Prices: CoinGecko

Seed storage comparisons: paper, steel, Shamir, multisig and seedless backups

Compare ways to back up a crypto seed phrase: paper, steel plates, tile capsules, Shamir shares, multisig and seedless cards, by cost, durability and risk.

Beginner10 min readUpdated October 4, 20266 sources
On this page
  1. Why backups fail
  2. Backup methods compared
  3. Method comparison at a glance
  4. What independent stress tests show
  5. Representative products
  6. Where to store your backup
  7. Inheritance planning basics
  8. Quick backup checklist

Key takeaways

  • Your backup matters more than your device: anyone with your seed phrase can take your crypto, and losing it can mean losing everything.
  • In independent torch, acid and crush tests, single steel or titanium plates marked with a punch or stamp generally held up better than designs built from loose letter tiles.
  • Shamir shares and multisig remove the single point of failure but add complexity; practice recovery before relying on them.
  • Store backups in at least two separate secure places and leave clear, non-secret instructions so a trusted person can act if something happens to you.

Your seed phrase is the master key to your crypto, so how you store it matters more than which wallet you buy. This guide compares the main backup methods on durability, cost, ease and failure modes, then lists representative products checked as of October 2026.

Why backups fail

When people lose self-custodied crypto, the cause is rarely a hacked device. It is usually a backup that was lost, destroyed, misread or found by someone else. Every storage method trades between two risks:

  • Loss: fire, flood, a move, a mistake, or nobody knowing where the backup is after you die.
  • Theft: a visitor, burglar, relative, or a scammer who tricks you into typing the words online.

More copies reduce the risk of loss but increase the risk of theft. The methods below handle that trade-off differently. If you are new to recovery phrases, read our seed phrase guide first.

Backup methods compared

Paper

Every hardware wallet ships with a paper card for writing down your words. It costs nothing and is easy to fill in correctly. Its weaknesses are obvious: paper burns well below house-fire temperatures, ink smears in water, and a card can be thrown out by accident. Paper is fine as a starting point or as one copy among several, but rarely as your only backup.

Stamped or engraved metal plates

You mark each word, or its first four letters, into a steel or titanium plate with letter stamps or an engraver. Thick plates of stainless steel or titanium generally survive heat that destroys paper. Stamping is slow and noisy, and a typo is permanent, so take your time and double-check every word.

Punch-dot grid plates

These plates have a pre-printed grid of letters or numbers. You mark your words by striking dots with a center punch. They are faster than stamping, need fewer tools, and in Lopp's tests many single-plate designs earned A grades for heat, corrosion and crush resistance. Lopp himself describes simple punch-dot plates as the best value. The main risk is punching the wrong dot, so mark lightly first if the product allows it.

Letter-tile capsules and cassettes

You slide individual steel letter tiles into a capsule or folding case. No tools are needed and the backup can be rearranged or reused. The trade-off is many small parts. In Lopp's crush and heat tests, some tile designs let tiles shift, jam or spill, which can make the words hard to recover. Capsule-style designs generally fared better than open cassettes.

DIY washers and bolts

Some people stamp letters onto stainless steel washers and bolt them together. Lopp's tested DIY versions scored well when made from stainless steel. This approach is cheap but takes effort, and the wrong metal or loose ordering can cause problems.

Shamir split backups (SLIP-39)

Shamir backup splits your wallet secret into several shares, each its own list of words, and any chosen threshold, such as 2 of 3, restores the wallet. One found share reveals nothing useful, and losing one share is survivable. Trezor supports this as Multi-share Backup, and Keystone and current COLDCARD firmware offer Shamir options. The catch is that SLIP-39 shares are not compatible with standard BIP-39 wallets, and you now have several locations to manage.

Multisig

Multisig uses several independent keys, for example 2 of 3, each with its own device and backup. A thief needs more than one key, and you can lose one without losing funds. It is the strongest option for large balances, but you must also back up the wallet configuration (sometimes called a descriptor), and inheritance becomes more complex. Learn the tools with a small amount before relying on it.

Seedless, card and recovery-service systems

Some systems avoid a written phrase. Tangem clones one key onto two or three NFC cards, so any card can restore the wallet, with an optional seed phrase for advanced users. Ledger Recover is an optional, identity-verified paid service that encrypts your key, splits it into three fragments and stores them with Coincover, Ledger and EscrowTech; two fragments rebuild the key on a Ledger device. These systems remove the burden of writing words, but they add trust in a company, its app or its partners. Card durability against fire has not been independently tested to the same standard as steel plates.

Passphrase considerations

A passphrase is an extra word or sentence added to your seed that opens a separate wallet. Someone who finds your 24 words but not the passphrase sees only an empty or decoy wallet. However, the passphrase is not stored on most devices, so it needs its own backup kept apart from the seed. Every letter, space and capital must match exactly; a forgotten passphrase means permanent loss.

Method comparison at a glance

Seed backup methods compared (as of October 2026)
MethodTypical costFire and floodEffortMain failure mode
Paper cardFreePoorLowBurns, smears, gets discarded
Stamped/engraved plateAbout $25–$150Strong for thick steel or titaniumHighStamping typos
Punch-dot plateAbout $40–$100Strong in independent testsMediumWrong dot punched
Tile capsule or cassetteAbout $50–$250Heat-resistant; some designs weak when crushedMediumTiles shift or spill
Shamir shares (SLIP-39)Cost of extra platesDepends on each share's storageMediumToo many shares lost; incompatible wallets
MultisigExtra devices and platesDepends on each backupHighMissing wallet configuration; complexity
Seedless cardsAbout $60–$70 per setNot independently verifiedLowAll cards lost; vendor dependence
Recovery serviceSubscriptionNot applicableLowThird-party and identity risk

Cost ranges are rounded from the official prices in the product table below.

