The short answer on storing a seed phrase: write it on paper by hand, make two copies, and keep them in two different places. No screenshots, no cloud drive, no password manager, and never send it to anyone — including someone who says they are support. As the balance grows, move to a metal plate; beyond that, a Shamir backup, covered below.
Why so strict: the seed phrase is the wallet. Whoever has the words can move the coins, and a transfer cannot be reversed. This piece also covers the difference between self-custody and an exchange account, how to set up MetaMask without getting drained, and how to read an approve request before you click sign.
§1 · Where your coins actually live right now
On the exchange — you hold an IOU
You bought 0.1 BTC on Binance or Coinbase. Your dashboard says "Balance: 0.1 BTC." The 0.1 BTC is not actually in your hands. It is sitting in one of the exchange's hot wallets or cold storage vaults, and a row in their database says: this user is owed 0.1 BTC. The balance you see on the screen is, mechanically, an IOU the exchange has issued to you.
Exchange goes down, the IOU evaporates. When FTX collapsed in 2022, a huge number of customers saw their balances frozen overnight — the number was still on the dashboard, but they could not withdraw it, and getting anything back meant years in the bankruptcy process. That is what "not your keys, not your coins" means. So keep only what you plan to trade soon on an exchange, and move long-term holdings to a wallet where you hold the keys.
Self-custody — you actually own the coins
A self-custodial wallet is one where you hold the private key. The private key is a long string of cryptographic material that only you know. Knowing the key is the only way to authorize a transfer of the coins, and the network does not care who you are, only whether the signature is valid. Nobody can freeze the account. Nobody can refuse a withdrawal. Nobody can take the platform offline and run away with the deposits.
The cost is that there is no customer support anymore. Lose the key, lose the coins. There is no help desk, no password reset, no "I forgot, please send me a recovery link" form. Send to the wrong address, the funds are gone — blockchain transactions are irreversible by design. Self-custody is in essence the act of accepting that responsibility yourself, in exchange for the certainty that no third party can ever rugpull you.
§2 · Which kind of crypto wallet should you use for what?
| Type | Example | Security | Convenience | Best for |
|---|---|---|---|---|
| Exchange wallet | Coinbase, Binance, Kraken | Low | Maximum | Trading float — funds you plan to use soon |
| Software hot wallet | MetaMask, Phantom, Rabby | Medium | High | DeFi interaction, on-chain transfers, medium balances |
| Mobile wallet | Trust, Coinbase Wallet, OKX Web3 | Medium | High | Mobile DeFi, day-to-day on-chain spending |
| Hardware (cold) wallet | Ledger Nano, Trezor Safe | Very high | Medium | Long-term stack, balances above five figures |
| Paper / steel backup | Hand-written seed, Cryptosteel | Depends entirely on where you hide it | Low | Cold backup only — never the primary wallet |
The combination I recommend for almost every newcomer: exchange + MetaMask + Ledger. Trading float lives on the exchange, DeFi activity goes through MetaMask, and the long-term stack sits on a Ledger that rarely needs to be plugged in.
§3 · MetaMask first-time setup, step by step
Step 1 · Download from the official site, and only the official site
Type metamask.io directly into the address bar. Watch the spelling — phishing sites named metamesk, metamaks, metamask-io, metamask-login and a hundred other typos all exist, all look identical to the real thing, and all exist for exactly one purpose: you type your seed phrase into the import screen and they immediately drain everything. Hand-type the domain. Never click the top result on a Google search for the wallet name — paid search ads for "MetaMask" have been the single most reliable phishing vector for several years now, because Google does not vet ads as carefully as it vets the organic results.
Step 2 · Create a fresh wallet
Open the browser extension and click "Create a new wallet" — explicitly not "Import," which is the entry path for an existing seed phrase and is therefore the path the phishers want you on. Pick a strong password. This password unlocks the wallet on this specific device; losing it does not put the coins at risk because the seed phrase, which you are about to write down, is the actual recovery mechanism. Use fifteen or more characters with mixed case, numbers and symbols. A password manager (1Password, Bitwarden, the browser's built-in one) is fine for this layer — but not for the seed phrase itself, which we'll cover next.
Step 3 · The twelve English words — this is the part that actually matters
MetaMask will show you a list of twelve English words. This is the seed phrase (also called the mnemonic, recovery phrase, or BIP-39 phrase). The order matters. The spelling matters. The capitalization does not, but every other property does. These twelve words deterministically generate every private key the wallet will ever produce. Anybody who has them can import the wallet anywhere on earth and walk away with everything in it. The phrase is the wallet, and the file on your laptop is just a convenience copy of it.
