Trezor.io/start Master Crypto Security & Self-Custody

Nothing permanent — as long as you have your recovery seed. Buy a new device, restore from the seed phrase, and your funds are back. This is exactly why the seed backup matters more than the device itself, and why testing your backup annually is essential.

No — and neither can anyone else. That is the nature of self-custody: no company, including wallet manufacturers, holds a copy of your keys. Anyone claiming they can recover a lost seed phrase is running a scam. Our guides focus on prevention: verified backups, tested restores, and inheritance planning.

We recommend buying only from the manufacturer or an authorized reseller. Devices from marketplaces can be tampered with — pre-seeded with a phrase the attacker knows. Always initialize the device yourself and never trust a recovery card that arrives already filled in.

Only what you are actively trading. A common rule: if losing it would ruin your week but not your year, an exchange balance is tolerable. Everything beyond that belongs in self-custody. Exchanges can freeze accounts, suffer breaches, or fail entirely — history has taught this lesson repeatedly.

A seed phrase is a list of 12 or 24 words that mathematically generates all of your wallet's keys. Store it offline, written by hand or stamped in steel, in two or three separate physical locations. Never photograph it, type it into any website, or store it in a cloud note.

Modern devices support thousands of assets across Bitcoin, Ethereum, Solana, and most major ecosystems through companion apps. Niche chains may require third-party interfaces. Check the manufacturer's supported-assets page before purchasing if you hold something unusual.

A hot wallet is connected to the internet — mobile apps and browser extensions. A cold wallet keeps keys offline, typically on a hardware device. Hot wallets are convenient for daily use; cold wallets are for savings. Most experienced holders use both, separated by purpose.

Check the domain character by character — phishing sites use lookalike domains with swapped letters. Verify the site through a bookmark you created, never through a link in a message. Be suspicious of any site that asks you to connect a wallet or enter a seed phrase to "verify" or "claim" something.

In most jurisdictions, yes — crypto is treated as property, and selling, swapping, or spending it triggers taxable events. Moving coins between your own wallets is not taxable. Keep records of every transaction, including cost basis, and consult a tax professional for your specific situation.

A passphrase is an extra word or sentence added on top of your seed phrase, creating a hidden wallet that cannot be found even with the seed. It is powerful protection against physical theft of your backup — but if you forget the passphrase, the funds are gone. Use it for long-term holdings and store it separately from the seed.

We are reader-supported through affiliate commissions on some hardware wallet purchases, clearly disclosed in relevant articles. Commissions never influence our ratings or recommendations, and we regularly recommend against products. Our editorial policy separates revenue from reviews, full stop.