Your seed phrase is the only recovery credential for a wallet, so a bad backup is a direct exposure of your assets. This article compares 5 mainstream backup methods. The short version first: under $50,000, paper plus a fireproof bag is enough, $50,000-$500,000 calls for a metal backup plate (Cryptosteel / Billfodl), and over $500,000 should use Shamir sharding plus geographic distribution. For everyday accounts, register your main account through the Binance Official Site entry point, install the Official Binance App on Android, and iPhone users switching to an overseas Apple ID can check the iOS installation guide.
1. Five Ways to Back Up a Seed Phrase
| Method |
Cost |
Fireproof |
Waterproof |
Theft resistance |
Difficulty |
Recommended asset size |
| Handwritten paper |
$0 |
No |
No |
Depends on storage |
Very low |
Under $50,000 |
| Paper + waterproof bag + fireproof bag |
$30 |
Yes |
Yes |
Depends on storage |
Low |
$10,000-$100,000 |
| Metal backup plate (Cryptosteel) |
$80-100 |
Yes |
Yes |
Depends on storage |
Medium |
$50,000-$500,000 |
| Bank safe deposit box |
$100-500/year |
Yes |
Yes |
Very high |
Medium |
$100,000-$1,000,000 |
| Shamir sharded backup |
$200-500 |
Yes |
Yes |
Very high |
High |
Over $500,000 |
2. Paper Backups: Simplest and Most Common
Advantages:
- Zero cost: just a piece of paper and a pen
- Simple to make: ready to use as soon as you write it down
- No digital footprint: can't be grabbed remotely by a hacker
Drawbacks:
- Not fireproof: destroyed in a fire
- Not waterproof: ruined if it gets wet
- Easily torn: high probability of physical damage
- Fading: ink can fade over long-term storage
Best practices for paper backups:
- Use good-quality paper (durable copy paper or cardstock that won't rot easily)
- Use a fountain pen or ballpoint pen (avoid fading gel pens or pencil)
- Make every word clearly legible: block letters, no cursive
- Keep multiple copies (at least 2)
- Use waterproof resealable bags (seal it, then place it in an envelope)
- Use a fireproof bag ($30-50 fireproof document bags)
- Store in a dry environment (avoid mold)
Where to store a paper backup:
| Location |
Advantage |
Risk |
| Home drawer |
Easy to access |
Burglary, fire |
| Home safe |
Fire and theft resistant |
Home invasion |
| A trusted relative's home |
Geographically distributed |
Relationship breakdown |
| Bank safe deposit box |
Very high security |
Inconvenient to access |
Q: How long can a paper backup last?
A standard paper backup stored dry and out of light:
- 5-10 years: ink stays clear
- 10-30 years: may yellow but is still readable
- 30+ years: paper becomes brittle and ink fades
Cardstock or archival paper plus a fountain pen can extend this to 50+ years. But metal backup is still the top choice for long-term storage.
3. Metal Backup Plates: Strong Disaster Resistance
Mainstream metal backup products:
| Product |
Price |
Material |
Backup method |
Capacity |
| Cryptosteel Capsule |
$99 |
304 stainless steel |
Letter tiles |
24 words |
| Cryptosteel Cassette |
$199 |
304 stainless steel |
Letter tiles |
24 words |
| Billfodl |
$90 |
316 stainless steel |
Letter tiles |
24 words |
| BLOCKPLATE |
$25/plate |
Stainless steel |
Hand-stamped or punched |
12-24 words |
| Cobo Tablet Plus |
$50 |
Titanium alloy |
Stamping / included tool |
24 words |
| ColdTi (DIY) |
$30-50 |
Titanium rod |
DIY |
24 words |
Disaster resistance of metal backups:
| Disaster type |
Stainless steel |
Titanium alloy |
| Fire (800-1500°C) |
304 stainless steel melts at 1450°C, marginal |
Titanium alloy melts at 1668°C, survives |
| Water immersion |
Won't corrode |
Won't corrode |
| Acid/alkali |
Some corrosion (hydrochloric acid) |
Almost no corrosion |
| Physical impact |
Resists deformation |
Resists deformation |
| Long-term oxidation |
Slight surface oxidation, still readable |
Almost no oxidation |
Best practices for metal backups:
- Stamp only the first 4 letters of each word (4 letters is enough to uniquely identify a word in the BIP39 wordlist)
- Use dedicated letter tiles or a letter punch set (avoid unclear handwriting)
- Split across multiple metal plates in different locations (won't all be lost in one fire)
- Check the stamping depth (at least 0.5mm, so it won't wear off)
Q: Can the first 4 letters of a BIP39 word really identify it uniquely?