What independent stress tests show

Bitcoin security engineer Jameson Lopp has stress-tested 75 metal backup devices. His method is deliberately harsh: a propane torch at about 2,000°F (1,093°C) for up to 10 minutes followed by a cold-water dunk, 12 hours in 16% muriatic acid, and a 20-ton hydraulic press. He calls the grading informal, but it is the most widely cited public comparison.

His broad findings, as published in October 2026:

  • Many simple single plates, including Blockplate, Seedplate, CRYO, Cryptotag Zeus and BitBox's Steelwallet, earned A grades across heat, corrosion and crush.
  • The Cryptosteel Capsule scored A- overall, losing points in the crush test.
  • The Billfodl scored C overall (C for heat, D for crush), and the Keystone Tablet Plus scored C, failing the heat test.
  • He advises avoiding any product where the maker could learn your key, and favoring simpler designs because more parts mean more ways to fail.

Products are often redesigned, so a current unit may differ from the one tested. Treat the grades as a guide, not a guarantee.

Representative products

These are examples by category, not endorsements. Prices are official list prices checked in October 2026; some were sale prices.

Seed storage products (official prices, October 2026)
ProductTypeMaterialPriceLopp grade
Trezor Keep Metal 20-wordPunch frame (SLIP-39)Stainless steel$99Not tested
Trezor Keep Metal Multi-sharePunch frames for Shamir sharesStainless steel$297 ($267 on sale)Not tested
Cryptosteel Seed24Tile capsuleStainless steel$50 (sale)A- (earlier Capsule)
BillfodlTile cassette316 stainless steel$99C
BlockplatePunch-dot plateStainless steelNot verifiedA
Coinkite SEEDPLATE 24Punch-dot plateSteel$59.97 (sale)A
Cryptotag ZeusStamped plates6 mm titanium$149A
CRYO CardPunch-dot plates2 mm stainless steel$49.99A
ColdTi Double Plate SetEngrave or stamp platesGrade 2 titanium$25.99C
Keystone Tablet PunchPunch plateMetal$39B
BitBox SteelwalletPunch-dot sheetsStainless steelEUR 65 (USD not shown)A

Blockplate's official store was unavailable when we checked, so we could not confirm a current price. Trezor's Keep Metal line does not appear in Lopp's published list. For device-side backup features, see our hardware wallet comparison.

Where to store your backup

A great plate in a bad place is still a weak backup. Common, reasonable options include:

  • A home safe that is bolted down and rated for fire. Remember that many inexpensive safes are designed to protect paper documents, not to stop a determined thief.
  • A second location you control or trust, such as a relative's home or a safe deposit box. Bank boxes protect against home disasters but can be hard to reach quickly, and box contents are not covered by FDIC insurance.
  • Geographic separation for Shamir shares or multisig keys, so one fire, flood or burglary cannot reach your threshold.

Avoid obvious spots like a desk drawer, and never store words in email, cloud drives, phone photos or password managers.

Inheritance planning basics

If you die or become incapacitated, a perfect backup is useless if nobody knows it exists or how to use it. Some simple steps help:

  1. Write a letter of instructions that lists what you hold, which wallet and device types you use, where backups are located, and whom to contact. Do not put the seed words themselves in the letter.
  2. Tell at least one trusted person that the letter exists and where to find it.
  3. Use structures that avoid a single point of failure, such as a 2-of-3 Shamir backup or multisig where an heir or professional holds one part.
  4. Talk to an estate attorney about wills, trusts and how digital assets are handled where you live. Avoid naming specific holdings in a will, because wills can become public records during probate.
  5. Review the plan yearly and whenever you change devices or wallets.

Quick backup checklist

  • Create your seed on the device, never on a website or phone app.
  • Write it on paper first, verify it with the device, then copy it to metal.
  • Read the metal copy back word by word and check it against the official word list.
  • Store copies in at least two secure, separate places.
  • Back up any passphrase separately from the seed.
  • Test a recovery on a spare or reset device with a small amount.
  • Leave clear, non-secret instructions for your heirs.

If something has already gone wrong, our wallet recovery guide walks through what can and cannot be recovered, and our risk management guide covers the bigger picture.

Frequently asked questions

Is a paper backup good enough?

Paper works if it stays dry, readable and secret, but it burns, smears and fades. Many people keep paper as one copy and add a metal backup for fire and flood protection.

Can I store my seed phrase in a password manager or a photo?

Security guides from wallet makers advise against it, because anything stored online or on a phone can be hacked or synced to the cloud. Keep recovery words offline.

Should I split my 24 words into two halves?

Splitting a standard phrase into halves is risky: each half leaks part of the secret and you need both halves to recover. Use a purpose-built scheme such as SLIP-39 Shamir shares or multisig instead.

What is the best metal seed storage?

There is no single best product, but in Jameson Lopp's independent tests many simple single-plate punch or stamp designs earned top marks for heat, corrosion and crush resistance. Choose one you will fill in carefully and can read easily later.

Sources

  1. Metal Bitcoin Seed Storage Reviews — Jameson Lopp
  2. Stress Test Methodology — Jameson Lopp
  3. Multi-share Backup on Trezor — Trezor
  4. Trezor Keep Metal 20-word — Trezor
  5. Tangem Wallet — Tangem
  6. Ledger Recover FAQs — Ledger Support

Updated October 4, 2026 by The Crypto Guide editorial team. Educational content, not financial, legal or tax advice. Spot an error? Request a correction.