Cardano Security Seed Phrase Protection
John Taylor
Your seed phrase is not a password. It is not an account recovery option. It is the raw, unencrypted master key to your entire financial existence on the blockchain. If someone sees those 12, 15, or 24 words, they own your ADA. Period. There is no customer service. There is no undo button. Protecting your seed phrase is the single most critical task in crypto. Most people fail miserably at it.
Never type it into a computer. Never. Your keyboard can be logged. Your clipboard can be monitored. The moment those words enter a digital device that is connected to the internet, they are compromised. It doesn't matter if you type them into an encrypted note or a supposedly secure password manager. If the machine is online, the risk is unacceptable. The only place you ever enter a seed phrase is directly into the physical buttons of a hardware wallet.
Don't take a photo of it. Your phone automatically syncs photos to iCloud or Google Photos. Those cloud accounts get hacked every single day. Hackers run optical character recognition (OCR) scripts on compromised photo libraries specifically looking for combinations of BIP39 words. If you take a picture of your seed phrase, you are practically handing it to them.
Writing it on paper is the bare minimum. But paper is fragile. It burns. It rots. The ink fades. If your house catches fire, your ADA burns with it. If a pipe bursts and floods your office, your wealth turns to mush. Paper is for temporary backups, not long-term storage.
You need metal. Buy a steel seed plate. Stamp the words into the metal using a center punch. Steel survives house fires. It survives floods. It survives a building collapsing on it. It is cheap insurance for your entire portfolio. Don't buy a pre-engraved plate where you slide letters in; those letters can fall out. Punch the letters directly into solid metal.
Don't try to be clever with encryption. People think they are smart. They swap the 1st and 12th words. They write the words backward. They use a Caesar cipher. Don't do this. You are not a cryptographer. You will forget your own clever trick in five years. Your heirs will definitely not understand it if you die. You will lock yourself out of your own fortune. Keep it simple. Store the words exactly as they were given to you.
Consider a passphrase. Also known as the "25th word." This is an additional string of characters you add to your seed phrase. It creates an entirely new wallet. If someone finds your 24 words, they still need your custom passphrase to access the main funds. You can leave a small amount of ADA on the base 24-word wallet as a decoy. If an attacker finds your seed plate, they steal the decoy and think they got everything. Meanwhile, your actual stash remains hidden behind the passphrase. Just don't forget the passphrase. It is not recoverable.
Where do you hide the metal plate? A bank safe deposit box is an option, but you are trusting a bank. A hidden floor safe in your home is better. Some people bury it in PVC pipes in the woods. That is extreme, but effective, provided you remember the GPS coordinates. The key is geographical redundancy. Don't keep your only copy in one place. If that location is compromised or destroyed, you lose everything.
Do not split the seed phrase. Some people cut the 24 words in half. They put 12 words in a safe and give 12 words to their mother. This is a terrible idea. You are drastically reducing the entropy of the seed. If an attacker finds half the phrase, they can easily brute-force the rest. If you want distributed security, use a true multi-sig setup or Shamir's Secret Sharing. Splitting a single phrase is mathematically flawed.
Your seed phrase is the ultimate test of self-sovereignty. It demands respect. Treat it like a physical bar of gold. Don't talk about it. Don't digitize it. Protect it with cold, hard steel and unyielding paranoia. If you can't handle this responsibility, you are not ready for crypto.