Crypto Wallet Security Checklist: Seed Phrases and Hardware Wallets
Keep your keys out of reach: seed storage, hardware wallets, transaction hygiene, and what to do when a device fails.
Most people who lose crypto lose it to a leaked seed phrase or a signed transaction, not to a broken chain. This checklist covers the parts you actually control.
Store the seed phrase properly
- Write it by hand from the wallet screen on paper or metal. Never photograph it, never type it into a phone note.
- Keep two copies in separate physical locations, so one fire cannot end your access.
- Never enter the seed anywhere except the wallet itself, including restore pages and support chats.
- If a digital copy is unavoidable, keep it in an encrypted container on an offline drive, not in cloud notes or email.
Hardware wallet basics
- Buy from the manufacturer or an authorised reseller. A device that arrives pre-initialised is a red flag.
- Generate the seed on the device itself and set a PIN that is not stored next to it.
- Verify the receive address on the device screen before every transfer.
- Keep the firmware current; updates close real signing and connectivity flaws.
Day-to-day hygiene
- Keep savings in a hardware wallet and only spending money in a hot wallet.
- Treat every seed phrase request as a scam, no matter who appears to be asking.
- If you run trading bots, give exchange API keys trade permissions only, never withdrawal.
- Store bot configuration and keys on a machine you would trust with your email.
Separate roles, separate keys
Use a different wallet for long-term holdings, for everyday spending and for anything an app needs access to. A trading bot or a browser extension should never be able to reach the keys protecting your savings, and a wallet used on a phone should not share a seed with the one on your desktop.
When a device fails
Hardware failure is recoverable: the seed restores everything on a new device. A forgotten wallet file password is a different problem. A local utility such as Wallet Recovery Suite can rebuild a damaged wallet file and test candidate passwords from partial hints, entirely offline. It improves your odds, it does not perform miracles, so treat the written seed as the only real backup.