Cloud Storage and Screenshots: One Breach Away

The most common backup is also the worst one: a screenshot in the camera roll, a note in a notes app, a text file in a cloud drive, or a photo sent to yourself in a messaging app. It feels safe because it is convenient — but every one of these puts your seed phrase on internet-connected infrastructure you do not control.

• Account compromise exposes everything: a phished email password or a reused login can hand an attacker your entire photo library and cloud drive — seed phrase included
• Sync multiplies copies: that screenshot quietly replicates to every device and backup tied to your account, so you cannot even enumerate where it lives
• Malware looks for exactly this: clipboard sniffers and image-scanning stealers that hunt for seed phrases in photos and text files are a well-documented category of attack
• You are trusting a third party: the security of your funds becomes the security of someone else's servers and your weakest account password

Plain Paper: Offline, Free — and Readable by Anyone

Writing the words on paper is a genuine improvement. Paper has no attack surface: it cannot be hacked, phished, or scanned by malware. It costs nothing, and it is exactly what most hardware wallet vendors hand you a card for.

But plain paper has two serious weaknesses:

• It is plaintext: a burglar, a nosy houseguest, a contractor, or anyone who opens the wrong drawer can read it — and unlike a stolen card, you may never know it was seen
• It is physically fragile: fire, flood, fading ink, or a well-meaning spring clean can destroy the only copy

The fragility problem has an obvious fix — make several copies and store them in different places — but that fix makes the plaintext problem worse. Every additional plaintext copy is another location where the words sit exposed. Most people sensibly refuse to multiply that risk, keep a single copy, and end up with a backup that a house fire erases.

Metal Plates: Durable, Expensive, Still Plaintext

Stamped or engraved metal backup plates solve the durability problem well. Steel survives house-fire temperatures, flooding, and decades of storage — it is the right material if physical destruction is your main worry, and for large holdings that durability is genuinely worth paying for.

The honest trade-offs:

• Still plaintext: a metal plate is just a very durable piece of readable text — a burglar who finds it has your funds, exactly as with paper
• Cost per copy is real: plates and stamping kits cost enough that most people make exactly one, which concentrates rather than distributes risk
• Tedious to update: a new wallet or rotated seed means stamping a new plate, so backups tend to go stale

Encrypted Paper: Safe If Found, Cheap to Replicate

Encrypted paper changes the equation by removing the plaintext problem. With SecurePaper's seed phrase backup, you type the words into your browser, they are encrypted locally with AES-256-GCM — the plaintext never leaves your device — and you print the resulting code. The printed page reveals nothing to anyone who finds it.

That single property unlocks the strategy plain paper cannot offer:

• Safe if found: a burglar, visitor, or curious family member sees an unreadable code, not your seed phrase
• Cheap enough for several copies: printing costs pennies, so you can keep copies at home, at work, and with family — which also solves the fire problem without a steel plate
• Reproducible: lost or damaged copies can be reprinted in seconds, and an updated wallet means a fresh printout, not a new stamping session
• Nothing stored anywhere: in passphrase mode the key is derived from your passphrase with PBKDF2 at decryption time — no key exists on any server, in any account, or on any device
• No service dependency: the offline decryptor is a single downloadable file that decrypts your codes even if securepaper.app disappears

The trade-off is equally honest: encryption moves the risk from the paper to the key. If you use passphrase mode and forget the passphrase, the backup is gone — so choose a passphrase you can genuinely remember (or share with someone you trust), and if you use a generated key instead, export it as a JSON backup and store it separately from the printed codes. The full mechanics are documented on our security page.

Side-by-Side Comparison

An Honest Recommendation

There is no single right answer — it depends on how much is at stake:

• Any holdings at all: get the seed phrase out of the cloud and out of your camera roll. This is the one non-negotiable step.
• Modest holdings: encrypted paper alone is a strong setup — two or three copies in different locations give you discovery protection and disaster protection for the cost of printer ink.
• Large holdings: use a hybrid. Keep a metal plate in a genuinely secure location (a quality safe or bank deposit box) as the maximum-durability anchor, and distribute encrypted paper copies elsewhere for redundancy and safe-if-found accessibility. The plate covers the worst physical disaster; the encrypted copies cover discovery, convenience, and everything in between.

Whatever you choose, test the recovery path once before you rely on it — decrypt a copy, verify the words, and make sure the person who might need it someday knows the plan. Recent years of exchange collapses have shown that "the exchange is my backup" is not a plan either; self-custody makes your backup strategy the whole ballgame. If part of that plan involves family, our guide to building a family emergency access plan covers how to share access without sharing plaintext, and the getting started guide walks through your first encrypted document step by step.