A self-custody wallet can outlive its owner, but access does not transfer automatically. An heir may have legal authority to inherit cryptocurrency and still be unable to find the wallet, identify the backup format or reproduce an unknown passphrase. The opposite failure is equally dangerous: placing a complete seed phrase in an ordinary will, email or shared document can expose the wallet while the owner is alive. A good inheritance plan connects legal authority with a tested technical recovery path without concentrating every secret in one vulnerable place.
Last reviewed: September 24, 2026. Inheritance, probate, tax and fiduciary rules differ by jurisdiction and personal circumstances. This independent article explains technical and organizational planning, not legal, tax or financial advice. Coordinate the final plan with appropriately qualified local professionals without disclosing wallet secrets unnecessarily.
What is a seed phrase inheritance plan?
A seed phrase inheritance plan is a coordinated set of records, controls and instructions that lets an authorized person identify and recover a self-custody wallet after death or incapacity. It should answer five questions:
- What exists? Which wallets, networks and accounts may hold assets?
- Who is authorized? Which person or legal role may act, and under what conditions?
- Where is the recovery material? How can authorized people locate it without publishing it?
- What else is required? Is there a passphrase, threshold share, device or compatibility requirement?
- How is recovery verified? How will the heir confirm the correct wallet and move assets safely?
The plan is not merely a copy of twelve or twenty-four words. Recovery words without context can be mistaken for another wallet, restored with incompatible software or combined with the wrong passphrase. Instructions without the required secret are equally incomplete.
Legal ownership and technical control are different
An estate document can identify a beneficiary and authorize an executor, but a blockchain normally does not inspect probate documents before accepting a valid signature. Whoever controls the relevant private keys may be able to transfer the assets. This makes technical custody more powerful—and potentially more dangerous—than access to many ordinary accounts.
| Layer | What it establishes | Failure if omitted |
|---|---|---|
| Legal plan | Authority, beneficiary, duties and local succession process. | A person may recover assets but lack authority to use or distribute them. |
| Technical plan | Wallet discovery, recovery material, required factors and safe transfer steps. | An authorized heir may know assets exist but remain unable to access them. |
| Operational plan | Notification, document locations, verification and response to compromise. | Secrets may be exposed, overlooked or used in the wrong order. |
Do not assume that naming “all digital assets” in a will solves access. Do not assume that possession of a seed phrase settles ownership. Connect both layers through qualified advice and clear procedures.
Why a seed phrase should not be written directly in a will
A will may be handled by lawyers, witnesses, court personnel, executors, family members and other parties during administration. Depending on local procedure, some probate records may become accessible beyond the immediate household. A complete recovery phrase in such a document can turn an administrative record into a spending credential.
The legal document can describe the existence and intended treatment of digital assets while referring to a separately controlled technical memorandum or recovery location. The exact arrangement depends on local law; the security principle is that public or routinely copied paperwork should not contain an immediately usable wallet secret.
Avoid ordinary email attachments, cloud notes, photographs, unencrypted messages and shared family drives for the same reason. They create copies that are difficult to inventory or revoke.
Create a non-secret crypto inventory
The inventory helps an authorized person understand the wallet environment without granting immediate control. It can include:
- wallet or hardware-device name and model;
- blockchains and asset types used;
- whether the wallet is single-signature, multisig or multi-share;
- backup standard when known, such as BIP39 or SLIP39;
- word or share count, but never the words themselves;
- whether an additional passphrase is required;
- approximate account purpose rather than a constantly updated balance;
- location of official recovery instructions;
- date the process was last tested;
- the professional or trusted role to contact first.
A public address can help prove that the correct wallet was recovered, but it also reveals blockchain activity. Include one only when that verification benefit fits the privacy plan. Never place a private key, seed phrase or complete share set in the inventory.
Document every credential by its function
| Credential | Purpose | Inheritance significance |
|---|---|---|
| Device PIN | Unlocks a particular hardware device. | May provide immediate access but does not normally restore a lost device. |
| Seed phrase | Recreates wallet key material through a compatible process. | Often the central portable backup and must remain secret. |
| BIP39 passphrase | Combines with the mnemonic to derive a different wallet. | Without the exact passphrase, the expected wallet may not appear. |
| Application password | Protects local software or an encrypted file. | May be useful but is not necessarily the wallet backup. |
| SLIP39 share | Forms part of a threshold recovery set. | The required number of compatible shares must be found. |
| Multisig key or seed | Controls one signer in a multi-key policy. | Recovery also needs enough signers and wallet configuration. |
| Exchange login | Accesses a custodial account. | Usually requires the provider’s estate process rather than seed recovery. |
The heir must not confuse an exchange password with a wallet seed or a hardware-wallet PIN with a portable backup. Label each item’s function without attaching every secret value to the same explanation.
