Where to Store Your Seed Phrase Safely: Paper, Metal, Split or Hidden

Every piece of advice about seed phrases makes sense once you see that you are defending against two different disasters, and that they pull in opposite directions.

• Loss — fire, flood, a house move, a forgotten hiding place, your own death. The defence is more copies in more places.
• Theft — a burglar, a houseguest, malware, a cloud breach, someone who knows you hold crypto. The defence is fewer copies in fewer places.

Most methods are good at one and bad at the other. Far more coins are lost than stolen, which is worth remembering before you make your backup impossible to find.

The options, honestly

Paper

What came in the box. Free, offline, immune to malware. Destroyed by fire and water, fades, and is readable by anyone who finds it. Fine as a first step; not where you want your savings to rest for a decade.

Steel plates and capsules

Stamped or engraved metal survives the house fire that paper does not. That is the whole benefit, and it is a real one. A steel plate is still plain text: it solves loss, not theft. Best used for something that is useless on its own — a share of a split phrase — or somewhere with controlled access.

A safe or a bank deposit box

Good against casual theft and fire. Deposit boxes add access hours, inheritance paperwork and, in some countries, a track record of being opened or frozen. A home safe tells a burglar where to look. Both are a single location.

A password manager

Excellent against loss, and much better than a notes app or an email to yourself. But the phrase now lives on internet-connected devices behind one master password. Reasonable for a spending wallet; most people should not do it for long-term holdings. If you do: end-to-end encrypted manager, long unique master password, hardware security key.

An encrypted file or USB stick

Strong in theory. In practice USB sticks die quietly, file formats and tools go out of date, and a file named seed.gpg announces itself. If you go this way, keep two copies on different media and test them yearly.

A photo — and why it matters which kind

A plain photo or screenshot of the words is one of the worst places. Photo libraries sync to the cloud automatically; phones now recognise and index text inside images; and security researchers have found malware — in apps on both major app stores — that scans photo libraries specifically for recovery phrases.

An encrypted phrase hidden inside an ordinary photo is a different thing. There are no words in the image to recognise. That is what StegoSafe does, offline: the phrase is encrypted with AES-256-GCM under a key stretched from your passphrase, then written into the pixels with no header or marker — so a wrong password, an ordinary photo and a damaged file all fail identically, and there is nothing for a scanner to match on. One holiday picture among thousands is not what a thief takes. (That is the threat this answers: thieves, malware and casual inspection. A forensic lab running statistical steganalysis is a different and stronger adversary.) The trade-off is the one that applies to all encryption: forget the passphrase and it is gone. And keep the PNG as a file — messengers recompress photos and destroy hidden data, as explained in How to Hide Text in an Image: Two Ways.

Splitting with a threshold (Shamir)

The method that answers both disasters at once: split the phrase into n shares so that any k recover it and fewer than k reveal nothing. Three shares in three places, any two needed — one fire cannot destroy it and one burglar cannot steal it. Hardware wallets offer this as SLIP-39 when a wallet is created; StegoSafe does it for an existing phrase, hiding each share in its own photo (Five Photos, Any Three).

What does not work is cutting the words into thirds by hand — the arithmetic is in How to Split a Seed Phrase into 3 Parts — Safely.

Multisig

Several independent keys, a threshold to spend, and no single secret anywhere. The strongest option for large holdings and the most demanding to set up and to recover. You still have to back up each key — so everything above still applies, once per key.

At a glance

Never acceptable

• a screenshot or plain photo of the words;
• a notes app, an email to yourself, a cloud document, a chat message;
• typing the phrase into any website, including “seed checker” or “seed splitter” pages;
• a single copy, of any kind, in a single place.

A sensible set-up

For savings you intend to keep for years:

1. Split 2-of-3 or 3-of-5 with a real threshold scheme.
2. Put the shares in places with different failure modes: home, a relative in another city, a deposit box or a lawyer.
3. Make at least one share fire-proof (steel) and consider making the ones at home unnoticeable (hidden in a photo).
4. Test recovery from the minimum number of shares before you fund the wallet, and again every year or two.
5. Write the instructions — what exists, where, how many are needed — where your heirs will find them. Do not include the shares.

Your backup should survive a fire, a burglary and your own absence. Any plan that only handles one of the three is half a plan.