Durable Physical Storage (Recommended)
Paper is okay short-term but vulnerable to fire, water, fading and theft. The recommended industry standard is a metal backup plate (stamped or engraved stainless steel) designed to survive fire, flooding and time. Ledger itself sells or documents robust seed-storage solutions and notes metal as a fire-/water-resistant option. :contentReference[oaicite:3]{index=3}
How to store metal plates safely
- Engrave or stamp your 24 words onto durable stainless steel plates.
- Store one copy in a home safe (fireproof) and another geographically separated (bank safe deposit box or trusted relative).
- Keep access limited and documented in a secure corporate/estate plan if needed.
Remember: the steel protects against disasters — it doesn’t protect against malicious insiders, so combine physical security with access controls.
Advanced Options — Passphrase & Ledger Recovery Key
Ledger offers additional layers that change your security model: the **Ledger Passphrase** (a user-chosen “25th word”) and the **Ledger Recovery Key** (a PIN-protected hardware backup). A passphrase creates separate hidden wallets that cannot be opened without the exact passphrase; the Recovery Key stores your SRP inside a secure element for easier backed-up recovery. Use these only if you fully understand their tradeoffs. :contentReference[oaicite:4]{index=4}
When to use them
- Passphrase — good if you want plausible deniability or multiple vaults; but losing the passphrase = permanent loss.
- Ledger Recovery Key — convenient, PIN-protected, and hardware-backed; consider it if you want an easier recovery without exposing the raw words.
Caution: advanced features increase complexity — document procedures for heirs and trusted parties to avoid accidental loss.
Alternative: Shamir / Secret Sharing (Split Backups)
Secret-sharing schemes (like SLIP-39 or Shamir) split the seed into multiple pieces that must be combined to recover. Ledger devices don’t natively implement SLIP-39 for the standard 24-word BIP39 seed, but you can use complementary schemes (or distributed custody) outside the device to split risk. Ledger’s own materials mention splitting as a risk-reducing tactic when done properly. :contentReference[oaicite:5]{index=5}
If you split your seed, keep parts in different secure locations and record the recovery threshold and procedure in a secure, private document for your executor.
FAQ — Quick Answers
Q: Can I store my seed on a USB or password manager?
A: No — do not store the seed anywhere connected to the internet. Password managers or encrypted files can be compromised. Ledger explicitly recommends offline storage only. :contentReference[oaicite:8]{index=8}
Q: Is metal storage really necessary?
A: If you value the assets for the long term, yes — metal significantly reduces risk from fire, water, and aging compared to paper. Ledger and many security guides recommend metal backups for durability. :contentReference[oaicite:9]{index=9}
Q: What about sharing access with a spouse or business partner?
A: Use documented shared custody schemes (multisig wallets) or split backups using secret sharing. Avoid giving raw 24 words to anyone unless you fully trust them and plan for legal succession.
Sources: Ledger setup & support (ledger.com/start), Ledger Safety & Recovery guides, Ledger Academy articles on passphrase and seed protection, and Ledger’s metal seed storage guidance. :contentReference[oaicite:10]{index=10}