A steel backup can protect wallet recovery information from fire, water and ordinary paper damage, but the material alone does not make a backup reliable. The words can still be stamped in the wrong order, recorded in an incompatible format, made unreadable or exposed to anyone who finds the plate. A dependable metal backup starts by identifying the wallet standard, planning an unambiguous layout and verifying the finished record without putting the real recovery phrase online.
Last reviewed: September 25, 2026. Wallet backup formats, device workflows and metal products differ. Follow the instructions for the wallet that generated the backup and verify compatibility before permanently marking a plate. Never enter a real seed phrase into a website, search result, chatbot or untrusted application. This independent guide is educational and is not financial, legal or investment advice.
What a steel seed phrase backup actually protects
A wallet backup represents the information needed to reconstruct wallet keys. Paper can burn, absorb water, fade, tear or be discarded accidentally. Stainless steel and other suitable metals can improve resistance to some of those physical hazards. They do not solve every security problem.
| Threat | Can a suitable steel backup help? | What still matters? |
|---|---|---|
| Water or humidity | Often, depending on alloy and marking method | Corrosion, contaminants and long-term storage conditions |
| House fire | Potentially, if the material and marks survive the heat | Heat duration, deformation, melting point and post-fire recovery |
| Tearing or fading | Yes, when marks are permanently impressed | Mark depth and readability |
| Theft or copying | No | Location, access control and concealment |
| Incorrect word order | No | Careful transcription and numbering |
| Exposed seed phrase | No | Move assets to a newly generated wallet |
| Lost passphrase | No, unless the recovery plan accounts for it | Separate passphrase backup and clear instructions |
A metal plate is therefore a durability component, not a complete custody plan. Anyone who obtains a complete usable backup may be able to restore the wallet. The storage location can be as important as the alloy.
Identify the backup format before marking anything
Do not determine the standard only from the number of words. BIP39 commonly uses 12 or 24 words and also permits other defined lengths. SLIP39 can use 20-word shares and includes metadata for threshold recovery. A vendor-specific backup may use a different wordlist, share structure or recovery process.
Before buying or marking a plate, record non-secret facts about the wallet:
- the wallet or hardware-device model that generated the backup;
- the documented backup standard, such as BIP39 or SLIP39;
- the number of words or the number and threshold of shares;
- the wordlist language;
- whether an additional passphrase protects the intended wallet;
- whether recovery needs wallet descriptors, multisig configuration or other data.
None of those notes should include the recovery words themselves. Their purpose is to prevent an heir or future owner from trying to restore a SLIP39 share as a BIP39 phrase or overlooking an essential wallet configuration.
BIP39 in plain language
BIP39 converts wallet entropy plus a checksum into a sequence of words selected from a defined 2,048-word list. Each word represents an 11-bit value. A valid mnemonic is not merely a set of dictionary words: the exact order and checksum matter.
For example, a 12-word BIP39 mnemonic represents 128 bits of entropy plus a four-bit checksum. A 24-word mnemonic represents 256 bits of entropy plus an eight-bit checksum. The checksum helps detect some transcription errors, but it does not correct the phrase or prove that it restores the intended wallet.
The recovery phrase must be generated by trusted wallet software or hardware using secure randomness. Do not invent words, shuffle a list, reuse a sample phrase or ask an online generator to create one. A stainless-steel copy of a predictable phrase remains predictable.
Can you stamp only the first four letters?
The official BIP39 wordlist is designed so that the first four letters uniquely identify each word. Words containing only three letters are already complete. This allows some compact metal systems to record four-letter prefixes rather than every character.
That rule is safe only after confirming all of the following:
- the phrase actually follows BIP39 or another documented standard with the same prefix property;
- the correct language and official wordlist are known;
- the future recovery interface accepts or can reconstruct the prefixes;
- every prefix is readable and mapped to exactly one word;
- the person performing recovery knows that the markings are prefixes, not complete words.
Do not apply the English BIP39 rule to a proprietary recovery code, ordinary password, legacy Electrum seed or an unidentified list. Compatibility must be established before abbreviation.
