A storage plan has to answer a short list of failures: a recovery phrase someone else saw, a backup that burned or was never made, a payment sent to the wrong address, a compromised phone and heirs who cannot get in. A good plan protects access only: crypto is volatile and can lose most or all of its value however carefully it is stored. The crypto hub covers the basics, and hot vs cold wallets compares wallet types in detail.
What does a layered crypto storage plan look like?
It splits holdings by purpose into spending, savings and long-term layers, each with its own wallet type, backup method and rules for moving money between them.
| Layer | Holds | Typical setup | Backup | Touched |
|---|---|---|---|---|
| Spending | What you expect to spend or trade in the next month or two | Phone or desktop wallet, or a custodial account | Recovery phrase on paper at home | Daily or weekly |
| Savings | Money you may move within a few years | Single-signature hardware wallet | Phrase on metal, two copies in separate places | A few times a year |
| Long-term | Holdings you do not plan to touch | 2-of-3 multisig, or a hardware wallet with a passphrase | Each backup in a different location, plus the wallet configuration | Once a year, for the check |
The layers work like fire doors: a failure in one stays in that layer. A phishing approval drains the phone wallet but cannot reach the hardware wallet, a lost hardware wallet costs nothing if its phrase is safe, and one stolen multisig key moves nothing.
Two rules keep the layers apart. Each wallet gets its own recovery phrase, never reused, so one leaked phrase empties one layer. And money moves downhill on a schedule you set in advance, from long-term to savings to spending, never in response to a message, a price move or a support agent's request.
How much should go in each layer?
Size the spending layer by what you expect to spend soon, the savings layer by what you may need within a few years, and leave everything else long-term.
Worked example: Sizing three layers for $60,000 of crypto
Assume about $350 a month spent or traded from a phone, $8,000 set aside for a purchase within two years, hardware wallets at $150 each and stainless steel backup plates at $60 each. All figures are illustrative.
- Spending: 2 months × $350 = $700, or 1.2% of the total
- Savings: $8,000 for the purchase + 12 months of refills at $350 = $12,200, or 20.3%
- Long-term: $60,000 − $700 − $12,200 = $47,100, or 78.5%, in a 2-of-3 multisig
- One-time cost: savings layer 1 device + 2 plates = $270; long-term layer 3 devices + 3 plates = $630; total $900, or 1.5% of holdings
What each failure would cost: a compromised phone, $700; a lost savings device with its phrase intact, nothing; a stolen savings phrase, $12,200; one lost or stolen multisig key, nothing, as long as it is replaced before a second goes. A 60% market fall, by contrast, takes $60,000 to $24,000 across every layer at once.
The ratios matter more than the dollars. If devices and plates would cost more than a few percent of a layer, that layer is a candidate for merging with another or for leaving with a custodian; custodial vs non-custodial wallets weighs that choice.
How should you back up a seed phrase?
Write it by hand on paper or stamp it into metal, keep at least two copies in separate secure places, and never store it in any digital form.
The recovery phrase is the wallet. Under BIP-39 it encodes the secret from which every key and address is derived, and NIST notes that anyone who finds the words can restore the funds on a device of their choice. Paper and digital backups alike can be lost, stolen or destroyed, NIST adds, so a backup has to be hard to steal and hard to destroy at once.
Use metal for copies that must last
Paper is fine while you set up, but it burns, soaks and fades. Ready.gov notes that a room fire can reach 600°F at eye level. Steel melts at about 2,800°F, while ordinary building fires reach up to about 2,000°F according to NIST, so words stamped or engraved into stainless steel can survive a fire that leaves nothing of paper. BIP-39's English word list is built so that the first four letters identify each word, which is why many plates hold only four letters per word. After stamping, check that every word is legible, in order and matches the device's list.
Keep it off every device
No photos, screenshots, cloud notes, email drafts, text messages, password files or printers. FINRA advises against keeping a phrase in any internet-connected file because hackers look for them, and phone photos can sync to the cloud without you noticing. The words belong in only one digital place, the wallet device during a restore; anyone who asks for them, however official, is attempting theft, and both the CFTC and the SEC say never to share them.
Plan where the copies live
Two copies in two places is the minimum, so one fire, flood or burglary cannot take both. A home safe paired with a bank safe deposit box, or with a trusted relative's home, is a common arrangement. The FDIC points out that safe deposit box contents are not covered by deposit insurance and can be reached only when the bank is open, which suits a backup you hope never to need. Keep each device away from its phrase so one theft does not deliver both, and do not label the copies with what they are. Crypto inheritance planning covers telling the right people the copies exist.
Decide whether to add a passphrase
BIP-39 allows an optional passphrase, sometimes called a 25th word, that is combined with the recovery phrase to create the wallet's seed. Every passphrase produces a valid wallet, which is both the protection and the danger: a thief who finds only the words opens an empty wallet, and so do you if you mistype or forget the passphrase, with no warning. Back the passphrase up separately from the words, in a different place, and use it in every restore test.
Worked example: Why cutting a 12-word phrase in half backfires
A 12-word BIP-39 phrase carries 128 bits of randomness plus a 4-bit checksum, at 11 bits per word.
