A wallet backup is one of the most important pieces of information in a self-custody cryptocurrency setup. Depending on the wallet and backup standard, it may consist of 12, 20 or 24 words.
Those words are not simply a password that you can reset later. They can encode the information required to recreate the keys that control a wallet. That makes the backup both extremely valuable and extremely sensitive.
The physical format you choose matters because your backup faces two different categories of risk:
Can another person discover, photograph, copy or obtain your backup?
Can the backup survive fire, water, physical damage, loss or long-term degradation?
This guide compares paper, metal and digital storage, but it also goes one step further: it explains when each approach makes sense, what its weaknesses are and how to build a backup strategy rather than simply choosing a material.
Understanding What You Are Backing Up
The term “seed phrase” is commonly used for wallet backups, but not every wallet uses exactly the same backup standard.
BIP-39 is widely used and commonly represents wallet entropy as 12 or 24 words. Other systems exist. For example, Trezor uses SLIP-39 for certain wallet configurations, where a backup can use 20-word shares and can optionally be divided into multiple shares.
That distinction is important because you should always follow the backup format generated by your specific wallet rather than assuming that every wallet uses the same number of words.
1. Paper Backup
Paper is the simplest physical method. During wallet setup, you can write the generated backup words on the supplied recovery card or another suitable piece of paper.
Advantages of paper
- Very inexpensive: you normally need little more than the supplied backup card and a suitable writing instrument.
- Offline: a correctly stored paper backup is not exposed to online account compromise.
- Simple: there are no electronics, batteries or specialized tools.
- Easy to inspect: you can visually check that the words are readable and in the correct order.
Weaknesses of paper
Paper's biggest weakness is physical durability. It can be damaged by fire, water, humidity, tearing, fading or accidental disposal.
There is also a security problem that is sometimes overlooked: paper can be copied very easily. Someone does not need to steal the original card if they can photograph it.
How to improve a paper backup
- Write the words clearly and exactly.
- Keep the backup away from everyday documents.
- Protect it from casual access.
- Choose a location protected against common household risks.
- Consider a second secure location if losing the first copy would create an unacceptable risk.
- Do not photograph the backup as an “extra copy”.
2. Metal Backup
Metal backups are designed to solve the durability problem of paper. Instead of relying on ink and paper fibers, the recovery information is physically engraved, punched or otherwise marked into a durable metal component.
This can provide significantly better resistance to environmental damage, although the exact performance depends on the material, construction and design of the product.
Advantages of metal
- Greater physical durability: suitable metal products are designed to resist hazards that can destroy ordinary paper.
- Long-term storage: there is no ink that can fade in the same way as ordinary writing on paper.
- Physical backup: the recovery information remains offline.
- Better disaster resistance: depending on the design, metal can provide better protection against fire, water and impact than paper.
Weaknesses of metal
- Cost: a purpose-built metal backup costs more than a paper card.
- Installation: some systems require punching, stamping or engraving.
- Physical theft: metal protects against environmental damage but does not automatically prevent someone from reading the backup.
- Human error: a word entered incorrectly during setup can still produce a serious recovery problem.
3. Digital Backup
Digital backup can mean many things: a photograph, screenshot, cloud document, email, text file, USB drive, computer file or password-manager entry.
The attraction is obvious: digital information is easy to duplicate and does not depend on a single physical sheet of paper.
The problem is that creating a digital copy creates additional attack surfaces.
Why digital backups are risky
A digital seed phrase can potentially be copied without you noticing. Malware, compromised accounts, cloud breaches, malicious extensions, screenshots, synchronization services and unauthorized access to a device can all create additional exposure.
Trezor explicitly advises users not to create digital copies of wallet backups, including screenshots, photographs, emails and cloud storage. 2
What about an encrypted digital file?
This is more complicated than simply saying “encrypted means safe”.
A technically sophisticated user may understand encrypted storage, key management, offline computers and threat modeling. But for most individual users, turning a recovery phrase into a digital file introduces additional complexity and additional ways to make a mistake.
The important question is not whether encryption exists. It is whether your complete system remains secure if the computer, account, password, backup key or encryption mechanism is compromised.
4. Paper vs. Metal vs. Digital: The Real Comparison
There is no single material that is perfect for every person. The correct choice depends on the threats you are trying to protect against.
| Factor | Paper | Metal | Digital |
|---|---|---|---|
| Online exposure | Low if stored offline | Low if stored offline | Potentially high |
| Fire resistance | Low | Usually much better, depending on material and design | Depends on physical and digital infrastructure |
| Water resistance | Limited | Usually better, depending on construction | Depends on where the digital copy exists |
| Ease of creation | Very high | Moderate | Very high |
| Cost | Very low | Higher | Usually low |
| Risk of silent copying | Moderate | Moderate | High |
| Long-term physical durability | Limited | High when properly designed | Not the main advantage |
5. The Biggest Mistake: Confusing Backup With Redundancy
A backup and redundancy are related, but they are not exactly the same thing.
