Somewhere under a layer of trash at a landfill in Newport, Wales, sits a hard drive holding the private key to roughly 8,000 bitcoins. James Howells threw it out in 2013 while clearing his desk, realized his mistake a couple of months later, and has spent more than a decade since being refused permission to dig it up. This isn't a story about bad luck. It's a story about a simple fact: a digital asset without deliberate physical protection of its key is effectively no asset at all, no matter how honestly the balance sits on the blockchain with your name nowhere near it and no one else's either.

A seed phrase — twelve or twenty-four words — doesn't work like a password. A password can be reset: call support, verify your identity, get temporary access back. A seed phrase has no support line and no "forgot password" link. Whoever knows those words, or reaches the physical record of them, owns everything behind them — instantly, irreversibly, with no court and no phone call required. That's the entire power of self-custody: nobody can take it from you by administrative decision. It's also the entire cost: nobody can hand it back to you either.

Why a digital copy is a leak, not a backup

The first instinct almost everyone has is to photograph the phrase "just in case," or save it in a notes app that syncs to the cloud. That single move turns a one-time risk of loss into a permanently open door.

Every digital copy isn't one storage point — it's a chain: phone, cloud backup, the provider's servers, maybe a synced laptop too. An attacker doesn't need to break you; breaking any single link in that chain is enough, and links multiply the moment you tap "save to gallery." Security researchers have documented mobile malware that specifically scans photo libraries and clipboards for text matching the pattern of a seed phrase — twelve to twenty-four words drawn from the known BIP-39 wordlist — and quietly exfiltrates whatever it finds. This isn't a hypothetical future threat. It's a working, currently active class of attack.

A password manager, for all its value with ordinary logins, isn't the right place for a seed phrase either: it's networked, it syncs to the cloud, and it's built for convenient access rather than for a phrase that never, not for a moment, leaves the physical world. The rule is simple and has no exceptions: a seed phrase should not exist in any file, any cloud, any screenshot — ever.

Paper is a floor, not an answer

Writing the phrase by hand on paper is already a step up from a screenshot, but it's a baseline, not a finished solution. Paper has three enemies, and all three are real: fire, water, and time. A house fire, a flood, or plain basement dampness over a few years and the ink blurs, the paper crumbles. Add the human factor: a sheet with twenty-four words left on a desk gets found by whoever walks into the room — a repair technician, a guest, a curious relative.

If paper is genuinely all you have, treat it the way you'd treat any single irreplaceable document: not left in plain sight, and never labeled "crypto" or "bitcoin" next to the words — an unmarked list of words is meaningless to anyone who doesn't already know what it is.

Metal: insurance against the elements

That's exactly why hardware wallet makers have long sold metal plates and capsules as a separate backup accessory: the words get stamped or engraved into stainless steel or titanium instead of written in ink. A plate like that survives a house fire, a flood that turns paper to pulp, and decades with zero maintenance.

This isn't exotic and it isn't paranoia — it's the same logic that puts important documents in a safe instead of a desk drawer, applied to a material that physically doesn't fail under the same threats that kill paper. A metal backup plate is inexpensive relative to the value of what it protects, and it's a one-evening setup you do exactly once.

Splitting, not just duplicating

One complete copy in one place is a single point of failure: find it, take everything. A more mature approach doesn't just multiply copies — it splits the phrase so no single found fragment grants access.

There's a simple version and a formal one. Simple: physically divide the phrase in two and store the halves in different locations — the first twelve words in one safe, the second twelve somewhere else entirely. Formal: Shamir's Secret Sharing (SLIP-39), supported by some modern wallets, splits a phrase into several "shares" such that recovery requires not all of them but a chosen threshold — say, any three of five. Losing one share isn't fatal. Stealing one share is useless.

Worth calling out separately is the BIP-39 passphrase — an optional extra word or phrase added on top of the standard twelve or twenty-four, which turns the exact same word list into an entirely different wallet. Its whole value is that it's never written down anywhere near the main phrase — it lives in memory alone. Even a perfect metal plate, found intact, opens the wrong wallet — or an empty one — without that extra word.

Our record: in the Maat system, Ren — the true name — isn't a label but the entry point to power over a thing: to name it is to command it. A seed phrase is the literal Ren of your wallet made physical: a string of words whose utterance equals ownership. Guarding it from disclosure isn't a technical formality — it's a direct application of the rule that no one else's voice gets to speak your name.

Where to keep copies and how to spread them

Several well-protected copies in one house aren't real redundancy — they're just one fire or one burglary away from wiping out all three at once. Spread physical copies geographically: one at home in a place hidden but reachable by you, a second with a trusted person or in a bank safe deposit box, a third in another city or with a relative you trust.

A bank safe deposit box has its own tradeoff: it protects against theft and disaster, but it adds a dependency on the bank — access runs on its hours and its rules, and in some jurisdictions a court can compel access to it. That's not an argument against using one; it's an argument for making it one of several copies, never the only one.

Think through inheritance separately, too. A seed phrase that's completely inaccessible after you're gone is functionally the same as money burned. The way to solve that without compromising current security is to leave heirs not the phrase itself, but a precise instruction for where to find it — with a lawyer, in a sealed envelope, opened only under a stated condition — without revealing the contents now.

Do this today

Don't start splitting shares with Shamir's scheme today, and don't order five metal plates — that's a week of work, and work like that is easy to postpone forever. Do exactly one thing instead: if your seed phrase currently exists in any digital form — a screenshot in your gallery, a notes-app entry, a file in the cloud — open that location right now and delete it completely, including the trash or deleted-items folder behind it. If you don't yet have a paper copy, write the phrase out by hand, put it somewhere only you know about, and stop there until the next step.

Fifteen minutes, and the biggest leak is closed. Metal, splitting, and geographic distribution can all be built up gradually from here — but from today, no digital storage anywhere gets to know your true name.