Step 4 · Write it down on paper, by hand
Use a pen and a sheet of paper. Do not:
- Take a screenshot — the photo will auto-sync to iCloud or Google Photos, and if either of those accounts ever gets compromised, the seed phrase goes with it.
- Store it in a password manager — if the password manager is breached, every wallet stored in it goes too.
- Email it to yourself — if the inbox is ever hacked, the seed phrase goes with it.
- Drop it on Dropbox / Google Drive / iCloud Drive — these have been compromised more often than people think, and there is no recovery once the file is exfiltrated.
- Hand it to a trusted friend "just in case" — relationships change, and once someone has seen the words you cannot take that back.
- Memorize it — you think you remember it, but three months from now the order will be subtly wrong and the wallet will be unrecoverable.
Write it twice. Store the two copies in two physically separate locations — for example, a fireproof box at home and a safety deposit box at a bank.
Step 5 · Upgrading the seed phrase storage when the balance grows
Paper is vulnerable to fire, water, humidity and silverfish. Once the wallet holds five figures or more in USD, it makes sense to buy a metal seed plate — Cryptosteel, Billfodl, Stamp Seed and other vendors sell stainless plates that you stamp or punch the words into. It is a one-time cost, and the plate survives the house fires and floods that destroy paper.
The next tier is a Shamir backup (SLIP-39). The shares are generated by the hardware wallet itself when you create a new wallet — for example three shares, any two of which recover the wallet, so no single share is enough on its own. Trezor Safe 5 supports this natively. The benefit is that the shares can live in three different locations (home, parents, lawyer) and any one being compromised does not lose the wallet. The downside: if you lose two shares, the wallet is permanently gone.
What Shamir is not: you cannot take the twelve words you already have and cut them into pieces by hand. Splitting an existing phrase manually weakens it — whoever holds one piece has far fewer words left to guess. If you want Shamir, create a new wallet on a device that supports it and move the funds over.
§4 · How do people lose coins from their own wallets?
Incident 1 · Screenshot of the seed phrase, synced to the cloud
These cases tend to follow the same script. Someone installs MetaMask, decides that writing twelve words on paper is inconvenient, and takes a screenshot instead. The camera roll auto-syncs to iCloud. Later, the Apple ID gets credential-stuffed with a password that leaked from some other site, the attacker browses iCloud Photos, finds the screenshot, and the wallet is emptied in a single transaction.
The blockchain shows exactly where the coins went, but they do not come back. Apple cannot help — it only handles the account itself, not what happens to assets controlled by data stored in the account.
Incident 2 · The airdrop approve trap
A common version: right after minting from a new NFT collection, the site pops up a friendly modal offering a "free airdrop" for one more signature, and the user clicks sign on autopilot. The payload is setApprovalForAll — in plain English, it authorizes an outside contract to transfer every NFT the user holds in that collection, in any quantity, until the approval is revoked. Soon after, the whole collection leaves the wallet.
The lesson: every approve prompt requires you to read what you are about to authorize before you sign. Look at the contract address in the wallet popup. If the address is unfamiliar, reject. If the function looks vague, reject. If the amount field reads "unlimited," change it to a finite number or reject.
§5 · What is a token approval, and why is it risky?
In the ERC-20 token standard, any contract that wants to transfer your tokens has to be pre-authorized by you first. Concrete example: you want to swap USDC for ETH on Uniswap. The very first time you do this, the wallet prompts you to approve the Uniswap router contract — that is, to grant it permission to move your USDC on your behalf. This design is what makes DeFi swaps possible in two clicks instead of six. It is not, in itself, a bug.
The vulnerability is that approvals can be granted in unlimited size. Many dApps pre-fill an unlimited amount in the approval request, because a capped approval means you have to re-approve before later swaps. One such signature authorizes the contract to move every USDC you will ever hold in this address. A legitimate protocol will not abuse this — its contract only moves your tokens when you actually use it. But if you accidentally approve a look-alike phishing contract that imitates Uniswap, the moment you sign, that contract calls transferFrom on your USDC and walks away with the entire balance. There is no time window to react, no withdrawal confirmation, no email warning.
The four-step approve defense routine
- Read every signature popup. What function is being called? Which contract is the spender? What is the amount? If any of those answers are unclear, reject and look up the contract first.
- Audit approvals every month or two. Use revoke.cash or Etherscan's token approval checker to list everything you have ever authorized, and revoke the contracts you no longer use. Old approvals are the lowest-hanging fruit for attackers; once a dApp gets compromised, every wallet that has unlimited approval on it gets drained at once.
