6

Seed Phrases & Hardware Wallets

How to back up, where (and where not) to store, and why hardware wallets matter.

4 quiz questions

The seed phrase IS the wallet

A seed phrase (recovery phrase) is typically 12 or 24 English words. From these words, the wallet can deterministically regenerate all private keys, on any device. Anyone with the seed can move all the funds. Period.

If you take only one rule from this entire course: never type your seed phrase into any website, support chat, email, photo, cloud note, or messenger.

Storing a seed phrase well

Two or more offline copies, in physically separated secured locations.
Prefer metal backup plates (fire/water resistant) for any treasury-grade wallet.
No photos. No cloud. No password manager. No email draft.
Decide in advance: who in the organization knows where the backups are kept and how to access them in an emergency?

Storing a seed phrase badly

A photo in Google Photos / iCloud.
A text file named "wallet.txt" on the laptop.
A note in a messenger "to self".
Typed once into a "wallet verification" web form.

Hardware wallets

A hardware wallet (Ledger, Trezor, Keystone, GridPlus, etc.) keeps the private keys inside a dedicated chip. Even if your laptop is fully compromised, malware can only ask the device to sign — and you must physically confirm each signature on the device screen.

Buy from the vendor or an authorized reseller. Never from a third-party marketplace.
On first setup, the device generates the seed itself. If the device "already has" a seed in the box, it is compromised. Reset and start over, or replace.
Treat the seed of the hardware wallet exactly like any other treasury seed — see above.

Passphrases ("the 25th word")

Many hardware wallets support an additional passphrase that effectively creates a separate hidden wallet. Used well, this gives plausible deniability and an extra layer; used poorly (forgotten or inconsistently applied), it can lose funds. If you adopt passphrases, document the policy clearly within the team.