A backup has two opposing jobs
A backup protects availability: device failure, a lost phone, fire or human error should not destroy the only route to the keys. It must also protect confidentiality: whoever finds a complete seed can often spend all related bitcoin. More copies reduce the risk of loss but increase the number of places someone can find.
Paper can be damaged by water, fire and time; metal can improve physical resilience, not secrecy. A photograph, phone note or ordinary cloud storage creates an easily copied digital trail. No medium by itself solves location choice, other people's access or inheritance planning.
What must be recoverable
A BIP 39 wallet requires the exact words in order and every passphrase that was used. Other wallets may require a file, descriptor or extra metadata. Backing up a single displayed address is not enough to recover an entire deterministic wallet.
The plan should include clear instructions explaining what the backup is and which compatible procedure restores it. Those instructions should not weaken protection by combining every secret in one place. Consider whether an authorised person could still carry out the procedure many years later.
- completeness: every necessary secret and item of information
- resilience: more than one appropriately separated point of failure
- confidentiality: no simple online or photographic copy
A passphrase is not a device PIN
An optional BIP 39 passphrase enters the seed calculation together with the words. Every different passphrase creates another technically valid wallet, so software may not say that one character was wrong. It may simply open a different empty—or different existing—wallet.
A passphrase can separate the risk of a discovered seed backup, but it creates a new point of irreversible loss. It must be strong enough, exactly reproducible and backed up with sensible separation. Relying only on memory after many years is not a robust plan.
Test recovery without unnecessary exposure
An unverified record can contain a mistaken word, a missing passphrase or incomplete format details. A recovery test should confirm that a compatible wallet derives the expected receiving addresses. The safest method depends on the device; some hardware wallets provide a backup check inside their trusted environment.
The main seed should not be tested on a random website or an ordinary connected computer. A beginner can first rehearse the full process with a new test wallet and a small amount. After any significant change—such as adding a passphrase or migrating formats—verify what recovery now requires.