Best Practices for Seed Phrase Security

Prioritize Physical, Offline Storage

Avoid digital storage: Never store your seed phrase on any device connected to the internet, such as computers, phones, or cloud services, as they are susceptible to malware and hackers. "If you type or view it on the computer, any sort of malware (keylogger, screen recorder etc) can snatch it, and the funds will be irrecovably gone."
Use durable materials: Opt for metal plates or similar fireproof, waterproof, and indestructible materials over paper, which can degrade or be easily destroyed. "Got a metal seed phrase backup plate ($30-50). Fireproof, waterproof, basically indestructible."
Never photograph or screenshot: Do not take photos or screenshots of your seed phrase, even temporarily, as digital images can be compromised. "Never take photos of your seed phrase (even "temporarily")"

Implement Layered Security

Utilize a passphrase (25th word): Add a strong, unique passphrase to your seed phrase, and store it separately. This creates a hidden wallet and means that even if your seed phrase is compromised, funds cannot be accessed without the passphrase. "A passphrase is basically a 25th seed phrase word that is a "password” set by the user."
Geographic distribution of backups: Store multiple copies of your seed phrase (or parts of it using Shamir's Secret Sharing) in different secure physical locations to protect against localized disasters or theft. "Keep it in 2 metal plates in different places."
Consider a decoy wallet: Keep a small amount of cryptocurrency in your main wallet (without the passphrase) to serve as a decoy, while the majority of your funds are in a hidden wallet protected by a passphrase. "And keep as a decoy a small amount of crypto in your main wallet (without the passphrase) and the rest in the hidden willet ( protected with your passphrase)."

Best Practices for Handling

Input seed phrases directly on hardware wallets: When setting up or restoring, enter your seed phrase directly on a hardware wallet device, rather than on a computer or smartphone. "Never input your seed words on a computer or smart phone, etc. work off the assumption that they are infected with malware that is looking to steal bitcoin."
Avoid sharing any details: Keep the fact that you own Bitcoin and the details of your seed phrase strictly confidential. "The safest thing is to keep secret the fact that you own bitcoin."
Regularly verify backups: Periodically check your physical backups to ensure they are undisturbed and legible, especially if using paper or less durable materials. "Every 6 months check to see if your backup seed words or passphrase written on paper or metal is disturbed or removed."

Are you considering using a hardware wallet as part of your seed phrase security strategy?

Bottom line

For seed phrase security, Users emphasize using offline, physical storage methods, preferably with multiple backups and an additional passphrase for enhanced protection. Digital storage of seed phrases is generally advised against due to vulnerability to malware and hacking.

Comments (0)

No comments yet. Start the conversation.