Yes. The BIP39 wordlist of 2,048 words is designed so that the first 4 letters are unique. For example:
- abandon → ABAN
- ability → ABIL
- absorb → ABSO
As long as you stamp the first 4 letters, you can look them up in the BIP39 wordlist during recovery to determine the full word. This design is built specifically to make metal backups practical.
4. Cryptosteel vs Billfodl in Detail
The two most popular metal backup products:
Cryptosteel Capsule ($99):
- 304 stainless steel construction
- Cylindrical housing
- Assembled with letter tiles inside
- Capacity: 24 words
- How to use: pull out the central rod → insert letter tiles in order → screw the housing shut
Billfodl ($90):
- 316 stainless steel construction (slightly better corrosion resistance)
- Rectangular plate design
- Assembled with letter tiles inside
- Capacity: 24 words
- How to use: slide open the cover → insert letter tiles in order → close it
Key differences:
| Dimension |
Cryptosteel |
Billfodl |
| Material |
304 stainless steel |
316 stainless steel (more corrosion-resistant) |
| Shape |
Cylindrical |
Rectangular plate |
| Ease of use |
Medium (needs the rod screwed tight) |
High (slide-open cover) |
| Price |
$99 |
$90 |
| Letter tiles |
250 letters and numbers |
250 letters and numbers |
| Looks |
Slightly better |
Decent |
| Track record |
8+ years |
5+ years |
Q: Is a DIY metal backup better than a commercial product?
Commercial products (Cryptosteel / Billfodl) offer:
- Professional letter tiles (won't fall out easily)
- Tamper-evident design
- Fire and water testing
DIY backups (a ColdTi titanium rod plus a letter punch) offer:
- Lower cost ($30-50)
- Greater physical strength (titanium)
- Better discretion (looks like an ordinary metal rod)
For users with over $50,000 in assets, a commercial product is recommended: easier to use and less prone to mistakes.
5. Bank Safe Deposit Boxes: High-Security Scenarios
A bank safe deposit box is one of the highest physical security places to keep a backup.
When to use one:
- Assets over $500,000
- No need for frequent access
- You already have a trusted banking relationship
Advantages:
- Physical security: bank vaults are fire, theft, and water resistant
- Not remotely accessible: only the holder, with ID and a key, can open it
- Privacy: banks generally don't know what's inside the box
Drawbacks:
- Annual fee: $100-500 a year (depending on box size and bank)
- Inconvenient access: requires a weekday bank visit
- Legal risk: in extreme cases, a box could be frozen by a court
- Bank failure: a very small but theoretically possible risk
Regional differences in safe deposit boxes:
- Mainland China banks: annual fee of roughly 200-500 RMB, requires ID, bank card, and a password
- US / Switzerland / Singapore: annual fee of $100-1,000, with well-developed regulation
- Offshore financial centers (Cayman / Bermuda): very high privacy, but costs are steep (annual fee of $1,000+)
Q: Does the bank know what's in my safe deposit box?
No. A bank safe deposit box is the "tenant's private space" — the bank only verifies your identity and key, it doesn't inspect the contents.
That said, legally speaking:
- Some banks require a "content declaration" to be signed when opening a box
- Courts can investigate box contents in major inheritance disputes
- Boxes can be frozen during anti-money-laundering investigations
None of this affects a normal user's asset custody.
6. Shamir Sharded Backups: Institutional-Grade Security
Shamir Secret Sharing is a scheme proposed by cryptographer Adi Shamir in 1979:
How it works:
- Your 24-word seed phrase is split into N shares using a cryptographic algorithm
- Any M of those shares can reconstruct the original seed phrase (M ≤ N)
- Fewer than M shares reveal absolutely nothing about the seed phrase
A typical 3-of-5 configuration:
- Split the seed phrase into 5 shares
- Any 3 shares can reconstruct it
- Losing a single share doesn't compromise your assets
- Tolerates the loss of up to 2 shares
Trezor Model T's built-in Shamir feature:
- Generates Shamir shares directly
- Each share is its own independent seed phrase
- Users only need to keep 3 of the 5 shares safe
Manual Shamir sharding:
- Generate shares with a Trezor or a specialized tool
- Stamp the shares onto 5 metal plates
- Distribute them across different geographic locations (home, bank safe deposit box, relatives, a lawyer, an accountant)
Q: Is Shamir sharding really unbreakable?