- Set spending limits, not unlimited. MetaMask now exposes a small "edit" link in the approval popup that lets you cap the allowance at, say, exactly the amount of this swap. It is one extra click per trade. It is the single highest-leverage habit in self-custody.
- Isolate the cold stack. Long-term holdings live in a separate address that has never signed an approve transaction for any contract whatsoever. The cold address only sends and receives. It does not interact with DeFi. That single piece of operational hygiene cuts out an enormous fraction of the attack surface.
§6 · When do you need a hardware wallet, and where should you buy one?
Above roughly ten thousand US dollars in long-term holdings, a hardware wallet stops being optional. Set the PIN first and back up the seed phrase right away: on a Ledger, three wrong PIN entries in a row reset the device, and after that only the seed phrase gets you back in. The realistic alternatives in 2026: Ledger Nano S Plus or Nano X, Trezor Safe 3 or Safe 5, Lattice1 (a desktop unit with a large screen, popular with DeFi power users), and SafePal S1 (cheaper and Bluetooth-free). Each has its tradeoffs around screen size, secure-element vendor, open-source firmware, and supported chains. Ledger is the largest by units shipped; Trezor is the most popular among the open-source-purist subset.
The core value proposition of any hardware wallet is the same: the private key never leaves the device. When you sign a transaction, the unsigned payload is sent into the device over USB. The device displays what it is about to sign on its own screen, you press the physical button to confirm, and the signed payload returns to the computer. The computer never sees the key. Even an attacker with full malware on your laptop cannot extract the key from a working hardware wallet.
Workflow: plug Ledger into the laptop, open MetaMask, select "Connect Hardware Wallet," and MetaMask now routes signing requests through the device. Every transaction requires a physical button press on the Ledger after you read what is displayed on its screen. That forced read step is the entire feature — it makes you look at what you are about to sign before you commit, which stops a large share of the click-through phishing that hits hot-wallet users, provided you actually read the screen.
Do not buy hardware wallets on Amazon Marketplace, eBay, Facebook Marketplace, AliExpress, or anywhere else that is not the manufacturer's own store.
Tampered devices in the wild have been documented since at least 2018. The attack: someone receives a Nano, opens it, loads a wallet onto it with a seed they already know, reseals the packaging, and resells it as new. You set up the device, deposit funds, and the original attacker drains the wallet the same week.
Order from ledger.com, trezor.io, or an authorized retailer listed on the manufacturer's own site. Nowhere else. Hardware wallets are the one place in your stack where saving twenty dollars on the unit can cost you the entire stack.
§7 · Comprehensive wallet-security checklist
- Seed phrase is hand-written on paper or stamped on metal, two copies, two physical locations.
- No screenshots, no cloud storage, no email, no telling anyone — including a person claiming to be customer support.
- If anyone — exchange, wallet maker, "verification team" — asks for the seed phrase, they are an attacker. There are no exceptions to this rule.
- Download wallet software only from the official domain, hand-typed into the address bar. No Google ads.
- Large balances live on a hardware wallet. Hot wallets carry only what you are willing to lose in a single bad signature.
- Read every signature popup. Reject unknown contracts. Reject unlimited approvals. Reject signatures whose payload you can't explain.
- Audit approvals on revoke.cash every couple of months. Revoke anything you no longer use.
- Maintain a strict separation between the long-term cold address (no approvals, no DeFi) and the day-to-day hot address.
- Before any large withdrawal to a new address, send a tiny test transaction first, confirm receipt, then send the rest.
- Any service claiming to "recover" a lost seed phrase, a stolen wallet, or a forgotten password is a scam. There are no exceptions to this rule either.
§8 · Closing thoughts
Wallets are not complicated, but the tolerance for error is unusually low. One screenshot at the wrong moment, one mis-clicked signature, one second-hand hardware unit, and the entire balance can move to an attacker's address with no recourse. The good news is that the practices that protect against all of these are the same practices, and they are not technically difficult — they just have to actually be followed.
The first-week routine I recommend to anyone new: install MetaMask, create a wallet, write the seed phrase on paper, and then make sure you copied it correctly. During setup MetaMask asks you to confirm some of the words in order — do that step properly. On a hardware wallet, use the device's built-in seed phrase check, or reset the same device and restore it from the words once. Never type the seed phrase into an internet-connected computer to test it — that breaks the very rule this whole piece is built on. Then send a small amount of ETH from an exchange to the wallet to confirm the receive flow works, and you're operational.
Most wallet losses happen on the user's side of the screen: signing a suspicious approval, clicking a phishing link, leaving the long-term stack on an exchange. Get wallet security right and you have closed off a lot of the ways people lose money in this market.