How BIP39 changes inheritance planning
BIP39 describes mnemonic sentences used to generate deterministic wallet seeds. A mnemonic may contain 12, 15, 18, 21 or 24 words under the specification, although wallet support varies. Word order, spelling and the selected wordlist matter.
The specification also allows an additional passphrase. Every passphrase creates a valid seed; a wrong entry generally does not display a simple “incorrect password” message. It derives another wallet, often one that appears empty. A plan that preserves the mnemonic but merely hints that “there may be another password” can therefore fail permanently.
Record that a passphrase exists and create a deliberate route to it. Do not call it a “25th word” if that wording could cause an heir to append it to the mnemonic or assume it must be one dictionary word. Capitalization, spaces and punctuation can all be significant.
Separate discovery, instructions, secrets and authority
A layered plan can reduce the chance that one lost document or dishonest person exposes everything:
- Discovery layer: tells family or the executor that self-custody assets and a plan exist.
- Instruction layer: identifies wallet type, recovery sequence, official software and verification steps.
- Secret layer: contains the seed phrase, required shares or access route.
- Authority layer: identifies who may act and the legal condition that activates the process.
These layers need not be stored together. Excessive separation can also be fatal, however. If nobody knows that a second component exists or where the instructions are held, strong security becomes permanent loss.
Compare inheritance storage models
| Model | Benefit | Main risk |
|---|---|---|
| Single sealed package | Simple for the authorized person to understand. | One theft or premature opening may expose everything. |
| Seed and passphrase stored separately | One location alone does not unlock the passphrase wallet. | Loss of either component makes recovery impossible. |
| Threshold shares in separate locations | Tolerates loss of some shares and avoids one complete copy. | Incorrect threshold, incompatible formats or unavailable custodians can block recovery. |
| Multisig with distributed signers | Can require cooperation and avoid one decisive key. | More complex policy, signer and descriptor recovery. |
| Professional custody arrangement | May integrate legal administration and support. | Introduces provider, fee, jurisdiction and continuity risks. |
The best structure is the simplest one that addresses the owner’s actual risks. Adding shares, passphrases and signers without a clear operational reason can make a plan impressive but unrecoverable.
Physical storage options
Home safe
A suitable safe can protect against casual theft and some environmental hazards while remaining accessible. Evaluate fire rating, mounting, moisture and who knows the access method. Avoid storing the device, complete backup and plain instructions together if one burglary would expose all components.
Bank safe-deposit box
A box can provide geographic and physical separation, but access after death or incapacity depends on the institution and local law. Hours, identity checks, account status and closures may delay recovery. Confirm permitted contents and authorized-access procedures instead of assuming an heir can open it immediately.
Trusted professional
A lawyer or another regulated professional may hold instructions or a sealed component when allowed and appropriate. Confirm confidentiality, succession if the professional retires, document-return procedures and whether the arrangement creates prohibited custody or liability.
Trusted person
A family member can preserve a component or location instruction, but trust can change through conflict, coercion, financial difficulty or relationship breakdown. The person should understand preservation duties without receiving more information than required.
Paper versus metal backup for heirs
Paper is inexpensive and easy to read but vulnerable to fire, water, tearing, fading and accidental disposal. A metal backup can improve resistance to some physical hazards, yet it does not protect against copying, coercion or incorrect transcription. Anyone who reads a complete usable backup may control the wallet.
- Number words or shares clearly.
- Preserve exact spelling and order.
- Avoid decorative handwriting that creates ambiguity.
- Do not engrave identifying balances beside the secret.
- Inspect the backup periodically without photographing it.
- Replace damaged media before it becomes unreadable.
Should an heir receive the seed phrase now?
Giving an heir the complete phrase during the owner’s lifetime provides immediate recovery capability—and immediate spending capability. It can also expose the wallet through the heir’s phone, home, partner, creditors or compromised accounts.
Early disclosure may be appropriate in a carefully designed joint-control arrangement, but it should not occur merely because the heir is trusted. Consider whether sealed instructions, threshold shares, multisig or a professional activation process better fits the goal.
