Security
How to Back Up a Bitcoin Wallet Seed Phrase (and Actually Recover It)
A practical guide for Canadians on seed phrase backup, wallet recovery, and keeping your bitcoin safe from loss or theft.
Losing access to a bitcoin wallet isn't like forgetting a banking password. There's no reset link, no customer service line, and no regulator who can restore your funds. The seed phrase (that list of 12 or 24 words your wallet gives you when you set it up) is the only thing standing between you and permanent loss.
This guide covers how to back it up properly, where Canadians go wrong, and what wallet recovery actually looks like when something goes wrong.
What a seed phrase is and why it matters
Most modern bitcoin wallets (hardware, mobile, and desktop) are built on a standard called BIP-39. When you create a wallet, the software generates a random seed phrase: a sequence of common English words in a specific order. That phrase encodes your master private key. Every bitcoin address your wallet ever generates comes from it.
The implication: if you have the seed phrase, you can restore your wallet on any compatible software or hardware. If you lose the phrase and also lose access to your device, your bitcoin is gone. There's no exception to this. The Bitcoin network has no recovery mechanism, and no Canadian exchange or custodian can help you if you control your own keys.
This is different from holding bitcoin on an exchange like a Canadian crypto trading platform. If you leave bitcoin on an exchange, the exchange holds the keys, not you. That carries its own risks, but loss-of-seed isn't one of them. For anyone self-custodying, backup is non-negotiable. If you're reading about how to store bitcoin your business receives safely, you're almost certainly in that category.
How to back up a seed phrase correctly
Your wallet will display the phrase once, usually on setup. Most wallets won't show it again without you going into settings and deliberately revealing it. So the backup step needs to happen immediately.
Write it on paper first
Write the words by hand, in order, on paper. Check them against what's on screen. Double-check the spelling. BIP-39 words are chosen partly because they're unambiguous, but "ring" is not the same as "rib" or "rig." Number each word so you know if the list is complete.
Do not type the phrase into a notes app, email it to yourself, take a screenshot, or store it in a password manager that syncs to the cloud. Any of those puts your seed phrase on an internet-connected device, which is exactly where you don't want it. A compromised phone or a breached cloud account means compromised bitcoin.
Where to store the backup
Paper works, but it's fragile. Fire, water, and just getting lost in a drawer are real risks, especially over years. A few approaches that Canadians commonly use:
- Metal backup plates. Products like Cryptosteel or similar punch your seed words into stainless steel. They survive house fires and flooding that would destroy paper.
- Safe deposit box. A bank safe deposit box adds physical security. Worth noting: CDIC insurance does not cover the contents of safe deposit boxes, so this doesn't mean your backup is insured. It just means it's in a locked room.
- Multiple physical locations. Keeping one copy at home and one at a trusted family member's property (or a lawyer's office) reduces the chance that a single event takes out both.
Whatever you choose, the backup should be somewhere you can actually find it in an emergency, but not somewhere any visitor to your home could stumble across it.
The "passphrase" option
Some wallets let you add a custom passphrase (sometimes called the 25th word) on top of your seed phrase. This creates a separate wallet, so someone who finds your written seed phrase can't access your funds without also knowing the passphrase. The tradeoff is that the passphrase is not stored anywhere; you have to remember it or store it separately. If you forget it, the seed phrase alone won't recover your bitcoin. Use this feature only if you understand it and have a plan for the passphrase itself.
Testing your backup before you need it
Most people write down their seed phrase and never confirm it works. This is a mistake.
A quick test: after backing up, send a small amount of bitcoin to your wallet, then intentionally restore the wallet from seed on a second device (or the same device after wiping). If you can see your balance and generate the same addresses, your backup is correct.
If you're using a hardware wallet, the manufacturer's software usually has a "recovery check" feature that verifies your seed phrase matches the device without requiring you to wipe it. Use this. It takes five minutes and confirms your backup before a crisis forces you to find out.
This is worth treating as a recurring task. Any time you update wallet software, buy a new device, or change where you store your backup, run through the check again.
What wallet recovery actually looks like
If your wallet device is lost, stolen, or broken, recovery is straightforward, as long as your backup is intact.
- Obtain a compatible wallet (the same hardware wallet model, a different hardware wallet that supports BIP-39, or a reputable software wallet).
- Choose the "restore" or "recover from seed" option during setup.
- Enter your seed phrase words in exact order.
- The wallet will regenerate your keys and rescan the blockchain for your transaction history and balance.
