.

Currently, Trezor Model T supports SLIP39 natively. Other wallets have limited support. If you’re just starting out, stick with BIP39 plus a passphrase. SLIP39 is a specialized tool for users with advanced requirements.

Testing Your Backup

A backup you haven’t tested is a backup you can’t trust. Before sending any significant amount of bitcoin to a new wallet, verify that you can recover it.

How to Test Recovery

1. Set up your wallet and write down the seed phrase. Follow all the backup procedures described above.
2. Send a small test amount of bitcoin. A few thousand sats is enough.
3. Wipe the wallet or use a different device. On a hardware wallet, reset it to factory settings. Alternatively, install the wallet app on a different phone or use a different hardware device.
4. Recover the wallet using your written seed phrase (and passphrase, if applicable).
5. Verify the balance and first receiving address. The recovered wallet should show the exact same balance and the same first receiving address as the original. If it does, your backup works.
6. Once confirmed, you can safely send larger amounts.

This test costs nearly nothing (just a small transaction fee) and gives you complete confidence in your backup. Many experienced Bitcoiners repeat this test periodically — especially after creating new metal backups — to confirm nothing has degraded or been recorded incorrectly.

For a detailed walkthrough of this process, see How to Test Your Seed Phrase Backup.

Seed Phrase Storage Best Practices Checklist

Use this checklist to evaluate and improve your current backup strategy:

• ☐ Seed phrase is written on paper immediately during wallet setup — no delay, no reliance on memory.
• ☐ Paper backup is upgraded to metal — at least one metal backup exists for fire/flood protection.
• ☐ Multiple copies exist in separate locations — at least two physical backups in geographically distinct places.
• ☐ Each word is numbered — order is unambiguous in every copy.
• ☐ Passphrase (if used) is stored separately from seed words — never in the same location or container.
• ☐ No digital copies exist anywhere — no photos, no cloud documents, no text files, no email drafts.
• ☐ Recovery has been tested on a separate device — you have personally verified that the backup restores correctly.
• ☐ Trusted person knows the backup exists (not the words) — in case of your incapacitation, someone can locate the backup.
• ☐ Backup locations are protected from unauthorized access — safes are locked, envelopes are sealed and tamper-evident.
• ☐ Periodic review is scheduled — check the physical condition of your backups at least once a year.

If every box is checked, your seed phrase storage setup is solid. The next step is understanding the device that generates and protects your seed phrase in daily use — your hardware wallet. Continue to Lesson 2.5: Hardware Wallets Explained.

Frequently Asked Questions

What is the best material for a seed phrase backup?

Stainless steel (grade 304 or 316) and titanium are the top choices. Both survive house fires, floods, and corrosion. Stainless steel is more affordable and widely available; titanium is lighter and slightly more resistant to extreme heat and corrosion. For most people, stainless steel is more than sufficient. Avoid aluminum — its melting point (660°C) is dangerously close to house fire temperatures.

Can I store my seed phrase in a password manager?

This is a hotly debated topic. A high-quality password manager with strong encryption (like KeePass or 1Password) is far better than a plain text file. However, any digital storage introduces digital attack surfaces: malware, cloud breaches, device compromise, or software vulnerabilities. The Bitcoin community’s standard recommendation is to keep seed phrases exclusively in physical form. If you choose to add a digital backup, treat it as supplementary to — never a replacement for — your physical metal backup, and understand the additional risks you’re accepting.

How many copies of my seed phrase should I have?

Two to three copies is the standard recommendation. One copy is a single point of failure. More than three copies increases the risk of theft or unauthorized discovery. Each copy should be in a different physical location, and each location should be secured against unauthorized access. If you use a passphrase, it provides an additional security layer even if one copy is found.

What if I use a passphrase and forget it?

Your bitcoin is permanently inaccessible. There is no recovery mechanism for a forgotten passphrase. This is why you must back up your passphrase with the same rigor as your seed words — but in a separate location. Some users memorize short, meaningful passphrases and also write them down as backup. The worst outcome is a strong, complex passphrase that exists only in your memory and is then forgotten. For more details, read the 25th word passphrase guide.

Is a bank safety deposit box a good place for a seed phrase backup?

It’s a reasonable off-site location with controlled access, but it has limitations. Banks can restrict access during emergencies, legal disputes, or banking hours. Some jurisdictions allow authorities to access safety deposit boxes with a warrant. The box contents aren’t insured by the bank in most countries. A safety deposit box works well as one location in a multi-location strategy — not as the only location. Pair it with a home safe and ensure someone you trust knows the box exists and how to access it if needed.