💼 Wallet Security Guide

A mnemonic seed phrase — 12, 24, or 25 words depending on the wallet — is the master backup for everything in that wallet, and that cuts both ways: anyone who obtains it can reconstruct the wallet and drain it completely, with no password or 2FA standing in the way, since the seed is the fund's actual root key, not a secondary credential. Write it on paper, or stamp it into metal if you want fire and water resistance, and never let it touch anything digital — no phone photo, no text file, no cloud note, no password manager entry, since a digital copy is a copy that can be exfiltrated remotely in a way a paper one physically cannot be. Keep two copies in two separate, physically secure locations, and before depositing anything meaningful, actually restore the seed on a different device to confirm the backup works — a seed phrase you've never tested restoring from is a backup you're only assuming works.

A hardware wallet (Ledger, Trezor) keeps private keys locked inside a secure element chip that never exposes them to the connected computer, which changes the threat model entirely — malware on that computer can see what you're doing but can't extract the keys themselves, and every transaction still needs a physical button press on the device to confirm. That makes a hardware wallet the right tool for long-term storage of anything you're not actively spending, while a smaller working balance in a hot wallet on Tails handles active market activity — splitting the two means a compromise of the active wallet never touches the bulk of your holdings. Buy hardware wallets only directly from the manufacturer, never a reseller or marketplace listing; a tampered device is functionally indistinguishable from a real one until it silently exposes a "randomly" generated seed that was never actually random.

A 3-2-1 approach — three copies, on two different media types, with one stored off-site — covers the failure modes a single backup doesn't: a house fire takes out paper but not a metal-stamped copy stored elsewhere, and a single location compromise doesn't take out every copy at once if one genuinely lives somewhere else. For a hot wallet running on Tails, back the wallet file up to Persistent Storage and to a separate encrypted USB, not just one or the other. Test restores periodically rather than assuming a backup made a year ago still works — media degrades, and the only way to know a backup is good is to actually use it once, deliberately, before an emergency forces the question. Keep a record of which address serves which purpose if that helps you stay organized, but store that mapping completely separately from the seed phrases themselves — the mapping is organizational metadata, the seed is the actual key, and they should never share a location.