What Are Seeds and What Is the Best Way to Store Them?

In order to properly secure your cryptocurrency, we have already described in the first part of our series how to create secure passwords as well as how to manage them and how to create backups.

While those aspects of secure cryptocurrency handling refer more to an area that establishes general instructions for action, the handling of so-called seeds is much more specific.

In this part of our series, we want to teach you what a seed actually is and how you can secure it.

Some of our readers will already know the relationship between private keys and public keys. While the receiving address is derived from the public key, the private key is used to control the ownership of the coins. A wallet file stores all key pairs and allows for the creation of new pairs, thus facilitating the handling of cryptocurrencies like Bitcoin.

However, the import of private keys is associated with risks since improper use of this method can sometimes result in loss. This can especially be the case if you only transfer a partial amount of a cryptocurrency controlled by an imported private key. The remaining amount might then be transferred to the receiving address of the old wallet. Unless you have also imported this address or its private key into the new wallet this could lead to a loss. As a rule of thumb, however, you only export the key or keys that hold coins at that time.

The solution to the problem of having to export all keys is the so-called seed, which is also called seed phrase or mnemonic phrase. A seed is a secret, similar to a private key, but with some differences:

• Unlike a private key, a seed is written in a form that can be read by humans.
• It usually consists of 12, 18 or 24 words.
• The seed is used to restore the entire wallet and obtain all key pairs.

Given these characteristics, the seed has become the most popular method of creating a wallet backup. It also has advantages in regards to estate planning because whoever has the seed immediately has full access to all coins. Especially if you are to inherit Bitcoin, this is an advantage. For example, a seed can be deposited with a notary with specific instructions for the heirs. However, the seed’s full-access feature also poses risk because an unauthorized person would immediately have all the coins in his hands.

There are two basic methods of securing the seed, each having its advantages and disadvantages. It would seem to be obvious to save the seed digitally. Password managers, for example, which also allow the management of so-called secret notes, are suitable here. In this way, they ensure that the seed is not stored unencrypted.

The advantage of this method is that you can quickly create and distribute multiple backups. However, the biggest disadvantage is that you can never be completely sure that the computer on which you initially enter the seed has not been compromised. If there is a virus on the computer your cryptocurreny assets might be at risk.

This problem can be avoided by the second method, which is more recommendable overall. One writes the seed on a piece of paper when creating it and never saves it digitally.

The advantage is obvious. No viruses, no hackers, only the person who has the physical copy in their hands has access. The disadvantages, however, present some challenges:

• If an unauthorized person finds the seed, he will have immediate access to the wallet.
• A fire in your home can be just as dangerous for the seed as a tipped-over cup of coffee or a playful pet.
• Distribution in terms of redundant backups is more difficult than with digital copies because the seed is unencrypted.

There are a number of steps that can be taken to address these issues. One way is to split the paper and deposit the individual pieces in different locations. This gives you a puzzle and only those who know all the storage locations can put the seed together.

In terms of avoiding the destruction of the copy, it is no different than with digital copies. One must have several locations available to deposit the seed. Since the paper is unencrypted, one needs a secure location that only trusted people can access.

Another solution is to create a so-called 25th word, which is known only to the rightful owner. Thus, in principle, anyone can hold the 24 words of the seed in their hands but would only get access to the coins if they know the secret additional word or password.

The Ledger, Trezor or BitBox hardware wallets, for example, offer this possibility.