Full words, prefixes or word numbers?
| Method | Benefit | Main risk |
|---|---|---|
| Complete words | Easiest for a human to interpret without a conversion table | Needs more space and more individual marks |
| First four letters | Compact and directly recoverable with a compatible wordlist | Unsafe if the format, language or prefix is misunderstood |
| Wordlist numbers | Can fit products designed around numbered positions | Indexing conventions and transcription must match exactly |
| Binary patterns | Very compact on specialized plates | Harder to audit visually and easy to shift by one position |
Numbers are not automatically better than letters. The BIP39 English list is sorted, but a product may label its first word as 0 or 1. Converting the phrase on an internet-connected computer can expose it through clipboard history, screenshots, malware or temporary files. Use only the manufacturer’s verified offline procedure and confirm the indexing convention independently.
If the plate has sufficient space, human-readable letters reduce dependence on a future conversion guide. If a compact encoding is used, store non-secret decoding instructions separately and ensure the standard remains identifiable.
Choose a compatible steel plate
Match the product to the actual backup rather than assuming that every “crypto steel” device accepts every phrase.
- Capacity: enough numbered positions for 12, 20 or 24 words, or for each required share.
- Character capacity: enough letters or fields for the chosen encoding.
- Material: documented alloy and physical properties rather than an unspecified “metal” label.
- Marking method: stamping, engraving, punched holes, tiles or another permanent system.
- Closure: parts should not slide, scatter or lose their order during handling or heat exposure.
- Tamper evidence: useful for detection, but not a substitute for secure storage.
- Recovery independence: the information should remain understandable if the manufacturer disappears.
A product review that focuses only on a claimed temperature can miss the more likely failures: shallow marks, mixed word order, an incompatible format or a backup stored beside the device it protects.
Prepare a safe workspace
Metal marking can create sharp edges, noise and flying fragments. Use eye protection, an appropriate stable surface and the tool manufacturer’s safety instructions. Keep unauthorized people, cameras and voice assistants away from the workspace.
Avoid areas monitored by security cameras. Do not photograph the words for convenience. Disconnecting a phone does not make its camera roll an acceptable seed-phrase vault because the image can sync later.
Prepare these items before revealing the phrase:
- the clean unused plate and correct marking tools;
- the manufacturer’s verified layout instructions;
- a numbered paper worksheet used only temporarily in the private workspace;
- a practice piece of similar metal;
- adequate lighting and a magnifier if needed;
- a secure method for destroying temporary notes afterward.
Practice before using the real plate
Stamp a harmless sample word on scrap metal. Determine how hard and how many times the tool must be struck to create a deep, readable mark without deforming the plate. Test every letter or punch style needed by the product.
Use a dummy mnemonic from documentation only for practice; never fund a wallet restored from a publicly known sample. Check whether letters rotate in the holder, whether a 6 can be confused with a 9 and whether a partial strike can be corrected without making the result ambiguous.
Practice matters because metal is unforgiving. An error crossed out beside the intended mark may leave a future restorer uncertain about which character is valid.
Plan the seed phrase layout
Each word needs a permanent position. A readable backup should communicate both content and sequence even if the plate is found years later without its packaging.
Layout checklist
- Number positions clearly from 1 through the final word.
- Follow one reading direction across the entire plate.
- Do not continue on the reverse side without a clear side and direction marker.
- Keep enough spacing to distinguish adjacent characters.
- Mark three-letter BIP39 words completely.
- Do not omit repeated words; the same word may legitimately occur more than once.
- Identify the backup standard outside the secret record when future ambiguity is possible.
A 24-word layout split across two sides should make it obvious whether side B begins at word 13 or uses a different grid. Never rely on memory for that convention.
How to stamp a seed phrase on steel
- Confirm the phrase on the trusted wallet display. Use the original device workflow, not a copy received through email or messaging.
- Confirm the format and length. Match the plate to the exact BIP39, SLIP39 or vendor-supported backup.
- Number the temporary worksheet. Prepare every position before copying words.
- Copy one word at a time. Read from the trusted source, write the numbered temporary copy and immediately compare it.
- Choose complete words or verified prefixes. Do not switch encoding halfway through the plate.
- Mark the first position. Check tool orientation before applying force.
- Read the finished mark aloud internally. Compare character by character without using a camera or online tool.
- Continue sequentially. Cover completed source words if the wallet workflow permits, reducing line-skipping mistakes.
- Perform a reverse check. Start from the final position and compare the plate back to the source.