Trust is only one dimension. Also consider competence, storage security, coercion, accidental disclosure and what happens if the heir dies first.
SLIP39 and multi-share backups
A proper threshold scheme divides recovery capability into shares and defines how many are required. A three-of-five arrangement, for example, can tolerate the loss of two compatible shares. Fewer than the threshold should not reconstruct the secret.
Do not manually divide a BIP39 list into arbitrary fragments and call it a threshold backup. Manual splitting can reveal useful portions, provide no error checking and create a brittle all-parts requirement. Use a wallet-supported standard and document its name, threshold and compatible recovery process.
An inheritance record should identify the number of shares, required threshold, storage roles, any grouped thresholds, compatible recovery hardware and whether a separate passphrase remains necessary. Never collect live shares inside an online tool merely to prove they work.
Multisig inheritance planning
A multisignature wallet requires a defined number of signing keys, such as two of three. Keys can be distributed among the owner, heir and independent party so one holder cannot move funds alone.
Multisig recovery needs more than seed phrases. The heir may need the wallet policy, cosigner public keys, derivation information, script type and account configuration. Some wallets package this as a descriptor or configuration file. That information may not authorize spending by itself, but losing it can make reconstruction difficult.
Test the exact recovery method before funding substantially. Understand what happens if a signer, device vendor or coordination service disappears. A hosted coordinator should not be the only route to reconstruction.
Define responsibilities without granting unnecessary access
| Role | Possible responsibility | Information boundary |
|---|---|---|
| Owner | Maintains wallet, plan and testing schedule. | Knows the complete design and detects changes. |
| Beneficiary | Receives assets under the estate plan. | Need not hold the complete secret in advance. |
| Executor | Administers the estate under applicable law. | May need discovery and authority documents, not personal use of assets. |
| Technical helper | Explains compatible recovery and transaction verification. | Should not receive enough information to transfer assets alone. |
| Share custodian | Preserves one threshold component. | Needs activation procedure, not necessarily the entire wallet. |
One person can hold several roles, but separating them may reduce unilateral risk. The arrangement must remain understandable and legally workable.
Write instructions an heir can follow
Assume the reader understands ordinary technology but not wallet terminology. Avoid vague instructions such as “restore the cold wallet.” A useful document can state:
- the wallet or hardware-device model originally used;
- the backup standard and word or share count;
- whether a separate passphrase exists;
- where to find official recovery documentation;
- which networks and account types should appear;
- a non-secret method for recognizing the correct wallet;
- who has authority and who can provide technical assistance;
- that no support agent needs the seed phrase;
- that recovered assets should be moved to a newly secured wallet.
Do not use a live advertising or search-result link as the only software source. Record the official project name and domain and instruct the heir to confirm current documentation independently.
Test the plan without exposing the real wallet
A document that has never been tested is an assumption. Conduct a tabletop exercise in which the authorized participant explains where to begin, what components exist and how legitimate recovery software would be identified.
For hands-on practice, use a separate test wallet containing no meaningful assets. Let the future helper practice identifying the backup type, using a verified workflow, confirming a known address, distinguishing a PIN from a seed phrase, rejecting a phishing request and creating a new destination wallet.
The live backup should be checked separately through a device-native verification or controlled recovery process. Never wipe the only working device merely to test inheritance instructions. Our separate guide, How to Verify a Seed Phrase Backup Without Exposing Your Wallet, explains that process in detail.
What the heir should do after recovery
A phrase involved in estate administration may be handled by several people or exposed outside its original storage model. Treat it as potentially compromised. After authority is confirmed and necessary records are preserved, create a new wallet with newly generated recovery material and transfer assets through carefully verified transactions.
- Confirm legal authority before moving assets.
- Inventory networks, tokens, staking positions and pending activity.
- Use trusted hardware and official wallet software.
- Verify that restored addresses match the documented wallet.
- Create a new wallet whose seed was never part of the old plan.
- Send a small test transfer where appropriate.
- Verify the destination on a trusted display.
- Move remaining assets and retain transaction records.
- Address reporting and distribution duties with qualified advisers.
Some assets may be locked in staking, smart contracts, multisig policies or time-based arrangements. Do not assume every visible balance can be transferred through the same process.
