Seed Phrase Security: 12 Rules Every Crypto Holder Must Follow

Your seed phrase IS your wallet

Anyone with your BIP-39 recovery phrase controls every address derived from it — Ethereum, Polygon, Solana, the lot. Never type it into websites, never screenshot it, never store it in iCloud, Google Photos, or email. Write it on paper or stamp it on metal.

Common attack vectors in 2026

Phishing sites impersonate wallet apps. Fake support DMs ask for your phrase. Clipboard malware swaps paste addresses. Metrust will never ask for your seed — anyone who does is a scammer.

Redundant backups that actually work

Paper plus Metrust's AES-256 encrypted JSON backup on your computer beats cloud screenshots. Store backup password separately. Test recovery on testnet before you need it in an emergency.