Introduction
Seed phrase management is the single most practical element of long-term cryptocurrency security. I’ve been using hardware wallets since the 2017–2018 cycle and have learned the same lesson more than once: your seed phrase is the master key. Lose it, and you lose access to funds; protect it well, and you control your assets even if a device fails.
This guide explains the differences between 12 vs 24 seed phrase lengths, how the BIP-39 standard works in practice, physical backup options (including metal backup seed phrase plates), and alternatives like SLIP-39. It includes hands-on tips from my testing and clear step-by-step instructions for creating and verifying a recovery phrase on the device reviewed on this site.
(Yes, the basics are boring — but they matter.)
Seed phrase basics — BIP-39 explained
What is a seed phrase? It’s a list of words that encodes the private keys controlling your wallets. Most modern hardware wallets use the BIP-39 standard to convert entropy into a human-readable set of words plus a checksum.
Why BIP-39 matters. BIP-39 defines the wordlist and the way words map to fixed-length entropy so different wallets can restore the same accounts if they implement the standard. That interoperability is useful if you ever need to restore a wallet on another compatible device.
A couple of technical notes (plain language): the seed phrase is not the private key itself — it’s an encoded representation that deterministic wallet software turns into many private keys. The higher the entropy you choose, the stronger the resistance to brute-force attacks.
For a deeper look at device internals like secure element chips and air-gapped signing, see the security architecture page.
12 vs 24 seed phrase — which to choose?
Short answer: 24 words give higher entropy and therefore higher brute-force resistance. 12 words are easier to write and verify. Which is right depends on your threat model.
Pros and cons (quick):
- 12 words
- Pros: Faster to record. Easier to check for transcription mistakes. More convenient for casual users.
- Cons: Less entropy than 24 words (so theoretically less resistant to brute-force attacks).
- 24 words
- Pros: Stronger entropy. Better long-term resilience for high-value holdings.
- Cons: More words to record, increasing human error risk.
Who should pick which? If you store small amounts or trade frequently and prefer convenience, 12 words can be acceptable if paired with strong physical backups and safe storage. If you’re holding significant value for years, I believe 24 words are the more conservative choice.
And remember: a longer phrase doesn’t protect you from phishing, theft, or accidental exposure — only from brute-force recovery attacks.
Passphrase (the 25th word) — benefits and risks
Many wallets let you add an optional passphrase on top of the seed phrase (often called a 25th word). This creates a new hidden wallet derived from the same seed.
Benefits:
- Adds another factor: even if someone obtains your printed seed phrase, they can’t access funds without the passphrase.
- Can create multiple hidden vaults from the same physical seed (useful for plausible deniability).
Risks:
- If you forget the passphrase, those funds are irrecoverable. No customer support can restore it.
- Managing passphrases adds operational complexity during transactions and backups.
If you plan to use a passphrase, document the procedure in a secure way (not the passphrase itself) and test recovery on a spare device. See passphrase-25th-word for practical advice on storing and using passphrases.
Backups: paper, metal backup seed phrase, and plates
Paper is common because it’s cheap. But paper frays, burns, and disintegrates. Metal backups are more durable. I recommend thinking in terms of survivability: can your backup survive fire, flood, and long-term oxidation?
Options:
- Paper backup — cheap, simple, but brittle and vulnerable to water/fire.
- Metal backup seed phrase (stamped/engraved) — expensive upfront but far more durable.
- Recovery phrase backup metal plate — often designed to accept word tiles or stamps; resists fire and corrosion.
| Method |
Durability |
Ease of setup |
Typical risks |
| Paper |
Low |
Very easy |
Fire, water, physical decay, easy to photograph |
| Metal plate (stamped/engraved) |
High |
Moderate |
Cost, initial effort, theft if not hidden |
| Metal tile kit |
High |
Moderate |
Assembly mistakes, tiles falling out |
Practical tip: store multiple metal backups in geographically separated secure locations (for example, safety deposit box + home safe). But also consider inheritance planning — who will know how to use them?
SLIP-39 (Shamir) as an alternative
SLIP-39 (often called Shamir backup) splits a seed into multiple shares with a threshold (eg. 3-of-5). That solves single-point-of-failure for backups and supports group or family recovery without one master seed lying around.
Limitations: SLIP-39 is not universally supported across all wallets. That means you should confirm compatibility before choosing it as your only backup method. For more on multisig and compatibility, see multisig-setup-compatibility.
But SLIP-39 is powerful for business or family scenarios where you want distributed recovery without a single recovery phrase lying around.
How to: Create & verify a seed phrase — Step by step
- Power on the device and choose to create a new wallet.
- Select the seed phrase length (12 or 24) when prompted.
- The device will display words one page at a time. Write them down in order on your chosen medium (paper first, then consider a metal backup).
- Confirm the words when the device asks — this reduces transcription errors.
- If offered, opt into a passphrase only if you fully understand the risks.
- Create and test a small transfer to verify the backup works by restoring on a spare device (this is critical).
For details specific to initial setup, see the full device setup guide and restore & recovery pages.
Common mistakes and hard-won practices
- Buying from unofficial sellers. Don’t. See where-to-buy-safely.
- Photographing a seed phrase (it gets backed up in cloud services).
- Storing the only copy in a single physical location.
- Using passphrase carelessly (forgetting it).
What I've found helps: practice a full restore to a spare device within a week of setup. That test exposes transcription errors when they are still fixable.
Who this device is best for — and who should look elsewhere
Who it suits:
- People who want a mobile-capable, non-custodial hardware wallet with a well-documented setup process.
- Users comfortable with physical backups and basic operational security.
Who should look elsewhere:
- If you don’t want to manage physical backups at all, a custodial service is a different product type (and not what this guide covers).
- If you need universal SLIP-39 support or complex multisig by default, consider solutions that explicitly advertise those features and confirm compatibility (see multisig-setup).
FAQ
Q: Can I recover my crypto if the device breaks?
A: Yes — if you have your seed phrase and any passphrase used. Restore the seed on another compatible hardware wallet or software wallet that supports the same standard. See recover-if-broken.
Q: What happens if the company behind the device goes bankrupt?
A: Nothing to your private keys. As long as you hold the seed phrase, you control access. Company failure may affect firmware updates or app support, so consider recovery routes and firmware verification elsewhere (see company-bankrupt).
Q: Is Bluetooth safe for a hardware wallet?
A: Bluetooth increases the attack surface compared with USB-only, but the critical signing operations typically occur on the secure element inside the device. Still, if Bluetooth concerns you, use USB or a fully air-gapped workflow. See connectivity-bluetooth-usb for details.
Conclusion & next steps
Seed phrase management is about trade-offs: convenience vs entropy, durability vs cost, and recoverability vs secrecy. For long-term high-value holdings I favor a 24-word seed plus a metal backup (and a tested recovery procedure). For smaller balances, a 12-word seed with a robust backup can be fine.
But don’t take my word alone. Test your restore process, consider a passphrase only if you can reliably store it, and review the device's firmware update and security architecture pages before committing large amounts.
Read the full device review, or jump to the unboxing and setup walkthroughs: Full review · Unboxing & initial setup · Passphrase deep dive
Small action: make a test restore this weekend. It takes less time than you think. And you'll sleep better.