Yes. The Shamir algorithm is information-theoretically secure:
- With fewer than M shares, an attacker's information gain is exactly zero
- Even mature quantum computing can't break it
The only real risks are:
- All M shares being stolen at once (geographic distribution lowers this probability)
- Bugs in the implementation (use well-known tools like Trezor or the shamir39 standard)
7. A Geographic Distribution Strategy for Backups
Single-point risk: storing every backup in one place means a fire or burglary wipes it all out
Geographic distribution:
| Asset size |
Number of locations |
Typical distribution |
| Under $10,000 |
1 |
A safe at home |
| $10,000-$100,000 |
2 |
Home + a trusted relative |
| $100,000-$500,000 |
3 |
Home + bank safe deposit box + a relative |
| $500,000-$2,000,000 |
4-5 |
Home + bank + multiple relatives + a lawyer |
| Over $2,000,000 |
5+ |
Distributed across multiple countries |
Notes on geographic distribution:
- Use a sealed container at every location (to prevent others from browsing it)
- Tell at least 1 family member where the backups are (in case something happens to you)
- Check periodically (confirm every 6-12 months that backups are intact)
- Never write identifying information on the backup itself (don't write "this is my ETH wallet seed phrase")
Q: How do I remember where each share is after distributing them?
You can use a "location map":
- A single sheet recording where each share is
- Never directly write "seed phrase" or "crypto" or other key terms
- Use code names (like "A is in the safe," "B is with [a relative]")
- The location map itself also needs to be kept secure
Or use shared family knowledge:
- A spouse or parent knows the general locations
- A lawyer holds one copy of the location map as a witness
8. Backups and Estate Planning
The special challenge of crypto: a lost seed phrase means permanently unrecoverable assets, including in the event of the owner's death.
Common problems:
- The owner passes away suddenly and family doesn't know crypto assets exist
- The owner hid the seed phrase well while alive, and family can't find it
- Family finds the seed phrase but doesn't know how to use it
Estate planning options:
-
Tell your spouse/children in advance:
- How much you hold
- Where the backups are
- The basics (how to restore a wallet from a seed phrase)
-
Have a lawyer hold part of the backup:
- The lawyer acts as executor
- The lawyer holds 1 share
- The lawyer helps the family recover assets after the owner's death
-
Use an "inheritance wallet" service:
- Casa Inheritance ($1,900+ annual fee)
- Automatic mechanism: transfers to a designated heir after a long period of inactivity
- For advanced users
-
Transfer part of your holdings to family wallets while alive:
- Doesn't depend on the seed phrase
- But requires planning ahead
Q: Can family inherit crypto assets after death?
Legally speaking:
- Crypto assets are part of an estate (confirmed in many countries)
- Inheritance requires a will or statutory succession
- Taxes: some countries levy an estate tax (mainland China currently has none)
In practice:
- Having the private key means having control: if family has the seed phrase, they can inherit
- Losing the private key means a permanent loss: legally still theirs, but they can't do anything with it
Planning ahead matters 100 times more than sorting things out after the fact.
9. Common Backup Mistakes
Common beginner mistakes:
Mistake 1: Storing a seed phrase on a cloud drive
- Even encrypted, your cloud account can be exposed to a phishing attack
- iCloud, Google Drive, and OneDrive are all unsuitable
Mistake 2: Storing a screenshot of a seed phrase in Photos
- iCloud Photos syncing means exposure if your Apple ID is phished
- Google Photos syncing means exposure if your Google account is phished
Mistake 3: Sending a seed phrase to your own email or messaging app
- A compromised email or messaging account means instant exposure
- A messaging app's "transfer to self" feature isn't safe either
Mistake 4: Writing it in your everyday notes app
- System backups can sync to the cloud
- Notes apps often sync to the cloud too
Mistake 5: Storing every backup at the same location
- A fire or burglary wipes out everything
Mistake 6: Telling a friend, colleague, or online acquaintance
- A friend who gets phished could tip off scammers
- A falling-out could lead to malicious misuse
Mistake 7: Storing a seed phrase together with a wallet password
- An attacker gets everything in one shot
Mistake 8: Writing it on the back of an ID card or bank card
- If the wallet is lost, both your ID and the wallet are exposed together
Q: Is it safe to tattoo a seed phrase on your body?