- Verify through the wallet’s trusted check process. Do this before destroying any existing reliable backup.
- Destroy temporary copies. Ensure no impressions, carbon sheets or readable fragments remain.
- Store the plate securely. Separate it from the hardware wallet and from any additional passphrase.
How to handle a stamping mistake
Stop as soon as an error is noticed. Do not continue and hope that the intended value will be obvious later. A future recovery may happen under stress, after physical damage or through someone unfamiliar with the original marking session.
If the product has a documented unambiguous correction method, follow it exactly. Otherwise, replace the plate. Do not grind, drill or overwrite a marked secret in a public workshop where fragments, photos or discarded material can be recovered.
A rejected plate still contains wallet information. Treat it as sensitive until the wallet has been migrated to a newly generated phrase or the old markings have been destroyed beyond practical recovery.
Verify the finished steel backup safely
Visual comparison is necessary but may not be sufficient. It can miss a plausible word in the wrong position. Prefer a wallet-native backup-check function that verifies recovery information without wiping the only working device.
If a controlled recovery test is required:
- use a trusted device and the wallet vendor’s official offline workflow;
- never type the phrase into a website or ordinary computer form;
- avoid wiping the only functional wallet before a backup is proven;
- confirm a known receive address, not merely that the words pass a checksum;
- account for the correct passphrase, derivation and wallet type;
- stop if recovery produces an unexpected empty wallet.
A valid checksum does not prove that the phrase matches the intended wallet. Different passphrases can produce different valid wallets, and an incorrect but checksum-valid phrase can restore an unrelated set of addresses. Our separate guide, How to Verify a Seed Phrase Backup Without Exposing Your Wallet, covers the verification process in detail.
Do not stamp a BIP39 passphrase beside the seed phrase
An optional BIP39 passphrase modifies wallet derivation. It is sometimes described informally as a “25th word,” but it is not restricted to a word from the BIP39 list. Every entered passphrase can produce a valid-looking wallet, so a typo may open an empty but technically valid wallet rather than display a clear error.
Stamping the passphrase on the same plate removes much of the separation it provides. Anyone who finds both components can attempt recovery. Store the passphrase using a separate, documented method and ensure the recovery plan explains that it exists without revealing it beside the seed.
Capitalization, spaces and punctuation matter. A memory-only passphrase creates a new single point of failure, particularly for long-term storage or inheritance.
BIP39 is not SLIP39
SLIP39 supports recovery shares and threshold rules. A 2-of-3 arrangement, for example, can require any two valid shares. Each share contains structured information; it is not simply one-third of a BIP39 phrase.
Do not manually split a BIP39 phrase into word groups and label it “Shamir backup.” The pieces can leak partial information, and losing one group may make recovery impossible. Use a wallet-supported standardized sharing system when threshold recovery is required.
Each SLIP39 share should be recorded in a compatible product with its full required word order. Confirm whether the plate supports 20-word shares and the specific abbreviation scheme. Keep threshold instructions separately so a future restorer knows how many shares are needed.
One plate or multiple copies?
A single copy reduces the number of locations an attacker can discover but creates one physical point of failure. Multiple complete copies improve resilience while increasing exposure. The right design depends on the risks of the locations and the ability to monitor access.
| Arrangement | Benefit | Trade-off |
|---|---|---|
| One complete plate | Simple and fewer exposed locations | Loss, confiscation or destruction can remove the only backup |
| Two complete plates | Geographic redundancy | Either location can expose the entire wallet |
| Seed and separate passphrase | One component alone may not open the intended wallet | Loss of either component prevents recovery |
| Standardized threshold shares | Can tolerate loss while requiring multiple shares | More complex setup, documentation and testing |
Do not improvise cryptographic splitting. Complexity that has never been tested is not resilience.
Where to store a steel backup
The location should address fire, flood, theft, unauthorized viewing and accidental disposal. Hiding a plate in a clever but undocumented place can protect it from thieves and from the rightful owner.
- Do not store the only backup beside the hardware wallet.
- Avoid obvious labels such as “Bitcoin seed phrase.”
- Consider whether other people can photograph the plate unnoticed.
- Check whether a safe protects against the actual local fire and flood risks.
- Document a lawful recovery path for incapacity or death.
- Inspect storage conditions periodically without repeatedly exposing the words.