Prepare for incapacity as well as death
An emergency-access plan may need to operate while the owner is alive but unable to communicate. Define who can determine incapacity, what evidence activates access and whether actions are limited to preservation rather than distribution.
Do not use an informal “if I do not reply, take the seed” instruction without considering false alarms, travel, communication failures and malicious activation. Legal documents and threshold control may provide clearer safeguards.
Protect heirs from recovery scams
Heirs are attractive targets because they may know assets exist but lack wallet experience. A scammer may impersonate a manufacturer, estate service, exchange or blockchain investigator.
- No legitimate support agent needs the complete seed phrase.
- A website does not need recovery words to inspect a public transaction.
- Do not install remote-access software at an unsolicited person’s request.
- Do not pay an “unlock fee” to a private crypto address.
- Do not photograph the backup for a lawyer, accountant or support ticket.
- Verify professionals and software through independent channels.
If a live phrase has been exposed, create a new wallet in a clean environment and transfer assets after carefully verifying the new address.
Review after major life and wallet changes
Review at least annually and after marriage, divorce, birth, death, relocation, hardware replacement, creation of a passphrase wallet, adoption of multi-share or multisig, a substantial change in holdings, replacement of an executor or discovery that a backup may have been exposed.
Keep the review date in the non-secret inventory. Avoid moving the real seed phrase constantly merely to prove the plan remains current.
Common crypto inheritance mistakes
- Assuming family knows that a self-custody wallet exists.
- Putting the complete phrase in a will or cloud document.
- Preserving words but omitting a required passphrase.
- Leaving a device without explaining its PIN and backup relationship.
- Manually cutting a BIP39 phrase into fragments.
- Creating multisig without preserving wallet configuration.
- Giving one helper unrestricted access before necessary.
- Testing by entering live words into a website.
- Failing to update documents after changing wallets.
- Leaving no instruction to move funds from an exposed legacy seed.
Seed phrase inheritance checklist
- A qualified local professional has reviewed the legal structure.
- The beneficiary and authorized representative are identified.
- A non-secret inventory lists every important wallet and network.
- The backup standard, word count and required components are documented.
- The plan clearly states whether a BIP39 passphrase exists.
- Seed words are absent from public or routinely copied documents.
- Instructions and secrets are separated without becoming undiscoverable.
- Threshold shares or multisig include complete recovery configuration.
- The heir can find official software and recognize common scams.
- The process has been rehearsed with a safe test wallet.
- The live backup has been verified without online exposure.
- The heir knows to create a new wallet after recovery.
- A review date and event-triggered update process are recorded.
Frequently asked questions
Should I put my seed phrase in my will?
Avoid placing an immediately usable wallet secret in a document that may be copied, shared or become part of a court process. Ask a qualified local estate professional how to reference a separately controlled recovery arrangement.
Can heirs recover a hardware wallet without the device?
Often yes, with the correct recovery material and compatible process. The exact standard, passphrase, account type and derivation behaviour matter. The physical device alone may not be sufficient either.
Is the device PIN enough?
No. A PIN may unlock one working device but does not normally recreate the wallet after that device is lost or damaged. Preserve the appropriate recovery backup.
What if the wallet uses a passphrase?
The heir needs the exact passphrase and mnemonic. Under BIP39, a different passphrase derives a different valid seed, so an error may show an empty wallet rather than a warning.
Is splitting twelve words into two groups safe?
Manual splitting is not equivalent to a threshold backup and can create fragile recovery. Use a supported multi-share standard or properly designed multisig when distributed control is needed.
Should a lawyer hold the complete phrase?
That depends on law, professional obligations and the threat model. A professional may hold instructions or one controlled component without unilateral access. Discuss confidentiality, succession and retrieval procedures first.
How often should the plan be tested?
Review at least annually and after material changes. Rehearse navigation and scam awareness with a test wallet; verify the live backup only through a trusted offline or device-native process.
What should an heir do first after recovery?
Confirm authority and the correct wallet, preserve required records, then consider transferring assets to a newly generated wallet because the inherited seed may no longer be private.
Final perspective
A durable inheritance plan gives the right person enough information at the right time—not every secret immediately. The inventory makes assets discoverable, legal documents establish authority, technical instructions explain recovery and separately controlled secret material preserves security.
Keep the design simple enough for a real person to execute during a stressful event. Test it without exposing the live wallet, review it as relationships and technology change, and ensure that a passphrase, threshold rule or multisig configuration never becomes an undocumented point of failure.