Backup checklists

Tick as you go. Your ticks are saved only in this browser (no secrets are ever entered, and nothing is sent anywhere). Print any list for a paper copy; the ticks you have made print too.

Which list is for you Beginner

Core backup checklist (all levels) Beginner Intermediate

The original 24-step checklist, from buying a device to tax records.

• Hardware wallet bought direct from maker / authorised reseller; packaging and seals checked
• No pre-written seed in the box
• Private room, no cameras or phones visible
• Firmware updated from the official app/site
• Chosen backup scheme: BIP39 / + passphrase / SLIP-39 / multisig
• Seed generated on the device (or with verifiable dice entropy)
• Every word written in order, numbered, legibly, and double-checked
• Device word confirmation passed
• Copied to stainless steel or titanium
• Metal copy verified with "check backup" or restore
• Passphrase (if used) backed up separately, on durable media
• Labels note the standard (BIP39/SLIP-39), threshold, wallet type
• Multisig descriptor/config stored with each key
• Backups stored so no single place enables theft or total loss
• Tamper-evident bags used; serial numbers recorded
• Small test deposit received; first address recorded
• Full restore test performed successfully
• No digital copies anywhere (photos, notes, cloud, email, password manager)
• Non-secret inventory created
• Letter of instruction written (no secrets) and lodged
• Will / trust / power of attorney reviewed for digital assets
• Executor or trusted person knows the plan exists
• Calendar reminder for annual backup check
• Tax records / cost basis exported

Beginner checklist Beginner

Twelve steps that prevent most losses. Read the start here page alongside it.

• I know my seed phrase is my wallet; the device is only a tool (fundamentals)
• I have read the safety rules: never type, photograph or share the words
• Device bought new from the maker or an authorised reseller (choosing)
• Seed created on the device, never chosen by me (why)
• Words written by hand on the supplied card, numbered, in order, and checked
• Device "check backup" or recovery check passed (drill log)
• A second copy on metal or in a second place (physical storage)
• Small test deposit received and the address checked on the device screen
• No photos, cloud notes, emails or password-manager entries of the words
• Backup inventory filled in by hand and stored apart from the backups
• Letter of instruction written (no secrets) and someone told it exists
• Reminder set for the annual review

Intermediate checklist Intermediate

For larger amounts, passphrases, SLIP-39 or backups in several places.

• Backup scheme chosen deliberately using the master matrix and threat matrix
• If using a passphrase: backed up separately, on durable media, and tested with a full restore
• If using SLIP-39: each share labelled with the standard, threshold and device family (SLIP-39)
• No single site can recover the funds alone, and no single disaster can destroy all copies (location map)
• Backups sealed in numbered tamper-evident bags; serials recorded (maintenance)
• Metal backup chosen with stress-test evidence (stress tests)
• Hardware wallet setup log completed for each device, including firmware version
• Full restore on a wiped or spare device done at least once (drill log)
• Coercion risk considered: who knows what you hold? (coercion)
• Will and power of attorney reviewed for digital assets (UK / US)
• UK or US supplement attached to the letter of instruction
• Tax records and cost basis exported and stored with the estate papers

Expert checklist Expert

For multisig, your own entropy and air-gapped workflows. More moving parts means more to document.

• Threat model written down: who and what you defend against (scenarios)
• Multisig keys from more than one device maker (multisig across vendors)
• Descriptor printed and a copy stored with every key backup (configuration record)
• Wallet policy or multisig registered on each signing device; first address matched on every device
• Recovery tested from descriptor plus a quorum of seeds, without the usual coordinator or provider
• Firmware verification understood for each device (verifying firmware)
• If using dice: practice fairness test done separately; real rolls entered only on an offline device (dice worksheet)
• Air-gapped signing (PSBT) workflow practised with a small amount (air-gapped signing)
• Timelocks and decaying quorums noted in the calendar and the letter of instruction
• Collaborative custody: sovereign recovery path tested (collaborative custody)
• Plan simple enough for your executor; complexity documented (combining backups)
• Key rotation plan if a device, share or person is compromised

New hardware wallet setup Beginner Intermediate

Follows the setup and verification checklist. Record the results on the setup log.

