A hardware wallet can fail, disappear or be destroyed. A properly prepared backup allows you to recover access to your Bitcoin. But if the device and its only backup are lost in the same incident, the consequences can be permanent.
Metal seed backups can make recovery information more resistant to physical damage. Their effectiveness, however, depends on the materials, construction and method used to record the information. A product described as fireproof can still leave you unable to recover your wallet.
Jameson Lopp has put dozens of metal backup devices through destructive testing. His Metal Bitcoin Seed Storage Reviews provide a useful starting point for understanding what works and where designs can fail. The testing and product findings discussed below are his; the practical guidance brings those findings into the wider context of self-custody security.
What a metal seed backup protects
A seed phrase is the recovery information used by many Bitcoin wallets, commonly presented as 12 or 24 words. Those words allow compatible wallet software to regenerate the keys controlling your funds. Depending on your setup, you may also need a passphrase or additional wallet information.
Attention: If you choose to use a passphrase, you MUST keep a secure backup of it. While a passphrase helps protect your funds if your seed phrase is exposed, it also introduces another single point of failure: if you lose it and need to recover your wallet, your funds are gone – permanently – even if you still have your seed phrase!
With a metal seed backup, you stamp or engrave your recovery words into a plate, punch marks into a grid, or arrange metal letter tiles in a holder. The aim is to keep your recovery information readable after a fire, flood or physical damage that could destroy a paper backup – but, as Lopp’s tests demonstrate, some designs achieve this far better than others.
For a conventional single-signature wallet without an additional passphrase, someone who obtains the complete seed phrase can generally recreate the wallet and spend its funds. They do not need your original hardware wallet or its PIN. A backup therefore needs protection against both destruction and unauthorised access.
A properly configured multivendor multisig setup can help address this risk: in a 2-of-3 arrangement, one stolen seed phrase is not enough to spend your funds.
Similarly, losing one seed phrase does not mean losing your funds, provided the other two and the wallet configuration needed for recovery remain available. Store the seed backups in separate locations to reduce the risk of losing them in the same incident.
We’ll cover this approach below.
Can metal seed backups also protect other cryptocurrencies?
Yes. The same tools can back up recovery phrases for other cryptocurrencies, provided they support your wallet’s backup format and word count. A single seed phrase can also generate wallets for multiple cryptocurrencies, although recovering each asset requires compatible wallet software.
Using the same seed phrase also means concentrating the risk: if it is exposed, funds across multiple wallets and cryptocurrencies may be compromised. Importing that seed into additional wallet applications creates more opportunities for exposure.
As such, be deliberate about which seed phrases you use for which purposes. In many cases, it makes sense to keep everyday transaction wallets and long-term savings under separate seed phrases, with security setups suited to each. Simply creating separate accounts under the same seed phrase does not provide that separation.
If you prefer professional guidance, our team at BitcoinVN Consulting is ready to help you plan and implement your setup, drawing on more than a decade of hands-on experience on the front lines of the Bitcoin industry.
How Lopp tests metal backups
Lopp’s published methodology puts devices through three destructive tests:
- Heat: Exposure to a flame of approximately 1,093°C for up to ten minutes or until failure, followed by immersion in water to rapidly cool the metal.
- Corrosion: Immersion in 16% hydrochloric acid for up to twelve hours or until bubbling stops.
- Crushing: Deformation using a 20-ton hydraulic press, followed by an attempt to recover and read the stored information.
The question throughout is simple: can you still recover your seed phrase afterwards? A metal casing surviving is of little use if the letters have fallen out, become unreadable or are trapped inside.
These are deliberately extreme comparisons. The acid test, for example, goes well beyond ordinary exposure to humidity or floodwater. Lopp acknowledges that his experiments are not highly scientific and that the grades involve judgement. An A means no data loss under the tests performed; it does not guarantee survival in every possible disaster.
What the results reveal
Lopp’s tests highlight how different backup designs behave under extreme conditions – and which details can determine whether your recovery information survives.
Solid plates with permanent markings
Several plates with information punched or engraved directly into the metal survived all three tests without data loss. Their simple construction removes the risk of individual letters falling out. However, the markings must remain readable: in one punched-grid design, corrosion damaged the grid and labels and made the intended punch marks difficult to distinguish from surface damage.
Cassettes with removable letter tiles
These designs let users assemble their recovery words from supplied metal letters. Their main vulnerability is how securely those letters remain in place when the surrounding metal deforms. In several tests, heat or crushing warped the rails enough for tiles to escape or shift, compromising the recorded information. Results varied between designs, making the fit and retention of the tiles particularly important.
Capsules with an internal storage core
A tested steel capsule protected its contents during heat and corrosion testing, but crushing bent the housing and prevented it from being opened normally. Lopp believed the information remained intact, yet could not access it with the tools available. This highlights another consideration: a robust container must also allow recovery of its contents after damage.
Construction details matter as much as the general design. Metal grade, marking durability, tile retention and access after deformation all affect recoverability. Similar appearance alone does not establish that two products will perform equally well.
What to look for in a metal backup
In his analysis of backup device design, Lopp favours stainless steel or titanium, simple construction and durable markings. Fewer components generally mean fewer opportunities for failure.
The practical checks are:
- Construction: Specified materials and evidence of performance under stress.
- Readability: Words, positions and any decoding grid must remain legible.
- Retention and access: Tiles must stay in order, and the information must remain accessible after damage.
- Ease of use: Recording and recovering the phrase should be straightforward.
Check compatibility with your wallet’s backup format and word count. For English BIP39 phrases, the first four letters identify each word; shorter words are recorded in full. Do not assume this applies to every recovery format.
BitcoinVN Shop’s steel seed backup plate offers a compact option using removable letter tiles for 12- or 24-word BIP39 recovery phrases. Delivery within Vietnam and setup guidance are available.
Fit the backup into your wider custody plan
For substantial long-term savings, consider how your setup would cope with one key being lost or compromised. A properly configured 2-of-3 multisignature wallet requires two independent keys to spend. One stolen key is insufficient, and one lost key need not mean losing access, provided the other two keys and the wallet configuration remain available.
Using hardware wallets from different manufacturers can also reduce reliance on a single vendor – an approach known as multivendor multisig.
Metal backups can protect the individual seed phrases in this arrangement, with backups stored in separate locations. You must also preserve the wallet configuration, including all participating public keys and the spending policy. Two seed phrases alone are insufficient if the remaining public-key information is missing.
Multisig adds a degree of complexity, so choose an arrangement that you – and anyone who may legitimately need to recover it – can use reliably. In return, a properly configured setup provides strong fault tolerance against disaster scenarios involving the loss or compromise of an individual key.
Self-custody support from BitcoinVN
You can find steel seed backups and hardware wallets for multivendor multisig setups at BitcoinVN Shop. For personal guidance on backup planning and implementing your custody setup, our team offers one-to-one self-custody consulting.
Furthermore, we also offer a dedicated three-plate bundle – a cost-effective way to obtain steel backups for all three seed phrases in your 2-of-3 multisig setup in one go.
