How to Back Up a Crypto Wallet Safely

If you use a self-custody cryptocurrency wallet, you control its keys and must protect the recovery phrase, a set of words that lets a compatible wallet recreate them. Anyone who gets the phrase can gain access to your funds. If your device fails and you lose the phrase, you may be unable to restore the wallet.

Record the phrase exactly. Verify it using the wallet’s official method. Store it where others cannot see or take it. Follow the instructions for your wallet because recovery methods and storage recommendations vary.

What a wallet backup restores

Cryptocurrency stays on a blockchain, a shared record of transactions. A wallet holds the keys that let you authorize transactions involving your funds. A backup helps recreate those keys when you lose, replace, or reset a device; it does not copy coins from the device.

Many self-custody wallets use a recovery phrase to generate wallet keys and addresses. One phrase may restore several accounts or addresses, but the result depends on the wallet’s format and settings. Some wallets use different phrase lengths or recovery methods. For example, the BIP-39 standard, which defines one format for recovery phrases, supports phrases of 12, 15, 18, 21, or 24 words. Other wallet formats use different lengths. Follow your wallet provider’s instructions rather than assuming a phrase works across every wallet.

A device PIN or app password generally protects access to that device or app. It does not replace the recovery phrase. If the device becomes unavailable, the PIN alone may not help you restore the wallet.

First, check whether you use self-custody or a custodial exchange account: with self-custody, you control the wallet keys and must protect the recovery method; with a custodial account, the platform controls the keys and provides its own account-recovery process. Do not follow recovery phrase instructions for a product that does not use one.

Record and verify the backup

Use the wallet’s official setup or backup instructions. For a word-based phrase, write every word in the correct order and check the spelling. Do not invent a phrase from memorable words: wallet phrases are generated from specific data, and a phrase that merely looks plausible will not restore your wallet.

Before relying on your backup, use the check or recovery process your wallet provides to verify it. Some hardware wallets, physical devices used to manage wallet keys, provide a built-in backup check. Use that feature before wiping or resetting a device. Never test a phrase by entering it into a random website, search result, or third-party recovery tool.

Keep any extra recovery details the wallet requires. An optional passphrase, for example, can create a separate wallet in some systems. The recovery words alone will not restore that wallet without the exact passphrase. Check the provider’s instructions to learn whether your wallet uses this feature and what information restoration requires.

Store the backup securely

A written copy kept in a private physical location avoids exposure to many online threats. Paper is easy to damage, though, so some people choose a durable metal backup. Metal can protect against physical damage, but it does not prevent theft if someone can find and read it.

Decide whether to keep one copy or several. A single copy limits the number of places someone could discover the phrase, but a fire could destroy it, and so could a flood or another event. Separate copies can reduce that risk, while creating more locations you must secure. Keep any copies out of view and away from people who should not control the wallet.

Recommendations for digital storage differ by wallet provider. Trezor and MetaMask advise keeping their recovery phrases offline and warn against digital copies or online storage. Coinbase Wallet recommends its own encrypted cloud-backup feature alongside a written phrase. That recommendation applies to Coinbase Wallet’s feature; it does not make uploading another wallet’s phrase to cloud storage safe. Encryption also does not remove the risk of account compromise or mistaken sharing. Follow the official directions for the exact wallet and backup method you use.

Recognize phishing and theft

Treat a recovery phrase like a key that can control your funds. Do not give it to someone who contacts you claiming to be wallet support, and do not share it over chat, email, or a phone call. A support agent’s request for the phrase is a warning sign, even if the message says your wallet is blocked or under attack.

Unexpected messages often create urgency and direct you to a fake website or phone number. Do not follow those links or use contact details from the message. Open the wallet or provider through its official website or app, using an address you have checked independently, then read its recovery instructions.

Legitimate recovery steps vary by wallet. Some wallet software asks for a phrase during setup or restoration, while hardware wallets may require you to enter it on the device. Use only the intended recovery flow for your wallet. A screen lock does not make an exposed phrase safe. The same is true of an app password or PIN.

If you suspect someone has seen or copied your phrase, treat the wallet as compromised. Follow the wallet provider’s official security guidance promptly. A backup restores access, but it does not reverse transactions that have already been made.

Decide whether to use a passphrase

An optional passphrase adds another secret to protect and remember. In some wallets, the exact passphrase opens a separate wallet, and support cannot recover it if you forget it. The extra layer can be useful for someone who understands the wallet’s recovery design, but it also adds another way to lose access. Do not turn it on without understanding how to back it up and restore it.

Keep any passphrase separate from the recovery words and device if the wallet provider recommends that arrangement. Make sure you can recover both before relying on the wallet. A more complicated backup is only useful if you can still use it when needed.