A 12- or 24-word phrase is the difference between owning your Bitcoin and losing it forever. Here is exactly how to store it — and the seven methods most beginners use, ranked from worst to best.
When people lose Bitcoin, they almost never lose it because the price went to zero. They lose it because they mishandled twelve or twenty-four small words: the seed phrase. This article walks through the seven most common ways beginners try to store that phrase, ranks them from worst to best, and tells you which one to actually use depending on how much Bitcoin you own.
The good news: the “best” method takes about one Saturday afternoon and roughly eighty dollars in materials. The bad news: most people skip it and instead pick one of the worst options — usually because the wallet app made it feel optional.
A Bitcoin wallet’s seed phrase (also called a recovery phrase or mnemonic) is a list of 12 or 24 ordinary English words that mathematically encode the private keys for your wallet. From those words alone — on any phone, any laptop, anywhere in the world — anyone can recreate your wallet and move every Bitcoin in it.
Three things to internalize before you do anything else:
If you have not yet generated a wallet, stop and read our hardware wallet setup guide first — the seed phrase is generated by the wallet at creation. You don’t pick the words; the wallet shows them to you, once.
This is, year after year, the number-one way beginners lose Bitcoin. You generate the wallet, the app displays the 12 or 24 words, and instead of writing them down, you take a screenshot. The phone backs up to iCloud or Google Photos automatically. A year later your iCloud account is breached or phished, the attacker scrolls your photos, recognizes the format, and your Bitcoin is gone.
This is so dangerous that some hardware wallets actively block screenshots while showing the seed. If you have already done this, treat the wallet as compromised: generate a new one, move your funds, and never reuse the old phrase.
“I’ll just email it to myself for safekeeping” is functionally equivalent to handing your seed phrase to whoever runs your email. Gmail, Outlook, and your phone carrier are not designed to resist a determined attacker who has the rest of the kill chain (your password, a SIM swap, a session hijack). Any breach of your email account — and they happen constantly — ends with someone else holding your Bitcoin.
Sending the phrase to a spouse over iMessage or WhatsApp falls in the same bucket. The intent is reasonable; the medium is fatal.
A small upgrade over a screenshot, in that the words are plain text rather than a recognizable image. Still bad. Notes apps sync to the cloud by default. Apple Notes, Google Keep, OneNote, Notion, Evernote — all of them. Anyone who breaches your account reads the note.
If you absolutely must use this method short-term — say, you generated a wallet for a $50 test purchase — turn off cloud sync for the notes app first, and migrate to one of the lower-numbered methods within a week.
This is the floor of “actually acceptable.” A pen-and-paper backup completely removes the cloud attack surface. The risks shift to the physical world: fire, flood, a curious houseguest, a kid who throws away the “weird piece of paper.”
For small amounts (under one month of expenses in Bitcoin), paper-in-a-drawer is fine. Use a single sheet of regular printer paper, write each word clearly with a permanent ink pen, and label nothing. Do not write “Bitcoin seed phrase” at the top. Do not include the wallet brand. Do not include the date.
Same paper, but inside a small fireproof safe. You have now raised the bar for opportunistic burglars (a safe slows them down) and most house fires (typical home safes are rated for 30–60 minutes at fire temperatures, which is usually enough for fire crews to arrive). Combined with not labeling the paper, this is a solid setup for low-five-figure holdings.
The weakness: water. Most home safes are fireproof, not waterproof. Sprinkler systems and firefighter hoses ruin the paper inside even if the safe survives the heat. Putting the paper inside a small ziplock bag inside the safe partially solves this for cheap.
Stamped, etched, or punched into a steel plate, your seed phrase becomes immune to fire, water, rust, and most household disasters. Brands like Cryptosteel, Coldcard’s SeedPlate, Blockstream’s Jade backup, and the Stamp Seed kit are all fine. So is a $20 set of letter punches and a strip of stainless steel from a hardware store — the engineering is genuinely that simple, and homemade is sometimes more private because no order is in any database.
In a single location, you have solved every threat except theft and human error (“I lost it” or “I forgot which safe place I used”). Both still happen often enough that storing in only one place is a known risk.
Two metal backups, in two physically separated places. Common pairings:
The reason this is the gold standard: any single-location storage has a single point of failure. House fire, burglary, you forgetting which “very safe place” you used — all of these are fatal in one location and survivable across two. A determined attacker would need to compromise both locations simultaneously, which dramatically reduces the practical risk.
If you choose this method, label nothing. Do not tell anyone the phrase exists, where it is, or what it protects. The safest seed-phrase backups are the ones nobody knows about until they’re needed — which is also why you need to combine this with the inheritance plan in our Bitcoin inheritance guide, so the right person can find the backup at the right time.
Most modern wallets give you a 24-word seed phrase. Some let you choose 12. Both are fundamentally secure — 12 words is already 128 bits of entropy, which is uncrackable by every computer that currently exists or that anyone has reasonably projected. 24 words is more secure on paper, but the bigger practical issue is that 24 words is harder to back up correctly. More words means more chances for a transcription error.
Pick whatever your wallet defaults to. Don’t try to manually downgrade 24 words to 12, and don’t try to invent your own scheme. Stick to the standard the wallet vendor uses.
Most hardware wallets support an optional 25th word called a passphrase, which you choose. It works like this: your real wallet is “the seed phrase plus my passphrase.” Without the passphrase, the seed phrase recovers a different (often empty or decoy) wallet.
This is a powerful security upgrade. It also adds a powerful failure mode: if you forget the passphrase, the Bitcoin is gone. Your seed phrase alone won’t recover it.
For typical beginners, skip the passphrase until you genuinely understand what it does. For people holding meaningful Bitcoin in a region where physical coercion is a concern (the so-called “$5 wrench attack”), a passphrase combined with a decoy wallet is the standard answer.
The single most useful exercise most Bitcoin holders never do: take your seed phrase backup, walk to a different room, and try to recover the wallet from scratch on a fresh device or a wiped hardware wallet. If your written backup is wrong by even one word, you find out today — when you can fix it — instead of finding out years from now when you actually need it.
A wipe-and-recover test takes 10 minutes. Schedule it the day you first set up your wallet. Repeat it once a year, the same week you do daylight-saving clock changes, so you don’t forget.
If you own less than a month of living expenses in Bitcoin, paper in a drawer or a small fireproof safe is fine while you learn. If you own more than that, two steel backups in two physically separated locations is the standard most serious holders use. The cost of the upgrade is small. The cost of not upgrading is, eventually, every Bitcoin you own.
For the next layer up — deciding which wallet to use, what to do with the wallet itself, and how all of this connects — see our wallet security guide and the scam-avoidance guide.