Best Crypto Seed Phrase Storage

The best crypto seed phrase storage for most people with an English BIP39 wallet is a permanent metal backup in a secure offline location. Our first choice is SEEDPLATE 24 Words, with a center punch. It has a simple design, a low listed price, and published independent stress tests. Cryptotag Zeus is our titanium alternative. Neither product prevents theft if someone can read your backup.

US price and source check: September 8, 2026. These are research-based recommendations, not our own hands-on test results. Prices, stock, and delivery terms can change.

The prices above come from the Coinkite plate listing, Coinkite punch listing, Zeus starter kit, and Coinplate Alpha listing.

Choose a Backup in One Minute

Start with the backup format your wallet already uses. Do not change wallet settings merely to fit a product.

Our preference: spend effort on a backup you can read and recover, not on the most dramatic temperature claim. A correct paper backup is more useful than an unreadable steel plate. Metal improves physical durability; it does not correct a recording error.

Metal Seed Storage Compared

These are single-backup prices in USD, not a complete custody budget. Check the US shipping address, sales tax, import charges, and selected kit at checkout. We did not place orders or verify delivery times.

Ledger's $99 Billfodl listing differs from the older price in the independent test database. We use the store price, not the historical test price.

View as table

Backup kit	Listed cost
SEEDPLATE + punch	62.96 USD
Coinplate Alpha	99.00 USD
Billfodl	99.00 USD
Zeus starter kit	149.00 USD

SEEDPLATE: Our Simple Steel Choice

The full-size model records 12 words on each side of one 2 mm steel plate. Its dark etched layout gives you positions for the marks. The punch is sold separately. The store also warns that the design can vary by batch. Do not confuse this model with Tiny 12, which has room for only 12 words. Manufacturer details

Jameson Lopp's tested SEEDPLATE retained its data after heat, acid exposure, and crushing. His photographs show discoloration and deformation, not a pristine plate. That is the right question for a backup: can you still recover the information? Independent SEEDPLATE test

The current pages checked did not state a full-size footprint, device weight, steel grade, or product-specific warranty term. We have not filled those gaps with reseller specifications. Ask Coinkite if those details affect your storage plan.

Choose it for: a direct recording method with few parts. Choose something else for: a built-in cover, a verified SLIP39-specific layout, or a kit that includes the punch.

Cryptotag Zeus: Our Titanium Choice

Zeus uses two titanium plates. The maker lists dimensions of 113 x 68 x 6 mm, about 4.4 x 2.67 x 0.23 inches, and a plate weight entry of 210 g, or 7.4 oz. Its starter box includes the plates, center punch, setup guide, ear plugs, and matches. The expansion kit does not include the tools. The page advertises a lifelong guarantee and a 30-day refund; check the applicable terms before purchase. Zeus specifications and kit contents

Its main trade-off is the number conversion. The maker uses a 1-to-2048 word index. Keep its printed conversion list with your recovery instructions. Numbers on metal are not encryption.

Our view: choose Zeus because you prefer its format and size, not because titanium makes the entire custody plan secure. Record and check every number before you put the plates away. We did not measure its weight, mark its surface, or test its durability ourselves.

Coinplate Alpha: Thick Steel, but Check Stock

Alpha uses two 5 mm AISI 304 stainless steel plates with bolts. Its listed assembled size is 138 x 105 x 10 mm, about 5.4 x 4.1 x 0.4 inches. The specification section lists 1.14 kg, about 2.5 lb. A separate store field says 1.5 kg without explaining the difference. Treat the larger figure as unresolved, not a measured device weight.

The single kit includes the punch, word list, pen, Torx wrench, mounting screws, security labels, and instructions. Its cover limits casual viewing, but a person with access can open it. A security label may show interference; it cannot prove that no one copied the words. The checked page did not establish a product-specific warranty term. Alpha specifications, contents, and stock

Our view: its weight is acceptable for fixed storage, less useful for frequent transport. Do not delay making a backup while you wait for stock.

