Seed Phrase Safety: What to Do and What Never to Do

When you create a self-custody wallet, the app shows you a list of 12 or 24 words. That list is your seed phrase, also called a recovery phrase. It is not a password. It is the master key: from those words, any wallet app can rebuild your accounts and spend everything in them. This is the one thing in crypto where a small mistake can cost you everything, and the rules are short.

What the seed phrase does

Your wallet app holds keys that sign transactions. The seed phrase is how those keys are made, and how they are restored if you lose your phone. That is useful: if the phone is stolen, you can recover on a new one. It is also dangerous, because the words work for anyone who has them. There is no support line that can reverse a transfer or reset them. You are the bank, and the backup is your responsibility.

What to do

1. Write it on paper, by hand, when the app shows it. Copy every word in order and check the spelling against the app. Numbering the words helps.
2. Store it offline, in a place only you can reach. A fireproof box at home is a common choice. Many people make two copies and keep them in separate places, so one accident cannot destroy both.
3. Consider metal for larger amounts. Paper burns and fades. Stamped steel plates survive fire and water.
4. Test your backup. Before you put real money in a new wallet, restore it on another device with a small amount. This proves that what you wrote is correct.
5. Use a hardware wallet for serious amounts. It keeps the keys on a separate device that never exposes them to your computer or phone.
6. Keep the seed phrase separate from the device. A phone and the paper that unlocks it should not be in the same bag.

What never to do

• Never type it into a website or an app. Fake sites, fake support chats and fake "wallet validation" forms all work the same way: they ask for the words. A real wallet never asks you to enter your seed phrase outside the moment you restore it in the wallet app itself.
• Never photograph it, screenshot it or save it in a notes app, an email, a messaging app or a cloud drive. Those copies are synced, backed up and often readable by other devices. A seed phrase that has ever touched the internet should be treated as exposed.
• Never share it with anyone. Not with a friend, not with someone helping you "recover" funds, not with support. Nobody legitimate needs it.
• Never accept a seed phrase you did not generate. A pre-written phrase that comes with a wallet or a "gift" is already known to the person who gave it to you.
• Never store it where a stranger could find it quickly. A drawer next to your computer is not a plan.

Password, PIN and seed phrase are different

The password or PIN of your wallet app protects the app on that one device. The seed phrase rebuilds the whole wallet on any device. Losing the password costs you a restore. Losing the seed phrase to a thief costs you everything. Keep that difference in your head and the rules above make sense.

If someone has seen it

Assume the worst and act the same day. Create a new wallet with a new seed phrase, and move your funds there, starting with the most valuable. Do not wait to see whether anything happens, because thieves often wait, and sometimes use automatic tools that empty a wallet the moment funds arrive. Check How to Spot Common Crypto Scams to see how people usually get tricked.

A simple test

Ask yourself: has any copy of these words ever been on a screen that is online? If yes, make a new wallet. If no, you are in a good position. When you are ready to try a transfer, How to Send USDC on Base walks through one with a small test amount.

FAQ

Is a seed phrase the same as a wallet password?

No. A password protects the app on one device. The seed phrase (12 or 24 words) recreates your wallet and every account in it on any device, so whoever has it controls the funds, whatever the password.

Can I store my seed phrase in a notes app, a photo or a cloud drive?

No. Anything that is online or backed up automatically can be hacked, synced to other devices or seen by someone else. Write it on paper or stamp it on metal and keep it offline.

Will a wallet company or support agent ever ask for my seed phrase?

Never. Anyone who asks, in a message, a call or a website form, is trying to steal from you, however official they look.

What should I do if someone has seen my seed phrase?

Treat it as compromised. Create a new wallet with a new seed phrase right away and move your funds there, starting with the most valuable. The old wallet can never be made safe again.