A backup is a copy that allows you to recover your wallet. Redundancy means designing the system so that one failure does not destroy your only recovery path.
For example, one paper card in one drawer gives you a backup. But if the house burns down, that single copy may disappear.
On the other hand, two copies stored in poorly chosen locations can create another problem: there are now two opportunities for someone to discover the recovery phrase.
A better way to think about multiple backups
The objective is to balance three things:
You must be able to recover the wallet when the original device is unavailable.
Unauthorized people must not be able to obtain the complete backup.
The backup must survive the realistic disasters you are trying to prepare for.
You should know how the wallet can actually be restored before an emergency occurs.
6. One Complete Copy vs. Multiple Locations
For a straightforward personal wallet, one carefully protected physical backup may be simpler and safer than creating many copies.
If the value involved is significant enough that losing one physical location would be unacceptable, you may consider a second protected location.
However, both locations must be treated as sensitive.
Example: two complete physical backups
Imagine that you have two metal backups. One is kept in a secure location at home and another is stored in a separate secure location.
This can improve resilience against physical disaster, but an attacker who discovers either complete backup may potentially gain access to the wallet.
7. Advanced Option: Multi-Share Backups
Some wallet systems provide a more sophisticated alternative to simply making multiple complete copies.
Trezor's SLIP-39 Multi-share Backup, for example, can divide a wallet backup into multiple shares and use a threshold for recovery. A 3-of-5 configuration can require any three of five shares to restore the wallet, meaning that losing one or two shares does not necessarily make recovery impossible.
This is fundamentally different from manually splitting a BIP-39 phrase into pieces.
Trezor specifically explains that manual splitting of a BIP-39 backup does not provide the same security properties as SLIP-39 Multi-share Backup. 3
Who might benefit from multi-share backups?
- People holding substantial long-term self-custody balances.
- Users concerned about a single physical location being destroyed.
- Users who understand threshold recovery and can document their procedure securely.
- Families or organizations that need controlled recovery without giving one person the entire secret.
Who probably should not use them?
A complex backup system can introduce new failure modes.
If you do not understand how the threshold works, where each share is stored or what happens if a share is lost, a simple correctly protected backup may be safer.
8. Your Backup Location Matters More Than the Material
A high-quality metal backup hidden in an easily accessible place can be less secure than a carefully protected paper backup.
The material protects against certain physical hazards. The location determines who can access the secret.
Consider these questions
- Who can enter the location?
- Could another person discover the backup while cleaning or moving?
- Could contractors or visitors access it?
- Is it protected from common environmental hazards?
- Would a thief immediately recognize it as valuable?
- Could someone photograph it without your knowledge?
- Would you still be able to access it during an emergency?
9. Do Not Put the Backup in the Same Place as the Wallet
Keeping the hardware wallet and its complete backup together may appear convenient, but it can create a single point of failure.
If a thief obtains both the device and its backup, the backup may allow recovery of the wallet elsewhere.
Separating them can therefore reduce the consequences of a single physical theft.
10. Protect Against Fire, Water and Physical Damage
Physical protection should be based on realistic risks rather than marketing claims.
A metal backup may be more resistant to heat and water than paper, but “metal” alone does not tell you exactly how a product performs under a particular fire, temperature or corrosion scenario.
Similarly, a safe may protect against casual theft but not necessarily against every type of fire or forced entry.
Practical approach
- Choose a durable medium appropriate for the value and risk involved.
- Keep it away from everyday handling.
- Protect it from moisture and corrosion.
- Consider fire protection if physical disaster is part of your threat model.
- Check periodically that the words or markings remain readable.
11. Verify the Backup Before You Need It
A backup that has never been checked can contain a simple transcription error.
A missing word, incorrect word or wrong order can make recovery fail when you need it most.
However, there is an important security rule: do not type your recovery phrase into random websites or online “seed validators”.
If your wallet manufacturer provides a secure device-based backup verification feature, use the official procedure.
For example, Trezor provides a Check backup function for supported wallet backups. Its documentation also warns users never to enter their words into websites or applications simply to verify them. 4
What should you verify?
- The number of words or shares.
- The exact spelling.
- The exact order.
- The backup format used by your wallet.
