When the amount gets serious
A basic hardware wallet with a written seed is genuinely good security. But as the balance grows, two new questions appear: what if someone finds the backup, and what happens to this if I am gone?
Both have answers, and both introduce complexity that can itself become the thing that loses your coins. Every choice here trades one risk for another.
The passphrase
A passphrase is an additional secret combined with your seed phrase. Seed plus passphrase unlocks a completely different wallet than the seed alone.
The benefit is real: someone who finds your written seed gets an empty or decoy wallet. The cost is equally real: lose the passphrase and the funds are unreachable forever, even holding a perfect seed backup.
The tradeoff
A passphrase protects against your backup being found. It also creates a second thing that, if lost, loses everything. It is a real upgrade only if your storage and memory plan is genuinely solid.
Backup strategy that survives real life
One paper copy in one drawer fails to a single house fire, flood, or break-in. Redundancy is the entire discipline here.
- Multiple copies, in genuinely separate physical locations.
- Metal backups for anything meaningful. Paper burns and water destroys ink.
- Each location secure on its own, since a copy in an unlocked desk is a copy for whoever visits.
- Tested. An untested backup is a guess, and you learn the answer at the worst possible time.
- Documented process, so you can execute it under stress in five years.
The complexity trap
There is a failure mode where someone builds a setup so clever that nobody can unwind it, including themselves after a few years away from it. Multisig across three devices, a passphrase held in memory, shards in different states, and no written process.
That setup loses coins without any attacker involved. Security that you cannot reliably operate is not security.
Inheritance, the part nobody plans
Self-custody means no support line, no password reset, no probate process that can recover your keys. If something happens to you and nobody can execute recovery, the coins are gone permanently.
A workable plan usually involves someone trusted knowing that assets exist and where the instructions are, instructions stored securely and separately from the keys themselves, and a documented process a non-technical person could follow. Consider talking with an attorney about how it fits your overall estate.
This is uncomfortable to plan and it is the difference between building something for your family and building something that disappears with you.
Take action today
- Audit your current backups. How many, where, what condition?
- Identify a single point of failure and fix it.
- Decide whether a passphrase genuinely fits your situation.
- Write your recovery process as if for someone who is not you.
- Practice recovery with a small amount this month.
What is next
The final module. You have built it and protected it. Now: how much is enough, and what does the exit look like?