The Seed & the Steel

Somewhere under a Welsh landfill sits a hard drive holding the keys to about 8,000 bitcoin. James Howells mined the coins in Bitcoin's first years, kept the drive in a drawer, and in 2013 it went out with the rubbish. He has spent the decade since petitioning Newport City Council to excavate the tip — offering it a share of the recovery — and in early 2025 the High Court dismissed his claim, ending the legal road. The keys were real, the coins are still visible on the ledger, and none of it matters: there was exactly one copy of the secret, and it lived on one fragile object in one place. Every rule in this module is a way of never becoming that story.

First, get the ontology right: the seed phrase is the wallet. The twelve or twenty-four BIP39 words encode the master secret from which every key and every address in your wallet is derived. The device in your drawer is a convenience — lose it, brick it, run it over, and the words rebuild everything on any compatible signer. Lose the words while the device dies, and the coins are gone in the Howells sense: visible forever, spendable never. Custody planning is therefore backup planning; everything else is decoration.

Generation is a ceremony worth respecting. The device proposes a seed from its random number generator — and the Cipher School's entropy module documents, at length, what happens when such generators fail quietly. You do not have to trust them: good devices let you mix in your own dice rolls, and fifty-plus private rolls make the seed's honesty something you have witnessed rather than assumed. Do it once, offline, unhurried, with no camera or phone in the room. A useful property to know: each word's first four letters are unique across the whole BIP39 wordlist, and the final word carries a checksum — so record words in full, but verify letter by letter, and expect a compatible wallet to catch a garbled last word.

Record on metal, not paper. A house fire burns at around 600°C — paper chars and curls long before good stainless steel is troubled, and in Jameson Lopp's long-running public stress tests, stamped and centre-punched steel plates survived torches, crushing and acid where etched surfaces faded and aluminium simply melted. Stamp or punch, don't engrave shallowly; one word per numbered position; check the transcription twice, because the plate will outlive your memory of what it was supposed to say. Paper is acceptable only as a temporary stage between the generation ceremony and the metal.

The rule with no exceptions: the seed never becomes data. No photograph, no cloud note, no password manager, no email draft, no "encrypted" text file, no typing it into any website or app for any stated reason. Every major seed-theft wave — malware scanning photo libraries, cloud-account breaches, phishing pages offering to "validate" wallets — harvests digitised seeds, because digitised seeds are the only kind that can be stolen at scale from a distance. A secret that exists only as stamped metal in places you chose can be taken only by someone who physically goes there. That asymmetry is the entire defence.

Then make the backup survive the disasters your home cannot. Two metal copies in two locations that do not share a fate — not the same building, not the same flood plain; a second property, a trusted relative, a bank deposit box each have trade-offs, but any of them beats a single copy. Label nothing "BITCOIN"; a seed plate is anonymous stamped steel to anyone who does not know what they are looking at. And remember the estimate from Module 1 — several million coins lost forever — was mostly built from exactly two errors: no backup, and one backup that shared its disaster with the device.

Finally, the drill that separates a backup from a hope: recover before you rely. With a small test balance in place, wipe the device — actually wipe it — and restore the wallet from the metal alone. Watch the same addresses reappear; spend a little out. Only a backup that has performed a recovery is proven, and the time to discover a mis-stamped word is now, calmly, with pocket change — not one day, shaking, with everything. Repeat the check annually; the printable starter checklist attached to this module walks the whole sequence in order.