Recovery time varies. A software wallet might sync within minutes on a fast connection. A hardware wallet might take longer if it needs a firmware update first. Either way, the process is deterministic: the same seed phrase always produces the same keys, so your bitcoin doesn't go anywhere while you're waiting.
One thing to watch: if your old wallet used a custom derivation path (less common but possible with some older or more technical wallets), the new wallet might need that path specified to find your funds. If restoration shows a zero balance and you're confident your backup is correct, check whether there's a non-standard derivation path involved.
Wallet security for Canadian businesses
If your business holds bitcoin, the stakes around backup are higher. A few things worth considering:
Who has access to the seed phrase? For a sole proprietor, the answer might just be you. For a company with multiple stakeholders, a single person holding the only backup is a risk on two fronts: if they're incapacitated, access is gone; if they leave, so is the backup. Multi-signature setups, where multiple seed phrases are required to authorize a transaction, address this at the cost of more complexity.
How does this interact with your record-keeping obligations? The CRA treats bitcoin disposals as taxable events. The actual seed phrase and wallet backup aren't something you report, but the transactions coming out of the wallet are. Keep records of your bitcoin acquisitions and disposals, not just the wallet backup itself. Check current CRA guidance on digital currency; the rules have been updated several times in recent years.
FINTRAC and money services. If your business qualifies as a Money Services Business (MSB) under FINTRAC rules (which can apply to certain crypto-related businesses), you have separate compliance obligations around record-keeping and reporting. Wallet backup procedure is an operational matter, not a FINTRAC matter directly, but good operational security and good compliance tend to go together. Confirm your MSB status with a qualified compliance advisor if you're uncertain.
For a deeper look at how hardware wallets fit into this picture, the comparison in hot wallet vs. cold storage for business bitcoin covers the tradeoffs in more detail.
Common backup mistakes
| Mistake | Why it's a problem |
|---|---|
| Storing the seed phrase in a cloud notes app | A breached account exposes your bitcoin |
| Taking a photo of the written phrase | Photos sync to cloud services automatically on most phones |
| Keeping only one physical copy | A single fire or flood can destroy it |
| Never testing the backup | You discover the backup is wrong at the worst moment |
| Sharing the phrase with someone "for safekeeping" | Anyone with the phrase can move all your bitcoin, immediately |
| Writing it on the wallet box or packaging | Easy to throw away; obvious to anyone who handles your mail |
Also worth reading: protecting your business from bitcoin payment scams covers the social-engineering angle, which is how most seed phrases are actually stolen. Not from physical theft, but from someone tricking the wallet owner into revealing the phrase directly.
FAQ
If I lose my seed phrase but still have my wallet device, can I recover my bitcoin?
As long as the device works and you can still unlock it (PIN, fingerprint, etc.), you can continue to use your existing wallet. The seed phrase is for restoring access if the device itself is lost or stops working. That said, if your device breaks tomorrow and you have no seed phrase backup, your funds are gone permanently. So losing the phrase is urgent even if the device still works today.
Can I store my seed phrase in a password manager?
Most security advice says no. Password managers that sync to the cloud introduce an internet-connected point of failure, and a compromised manager account would expose the phrase. Some people store the phrase in an offline, encrypted file (like a VeraCrypt container on an air-gapped machine), which is a different situation from a cloud-synced password manager. If you're not sure whether your setup qualifies, assume it doesn't and use physical storage.
How is a seed phrase different from a private key?
A private key controls a single bitcoin address. A seed phrase generates all of the private keys your wallet will ever create. It's the master key to the whole wallet. Backing up individual private keys would require a new backup every time your wallet generated a new address, which most modern wallets do automatically. The seed phrase approach avoids that problem.
What if I think my seed phrase has been compromised?
Move your bitcoin to a new wallet immediately. Generate a fresh wallet, back up its new seed phrase properly, then send all your funds from the old wallet to a new address in the new wallet. Do not reuse the old wallet afterward, even if you change where the seed phrase is stored. Once a seed phrase is exposed, the correct response is to treat the whole wallet as compromised and migrate.
Do I need a separate backup for each wallet I use?
Yes. Each wallet generates its own seed phrase. A hardware wallet and a mobile wallet have different seed phrases, and backing up one does not protect the other. Keep clear records of which backup corresponds to which wallet, especially if you hold funds across multiple wallets.
This article is for educational purposes only. It is not financial, tax, or legal advice. Canadian tax and regulatory requirements around bitcoin change; confirm current guidance with CRA, FINTRAC, and qualified professional advisors before acting.