Trezor Suite Journal → Trezor → Official Trezor Suite Download – Recovery Seed Backup That Actually Restores
It's a list of words—12, 24 for BIP39, or 20-word SLIP39 shares—that mathematically recreates every private key your Trezor holds.
Think of it as the master key to your wallet, generated by the device itself and shown to you exactly once. You write it down by hand, in order, and that piece of paper or metal becomes your emergency restore path. The device doesn't store a copy anywhere else. If your hardware wallet is lost, stolen, or broken, those words rebuild everything on a new Trezor.
Word order matters as much as the words themselves. A shuffled list produces a different—and empty—wallet. The seed isn't a password you can reset, and there's no customer support that can recover it for you. That's the trade-off for total self-custody: you hold the backup, you hold the responsibility.
Knowing what it is settles the first question. The harder one is how to create it without making a mistake that costs you later.
The device generates the word list during setup, displays it once, and you write the words by hand in the exact order they appear.
Never type the words into a computer, never take a photo, and never store them in a password manager or cloud note. A breach there equals total loss, because anyone with those words can spend your funds without the device. Write on paper with a pen, slowly, double-checking each word against the screen. For longer-term durability, stamp or engrave the words onto metal, but don't name specific products—just pick something that survives fire and water.
If you're using SLIP39, you'll get multiple 20-word shares instead of one list. A common scheme is two-of-three: you create three shares, and any two can restore the wallet. That lets you store shares in separate locations without a single point of failure.
Writing it down is only half the job. Storing it badly undoes all the care you put into creating it.
Offline, in a physically durable format, and in a location separate from the device itself.
Paper degrades. A basement flood, a house fire, or simply fading ink can turn a written backup into gibberish inside a few years. That's why many people move to metal backups—stamped or engraved plates that handle heat and moisture. Whatever medium you choose, keep it somewhere only you and trusted heirs can access, and never alongside the Trezor. A thief who finds both the device and the seed doesn't need your PIN.
For larger amounts, split storage makes sense. Multi-share SLIP39 schemes let you keep one share at home, one with a family member, and one in a safe deposit box. But a word of warning: split storage that makes reassembly impossible for your heirs isn't safety—it's a plan failure. Document how the shares work without exposing the words themselves.
| Storage medium | Durability | Risk |
|---|---|---|
| Paper | Low | Fire, water, fading ink |
| Metal (stamped) | High | Physical theft if unsecured |
| Digital (photo/cloud) | N/A | Immediate breach risk—never do this |
You've created and stored it. But how do you know the written copy actually works? That's where Suite's verification tool comes in.
Trezor Suite includes a dry-run recovery check that verifies your written words against the device without erasing anything.
Find it under device settings. The process asks you to enter the words in a randomized order on the Trezor's touchscreen, so a keylogger on your computer can't capture the full sequence. If the words match, Suite confirms the backup is correct. If they don't, you know now—while you still have the working device—instead of during an emergency restore when the original Trezor is gone.
Run this check after setup, and again whenever you move the backup to a new storage location. A user once told us, "I am unsure for some time if my recovery words are correct." That uncertainty disappears after a successful dry-run. It's the cheapest insurance you'll get in crypto.
A verified backup restores the standard wallet reliably. Passphrase wallets add one more layer you can't afford to forget.
No. The recovery seed restores only the standard wallet. Hidden wallets additionally need the exact passphrase you chose.
A passphrase acts as a 25th word—or an extra word beyond the standard list—that generates a completely separate set of accounts. Without it, the backup alone opens an empty or different wallet. This is by design: it protects funds even if someone finds your seed. But it also means you must back up the passphrase just as carefully, and store it separately from the seed words. Losing one or the other is recoverable with the device still working. Losing both is not.
Now that you know how the backup and passphrase interact, let's look at what can still go wrong—and how to catch it early.
The three big ones: storing the seed digitally, getting the word order wrong, and split-storage schemes that heirs can't reassemble.
Digital storage is the fastest route to loss. Password managers get breached, cloud accounts get phished, and a photo backed up to iCloud or Google Photos sits on servers you don't control. A breach equals total loss, and it happens silently—you won't know until funds move.
Word order errors are sneakier. Someone writes the words down correctly but numbers them wrong, or transposes two similar words. The dry-run catches this. Run it. Finally, multi-share resilience only works if someone besides you can put the shares back together. If you're the only person who knows where the three shares are, and you're incapacitated, the backup might as well not exist. Write instructions for heirs that don't reveal the words themselves.
A backup that fails when you need it isn't a backup. The last step is about making sure yours doesn't.
Re-verify it periodically, refresh the physical medium if it's degrading, and update instructions for anyone who might need to restore it.
A metal backup won't fade, but paper will. Check the written copy every year: is the ink still sharp? Is the paper yellowing? If it lives in a safe, has humidity crept in? I tested it on setup and have it written in two places and a metal bar thingy—that's the right instinct. Redundancy across different physical formats and locations turns a single point of failure into a system you can trust.
If you change your storage setup—new safe, new location, new medium—run the dry-run again before you destroy the old copy. And if you ever add a passphrase, test that recovery path separately. A backup that hasn't been verified in years is just a piece of paper with a hope attached.
Write the words by hand, in the exact order shown on the device, onto paper or metal. Never photograph or type them anywhere digital.
BIP39 is a single 12 or 24 word list. SLIP39 uses 20-word shares that can be split into multi-share schemes like two-of-three.
Use the dry-run recovery check in Trezor Suite settings. It verifies your written words against the device without erasing anything.
Offline, away from the device, protected from fire and water. Consider metal backups and separated locations for larger amounts.
No. The backup restores the standard wallet. A passphrase wallet needs that exact passphrase in addition to the seed.
Stop moving funds. Check spelling and order carefully, and contact official support through trezor.io before any drastic step.