Who this guide is for
If you own a Model T or are considering one, this article focuses on real-world seed phrase (recovery phrase) best practices for long-term self-custody. I’ve been managing hardware wallets since the 2017–2018 cycle and in my testing the routines below prevent most user-caused losses. This is practical advice — not fear-mongering. (If you want the initial setup walkthrough, see Model T setup.)
Why your seed phrase matters (quick primer)
Your seed phrase is the human-readable backup that lets you recreate private keys. Lose it, and you lose access to funds unless you previously added another backup or multisig. Steal it, and someone else can empty your accounts. Simple. So what you do with that set of words matters more than the wallet you hold in your hand.
I believe thinking of the seed phrase like a master key to a safe deposit box helps: treat it like a physical object that must be kept secure and impossible to duplicate casually.
12 vs 24 recovery words (BIP-39 explained)
BIP-39 is the common standard that turns entropy into a list of words. Short version: 12 words equals 128 bits of entropy; 24 words equals 256 bits. Both are strong in practice, but 24 words offers far more theoretical brute-force resistance.
| Seed length |
Entropy |
Practical takeaway |
| 12 recovery words trezor |
128 bits |
Strong for most users; faster to write and restore |
| 24 words |
256 bits |
Extra brute-force margin for very large holdings or long-term vaults |
Which should you choose? If you hold small amounts or want faster restores, 12 words is fine. For high-net-worth holdings or multi-decade storage, 24 words adds comfort. But remember: physical security and backups matter more than one extra word.
Step by step: creating and backing up a seed phrase on the Model T
How to set a seed phrase (high-level):
- Unbox and verify your device (see model-t-unboxing). Do this before connecting to a computer.
- Connect the Model T and follow the device prompts to create a new wallet or choose recovery. The device will display words on its screen. Read each word and write them down.
- Choose whether to use 12 or 24 words if prompted (this depends on setup options). Confirm the words when asked.
- Set a PIN on-device. This adds one layer of theft resistance.
- Store your recovery phrase offline in at least two physical locations (see next section).
A few practical notes from testing: the Model T's touchscreen helps reduce phishing when entering words during restore, because you confirm on-device. Take your time during the write-down step. Don’t take photos. Don’t type the phrase into a phone or computer.
Passphrase (the 25th word): power and peril
Many Model T users add an optional passphrase (commonly called a 25th word). This creates a hidden wallet derived from the seed phrase plus that passphrase. It effectively turns one seed into many wallets. Very powerful for plausible deniability and extra security.
But there are real risks. Lose the passphrase and you lose access to those funds (the base seed won’t recover them). Forget to record how you derived the passphrase (did you use a phrase, a pattern, or a password manager?) and recovery becomes impossible. I recommend passphrases only for users who can reliably reproduce/store them (and who understand the trade-offs). See more on passphrase usage at model-t-passphrase.
And yes, using a passphrase increases complexity. But for some wallets it's a reasonable extra hurdle.
Practical storage options: paper, metal, and split backups
You have choices. Here’s a quick feature table to compare common approaches.
| Method |
Durability |
Ease of recovery |
Theft risk |
Notes |
| Paper |
Low |
Easy |
High if found |
Cheap, but degrades and is vulnerable to fire/water |
| Metal plate |
High |
Easy |
Moderate |
Best for long-term; resists fire and corrosion |
| Split backup (shamir/SLIP-39) |
High |
Flexible |
Lower (with correct distribution) |
Use if you want redundancy and geographic separation |
| Encrypted digital |
Medium |
Depends |
High if hacked |
Only for advanced users who control key management |
Metal backups (stamped or engraved) are my go-to for serious cold storage. But they cost more and still need to be stored securely. If you prefer redundancy, look into multisig or SLIP-39-style splits (read slip39-shamir).
Restoring and recovering: how to restore trezor wallet or recover trezor wallet
If the device breaks or you need to recover on a new Model T or compatible wallet, you’ll use the recovery phrase:
- Choose "Recover wallet" on the new device.
- Select the number of words (12 or 24) and enter each word using the device input.
- Set a new PIN and, if used previously, enter your passphrase.
If you’re restoring from a 12 recovery words trezor backup, the process is the same as for 24 — just enter the correct count. For step-by-step troubleshooting see model-t-recover.
Pro tip from experience: practice a mock recovery with a small test account. That helps you confirm your backup method works without risking large sums.
Multisig and inheritance: advanced resilience
Single-sig with one seed is simple and common, but multisig (multiple signatures required) materially improves survivability and theft resistance. Multisig is not for everyone; it adds setup complexity. I recommend it if you hold significant assets or plan to distribute control among family or trusted custodians. See model-t-multisig for a deeper guide.
For inheritance planning, a written plan and secure storage slip into the same category as legal advice. Put clear instructions (not the seed!) with a trusted lawyer or executor (see model-t-inheritance).
Firmware, supply chain, and update hygiene
Firmware updates can patch vulnerabilities and add features. But blindly installing updates from untrusted sources is risky. Verify updates on-device and follow the wallet’s official update flow (see model-t-firmware).
Supply chain attacks are rare but real. Always buy from reputable sources and inspect packaging for tampering (more at model-t-supply-chain).
Common mistakes I still see (and how to avoid them)
- Buying from unofficial sellers (risk of tampering). Buy direct or from authorized channels. See where-to-buy-model-t.
- Taking photos of the seed phrase (immediate digital exposure). Don’t.
- Entering seed words into a website or saving them in cloud storage. Never type your seed into a computer.
- Mis-managing passphrases. Treat passphrases like separate keys.
But honestly, the single biggest issue is poor planning. People write words on napkins and then move or throw them away. Plan where the phrase will live before you create it.
FAQ
Q: Can I recover my crypto if the device breaks?
A: Yes — if you have the seed phrase (and passphrase, if used) you can recover on another compatible device. See model-t-recover.
Q: What happens if the company goes bankrupt?
A: Your seed phrase controls your private keys, not the company. As long as the backup follows a standard (like BIP-39), you can restore on other compatible wallets. (Still, verify compatibility before you rely on it.)
Q: Is Bluetooth safe for a hardware wallet?
A: Bluetooth increases the attack surface. Model T uses a direct connection (see model-t-connectivity). If you use a Bluetooth-enabled wallet elsewhere, weigh convenience against potential threat models.
Conclusion and next steps
Seed phrase hygiene is the single most impactful thing you can do for long-term crypto safety. Use a measured approach: choose an appropriate seed length (12 vs 24), back it up on durable media, consider a passphrase only if you can manage it, and practice a recovery. What I’ve found after years of use is that discipline beats paranoid setups — consistent, well-documented backups remove most headaches.
If you want hands-on setup steps, walkthroughs for passphrase strategy, or multisig planning, check these pages next: model-t-setup, model-t-passphrase, model-t-multisig, and model-t-backups.
Ready to test your backup? Try a dry-run restore to a secondary device with a small test amount. It’s the cheapest insurance policy you’ll ever buy.
