Monero Security Seed Phrase Protection
Olivia Vance
Your seed phrase is your money. It is not a password. It is not a recovery code. It is the literal cryptographic representation of your Monero. If someone gets your seed phrase, they have your funds. Period. There is no two-factor authentication to save you. There is no fraud department to call. If you mess this up, you are wiped out. Let's talk about how to actually protect it, because most people are doing it wrong.
First rule. Never, under any circumstances, store your seed phrase digitally. Never type it into a computer connected to the internet. Never take a photo of it. Never store it in Google Drive, Apple Notes, or a password manager. Never email it to yourself. I don't care if your hard drive is encrypted. I don't care if you use a zero-knowledge cloud provider. Malware exists specifically to scrape clipboards, scan hard drives for 25-word strings, and exfiltrate photos looking for crypto seeds. If it touches a digital device, assume it is compromised.
Write it down on paper. Yes, actual physical paper. Use a pen. Not a pencil, it fades. But paper is fragile. It burns. It rots. It gets thrown away by accident. So paper is only the first step. You need metal. Buy a titanium seed plate. Do not buy a cheap aluminum one, aluminum melts in a house fire. Titanium survives. Stamp your seed phrase into the metal. It’s tedious. It takes an hour. Do it anyway. This is the only way to ensure your funds outlive a disaster.
Now, where do you put it? Hiding it in your sock drawer is pathetic. A burglar will find it in five minutes. You need physical security. A high-quality fireproof safe bolted to the floor is a start. But even safes can be cracked or stolen. Diversify your physical storage. Use a safety deposit box at a bank. Yes, I know the irony of using a bank to secure crypto. But banks have excellent physical security. Just don't put the entire phrase in one box.
Which brings us to splitting the seed. Do not do this yourself. If you cut your 25 words in half and hide them in two locations, you haven't increased your security. You've increased your risk of loss. If one location is destroyed, the other half is useless. Humans are terrible at creating secure splitting schemes. Instead, use a passphrase. A strong, long passphrase acts as a 26th word. Keep the titanium plate in the safe. Keep the passphrase memorized, and store a physical backup of the passphrase in a completely different geographic location. A safety deposit box, or buried in a PVC pipe on land you own.
What about inheritance? If you get hit by a bus tomorrow, how does your family get the Monero? If you take your seed to the grave, those coins are burned forever. You need a dead man's switch. A lawyer you trust, holding instructions and a portion of the access scheme. Not the whole seed. Never give the whole seed to anyone. Give the lawyer the passphrase, and leave the physical seed plate in your will. It requires complex planning. Do it. Otherwise, you are just hoarding wealth for a ghost.
Never type your seed into anything other than the physical buttons on a hardware wallet. If a desktop app asks for your seed, it’s malware. If a website asks for it, it’s a phishing scam. If Monero support asks for it, it’s a scam. Your seed phrase belongs offline. Treat it like a physical bar of gold. You wouldn't walk around with a gold bar in your pocket. You wouldn't leave it on your desk. Lock it down. Secure it. Be paranoid.