Seed Phrase Backup: Digital vs Physical

Your seed phrase is the list of recovery words, usually 12 or 24, that your wallet shows you when you set it up, in the format defined by the BIP39 standard. It is the master key to your bitcoin: whoever reads it can take your coins, and if your device breaks and no copy of the words survives, nobody can bring them back. Where you keep those words matters as much as which wallet you use.

So where should they live? On paper and metal, never in a digital file, not even an encrypted one; the next section explains why. Then this guide walks you through making a steel backup that survives fire and flood: choosing the metal, stamping the words, checking and testing the plate, and keeping copies in separate places. For the wider picture, see The Complete Guide to Bitcoin Seed Phrase Security.

Digital or Physical: The Rule

Recovery words belong on paper or metal, and nowhere else. Don’t photograph them, type them into a computer or phone, or keep them in a notes app, password manager, email draft or encrypted file. Encryption doesn’t make a digital copy safe: the file still lives on internet-connected devices or in the cloud, where malware, a breach of the provider or anyone who gets your password can reach it, and it adds a password you can forget. A hardware wallet exists to keep your keys away from exactly those devices. The course lessons Seed Phrases Explained and Seed Phrase Storage set out the same rule.

Two copies of the same recovery words. A digital copy (a photo, a note, a password manager or an encrypted file) sits on your phone, your computer and the cloud, all connected to the internet, so it can be reached from anywhere: by malware on any of your devices, by a breach at the app or cloud company, or by anyone who gets your password. A copy on paper or metal sits offline in one place, so only someone who finds it where it's kept can read it; a safe or a good hiding place keeps it out of anyone else's reach. Encryption locks the file, but the file is still online, and it adds a password you can forget. — **A digital copy can be reached from anywhere; a physical one only from where it is.** Encrypting the file doesn’t change that: it stays on connected devices or in the cloud, and adds a password you can forget.

A few things are not handwritten seed backups and follow their own rules. A multisig or timelock wallet’s descriptor, as long as it lists only public keys (xpubs), can’t spend, so besides the paper copy kept with each seed backup you may keep a digital copy of it; encrypt that copy, because the descriptor shows your whole balance and history. A descriptor that contains a private key (an xprv or a WIF key) is secret like your words and follows their rule. The BitBox02’s microSD backup (its default, unless you choose to write the words) is a file the device itself writes; it isn’t encrypted, so store that card as carefully as written words and only ever put it into a BitBox, never into a computer. A COLDCARD’s optional microSD backup is also written by the device, encrypted with 12 random words it shows you: treat that card the same way, only ever in a COLDCARD, and keep those 12 words apart from it. Everything else about your words stays physical: write them on paper as the device shows them, then add a metal copy that survives fire and flood.

Three things and where each may live. Your recovery words can spend your bitcoin: paper first, then metal, and nowhere else; a digital copy is never allowed, not even encrypted. A multisig descriptor can't spend, but it shows your whole balance and history: keep a paper copy with each seed backup, because it's needed to rebuild the wallet, and a digital copy is allowed if it's encrypted. A BitBox02 microSD backup is a file the device writes, and its default backup: keep the card as carefully as the words; it already is a digital copy, unencrypted, so it only ever goes into a BitBox. The rule behind all three: what can spend your bitcoin never goes into a phone or computer. — **Only the descriptor may have a digital copy, because it can’t spend.** Encrypt that copy, because the descriptor shows your whole balance and history. The BitBox02’s microSD card already holds your wallet unencrypted, so it gets the same care as written words.

Step-by-Step Guide to Creating a Physical Seed Phrase Backup

A durable physical backup of your seed phrase protects against digital failures, malware, and remote attacks. This guide covers the process of creating a steel seed plate backup that can withstand fire, flood, and decades of storage.

Step 1: Select your backup medium. Choose a stainless steel or titanium backup: stainless steel melts at about 1,400°C and titanium at about 1,670°C, far above a house fire, and both resist corrosion. Popular options include stamped steel plates, engraved washers, and letter-tile systems. Stainless steel (grade 304 or 316) provides superior corrosion resistance compared to carbon steel. Avoid aluminum, which melts at approximately 660°C. The design matters as much as the metal: in Jameson Lopp’s independent stress tests, some products lose or shift their parts in heat or under crushing, and his advice is that simpler is better: single plates with a punch grid are the best value (the Seed Phrase Storage lesson summarises his grades).

