Best Metal Seed Phrase Backup for Monero 2026

Stefan Thomas locked himself out of 7,002 BTC because he forgot the password to an IronKey. James Howells is still trying to dig a hard drive out of a Welsh landfill. Both stories share one lesson: in self-custody, the backup is the asset. With Monero the stakes are sharper still, because there is no recovery desk to call. Your 25-word seed is the only thing standing between you and your coins, and the privacy that makes Monero worth holding — the hidden senders, the shielded amounts — also means nobody, including any exchange, can ever restore your wallet for you.

A paper backup handles the ordinary day fine. It does not handle a kitchen fire, a burst pipe, a flooded basement, or fifteen years of humidity and silverfish. That is why serious holders move their seed onto metal. The catch — and it trips up almost everyone coming from Bitcoin — is that most metal backup products on the market are engineered for BIP39, and Monero does not use BIP39. Pick the wrong device and you will discover, at the worst possible moment, that your beautiful titanium plate physically cannot encode a Monero seed. This guide compares the real options, names the ones to avoid, and shows how to do it correctly. Whether you bought your XMR on MoneroSwapper or mined it yourself, the backup rules are identical.

Why Monero needs a metal backup more than most coins

Every self-custodied coin shares the same brutal property: lose the keys and the money is gone forever. But Monero stacks a few extra reasons on top that make a durable, offline backup non-negotiable rather than nice-to-have.

• No recovery path, ever: with a bank card you call support; with a custodial exchange you reset a password. A Monero wallet restored from its seed is the only mechanism that exists. There is no email reset and no helpline that can regenerate it.
• Privacy cuts both ways: stealth addresses and ring signatures mean no third party can even see that a given wallet is yours, let alone help you recover it. The same shielding that protects you removes every external safety net.
• A single point of failure: those 25 words encode a 256-bit private spend key. One smudged word, one fire, one flood, and the whole wallet is unreachable. Paper concentrates that risk into a single fragile sheet.
• You are storing for decades: people hold Monero as long-horizon, censorship-resistant savings. A backup meant to survive ten or twenty years has to beat heat, water, corrosion, and your own future forgetfulness — three things paper loses to.

Metal solves the environmental problem directly. A stamped stainless or titanium plate shrugs off the house fire, the flood, and the decades of damp that destroy paper. The only question left is which metal product can actually hold a Monero seed — and that is where the standards problem begins.

The Monero seed problem: why most metal kits target the wrong standard

Bitcoin, Ethereum, and the vast majority of wallets use BIP39: a 12- or 24-word mnemonic drawn from a fixed list of exactly 2,048 English words, where each word maps to an 11-bit number. Monero predates and ignores that standard. A Monero seed is 25 words — 24 that encode the key plus a 25th checksum word — pulled from Monero's own electrum-style wordlist, which is a different list of different words.

That single difference quietly breaks a whole category of metal backups. To understand why, you have to know that metal kits come in two fundamentally different mechanisms.

Letter plates versus binary dot-grid plates

Letter-based devices store the actual characters of your words. Stamping kits give you a blank steel plate and a set of letter and number punches; tile systems like the Cryptosteel Capsule let you slot pre-engraved letter tiles into a holder to spell each word. Because these store arbitrary letters, they do not care what standard your seed follows. They will happily record Monero's 25 words, a BIP39 phrase, a password, or your grocery list.

Binary dot-grid devices are the trap. Products such as the OneKey KeyTag and similar "punch the dots" plates do not store letters at all. They store each word's position number in the BIP39 list, encoded as 11 punched holes in a binary grid. That design is elegant and compact — for BIP39. It is completely useless for Monero, because Monero's words are not on the BIP39 list and there is no index 1-to-2,048 to punch. A dot-grid plate physically cannot represent a Monero seed. If a device asks you to look up a number for each word, walk away.

