What Is a Seed Phrase, and How Do You Store It Safely?
If you set up a self-custody crypto wallet, at some point it showed you a list of words and told you to write them down. That list is your seed phrase (also called a recovery phrase or secret recovery phrase). It's the single most important thing to protect in crypto, and it's the thing scammers want most.
This guide explains what a seed phrase is, how to store it so it survives real life, and how to spot the tricks designed to get it out of you.
What a seed phrase actually is
A seed phrase is a human-readable backup of your wallet's private keys. Most wallets use a standard list of words and give you 12 or 24 words in a specific order. From those words, the wallet can rebuild every key and address it controls, on any compatible device.
That has two consequences:
- If your phone or hardware wallet is lost, broken or stolen, the phrase lets you restore your wallet. Without it, the crypto in a self-custody wallet is usually gone for good.
- Anyone else who gets the phrase can restore your wallet on their own device and move everything in it. They don't need your password, your PIN or your phone.
The SEC's investor office puts it plainly: store your seed phrase in a secure place and don't share it with anyone (SEC Investor.gov).
If your crypto is on an exchange account, you usually don't have a seed phrase; the exchange holds the keys. That's a different trade-off, covered in custodial vs. non-custodial wallets.
The rules that matter most
- Nobody legitimate will ever ask for it. Not wallet support, not an exchange, not a government agency. The CFTC says it would never ask for your private keys or seed phrases (CFTC). Anyone who asks is trying to steal from you.
- Never type it into a website. The only time you enter it is when you are restoring a wallet, in the official app you installed yourself.
- Keep it offline. No photos, screenshots, notes apps, email drafts, text messages, password-manager notes or cloud documents. Anything connected to the internet can be hacked, synced or phished.
- Write it exactly. Every word, in order, spelled correctly. Most wallets ask you to confirm it during setup. Don't skip that step.
How to store it so it survives real life
Think about two threats: someone else finding it, and you losing it to fire, flood, a move or simply forgetting where it is.
Start with paper, done carefully
Write the words clearly on the recovery card that came with your wallet or on plain paper, number them, and double-check against the screen. Store it somewhere private and protected from water and heat. A fire-resistant safe or a location only you control is a common choice.
Consider metal for durability
Paper burns and smudges. Many people later copy their phrase onto a metal backup plate (stamped or engraved) so it survives fire and water. If you go this route, buy only from the maker's official site and never from a listing that arrives "pre-filled." A legitimate device or backup never comes with words already on it.
Think about one backup in a second location
A single copy is a single point of failure. Some people keep a second copy in a separate secure place. Each extra copy is another thing that could be found, so the trade-off is yours to weigh.
Plan for the people who'd need it
If something happened to you, would anyone know the crypto exists, or how to reach it? Many people leave instructions with their estate documents explaining where the backup is, without writing the words into the will itself (wills can become public records). This is worth discussing with an estate attorney.
An optional extra layer: a passphrase
Some wallets let you add your own passphrase on top of the seed phrase (sometimes called a "25th word"). Anyone who finds the 12 or 24 words still can't open that wallet without the passphrase. The catch: if you forget the passphrase, no one can recover it. Treat it as an advanced step, not a default.
Scams designed to steal your seed phrase
- Fake support. You post about a problem and a "support agent" messages you first, then asks you to "verify" your wallet. Real support doesn't DM you first. See common crypto scams.
- "Validate" or "sync" your wallet sites. Emails or pop-ups claiming your wallet must be validated, upgraded or synced by entering your phrase. Always a scam.
- Fake wallet apps. Look-alike apps in app stores or search ads that steal the phrase when you "restore." Download only from links on the maker's official site.
- Pre-seeded hardware wallets. A device that arrives with a recovery card already filled in. Don't use it; set up a new wallet that generates its own phrase.
- Airdrop or giveaway claims that require you to "connect" by typing your phrase.
The FTC's guidance applies across all of these: only scammers demand crypto payments or promise guaranteed returns, and you should be suspicious of any unexpected contact about your crypto (FTC).
What to do if you think your phrase was exposed
If you typed it into a website, photographed it, or someone else saw it, assume it's compromised.
- Set up a brand-new wallet with a brand-new seed phrase, on a device you trust.
- Move your crypto to the new wallet as soon as possible, starting with a small test transaction.
- Stop using the old wallet.
- If money was taken, report it to the FBI at ic3.gov and the FTC at ReportFraud.ftc.gov, and watch for the follow-up "recovery" scam described in crypto recovery scams.
Learn the safety basics in our free 5-Day Safety Starter (opening soon)
Sign up for our free 5-Day Crypto Safety Starter (opening soon). It covers wallets, seed phrases and the scams aimed at beginners, one short lesson at a time. If you're setting up for the first time, start with how to set up a crypto wallet safely. The full course goes deeper in Module 2 (wallets) and Module 6 (security); see the curriculum.
FAQ
What is a seed phrase in crypto?
A seed phrase is a list of words, usually 12 or 24, that backs up a self-custody wallet's private keys. With it, the wallet can be restored on any compatible device, which is why anyone who has it can control the crypto.
Where should I store my seed phrase?
Offline, written exactly, in a private place protected from fire and water, such as a fire-resistant safe. Many people also use a metal backup. Never store it in photos, email, notes apps or cloud storage.
Is it safe to store my seed phrase in a password manager?
Most security guidance says to keep the seed phrase fully offline. A password manager is still an online account that can be phished or breached, so it adds risk for the one secret that controls your crypto.
Will a wallet company or exchange ever ask for my seed phrase?
No. Legitimate support teams, exchanges and government agencies never ask for it. Anyone who asks for your seed phrase is attempting a scam.
What happens if I lose my seed phrase?
If you can still open the wallet, create a new wallet with a new phrase right away and move your crypto to it. If you've lost both the device and the phrase, the crypto in a self-custody wallet usually can't be recovered.
What's the difference between a seed phrase and a password?
A password unlocks an app on one device. A seed phrase rebuilds the whole wallet on any device. Changing your password doesn't protect you if someone has your seed phrase.
Sources
- SEC Office of Investor Education and Assistance, "Crypto Asset Custody Basics for Retail Investors," Dec 12, 2025: https://www.investor.gov/introduction-investing/general-resources/news-alerts/alerts-bulletins/investor-bulletins/crypto-asset-custody-basics-retail-investors-investor-bulletin-0
- CFTC, "Beware Imposters Posing as CFTC Officials": https://www.cftc.gov/LearnAndProtect/AdvisoriesAndArticles/Beware_Imposters
- FTC, "What To Know About Cryptocurrency and Scams": https://consumer.ftc.gov/articles/what-know-about-cryptocurrency-scams
Education only, not financial advice. Crypto is volatile and you can lose money. Catalysts Creative Crypto doesn't recommend specific coins, wallets or exchanges.