• Ordered from the maker or an authorised reseller; order confirmation kept
• Packaging inspected, but not relied on; no pre-filled recovery card
• Companion app downloaded from the official site and verified where the maker explains how
• Authenticity / genuine check passed in the official app
• Firmware updated through the official app only
• Private room: no phones, cameras or smart speakers
• New seed created on the device (or with dice on the device)
• Words written by hand; device word confirmation passed
• PIN set; you know how many wrong attempts wipe the device
• Master fingerprint recorded on the setup log
• Receive address checked on the device screen; small test deposit received
• Backup checked with the device's check-backup feature, or a restore on a spare device
• Copied to metal; second location chosen
• Inventory, setup log and letter of instruction updated

Sources: Trezor: where to buy · Trezor: authenticity check · Ledger: genuine check · Trezor: check backup · Ledger: Recovery Check

Annual review Beginner Intermediate Expert

Glacier Protocol suggests maintenance six months after setting up and then yearly; Trezor recommends checking your backup before every firmware update. Also review after a move, marriage, divorce, a death in the family or a new wallet.

• Each backup inspected where it lives: present, legible, seals intact (inventory)
• Recovery drill done; result written in the drill log
• Firmware and companion apps checked against the makers' security pages
• Any advisories since last review read and recorded (after an advisory)
• Passphrase backups still readable and still stored apart from the seeds
• Multisig descriptor copies still with each key; coordinator software still opens the wallet
• Letter of instruction and inventory updated; old versions destroyed
• Executor, attorney and helpers still willing, able and contactable
• Will, trust and power of attorney still match the plan (marriage, divorce, moves, new children)
• Tax records for the year exported
• Next review date set in the review log

Sources: Glacier: maintenance · Trezor: check backup · Fidelity: letter of instruction · MoneyHelper: power of attorney

After a security advisory Intermediate

Makers publish advisories regularly; see the dated list on hardware wallets. Most need an update, not panic.

• Read the advisory on the maker's own website or official channels, not a link in an email or social media post
• Check whether your model and firmware version are affected (your setup log lists them)
• Do not panic-move funds to a website or app suggested by a message: fake alerts and "replacement device" letters have been used to steal seeds (Trezor support-portal phishing; fake Ledger replacements)
• If the fix is a firmware or app update: check your backup first, then update through the official app
• If seed generation was affected: follow the maker's advice, which may be to create a new seed and move funds (COLDCARD 2026 example)
• If only a specific attack with physical access is described, consider whether it is in your threat model
• Multisig: check whether one or more keys are affected; replace the affected key if needed and update the descriptor
• Record what you read and what you did in the advisory record

See also the FAQ: what to do after an advisory. Sources: Trezor: troubleshooting backups · dated advisories with sources

Inheritance and incapacity Beginner Intermediate

Death and loss of capacity both need a plan; incapacity is often harder because there is no death certificate and you may recover.

• Executor (and attorney) know that crypto exists and where the letter of instruction is
• Letter of instruction current, signed, dated and free of secrets
• Executor guide printed and given to the executor
• Will contains digital-asset powers and no secrets (UK / US)
• UK: LPA for property and financial affairs (or Scottish continuing / NI enduring power) made and registered where required (UK guide)
• US: durable financial power of attorney with digital-asset authority; RUFADAA online tools used where offered (US guide)
• Practical access designed so no single person can take everything (approaches)
• Exchange accounts listed with the death-claim process (UK vs USA)
• Tax pointers recorded: date-of-death valuation; IHT400 crypto question (UK) or step-up records (US)
• Executor rehearsal done without revealing any secret (drill log Part C)

Sources: The Gazette: letter of wishes · Fidelity: letter of instruction · MoneyHelper: power of attorney · Investor.gov / CFPB · CFPB guides · UK checklist · US checklist

If a backup may be exposed Beginner

• Assume the backup is compromised if anyone may have seen or photographed it
• Set up a new wallet with a new seed on a trusted device
• Move the funds to the new wallet, starting with a small test
• Destroy the old backups securely once the move is confirmed
• Update the inventory, setup log, letter of instruction and descriptors
• Read if you think your seed was exposed and start here: compromised

Pitfalls with checklists Beginner Intermediate

Primary sources for this page

• Trezor: where to buy
• Trezor: authenticity check
• Ledger: genuine check
• Trezor: check backup
• Ledger: Recovery Check
• Glacier: maintenance
• Fidelity: letter of instruction
• MoneyHelper: power of attorney
• Trezor: troubleshooting backups
• The Gazette: letter of wishes
• Investor.gov / CFPB
• CFPB guides

These are the maker and official pages the lists above already cite. Educational information only, not financial or legal advice.

Last reviewed: 23 October 2026 · Educational information only — verify current details with official sources.