A temperature scale from 0°C upwards. A house fire often reaches 600 to 700°C, hotter in places. Paper burns at around 230°C and aluminum melts at 660°C, both inside the fire's range. Stainless steel melts at about 1,400°C and titanium at about 1,670°C, hundreds of degrees above it. The metal survives, but loose parts may not: in Jameson Lopp's tests some designs lost or shifted their parts, so single plates with a punch grid are the best value. — **Paper and aluminum fail inside a house fire; stainless steel and titanium melt far above it.** That’s why the long-term copy goes on steel or titanium, in a design with as few loose parts as possible.

Step 2: Prepare your workspace. Work in a private, indoor location with no cameras or windows facing your workspace. Close all doors, disable any smart home devices with microphones or cameras, and ensure no one can observe your work. Gather your tools: the steel plate kit, a metal stamping set (3mm or 1/4" characters), a hammer, a sturdy work surface, and hearing protection.

Step 3: Stamp your seed words onto the steel plate. Using BIP39 convention, you only need to stamp the first four characters of each word, since the first four letters uniquely identify every word in the BIP39 word list. Position each word’s characters carefully and strike each stamp firmly once. Verify each character immediately after stamping before moving to the next word.

A steel plate with numbered rows of four letter boxes: 1 ABAN, 2 ABIL, 3 ABLE, 4 ACT, and so on to the last word. Four letters are enough, because no other word on the BIP39 list starts with ABAN, so it can only be abandon. The 103 three-letter words, such as act, go on whole, since ACTI would be action. Each word is compared with the card written at setup before the next one. Every word is numbered, because the order is part of the secret: if words 2 and 3 are swapped, the wallet usually rejects the backup; if not, it opens another, empty wallet. — **Stamp each word’s number and its first four letters.** The order matters as much as the words: a swapped pair is usually rejected by the wallet, and otherwise opens a different, empty wallet.

Step 4: Verify the complete backup against the original seed. After stamping all words, compare the steel plate character by character against the backup card you wrote when your hardware wallet showed the words. Confirm the correct number of words and proper ordering. A single transposed word makes the backup useless during recovery.

Step 5: Create a second backup on a different medium. For redundancy, create a secondary backup using a different method — for example, an engraved washer set or a second steel plate from a different manufacturer. Check it word by word against your backup card, exactly as you checked the plate in Step 4. Geographic distribution of two backups on different physical media maximizes resilience against both location-specific disasters and manufacturing defects.

Step 6: Perform a recovery test. Start with your device’s built-in check, such as Trezor’s Check backup or Ledger’s Recovery Check: you type the words from your steel plate on the device itself, it tells you whether they match, and nothing is erased. Run the same check again, typing from your second copy, because a check only tests the copy you read the words from. For a full rehearsal, restore from the plate onto a second hardware wallet, or wipe your own device only after the built-in check has passed and any passphrase is tested and written down: the check covers the words only, and a wipe erases anything kept only on the device, such as a passphrase attached to a Ledger PIN. Then confirm that the first receiving address and the balance match, typing any passphrase from its own backup. Never use a phone or computer for this test: your words should never be typed into one.

Two ways to test the plate. 1, the built-in check, erases nothing: you type each word from the plate on the hardware wallet itself, and it compares them with the seed it holds and says whether they match (Trezor: Check backup; Ledger: Recovery Check). 2, a full rehearsal, if you want one: restore from the plate on a second hardware wallet, or on your own only after step 1 has passed and any passphrase is tested and written down, because step 1 checks the words only, and check that the first receiving address and the balance match the original. Never test on a phone or computer: typing the words into one makes a digital copy. — **Start with the check that erases nothing.** Your device keeps its own copy of the seed, so only words typed from the plate test the plate; a full restore comes after, on a second device or once the check has passed and any passphrase is tested and written down.

Step 7: Store the backup in a secure location. Place the steel plate in a fireproof safe, bank safety deposit box, or another secure location. If using a safe, choose one rated for at least one hour of fire protection. Consider wrapping the plate in a tamper-evident bag or seal to detect unauthorized access.

Step 8: Destroy any paper intermediaries. The backup card you wrote at setup can stay as one of your planned copies, kept in its own secure place away from the plate. Any other paper with your words on it, such as notes or worksheets, should be destroyed completely: use a cross-cut shredder and burn the shredded remains if possible. No digital file should exist at any point in this process. If one did (a photo, a typed note, a printout from a computer), treat the seed as exposed and move your funds to a new seed made on a hardware wallet.