Billfodl: Reusable Tiles With a Test Caveat

Ledger lists a 316 stainless steel chassis, 300 character tiles, dimensions of 104 x 58 x 5 mm, and a weight of 0.4 kg. Those are seller specifications, not our measurements. Setup uses the first four letters of each recovery word. We did not verify a product-specific warranty from this listing. Billfodl product details

Reusable tiles avoid permanent marking. They also make the retaining mechanism important. Lopp's database gives the tested Billfodl a lower overall grade than SEEDPLATE, Alpha, and Zeus. This is why we do not make Billfodl our first choice for disaster resistance. It does not establish that every current unit will fail.

What About Cryptosteel, Keystone, and DIY Washers?

Cryptosteel Seed24 is not the original Capsule. The current page describes a detachable core, changed tiles, and a revised retaining pin. It offers several kits and colors: Classic, Dim Ore, Spark Yellow, Blonde, and Noir. Our retrieved page also showed regional availability warnings. We could not establish a reliable US delivered price for the exact complete kit. Do not mistake a shell-only accessory for a full backup set. Current Seed24 range

We did not find Seed24 by name in the independent test index checked. The original Capsule's result must not become a claimed Seed24 result. The same rule applies to Keystone Tablet Plus and Keystone Tablet Punch: they are different products with different recorded results.

DIY stamped washers can be a lower-cost approach if you can obtain known materials and make deep, legible marks. You must also preserve the order, keep the assembly secure, and test your recording method. We do not assign a current kit price or promise that a homemade build matches a tested design. See the independent product and DIY test index.

What the Stress Tests Prove

These are Jameson Lopp's grades, not ours, from his metal backup test index. They apply to the samples and versions he tested. The index contains historical prices; this article does not use them as current offers.

His method uses a roughly 2,000 F flame, rapid water cooling, acid exposure, and a hydraulic press. He explicitly describes the grading as informal. This is useful comparative evidence, not a laboratory certification or a guarantee for your house fire. It does not test theft, recovery mistakes, every production batch, or decades of storage. Test method and limitations

Do not perform destructive tests on a live backup. A melting point alone cannot tell you whether a layout, closure, or set of tiles will remain readable.

Paper, Metal, Digital, or a Bank Box?

A seed phrase is a recovery secret for a wallet. For a basic single-signature wallet without an added passphrase, someone with the complete phrase can generally take control. The assets remain on their networks; the plate stores recovery information. Our decentralized wallet guide explains that distinction.

An offline USB drive is still an electronic device. It can fail, and a computer can expose the phrase when you connect it. Encryption also creates another recovery dependency. We prefer no digital copy for a straightforward self-custody plan; that is not a claim that all digital backup systems are identical.

The FDIC does not insure safe deposit box contents. Read the rental agreement and ask about separate coverage. Do not assume a policy will replace crypto lost through a disclosed phrase. Access after death depends on state law. A box is unsuitable as your only option if you need immediate access outside branch hours. FDIC guidance

Check Wallet Compatibility Before You Buy

BIP39 Words, Prefixes, and Numbers

BIP39 permits 12, 15, 18, 21, or 24 words. Its English list is designed so that the first four letters identify each word. Keep a short word in full. Do not assume a different language or wallet standard follows the same abbreviation rule. BIP39 specification

Record the original order and word count. Do not rearrange words, invent a substitution code, or choose your own phrase from the list.

For number-based plates, follow the maker's exact index. Some software uses a zero-based index. Zeus uses one-based numbering. An offset of one changes every recorded word. Keep the correct printed list available offline, and convert the final marks back to words as a check. Never paste a real phrase into an online converter.

SLIP39 Is a Different Format

SLIP39 uses a different word list and supports 20- and 33-word shares for common secret lengths. A BIP39 number plate is not automatically compatible. Verify the share length, encoding method, number of plates, and the receiving wallet's support. SLIP39 specification

A single-share SLIP39 backup can be enough to restore a wallet. A multi-share configuration requires its chosen threshold. Trezor also notes that older backups can remain valid after you create a replacement backup for the same wallet. Changing the backup arrangement does not necessarily invalidate a stolen old copy. Trezor backup formats

Other formats: Electrum, Monero, multisig, and smart contract wallets can have different recovery requirements. A metal plate cannot make incompatible formats compatible. Follow the wallet's own recovery documentation.

PIN, Passphrase, Copies, and Thresholds

These terms describe different protections.

