The safest way to store a seed phrase is offline, on a physical medium, ideally metal rather than paper, in at least two copies kept in separate locations. Never store it anywhere digital – a screenshot on your phone or a note in a password manager creates exactly the kind of single point of failure a physical backup is meant to avoid.
A seed phrase is a set of 12 or 24 words, generated when a wallet is first created, that can restore full access to it on any compatible device. It's different from a private key: a private key unlocks a single address, while a seed phrase regenerates every key in the entire wallet. That's exactly why it matters more – whoever has it has everything, and unlike a bank password, there's no support line that can reset it if it's lost or stolen.
The short version: offline, on metal, in two copies, in two locations. Here's how the common methods actually compare:
| Method | Survives fire/water | Survives a hacked account | Rough cost | Verdict |
|---|---|---|---|---|
| Memorizing only | N/A | Yes | Free | Risky as a sole method – human memory fails silently |
| Paper | No | Yes, if kept offline | Free | Fine as a first backup, not a final one |
| Metal plate or capsule | Yes | Yes, if kept offline | $50–$100 | Recommended baseline |
| Photo, cloud note, password manager | No | No | Free | Never do this |
| Two metal copies, two locations | Yes | Yes | Roughly double | Best practice for real holdings |
For larger holdings, some users do more than just keep one seed phrase in two places. A passphrase (sometimes called the 25th word) adds an extra secret on top of the normal phrase. Shamir's Secret Sharing splits the seed into several shares, and only some of them are needed to rebuild it, so one share alone doesn't give access. Both methods give real protection if a single copy is found or stolen. But they also add complexity: more pieces to track, a higher chance of losing one, and usually less compatibility between wallet brands. Manually cutting a written phrase into random pieces is not the same as either method and is generally not recommended, because it removes the safety math that makes a proper threshold scheme work.
The most common mistakes all share one thing: they put the seed phrase somewhere it can be copied without your knowledge. Screenshots get scanned by malicious apps with photo library access. Cloud notes and password managers are one compromised account away from exposing everything at once. Emailing it to yourself leaves a permanent, searchable copy sitting on a mail server you don't control.
As Albert Quehenberger, CEO of AQ Forensics and a ChangeNOW Ambassador, put it based on his casework:
"From the cases I see in forensic work, the cryptography itself is rarely what fails. The recurring problem is the human and operational layer."
But loss isn't always about theft. Confusion between multiple phrases turns out to be just as costly as losing one outright. As James, Business Development Manager at QubitX, put it during ChangeNOW's X Space, after digging into support tickets from users whose funds didn't come back after recovery:
"They were entering the wrong seed phrase because they had too many sets of seed phrases and didn't remember which one they kept their assets in."
"The objective of redundancy should be to reduce different types of failure risk, not simply to duplicate the same weakness several times," Albert notes.
A home safe is the most accessible option, but it's only as good as your house's resistance to fire, flood, or burglary. A bank safety deposit box is more resilient but limits access to banking hours and creates a paper trail tied to your name. Splitting copies between a safe at home and a box at a bank, rather than keeping both in one place, is what actually delivers on the "two locations" principle rather than just duplicating the same risk twice.
Memorization removes the risk of someone physically finding a written copy, but it introduces a different one: human memory isn't reliable for a random 12- or 24-word sequence over years, and there's no way to know your memory has failed until the moment you actually need it. If you do memorize it, treat that as a backup to a physical copy, not a replacement for one.
For those who want to try, the common techniques are all variations on giving random words a structure they don't naturally have. Chunking the phrase into small groups of two or three words, rather than trying to hold all 12 or 24 at once, is easier for most people to retain. Building a short, vivid mental story that links each word to the next in order works better than rote repetition, since a sequence tied to a narrative is far easier to reconstruct than a list. Spaced repetition – testing yourself after a day, then a week, then a month – reveals whether the memory is actually solid long before an emergency does. None of this should be written down in a form that reveals the connection between the story and the words themselves; the story lives in your head, not on paper.
No wallet provider, exchange, or support agent will ever ask for your seed phrase – full stop. That single fact would have stopped one of the largest individual crypto thefts of the year: on January 10, 2026, a Bitcoin and Litecoin holder handed over their 12-word recovery phrase to someone posing as Trezor support and lost $282 million in minutes. No encryption was broken and no device was hacked – the attacker simply asked, and the victim answered. Treat any unsolicited message asking you to "verify," "sync," or "restore" your wallet by entering your phrase as an attempted theft, regardless of how official it looks.
Not necessarily. A newer generation of smart-account wallets signs in with a passkey, tied to your device's face or fingerprint recognition, instead of generating a 12- or 24-word phrase at all. Recovery works through a second trusted device or designated contacts rather than a written backup. It's a genuinely different security model, not just a different format for the same one: passkey wallets solve the "written backup gets lost or photographed" problem, but they introduce their own dependency on device and account recovery working correctly. For most crypto holders today, a standard seed phrase, stored properly, remains the default.
NOW Wallet generates a standard mnemonic phrase at setup and never stores or has access to it. Recovery works the same way across supported devices: import the phrase, and the wallet restores completely, without a proprietary format that locks you into one manufacturer's ecosystem. Combined with Face ID for day-to-day access and PIN-based transaction confirmation, the goal is a setup where the seed phrase you write down once is the only backup you ever have to think about.
How to Avoid Fake Exchange Migration Requests
That urgent "migrate your account now" email might be a scam wearing your exchange's logo. Read the article to stay safe.
Best Crypto Apps 2026 For Trading, Holding, And Managing Crypto
Looking for the best crypto apps? Our guide covers top crypto apps for trading, buying, and managing cryptocurrencies. Explore wallets, swap apps, NFT marketplaces, portfolio trackers, tax tools, and market analytics tools. Stay ahead in the crypto world with the most reliable and feature-packed apps.
