Contents
- Why seed phrases and recovery codes need special care
- Where you should never store them
- Safer places to store them
- A simple, resilient setup
- FAQ
- Make the Right Choice for Your Privacy
A seed phrase (or recovery phrase) is the master key to your crypto — anyone who has it can take everything, and if you lose it, no one can help you get your funds back. Account recovery codes work the same way for your online accounts. That combination — total access, no reset button — makes where you store them one of the most important security decisions you'll make. Here's how to do it right.
Why seed phrases and recovery codes need special care
Unlike a password, a seed phrase can't be changed. If it leaks, you can't "reset" it — you can only move your assets before someone else does. And unlike a normal login, there's no support line that can restore it if it's lost. That means your storage method has to protect against two opposite risks at once: theft (someone else getting it) and loss (you losing your only copy).
Where you should never store them
These convenient options are exactly the ones attackers and malware are built to reach:
- Cloud storage or notes apps (Google Drive, iCloud, Notes) — exposed if that account is breached.
- Screenshots or your photo library — often synced to the cloud automatically.
- Email or messaging apps to yourself — a prime target and easily searched.
- Your browser's password manager — a specific target of "infostealer" malware that scrapes saved data off infected devices.
Safer places to store them
The safest options all share one trait: they're offline.
- Paper or metal backups. Writing the phrase down (or stamping it into a metal plate for fire/water resistance) keeps it completely offline. Store it somewhere private and secure.
- An encrypted offline device. A device that stores your phrase encrypted and never connects to the internet keeps it out of reach of cloud breaches and malware, while staying more convenient than paper to retrieve.
- A bank safe-deposit box or home safe for a second copy, so a single fire, flood, or theft doesn't wipe out your only backup.
A simple, resilient setup
You don't need to be an expert — just follow a few principles:
- Keep it offline, always — never let the phrase touch the cloud, a screenshot, or your browser.
- Keep at least two copies in separate physical locations, so loss in one place isn't catastrophic.
- Encrypt or lock the copy where you can, so finding it isn't the same as using it.
- Tell one trusted person how to find it in an emergency — many people lose access simply because no one else knows where the backup is.
FAQ
-
Can I store my seed phrase in a password manager?
Cloud-synced managers carry the same breach risk as any online storage. If you use a manager, prefer one that keeps the data offline and encrypted, and still keep a separate offline backup. -
Is a screenshot of my seed phrase safe?
No. Photos are usually synced to the cloud automatically, which is one of the most common ways seed phrases are stolen. -
What if my paper backup is lost or destroyed?
That's why you keep more than one copy in separate locations. A single paper copy is a single point of failure — fire, water, or misplacement can wipe it out. -
Is offline storage really necessary if I'm careful?
Yes. Seed phrases can't be reset, and malware and cloud breaches specifically hunt for them. Keeping them offline removes the entire category of remote theft.
Make the Right Choice for Your Privacy
A seed phrase or recovery code is the one secret you can never reset — so it deserves the one thing the cloud can't offer: to stay completely offline. Keep it off the internet, encrypted where you can, with a backup in a second location, on something only you can unlock. Store it right once, and you never have to worry that a breach or a synced screenshot put your assets in someone else's hands.