Legal access and technical access are different. Someone may inherit the assets but lack the information required to restore the wallet. Conversely, possession of a plate does not necessarily establish legal ownership. The separate seed phrase inheritance guide explains how to coordinate these layers.
How to inspect the plate over time
Periodic inspection should confirm that the plate remains present, sealed as expected and physically legible. It should not involve photographing or repeatedly transcribing the phrase.
- Check for corrosion, deformation, loose tiles or failed closures.
- Confirm that every position remains readable under ordinary light.
- Review whether the wallet format and recovery instructions remain understood.
- Verify that any separate passphrase process still works.
- Update non-secret device and recovery notes when the wallet setup changes.
If the seed phrase itself is migrated, destroy or securely retire every obsolete copy. An old plate remains capable of restoring the old wallet and may still receive assets through saved addresses.
Common steel backup mistakes
- Buying a 24-word plate for an unidentified 20-word backup.
- Assuming every wallet uses BIP39.
- Recording words without permanent position numbers.
- Using the first four letters without confirming the standard and wordlist.
- Converting words to numbers through an online website.
- Using marks too shallow to survive abrasion or heat damage.
- Stamping over an error and leaving two plausible readings.
- Photographing the finished plate.
- Placing a passphrase on the same plate.
- Storing the plate with the wallet device.
- Splitting BIP39 words manually instead of using a tested threshold standard.
- Destroying the paper copy before verifying the metal backup.
- Assuming a checksum proves recovery of the intended wallet.
Final steel backup checklist
- The wallet backup standard is known.
- The plate supports the required word or share count.
- The chosen letter or number encoding is documented and compatible.
- Every position is permanently numbered.
- Every mark is deep and unambiguous.
- The completed plate was checked in both directions.
- A trusted wallet-native check confirmed the backup.
- A known address was matched where appropriate.
- The passphrase, if used, has a separate recovery plan.
- Temporary copies and impressions were destroyed securely.
- The plate is stored separately from the wallet device.
- No photograph, cloud copy or online conversion was created.
- Future recovery instructions identify the format without exposing the secret.
Frequently asked questions
Is steel better than paper for a seed phrase?
Steel can improve resistance to water, fire and physical deterioration. It does not protect against theft, copying, incorrect transcription or a lost passphrase. Material durability is only one part of the backup plan.
Are the first four letters of every BIP39 word enough?
The official BIP39 wordlist is designed so its words are uniquely identifiable by their first four letters, with shorter words recorded completely. Confirm that the phrase, language, plate and future recovery workflow actually use that standard before abbreviating.
Should I stamp all 24 words?
Record every word generated by the wallet in its exact position. Do not omit words or assume the last word is merely optional checksum data. Whether complete spellings or verified prefixes are used depends on the product and recovery standard.
Can I stamp BIP39 word numbers instead of letters?
Only with a verified compatible system. Confirm whether indexing begins at zero or one, avoid online converters and retain non-secret decoding instructions. A one-position indexing error can invalidate every recorded word.
Should the passphrase be on the same steel plate?
Generally no. Combining seed and passphrase makes the plate a complete recovery package for whoever finds it. Use a separate tested recovery method and document that the passphrase exists.
Can I split a 24-word phrase between two plates?
A manual half-and-half split creates fragile recovery and is not equivalent to threshold cryptography. If either half is lost, recovery may fail. Use a wallet-supported standardized multi-share scheme if that threat model requires distributed recovery.
How do I know the stamped backup is correct?
Compare every numbered position, then use the wallet’s trusted backup-check function or a controlled offline recovery procedure. Confirm a known address when appropriate. Never enter the phrase into an online checker.
What should I do if someone sees the plate?
Treat the wallet as potentially compromised. On a trusted device, generate a new wallet with new recovery information, verify its backup and transfer assets to verified addresses. Hiding the old plate again does not revoke copied words.
Final perspective
A steel plate is valuable because it can preserve recovery information when paper fails. Its reliability still depends on correct standards, exact order, legible marks, safe verification and controlled storage. The strongest metal cannot correct one missing word or protect a phrase photographed by an attacker.
Identify the backup before encoding it, practice the marking method, preserve every position and verify the result through a trusted wallet workflow. Use four-letter prefixes only where the documented wordlist supports them, and keep any additional passphrase separate.