Recovery words are the backup that can restore access to your wallet. Store them offline, keep them private, and protect them from both theft and physical damage. Anyone who obtains the complete words in the correct order can access the funds in the wallet.

If you are new to wallet backups, first learn what recovery words are and how they restore a wallet.

Recovery words warning

Never enter your recovery words into a computer, smartphone, website, browser extension, password manager, cloud service, or AI chatbot. BitBox Support will never ask for them.

 

Create a secure storage plan

A good storage plan protects against three different risks: another person finding the backup, you losing access to it, and the backup being damaged. Keep the plan simple enough that you or a trusted person can follow it when it matters.

1. Keep the words offline and private

Use a physical backup only. Do not take a photo, create a scan, make a photocopy, print the words, or save them in a digital note, email, cloud drive, or password manager. Printers, copiers, and internet-connected devices can retain or expose copies.

Write, view, and handle recovery words in private. Make sure that no person, camera, screen sharing session, or voice assistant can capture them.

2. Record every word exactly

Write each word clearly, number it, and preserve the exact order shown by the hardware wallet. A missing word, spelling mistake, or changed order can prevent recovery. Do not replace words with abbreviations, personal codes, or a custom encoding scheme.

If you use a BitBox02, follow the steps to view and verify recovery words on the BitBox02. The words are displayed on the device, not in the BitBoxApp.

3. Choose a physical medium

Paper or a dedicated backup card is simple and inexpensive, but it can be damaged by water, fire, and wear. A steel backup is more resistant to physical damage, but it still needs to be kept private and recorded accurately.

Choose the medium according to the value secured, your storage environment, and how long you expect to rely on it. To understand the trade-offs of a metal backup, see why a Steelwallet can protect recovery words from physical damage.

4. Store the backup separately from your wallet

Keep recovery words separate from the BitBox02 and any device password record. A secure location should limit casual access, protect against damage, and remain accessible to you when you need it. Depending on your circumstances, this might be a secured place at home or a professionally managed storage location.

Do not label the storage location or container in a way that advertises that it contains Bitcoin or a wallet backup. Consider how you would regain access if you moved, were away from home, or could not access your usual location.

5. Add redundancy carefully

An additional complete backup in a separate secure location can reduce the risk of permanent loss from a single fire, flood, or theft. However, every additional copy also creates another opportunity for someone else to find it. There is no universal right number of copies.

Do not split the words, invent an encoding method, or rely only on memorization unless you fully understand the recovery consequences. Complexity can make a backup harder for you to recover without meaningfully improving its security.


Backup products from BitBox

BitBox offers several physical backup products for different storage needs. These products can improve durability, add a convenient additional copy, or make unwanted access easier to notice. They do not replace keeping every complete backup private and in a secure location.

Backup Card: a simple, ageing-resistant card with an included protective laminate for recording recovery words.

Metal backup options: Steelwallet, Steelwallet Pro, and Seedor provide durable storage options designed to resist fire, water, and physical damage.

microSD backup cards: additional BitBox02-compatible cards for a separate, convenient backup.

Tamper-evident bags: a way to make unauthorised opening more noticeable. They do not prevent access, so keep the bag in a secure location.

For a closer look at creating a steel backup accurately, the BitBox Blog explains how the Steelwallet improves recovery-word backup safety.


Choose a BitBox02 backup approach

With a BitBox02, you can combine a microSD card backup with a written or steel copy of the recovery words. A microSD card backup is convenient to create and restore, but it must be treated as a wallet secret and stored securely just like recovery words. The BitBox Blog explains why BitBox creates a microSD card backup during setup and still supports manual backups.

For a comparison of microSD, recovery-word, and steel options, learn how to choose a BitBox02 backup method. If you use a microSD backup, periodically verify that the BitBox02 microSD card backup is readable.

For background on the rationale and storage options, the BitBox Blog explains how to create and secure a wallet backup. If you are considering memorization, read why you should not rely on memorizing a seed phrase as your only backup.


Understand passphrases and advanced setups

An optional passphrase is a separate secret that creates a separate wallet. It is not a “25th recovery word” and it is not included in the recovery-word backup. If you forget it, the recovery words alone cannot restore the passphrase-protected wallet.

Passphrase recovery limitation

Recovery words do not contain an optional passphrase. Losing either the recovery words or the passphrase can permanently prevent access to a passphrase-protected wallet.

 

Use an optional passphrase only after you understand the risks and have a deliberate recovery plan. Learn how the BitBox02 optional passphrase works and the risks it introduces.


If recovery words are exposed

Treat recovery words as compromised if another person has seen, photographed, copied, typed, or received them. Create a new wallet with a new backup, then move the funds to the new wallet as soon as you can do so safely. Do not continue using the exposed recovery words.

If a website, caller, message, or supposed support representative requests recovery words, stop immediately. Learn how to identify BitBox phishing scams and protect your wallet.


Frequently asked questions

Can I store recovery words in a password manager?

No. A password manager is a digital system and can expose recovery words through device compromise, account compromise, synchronization, or an accidental share. Keep recovery words entirely offline.

Should I keep recovery words with my BitBox02?

No. Keep recovery words separate from your BitBox02. A person who obtains both has everything needed to access the wallet without needing you or the device password.

Do I need to update my recovery-word backup after a transaction?

No. A correct recovery-word backup continues to restore the same wallet after receiving funds, sending funds, or creating new receiving addresses. Create a new backup only when you deliberately create a new wallet or change to a different wallet setup.

Is a safe deposit box a good place for recovery words?

It can be, if it provides the right balance of physical security and reliable access for your situation. Consider who can access it in an emergency, what happens if you cannot access it, and whether it creates a single point of failure. Do not store a backup there without a plan for access and inheritance.

Do recovery words follow a standard?

Many wallets use the BIP39 mnemonic standard, which represents a wallet seed as a list of words. The BIP39 specification is a technical reference; it does not replace a wallet’s recovery instructions. When recovering a wallet, use a trusted compatible wallet and follow its instructions.