What should exist at the end. Place 1: the steel plate, in a fire-resistant safe, ideally in a tamper-evident bag. Place 2: a second copy on another medium or from another maker, such as stamped steel washers, in another place. If you keep it: the card you wrote at setup, in its own safe place, away from the plate. Any other paper, such as notes and worksheets, is cross-cut shredded and the pieces burned if you can. No digital file should ever exist; if a photo, typed note or printout did, make a new seed on a hardware wallet and move your funds to it. — **Two or three whole copies in separate places, and nothing else.** If a digital copy ever existed, the seed is exposed: replace the seed rather than just deleting the file.

Common Mistakes to Avoid

Using low-quality or untested metal. Cheap steel plates may contain alloys that corrode over time or have low melting points. A fully developed house fire can exceed 600°C (1,100°F), which can destroy aluminum and low-grade metal backups. Invest in plates specifically designed and tested for seed phrase storage from reputable manufacturers.

Stamping words in the wrong order. Word order determines your private keys. A backup with the correct words in the wrong sequence is usually rejected by the wallet, because the checksum built into the last word no longer matches; if it slips through, it opens an entirely different, empty wallet. Always stamp words sequentially and include word numbers on the plate. Double-check the order against your backup card before finalizing.

Leaving the backup in an obvious or predictable location. A steel plate labeled “Bitcoin Seed Phrase” stored next to your computer provides no security against a physical intruder. Use discreet storage that is not obviously connected to cryptocurrency. Combine physical security (safe, locked container) with obscurity (unmarked, hidden location).

Creating only a single copy. One physical backup creates a single point of failure. If that backup is destroyed in a fire, stolen, or becomes inaccessible due to a legal dispute, your hardware wallet is your last way in, and a stolen copy lets the thief spend too. Move the funds at once to a new wallet with a fresh, verified backup; if the device fails first, they are lost for good. Maintain at least two physical backups in separate geographic locations to ensure recovery under any single-event scenario.

Photographing or scanning the completed backup. Creating a digital image of your physical backup defeats the purpose of analog storage. Photos can be extracted from device backups, cloud storage, or malware. Keep your physical backup exclusively in the physical domain.

Frequently Asked Questions

How long will a steel seed phrase backup last?

Grade 304 stainless steel resists corrosion for decades under normal storage conditions. When stored in a dry indoor environment, a properly stamped steel plate will remain readable for decades. Exposure to saltwater, persistent humidity, or corrosive chemicals can accelerate degradation, so choose a storage location with controlled environmental conditions.

Should I also keep a digital backup of my seed phrase?

No. Keep your words only on paper or metal. A digital copy, encrypted or not, on a USB drive, SD card, phone or cloud account, can be reached by malware, a breach or anyone who gets the password, and it gives up the main advantage of a physical backup: immunity to remote attack. For redundancy, keep two or three complete physical copies in separate places instead. The one exception is a backup your hardware wallet writes itself to microSD, such as the BitBox02’s default backup or a COLDCARD’s optional encrypted one: store that card as carefully as written words and only ever put it into that make of wallet, never into a computer. If you use multisig, the wallet descriptor is the one item you may also keep as an encrypted digital copy, as long as it lists only public keys (xpubs), because then it can’t spend; a descriptor that contains a private key (an xprv or a WIF key) follows the same rule as your words.

Can I use a safety deposit box for my seed phrase backup?

Safety deposit boxes provide good physical security but depend on the bank: access follows opening hours, can be frozen after a death until the estate is settled, and authorities can open boxes with a warrant in some countries. For most users, the physical security benefits outweigh this risk, especially when the backup is one of multiple geographically distributed copies. A passphrase adds a second layer, but only for coins in the separate wallet it opens: anyone who finds the words can still take what stays in your standard wallet. Keep a backup of the passphrase somewhere other than the box.

What is the best way to test my backup without risking my funds?

Test before you send any significant amount. Start with your device’s built-in check (Trezor’s Check backup, Ledger’s Recovery Check), which compares the words you type on the device from your backup and erases nothing. For a full rehearsal, use a spare hardware wallet, or reset your own only after the built-in check has passed and any passphrase is tested and written down, since the check covers the words only and a reset erases a passphrase attached to a Ledger PIN. Restore from the physical backup only, without any digital reference. If the wallet shows the correct first receiving address and balance, with any passphrase typed from its own backup, the backup is valid. Never run the test on a phone or computer.

Related Resources

Part of our free Bitcoin course: This topic is covered in Seed Phrase Storage: Metal Backups, Passphrases and Best Practices, from the Bitcoin Wallets & Self-Custody course.

Filed under: Bitcoin Security