Steel seed phrase backups: choosing and testing a metal plate for crypto self-custody
Steel seed phrase backups: choosing and testing a metal plate for crypto self-custody
Self-custody puts you in charge of the one thing exchanges handle for you: keeping the recovery phrase alive. A 12 or 24-word BIP-39 seed phrase written on paper is a single point of failure with a short life expectancy — paper ignites at 233°C (451°F), the famous Fahrenheit 451 threshold, while an average house fire reaches around 600°C in the open-flame area and can sustain higher. "Fireproof" document safes are typically rated to keep their interior at 350°F for 30 to 60 minutes — conditions under which paper chars but a stamped steel plate is untouched. That gap is the entire argument for metal backups, and this guide covers how the designs differ, what independent stress testing actually shows, and the handling discipline that separates a plate that works from a plate that looks finished.
What the stress testing shows
The closest thing this category has to a neutral standard is a series of independent stress tests of metal seed backup devices run by Bitcoin researcher Jameson Lopp across more than 70 devices and multiple rounds. The methodology is deliberately hostile: devices are held in a propane flame around 2,000°F for ten minutes and then quenched in water the way a fire crew would, submerged in muriatic acid for twelve hours to test corrosion, and deformed under a 20-ton hydraulic press to test whether the words remain readable. Average house fires peak far below these conditions, so passing the test means passing the real event with margin.
The findings, summarised in third-party analyses of Lopp's metal backup test results, converge on three design rules that matter more than brand names:
- Stamped or centre-punched beats engraved, printed, or etched. The words must be physically deformed into the steel — surface treatments look fine on a shelf and vanish in fire or acid. This single distinction separates most of the passing devices from most of the failing ones.
- One solid plate beats loose tiles. Tile systems (letters slotted into rails or capsules) are fast to assemble, but a crush or drop can scatter them; one test device's rivets dissolved in the acid run, dropping every letter. A single plate has nothing to come apart.
- Stainless steel is enough; titanium is optional. Good 304 or 316 stainless survives every test that matters. Titanium costs several times more and is not measurably tougher in these tests. A commonly repeated recommendation from the testing community: spend the difference on a second plate in a second location instead of a fancier first one.
Material notes worth knowing when you compare products: 304 stainless is the standard grade and adequate; 316L adds molybdenum for better corrosion resistance and is the choice for humid or coastal storage (relevant to much of coastal Australia); zinc-plated and aluminium products are the traps — aluminium melts around 660°C, below real house-fire temperatures, and should not be trusted with a phrase you care about.
The washing-machine test is not the only failure
It is worth being clear about what a steel plate protects against and what it does not. It protects the durability of the phrase: fire, flood, corrosion, time. It does not protect:
- A compromised seed-generation event. If the phrase was created on a compromised device, stamping it into titanium afterwards changes nothing. Generate seeds on a genuine hardware wallet.
- Discovery and theft. A plate is readable by anyone who finds it. Material hardness is not access control. Storage location, physical security, and separation from the signing device are what protect a plate from eyes.
- An incomplete backup. If your wallet uses a passphrase (the "25th word"), the plate must record that fact too, or your backup restores an empty wallet. One of the most quietly painful failure modes in self-custody: a perfectly stamped 24 words, and the recovery produces nothing, because the passphrase lived only in the owner's memory.
Comprehensive guides on steel seed phrase backup practice hammer the same point about verification: the plate is not a backup until you have proven it restores.
The stamping discipline
Most recoverable mistakes happen during transfer, and they are all preventable with one habit: one word at a time, verified before the next. The workflow:
- Read from the wallet's display, not from an intermediate piece of paper — a transcription typo at step zero poisons everything downstream.
- Stamp, read back, compare, then proceed. The error-catching pattern is stamp → read the metal → look at the wallet → confirm → next word. The error-missing pattern is stamping all 24 words then checking at the end, where a single transposition hides among fresh-looking neighbours.
- Mark the index positions. Sequence is part of the secret; a knocked plate that lets you misread order is as fatal as a misspelling.
- Wrong-letter policy. Most plates do not allow corrections. Work slowly, and if your plate kit allows ordering two, the second plate is your scratch space for the inevitable mis-strike.
For 24-word phrases, note that many plates store only the first four letters per word — this is sound, because the BIP-39 wordlist is constructed so no two words share their first four letters, but it means your plate is legible as a wallet to anyone who knows the scheme. It is not obfuscation; treat it as public.
Prove it works, then separate it
The step most often skipped, and the one that converts a plate from a decoration into a backup:
- Wipe the hardware wallet (factory reset).
- Restore from the plate alone — do not glance at any other copy.
- Confirm the same receive address appears as before the wipe.
Twenty minutes, and it is the only proof that the plate actually encodes your wallet. Do it on a small test wallet first if the idea of resetting your main one is uncomfortable; the muscle memory transfers.
Then storage: two copies, two locations, physically far apart, and never co-located with the hardware wallet it recovers. A single drawer holding the plate and the device hands a thief the complete wallet. The same two-copy logic applies to other root secrets — for FIDO2 account recovery, the second FIDO2 hardware security key belongs in a different building, not in the same box.
Choosing our plate
Our steel seed backup plate follows the design rules the stress-testing literature rewards: single solid stainless plate, centre-punch marking with the included punch, no tiles to scatter, stamped characters that survive flame, acid, and crush. Paired with a hardware wallet and the discipline above, it closes the gap between "I have the words somewhere" and "my words survive the house burning down".
One final honesty note: a metal backup is the last line of defence, not the first. The signing-device hygiene, the passphrase decision, and the recovery test all matter more than plate choice — the plate just guarantees that when everything else has gone wrong, the phrase is still there.
This article is general information about self-custody practice, not financial or legal advice. Self-custody transfers all responsibility for key management to you; make decisions that suit your own circumstances.