How seed phrases get stolen
- Author
- CRYPTO PORT Editorial
- Published
- Updated
- Reading time
- 5 min
In short
If someone else obtains your seed phrase, every asset in that wallet can be moved. Theft comes through three main routes: sites that ask you to type it, photos and cloud notes that leak, and someone finding where you wrote it down. Holding to one rule — no legitimate service ever asks for it — prevents most cases.
Key points
- Once exposed, the entire wallet can be emptied
- Typing it into a fake site is the most common route
- Photos and cloud notes leak the moment a device is compromised
- Keep it on paper or metal, in more than one place
Definition
The word list that restores a wallet reaching a third party — through a site that induced you to type it, a leak from a device, or discovery of where it was stored — after which the wallet's assets are moved out.
A seed phrase regenerates every private key in the wallet, so anyone who knows it can restore that wallet on their own device. There is no process for reversing the transfers that follow, and contacting the wallet's developers changes nothing.
The most common route is being asked to type it. The prompts vary — needed to sync your wallet, re-enter to clear an error, support needs to verify — but the pattern is the same. A genuine wallet app asks for the phrase only when restoring, and support staff never ask for it at all.
Next most common is how the backup is handled. Photographs sync to the cloud automatically, and notes apps replicate their contents elsewhere. One compromised device or account then exposes everything stored in it at once. The rule is that the phrase should not exist as text on any device.
For physical storage, plan for both destruction and discovery. Paper degrades faster than a metal plate, and even a fire safe can reach temperatures that ruin paper inside. Keeping copies in separate locations, and telling family only the principle of where to look, is a workable balance.
Watch out for
- · Treat every request for your seed phrase as fraud, however official it appears
- · Never store it as text — no photos, cloud notes or password managers
- · Consider a metal backup as well as paper, and keep copies in two separate places