An optional passphrase can reduce the risk from a stolen seed, but adds a serious loss risk. Exact case and spacing matter. A typo can open a different, empty wallet rather than produce an error. Keep the passphrase separately, with a tested route for recovery. Do not rely on memory alone. Trezor passphrase guidance

Do not cut a phrase into informal halves. That is not Shamir secret sharing. Use a supported implementation and test it with a separate practice wallet before you rely on it.

For multisig, retain the wallet descriptor or equivalent configuration, signing policy, key identifiers, and relevant derivation information. Public keys and descriptors can reveal financial activity even when they cannot spend funds. Treat those records as private. Follow the coordinator's export and recovery instructions.

Make and Check the Backup Safely

1. 01

   Confirm

   Check the wallet format, word count, and required tools.

2. 02

   Record

   Work in private. Preserve the exact word order.

3. 03

   Verify

   Read back the marks. Use the official backup check.

4. 04

   Separate

   Protect the backup and plan access after a loss.

1. Prepare a private area. Remove cameras and other recording devices from view. Use good light and a stable surface. Keep other people away from the words.
2. Check the wallet source. Use the maker's official app and current instructions. Check its security notices before generating a new wallet. Reject a wallet supplied with a completed recovery phrase.
3. Confirm the format. Identify the word count, language, and backup standard without sending anyone the words.
4. Record in order. Follow the plate maker's marking or assembly instructions. Use its safety equipment. Stop if you cannot make or read the marks reliably.
5. Read the finished backup back. Do not check only the draft card. Expand prefixes or convert numbers using the correct printed list. Check the word positions twice.
6. Use the official backup check. Prefer a supported check that keeps word entry on the hardware device. Do not erase your only working wallet to test a backup.
7. Secure temporary records. Keep an interim paper copy private until verification is complete. Then retain it as an intentional backup or destroy it securely. Do not put readable words in household waste.
8. Store and document. Keep the backup separate from the daily-use wallet. Record only non-secret maintenance details in your ordinary records.

For a concrete example, Trezor Safe 3 has a Check backup process in its official software. The words are selected with the device buttons. The exact workflow differs across devices; follow the instructions for yours. A basic seed check does not by itself confirm a separate passphrase or every multisig setting. Official Safe 3 backup check

See the Plate Format Before Buying

This third-party video was published on July 27, 2021. Use it to inspect the older plate format, not to establish current price, stock, or safety certification. We verified its public title, description, and date; we did not conduct the demonstration. Never use any phrase shown in a public video. Open the video on YouTube.

Where to Keep It, and Who Can Recover It

There is no universal best hiding place. Consider fire, flood, theft, access restrictions, and a trusted person's ability to find the backup when needed. Do not publish the locations or keep a labeled map with the phrase.

For a simple wallet, two protected copies in separate locations can reduce the chance that one event destroys both. Each complete copy also creates another theft opportunity. Two drawers in one house do not protect against the same building fire. Choose the copy count after considering both risks.

Plan for incapacity as well as death. A trusted person needs to know that a recovery process exists, how to obtain lawful access, and which instructions to follow. They do not necessarily need the secret today. Ask a US estate attorney how local law, your will or trust, and bank procedures affect access. Do not place the actual phrase in a document that could become public.

A Non-Secret Recovery Record

Keep this record private even though it contains no seed words:

Do not add the phrase, passphrase, private keys, or precise hiding locations to a general crypto tracking spreadsheet. Account identifiers, addresses, and balances also deserve privacy.

Four Example Storage Plans

These are illustrative scenarios, not reports of customers or products we tested.

Beginner: one wallet, limited budget. Make the wallet's paper backup now. Verify it. When affordable, transfer it to a compatible punch plate and check the finished marks. Do not leave the wallet without a backup while comparing accessories.

Beginner: shared apartment. A visible metal plate is not enough. Use storage with controlled access. Consider a separately secured backup location. Do not leave the device, PIN, and complete recovery information in the same unlocked drawer.

Advanced: a household with a 2-of-3 SLIP39 plan. Store shares so that no single loss removes two of them. Check each share and rehearse recovery on a practice setup. Document the format and threshold. One share alone must not be described as a complete backup.

Professional: a small organization's multisig wallet. Separate signing responsibilities. Back up each required key and the wallet configuration. Test recovery if a signer leaves or a device is lost. Avoid putting enough keys to sign in one person's everyday bag.

