Where to Store a Crypto Seed Phrase Safely (2026 Guide)
Your 12- or 24-word seed phrase is your wallet. Anyone who sees it can move your funds, and if you lose it, nobody — not the exchange, not the wallet maker — can restore it. So where should it live?
The golden rules
- Never store it in plain text in the cloud — no iCloud Notes, Google Drive, email drafts or screenshots in your camera roll.
- Never type it into a website. Legit wallets never ask for it online.
- Keep at least two copies in different physical places.
- Primary backup should be offline — paper or metal, not a phone or computer that can be lost, stolen, or remotely compromised.
The industry standard: Metal backup plates
Steel or titanium plates survive fire, flood, and decades of storage. Financial regulators (FINRA) and hardware wallet makers (Ledger, Trezor) recommend offline metal backups as your primary storage method for significant holdings.
Store one at home in a safe or lockbox, and consider a second at a trusted location (safe deposit box, trusted relative's safe) for redundancy. Metal plates are visible to anyone who finds them, so physical security matters.
Paper: cheap and offline
Paper works well if stored properly: write clearly, laminate or seal it in plastic, and keep it in a fireproof safe or waterproof container. Paper burns, fades, and gets thrown away by accident, so it's best used as a second backup alongside metal, not your only copy.
Never print it on a networked printer or take a photo of it.
An offline encrypted vault: optional secondary access
Once you have offline metal or paper backups secured, an encrypted vault app on your phone can serve as a secondary quick-access copy — especially useful when travelling or needing to restore a wallet on the go.
Apps like UnderKey encrypt the phrase with AES-256 on-device and keep it offline (no sync, no cloud, no servers). With decoy vaults, even someone who forces you to unlock sees only the decoy vault you prepared.
Important: A phone is not a primary backup. Phones get lost, stolen, remotely wiped, or upgraded. An encrypted phone copy is a convenience layer on top of your durable offline backups, not a replacement.
What about password managers?
Cloud password managers (1Password, Bitwarden, LastPass) encrypt your data, but the phrase now lives on someone else's servers and behind a single master password. Acceptable for small amounts if you use strong two-factor authentication and a unique master password, but most crypto experts recommend keeping large holdings in offline-only storage.
What experts recommend
The consensus from financial regulators, hardware wallet makers, and security professionals is clear:
- Primary: Offline metal backup, stored securely at home (or split across two locations for large amounts).
- Secondary: Paper backup in a separate secure location (safe deposit box, trusted family member).
- Optional: Encrypted offline vault on your phone for quick access when you need it.
Never rely on a phone, computer, or cloud service as your only copy. Hardware fails, accounts get locked, companies shut down. Physical offline backups are the gold standard for a reason.
Common mistakes to avoid
- Storing only on a phone or laptop: Devices get lost, stolen, or die. Always have at least one offline metal or paper backup.
- Single copy: If your only backup is destroyed or lost, your funds are gone. Keep two copies in different physical locations.
- Unprotected paper: Paper left on a desk, in a drawer, or in plain sight is an easy target. Use a safe, lockbox, or sealed envelope at minimum.
- Screenshots or cloud notes: These sync across devices and can leak in a hack, phone repair, or accidental share.
- Typing into a website or app you don't trust: Phishing sites and fake wallet apps steal seed phrases daily.