- Any passphrase or additional recovery information that your wallet configuration requires.
- That the recovery procedure actually restores the expected wallet.
12. What About a Passphrase?
Some wallets support an additional passphrase sometimes described as a “25th word”. This terminology can be misleading because the passphrase is not simply another word in a standard 24-word BIP-39 backup.
A passphrase can create a separate wallet derived from the same underlying backup.
That can provide useful security properties, but it also creates another recovery requirement.
Trezor similarly warns that a passphrase introduces its own single point of failure. 5
13. Which Backup Method Is Best?
There is no universal winner because paper, metal and advanced backup systems solve different problems.
14. My Practical Recommendation for Most Users
For someone using a hardware wallet for long-term self-custody, a sensible baseline is:
- Generate the wallet backup using the hardware wallet's official setup process.
- Write the backup exactly as displayed or instructed.
- Keep the complete backup offline.
- Never photograph or upload it.
- Store it somewhere protected from unauthorized access.
- Consider a durable metal backup if long-term physical resilience is important.
- Consider a second secure location if losing one location would create an unacceptable recovery risk.
- Use advanced multi-share recovery only if you understand exactly how it works.
- Verify the backup using the wallet manufacturer's official procedure.
15. A Simple Backup Strategy by Risk Level
| Situation | Reasonable approach |
|---|---|
| Small balance / beginner | Correctly written offline paper backup stored in a private, protected location. |
| Long-term savings | Consider a durable metal backup and carefully chosen secure storage. |
| High-value self-custody | Consider redundancy, geographic separation and an advanced recovery design if you understand the trade-offs. |
| Multiple trusted locations available | Consider carefully planned physical redundancy rather than simply creating many complete copies. |
| Technical user | Advanced options such as threshold-based backups may be appropriate if the recovery process is fully understood and documented. |
16. What You Should Never Do With a Seed Phrase
- Never send your recovery phrase through email.
- Never post it in a chat.
- Never send it to customer support.
- Never give it to someone claiming to be a wallet technician.
- Never enter it into an ordinary website.
- Never paste it into an AI chatbot.
- Never store a screenshot in your phone's gallery.
- Never upload it to cloud storage.
- Never share it with a friend simply as a “backup”.
- Never assume a person who knows your public wallet address also needs your recovery phrase.
17. If You Lose Your Physical Backup
The correct response depends on whether you still have access to the wallet.
If you still have access
Do not assume everything is lost. If you can still securely access the wallet, your priority is to establish a new wallet with a fresh backup and move the assets before you lose access to the existing wallet.
The exact procedure depends on your wallet and configuration, so follow the manufacturer's official recovery and migration documentation.
If you have lost both the device and the backup
This is much more serious. In a self-custody wallet, there may be no central company that can reset the wallet for you.
This is why recovery planning should happen before a device is lost or damaged.
18. If Someone May Have Seen Your Backup
Physical exposure should be treated seriously.
If you believe someone has copied the complete wallet backup, do not simply move the paper or metal plate to a new hiding place.
The secret itself may already be compromised.
The appropriate response is generally to create a new wallet with a fresh backup and migrate the assets to it using a trusted procedure.
19. Final Comparison
| Backup type | Main strength | Main weakness | Best use |
|---|---|---|---|
| Paper | Simple and inexpensive | Physical damage | Basic offline backup |
| Metal | Greater physical durability | Cost and physical exposure | Long-term storage |
| Digital | Easy duplication and access | Large digital attack surface | Specialized key-management setups |
| Multi-share | Can reduce dependence on one physical share | More complexity | Advanced self-custody |
20. Final Recommendation
For most people using a hardware wallet, the best starting point is not simply “buy the most expensive backup”.
The better strategy is to create an offline backup, protect its confidentiality, protect it from realistic physical hazards and make sure you understand how recovery actually works.
If durability is a major concern, a purpose-built metal backup can be a strong long-term option. If cost is the main limitation, a carefully protected paper backup is still far better than leaving the recovery phrase in a cloud account or on an internet-connected device.
For advanced users with larger holdings, carefully designed redundancy or threshold-based backup systems can provide additional resilience — but only when the recovery process is understood and documented.
Protect the secret. Protect the backup. Protect the recovery process.
Related ColdStorageHub Guides
Seed Phrase Security: The Complete Guide to Protecting Your Crypto
What Is a Hardware Wallet? How It Works and What It Protects
Sources and Further Reading
Disclaimer: This article is provided for educational and informational purposes only. Cryptocurrency self-custody involves technical and financial risks. Always verify recovery and backup procedures using the official documentation for your specific wallet before taking action.