- With no words known: 2^128 ≈ 3.4 × 10^38 possible phrases
- With 6 words known, 6 unknown words carry 66 bits, 4 of them fixed by the checksum: 2^62 ≈ 4.6 × 10^18 candidates
- So whoever holds one half has a search 2^66 ≈ 7.4 × 10^19 times smaller than an outsider's
- For a 24-word phrase, 12 known words still leave 2^124 candidates, but losing either half still loses the wallet
Splitting hands an attacker a head start and gives you two single points of failure. A 2-of-3 multisig covers the same worry better: one found backup reveals nothing usable, and one lost backup still leaves enough keys to recover.
How do you check an address before sending crypto?
Read the full address on a screen you trust, ideally the hardware wallet's own display, and send a small test amount before any large transfer.
Three tricks defeat a quick glance. Clipboard malware swaps a copied address for the attacker's at the moment you paste. Address poisoning plants a look-alike address, matching the first and last few characters of one you use, in your transaction history so you copy it later. And a fake website can show a deposit address that belongs to a thief; crypto scams covers these schemes.
- When receiving into a hardware wallet, confirm the address on the device matches the one on the computer.
- When sending, compare the whole address in chunks against a source you trust, not just its ends.
- Save addresses you reuse in the wallet's address book after a successful test, and pick from there rather than from history.
- Confirm the network as well as the address; sent crypto to the wrong network explains what happens when chains are mixed up.
On the $12,200 savings move in the example above, a $20 test and a second network fee of about $2 cost about 0.18% for proof that the address is right.
How do you keep devices and accounts secure?
Keep wallet software current from official sources, protect exchange and email accounts with phishing-resistant sign-in, and limit what else runs on any device that holds keys.
- Use phishing-resistant sign-in. CISA describes FIDO/WebAuthn, the standard behind security keys and passkeys, as the only widely available phishing-resistant form of multifactor authentication, and ranks codes sent by text message or voice call weakest, since they can be phished or stolen through SIM swaps. Use the strongest option for the exchange account and for the email that can reset it.
- Update from the source. Install wallet apps and firmware only from the developer's official site or app listing, and confirm hardware updates on the device screen.
- Keep key-holding devices plain. A phone with a hot wallet should run few apps, nothing pirated and no unfamiliar browser extensions.
- Prune old approvals. On Ethereum-style networks, token permissions granted to apps can let them move tokens later, so revoke the ones you no longer use.
- Keep holdings private. The SEC's custody bulletin advises not telling anyone how much crypto you own or which coins.
When is multisig worth it for larger holdings?
Multisig earns its complexity when one stolen device, one destroyed backup or one coerced person could otherwise cost more than you are prepared to lose.
In a 2-of-3 setup, any two keys approve a payment and any single key is useless alone. Spread the three across places that fail independently: one at home, one off-site such as a safe deposit box, and one with a trusted person or a professional co-signer, an arrangement NIST calls partial or collaborative custody. Losing any one key then costs nothing, provided it is replaced before a second is lost.
Multisig adds duties a single wallet does not have. Store a copy of the wallet configuration, which lists every cosigner's public key, with each backup, because the right two keys cannot find the coins without it. Devices from more than one maker keep a flaw in one product line from reaching every key. And a written explanation for heirs matters more here than anywhere, since a setup only its owner understands can strand coins as surely as a lost phrase.
What should an annual crypto security check include?
Once a year, confirm every backup exists and is readable, prove one restore works, update software, review who has access, and refresh the instructions heirs will need.
Tie it to a fixed date, such as the week you file taxes. The check takes an hour or two and catches slow failures: a plate stored somewhere that flooded, a relative who moved, a passphrase nobody remembers, a device whose battery died.
Crypto storage security checklist
- Each wallet has its own recovery phrase, created on the device and never reused elsewhere.
- Every phrase exists in two offline copies, at least one off-site, with no digital copy anywhere.
- Long-term copies are on metal, and every stamped word is legible and in order.
- Any passphrase is backed up apart from its words and was used in the latest restore test.
- At least one wallet a year is restored on a spare device from its written backup, and its first address matches.
- Firmware and wallet apps are current and came only from official sources.
- Exchange and email accounts use a security key or passkey rather than text-message codes.
- The spending layer holds no more than its planned size; anything extra goes back to savings.
- A copy of each multisig configuration sits with each key backup.
- Instructions for heirs say where everything is and how to use it, without containing the words themselves.
What are the risks of storing crypto yourself?
The main risks are permanent loss through a missing backup, theft through a leaked phrase or approved malicious transaction, and heirs who cannot find or use the keys.
Self-custody has no reset button, no chargeback and no fraud department. FBI complaint data shows the scale of the threats around it: in crypto-related complaints, victims reported $11.37 billion lost across 181,565 complaints in 2025, a 22% rise in losses from 2024, much of it in investment scams that persuaded people to send the coins themselves.
Over-engineering is a risk as well. Every extra key, location and passphrase is one more thing to lose or forget, and a plan only its designer understands can fail the day that person is unavailable. Physical threats exist too, which is one more reason to keep holdings private. And no storage method touches market risk: a coin can lose most or all of its value, and the bitcoin price page shows how far prices have swung. For balances you would rather not manage yourself, whether crypto is safe on an exchange sets out what changes when a company holds the keys.