Your seed phrase is the whole account

You will be able to store a seed phrase safely and recognise every common way people lose one.

When Farah set up her phone wallet, the app showed her twelve ordinary words and asked her to write them down. She took a screenshot instead, because it was quicker, and tapped through. The screenshot now sits in her photo gallery, which backs up automatically to the cloud. Without knowing it, she has made a copy of the only thing that controls her coins and handed it to every device and account that can see her photos.

Twelve words that are the whole wallet

A seed phrase, also called a recovery phrase, is a list of words, usually 12 or 24, that a wallet generates when you set it up. The words come from a fixed public list, and their order encodes a very large random number. From that number the wallet can work out every private key it will ever use, for every address it creates.

That makes the phrase the master copy of the wallet. Lose your phone and buy a new one, type the phrase into a compatible wallet, and all your keys come back, along with access to everything they control. That is the point of it, and it is also the danger. Anyone else who types those words into a wallet gets exactly the same access, from anywhere in the world, without your phone, your password or your face ID. Nobody can reverse what they then do, as you saw in lesson 1.2, Why proof of work makes the ledger hard to rewrite.

Some wallets let you add an extra passphrase on top of the words, so that the phrase alone is not enough. That adds protection and adds one more thing you can forget. If you use one, it needs its own safe storage.

Four rules for keeping it safe

Every way of losing a seed phrase breaks one of four rules, so it helps to hold them in your head as a set.

First, never type the phrase into a website, a form or any app except the wallet itself, and only when you are restoring that wallet. Fake wallet sites and fake "verify your wallet" pages exist only to collect phrases.

Second, never keep a digital copy. That means no photo, no screenshot, no note in a phone app, no email to yourself and no file in cloud storage. Any digital copy can be reached by malware or by anyone who gets into the account it sits in. Farah's screenshot breaks this rule.

Third, never give it to anyone. No genuine exchange, wallet maker or support agent will ever ask for your seed phrase, because none of them needs it to help you. Anyone who asks, however official they look, is trying to take your coins. That includes people who message you after you post a question about a wallet problem online.

Fourth, store it offline in at least two secure places. Paper burns and gets wet. A single notebook in a single drawer can be thrown out during spring cleaning. Two copies in separate places, such as one at home and one with a person or in a location you trust, protect you from one disaster wiping out access. Some people engrave the words on metal plates that survive fire and flood better than paper.

The common ways people lose access

Most losses are not dramatic hacks. They are ordinary mistakes against those four rules.

People photograph the phrase "just for now" and forget it is there. They store it in a password manager or a notes app that syncs to the cloud. They type it into a site they reached through a search ad that looked like the wallet's real page. They give it to a "support agent" in a chat group. They write it on the only piece of paper and lose it in a move. Or they keep it so secret that when they die, nobody in their family knows it exists. Lesson 4.4, Write your custody and inheritance plan, deals with that last one.

Notice that the first four involve the phrase getting into someone else's hands, while the last two involve it getting out of yours. Safe storage has to guard against both. A phrase locked in a place nobody can find is as lost as one that was stolen.

Farah's fix

Farah's screenshot cannot be made safe by deleting it. It may already exist in cloud backups and on other devices. The careful fix is to treat the old phrase as exposed: set up a new wallet with a fresh phrase, written on paper and never photographed, then move the coins from the old wallet to the new one. Once the transfer is confirmed, the old phrase controls an empty wallet.

She then makes a second paper copy of the new phrase and stores it somewhere separate from the first. Neither copy says what it is for on the outside. Both are in places she and one trusted person can find.

Checking your own setup

If you hold any crypto in a wallet you control, you have a seed phrase somewhere, whether or not you remember writing it down. If all your crypto sits on an exchange, you may have none, and that is fine. Your next step is to find out which is true, and for each phrase you have, where every copy of it actually is.

Write down where your seed phrases are stored today, if you have any, and mark each storage method safe or unsafe against the four rules.

Course

Junxiong-WFG Organisation is an authorised representative of AIA Financial Advisers Private Limited (Reg. No. 201715016G).