Edge Case: The Backup Is Correct, but the Balance Is Zero

Do not send the words to a recovery service. Check the passphrase, wallet format, network, account number, and derivation settings against your records. A valid phrase is not proof that you opened the intended account. Use the wallet maker's official support process without disclosing the secret.

Edge Case: You Cannot Use a Punch

A reusable system may be easier for some people; tiny tiles may be harder for others. Inspect the layout and tool requirements first. Do not send a live phrase to an engraving shop. Practice marking non-secret material, or choose a method you can use privately and read reliably.

What to Do if the Phrase Was Exposed

Treat a phrase entered into a phishing page, sent to another person, or stored in an exposed account as compromised. A new device PIN does not change the seed. Moving the same words to a new plate does not help.

Use official wallet instructions to create a new wallet with a new backup on a trusted device. Verify the destination on the device. Plan the transfer of affected assets, including accounts on other networks. If theft is in progress, seek help through verified support channels, not direct messages from strangers. Never give a helper the replacement phrase.

Exposure of a seed is different from a harmful token approval. Revoking an approval can address that permission; it cannot make a leaked seed private again. Read our token approval checker guide, digital wallet scam guide, and airdrop scam warning signs for those separate cases.

Printable Backup Checklist

• I know the backup standard, word count, and language.
• The product supports that exact format.
• I have the required tools and can read the layout.
• The finished marks preserve the correct word order.
• I checked the backup through the official wallet process.
• I checked any separate passphrase or wallet configuration.
• There are no unintended photos, cloud notes, or digital copies.
• Each backup location has appropriate access controls.
• One likely physical event cannot destroy all required recovery material.
• A trusted person has a lawful route to recovery instructions.
• I set a review date and will review the plan after major changes.

If You Only Do Three Things

1. Keep the phrase offline and private.
2. Verify the finished backup before you depend on it.
3. Protect against both physical loss and unauthorized access.

Seed Phrase Storage Questions

›Is steel or titanium better for a seed phrase?

Either can work. Compare the complete product, the marking method, and tests of that exact model. Material alone does not determine whether the backup stays readable.

›Can I use paper instead of metal?

Yes. A correct, private paper backup is a useful starting point. It needs more protection from physical damage. Verify any later metal copy before you discard the paper.

›Do I need two metal backups?

Not always. Separate copies can protect against one location being lost, but every complete copy is another possible theft target. Choose the number and access rules together.

›Does a hardware wallet PIN protect the seed phrase?

No. The PIN protects access through the device. Someone who has the complete phrase may restore the wallet elsewhere without that PIN.

›Can I store only the first four letters?

The English BIP39 list supports four-letter identification. Keep shorter words in full and preserve their positions. Do not apply the rule to another format or language without checking its specification.

›Can I put a 20-word backup on a 24-word plate?

Check more than the available spaces. A 20-word SLIP39 share uses a different word list from BIP39. A BIP39 number-based plate is not automatically compatible.

›Is a safe deposit box insured by the FDIC?

No. FDIC deposit insurance does not cover box contents. Check the rental agreement, access rules, and any separate insurance. Do not assume crypto losses are covered.

›Should I store a phrase in a password manager?

For a simple hardware-wallet plan, our preference is no digital seed copy. A password manager adds device, account, and recovery dependencies. Advanced encrypted backup systems need their own security assessment.

›Will a metal backup stop a wallet scam?

No. It cannot stop a harmful transaction you sign or an approval you grant. Keep transaction checks and backup protection as separate parts of your security plan.

Sources and Review Method

The DeFi Farmer Research Desk compared current manufacturer pages, published destructive tests, wallet standards, and US consumer guidance. We prioritized recoverability, fewer recording dependencies, and clearly identified product versions. We did not buy, weigh, stamp, burn, or crush these products. The recommendations are editorial judgments based on the linked evidence, not guarantees against loss.

Primary references include the BIP39 specification, SLIP39 specification, Lopp test database, Coinkite store, Cryptotag Zeus, Coinplate Alpha, Ledger Billfodl, and FDIC guidance.

Missing specifications and unresolved availability are marked rather than guessed. The product links added to this article contain no affiliate tracking parameters. The custom image is an AI-generated illustration. The embedded video belongs to its credited creator. This is general security education, not personal investment, insurance, or legal advice.