Disclosure: This post contains affiliate links; we may earn a commission at no extra cost to you.
The seed phrase is the single point of failure in almost every self-custody setup — anyone who reads it can move your funds, and if the only copy is destroyed, no company or blockchain can restore it for you. Most people store theirs wrong: on paper, in one location, sometimes photographed onto a phone that syncs straight to the cloud. None of that survives a house fire, a flood, or a phone backup breach. Here's what actually holds up.
Why paper isn't enough
The paper card your hardware wallet ships with is fine for the first few days, but it's genuinely fragile long-term: ink fades, paper burns, water destroys it in minutes, and a basic house fire will take out a paper backup stored in the same building as the hardware wallet it belongs to just as easily as the device itself. If your only backup is the paper card in a drawer near your wallet, you don't actually have a backup — you have a single event (fire, flood, burglary) away from losing everything.
Metal backups: the real upgrade
A metal seed phrase backup — engraving or stamping your words onto steel or titanium plates instead of writing them on paper — is the practical baseline for anyone holding meaningful funds. Three products dominate this category:
- Billfodl — marine-grade 316 stainless steel with laser-engraved letter tiles you slide into rows; rated to survive fire and water damage that would destroy paper instantly. Runs around $70-100.
- Cryptosteel Capsule — similar concept using 303/304-grade stainless steel tiles on a threaded core; slightly more compact form factor, similar price range.
- Cryptotag Zeus — titanium rather than stainless steel, a meaningfully higher fire-and-impact resistance ceiling, and a correspondingly higher price, typically upwards of $150.
All three solve the same core problem (fire and water resistance paper can't match) — the differences come down to form factor, ease of assembly, and how much fire/impact resistance you're paying extra for at the top end.
Where to actually put it: redundancy beats a single “good” copy
A single fireproof metal plate in your house is still one location. If that location floods, burns down entirely, or is where a burglar happens to search, one indestructible copy doesn't help. The standard practice: make two full metal copies and store them in genuinely separate locations — one at home in a fire safe, one somewhere physically distant (a bank safety deposit box, a trusted family member's home in another city, or a second property). Distance matters more than the container; two metal plates in the same house both go up in the same fire.
Shamir's Secret Sharing (SLIP-39): splitting instead of duplicating
Rather than making full copies of one seed and hiding them in different places, Shamir's Secret Sharing — standardized for hardware wallets as SLIP-39 and used natively on Trezor Model T and Trezor Safe devices — splits your seed into multiple independent shares with a recovery threshold, commonly 5 shares with a 3-of-5 threshold to reconstruct. No single share (and in fact no group of shares below the threshold) reveals any usable information about the seed, which means a single location being compromised doesn't expose your funds the way a full-copy backup would. The honest trade-off: SLIP-39 is a Trezor-originated standard, and while some other wallets have added support, it isn't universally compatible the way a plain BIP-39 seed phrase is — committing to it means your recovery process is somewhat more tied to compatible hardware than a standard seed phrase would be. If splitting shares of one seed feels too tied to a single vendor, our multisig setup guide covers the alternative of requiring signatures from multiple independent devices instead.
What not to do
- Don't photograph it. A photo syncs to cloud backup on most phones by default, turning a physical-security problem into a “hope the cloud account never gets breached” problem.
- Don't type it into a password manager or any internet-connected device, even briefly. Clipboard managers, screenshots, and malware-based clipboard/keylogger attacks all specifically target this exact moment.
- Don't store it as a plain-text note anywhere digital — no notes app, no email draft, no encrypted-messaging “note to self.”
- Don't rely on memorization alone for anything beyond a small, genuinely disposable amount — under real stress (a hospital visit, a family emergency), recall is far less reliable than people assume.
A passphrase adds a real second layer
Most hardware wallets support an optional passphrase (sometimes called a “25th word”) on top of the standard seed phrase. With a passphrase enabled, the seed phrase alone is not sufficient to access funds — someone who finds your metal backup still needs the passphrase, which you can memorize and never write down anywhere. The trade-off is real, too: if you forget the passphrase yourself, there's no recovery path at all, even with the seed phrase in hand, so this only makes sense paired with a passphrase-management approach you're genuinely confident in long-term.
Comparison Table
| Method | Durability | Redundancy needed | Vendor lock-in | Typical cost |
|---|---|---|---|---|
| Paper card (default) | Low — fire/water destroy it easily | High (multiple copies still fragile) | None | Free (included) |
| Metal plate (Billfodl/Cryptosteel) | High — fire and water resistant | Two copies, separate locations | None (standard BIP-39 words) | ~$70-150 |
| Titanium (Cryptotag Zeus) | Highest | Two copies still recommended | None | ~$150+ |
| SLIP-39/Shamir shares | High per-share (use metal for each share too) | Built into the scheme (threshold shares) | Mostly Trezor ecosystem | Cost of hardware wallet + metal per share |
FAQ
Is a metal backup enough on its own, or do I still need multiple copies? You still need geographic redundancy. Metal solves the fire/water/physical-damage problem; it doesn't solve the “this one location was compromised or destroyed entirely” problem, which is why two copies in separate places is still the standard recommendation.
Should I use Shamir/SLIP-39 instead of a plain seed phrase? Only if you're committed to staying within Trezor's ecosystem (or another SLIP-39-compatible wallet) long-term. For most users, two well-distributed metal copies of a standard BIP-39 seed phrase are simpler to manage and more universally compatible if you ever switch hardware wallet brands.
What happens to my backups if something happens to me? This is a real gap in most people's setup — a safety deposit box or a distant relative's house doesn't help your family if no one else knows it exists or how to access it. This deserves its own planning process; see our companion guide on crypto inheritance planning for how to document access without creating a security risk while you're alive.
Is it safe to store the seed phrase with a estate attorney or notary? It can be, if structured correctly (sealed, access-triggered by specific conditions, and ideally split rather than handed over whole), but a plain unsealed copy with a third party reintroduces a single point of trust you were trying to avoid. Treat it as a specific legal/security question worth its own research, not a casual add-on.