Strongly not recommended. Problems with a tattoo backup:
- Privacy exposure: visible while undressed or during a medical exam
- Being skinned after death (extreme, but real cases exist)
- Skin aging: ink can blur over time
- No way to update it: a mistake can't be corrected
The novelty of a tattoo backup is nowhere near worth its real security risk.
10. Frequently Asked Questions
Q: What if I forget my wallet password (not the seed phrase)?
If you've only forgotten your wallet password (like your MetaMask password) but still have the seed phrase, you can:
- Uninstall MetaMask
- Reinstall and choose "Import Wallet"
- Enter the seed phrase and set a new password
The seed phrase always takes absolute priority. A wallet password is just local encryption and can be reset.
Q: Is it safe to split a seed phrase into two parts and store them separately?
Partially effective, but not recommended. For example, splitting 24 words into 12+12 stored in two places:
Advantages:
- A single leak doesn't lose your assets
- Simple to do
Problems:
- You need all 24 words intact to recover (unlike Shamir, there's no fault tolerance)
- Losing either location means a permanent loss
The right approach: use Shamir sharding (2-of-3 or 3-of-5), which tolerates partial loss.
Q: What if there's a typo in my seed phrase?
If the mistyped letters don't form a real BIP39 word:
- The wallet tool will throw an error: "Invalid mnemonic"
- Use the BIP39 wordlist to manually find the closest match
If the typo happens to form a different valid BIP39 word:
- The wallet recovers successfully but with a different address
- The wallet you find is empty (not your assets)
- You'll need to double-check the original, correct word
So a seed phrase must be stamped or written clearly to avoid typos.
Q: Does the order of a seed phrase matter?
It matters enormously. All 24 words must be entered in their original order, or you'll recover a completely different wallet.
Each word's position in the seed phrase is determined by the BIP39 algorithm, and any reordering will fail.
A metal backup must strictly preserve the order (word 1, 2, 3, ..., 24).
Q: Can I store multiple wallets' seed phrases together?
Strongly not recommended. Storing multiple seed phrases together means:
- A single leak compromises multiple wallets at once
- Confusion risk: which seed phrase belongs to which wallet
Back up and store each wallet independently.
Q: Are encrypted storage tools for seed phrases reliable?
Some professional tools are relatively reliable:
- PGP encryption (command line, for professional users)
- VeraCrypt (open-source encrypted containers)
- KeePassXC (open-source password manager)
But encryption adds complexity:
- Losing the encryption password means losing the seed phrase
- A bug in the encryption tool could corrupt the file
For most retail users, paper plus metal backup is the top choice. Encrypted storage is really only for institutional or professional users.
Q: Do I need to test a backup after making it?
Strongly recommended. Test right after backing up:
- Enter the seed phrase into a different wallet tool (not the one you currently use)
- Verify that it recovers the same address
- After a successful test, clear all traces from the test wallet
Testing catches typos or ordering mistakes, so you don't discover a broken backup only when you actually need it.
Q: How often should I check my backup locations?
Recommended:
- Every 6 months: visit each backup location
- Check that contents are intact (no corrosion on metal plates, no damage to paper)
- Check physical security (safe combination, bank card still valid)
- Every 2-3 years: consider relocating your backups (avoid staying fixed in one place too long)
Data Sources
- The BIP39 seed phrase standard
- The BIP44 multi-chain derivation path standard
- The Shamir Secret Sharing standard (SLIP-0039)
- Official Cryptosteel / Billfodl / ColdTi documentation
- Casa / Unchained Capital multisig custody services
Risk disclosure: This article is an independent third-party summary and does not constitute investment advice. Backing up your seed phrase is the single most critical security step for crypto assets. All data is as of April 2026.