Your seed phrase is 12 or 24 English words that, together, encode the private key to your entire crypto balance. Anyone with the phrase has your crypto. There are no exceptions, no "but the wallet is locked," no "I have a passcode." The seed is the key. The key is the money.
This article is the one habit that matters: **never type your seed phrase into anything except a hardware wallet that you bought, factory-sealed, from the official manufacturer.**
That's the rule. Everything below is details.
Where the seed actually lives
A seed phrase is generated once, when you first set up a wallet. The wallet shows you 12 (or 18, or 24) words from a fixed dictionary. It asks you to write them down. From that moment on, that phrase is the master key.
The wallet itself derives all the private keys for all the addresses it manages from that seed. If you wipe the wallet, you can re-derive everything by typing the seed into a new wallet. If someone else types the seed into their wallet, they can move your funds.
A **passphrase** (sometimes called a "25th word") is an optional extra word you can append to the seed. The same seed + different passphrase = different wallets. If you set a passphrase, **the seed alone is not enough** to steal your funds. This is a real defense, but you also have to back up the passphrase separately. Lose the passphrase, lose the funds.
The cardinal rules
- **Never type your seed phrase into a website, app, or form.** Legitimate wallets never ask. Anyone who asks is trying to steal from you.
- **Never photograph it. Never store it in a notes app. Never email it to yourself.** The moment it touches a device connected to the internet, you've reduced your security to whatever cloud, device, and email provider security you have — which is far worse than offline storage.
- **Never store it on a password manager, even an offline one.** The threat model of password managers is different from the threat model of seed storage, and conflating them is risky.
- **Write it on paper, or stamp it into metal.** Paper burns; metal survives fires and floods. If you use paper, laminate it or store it in a sealed bag.
- **Make at least one backup, ideally in a separate geographic location.** A house fire that destroys the original also destroys the only backup if they're in the same drawer. Bank safe deposit boxes are a popular choice for the second copy.
- **Don't tell anyone how you store it.** Bragging about your "crypto vault" on social media makes you a target.
What "secure element" buys you
A secure element is a specialized chip designed to resist physical tampering. It's the same technology used in passports and credit cards. A hardware wallet with a secure element is meaningfully harder to attack than one without.
A hardware wallet without a secure element is still much safer than a hot wallet, because the key never leaves the device. The difference is in the threat model: if someone physically steals your Trezor and has time and lab equipment, can they extract the key? With a secure element: very hard. Without: theoretically possible.
Shamir Backup and SLIP-39
The Shamir Backup scheme, formalized as SLIP-39, lets you split a seed into N shares, of which any M can reconstruct it. A common setup is 3-of-5: you generate 5 shares, and any 3 can recover the wallet. You can give 2 shares to family, keep 2 at home, and 1 in a bank vault. Lose any 2, still safe. Lose 3, you're out of luck.
This is the gold standard for serious self-custody. Trezor and a few others support it. If you're holding meaningful wealth, learn it.
The single most common cause of loss
It's not hacking. It's losing the seed phrase, or having only one copy and that copy getting destroyed. People who thought "I'll just remember it" or "the device is enough" are the ones who come to Reddit a year later with a story.
Make the backup. Make a second copy. Test recovery on a small amount before you trust your life savings to it.