The golden rule: for Monero, you need a metal backup that stores letters, not BIP39 word numbers. Anything that punches a binary grid keyed to the 2,048-word BIP39 list is built for a standard Monero never adopted.

Capacity, abbreviation, and the Polyseed wrinkle

Twenty-five words is more than the 24 most kits are sized for, so capacity matters. The good news: Monero's English mnemonic is designed so that only a short, unique prefix of each word is significant — the wallet truncates every word to its first letters when it computes the checksum and reconstructs the key. In the English wordlist that prefix is three letters. So "abandon" and "abandoned" never both appear; the first three characters always identify the word.

That lets you abbreviate aggressively on a capacity-limited device like the Cryptosteel Capsule, which holds roughly 123 characters. Recording the first four letters of each word is a safe, unambiguous compromise that fits 25 words comfortably and leaves no doubt on restore. If a device is truly tight, three letters is enough for the English list — but store the extra letter if you have room, because clarity at 2 a.m. years from now is worth more than a few tiles.

One modern wrinkle: some Monero wallets — Feather, Cake Wallet, and Monerujo among them — now offer Polyseed, a newer 16-word seed format that also bakes in a wallet creation date. Polyseed is still letter-based, so letter plates handle it fine. But it is not BIP39 either, so a BIP39 dot-grid plate remains useless even though the word count looks familiar. And the long-promised Seraphis and Jamtis upgrade, still in development as of 2026, will eventually change the seed format again. A letter-based metal backup is future-proof against all of this; a number-grid plate locks you to one standard.

The best metal seed backups for Monero, compared

Below is how the main categories stack up specifically for a Monero seed. "Compatible" here means it can physically store 25 words of arbitrary letters — the bar a Monero backup has to clear.

If you want a single recommendation: a stamping kit is the most robust and most flexible choice for Monero. A solid stamped plate has no moving tiles to scatter, no capacity ceiling that forces awkward abbreviation, and it costs the least. The trade-off is effort and the fact that a mis-struck letter is permanent — measure twice, strike once.

If you would rather assemble than hammer, the Cryptosteel Capsule or a Billfodl-style tile plate is the pragmatic pick. They are quick, reusable, and forgiving of mistakes, at the cost of a capacity ceiling that pushes you to record only the unique prefix of each word. Both are perfectly Monero-capable. The one category to strike off your list entirely is the binary dot-grid plate, no matter how well it is reviewed for Bitcoin.

Backing up your Monero seed on metal, step by step

The order of operations matters more than the brand. Done carelessly, a metal backup leaks your seed during the very process meant to protect it. Work through this offline, with the door shut and no camera or phone pointed at the plate.

1. Generate or display the seed offline. Create the wallet on an air-gapped or trusted device, or open your existing wallet and reveal the 25-word seed. Disconnect from the network first. Never type a seed into a website, a notes app, or a password manager that syncs to the cloud.
2. Write it on scratch paper first. Transcribe the 25 words by hand and double-check each against the screen. You will destroy this sheet at the end, but it prevents you from stamping an error into permanent steel.
3. Decide on abbreviation. On a high-capacity stamping plate, record full words. On a capacity-limited tile device, record the first four letters of each word (three is the technical minimum for the English list, but four removes all doubt). Keep it consistent across all 25.
4. Stamp or assemble, in order, numbering as you go. Mark each word's position 1 through 25. Order is part of the secret — a correct set of words in the wrong sequence will not restore the wallet.
5. Verify the plate against the paper, then against a real restore. Read the metal back word by word. Then do the real test: wipe a throwaway wallet and restore it from the plate alone. If it reconstructs the right primary address, the backup is proven.
6. Destroy the scratch paper. Shred and, ideally, burn it. The whole point of metal is that the fragile copy no longer exists.
7. Store in two separate locations. One plate at home, one in a second secure location — a safe deposit box or a trusted relative's safe. Geographic separation defeats the fire-and-flood scenario that a single plate cannot.

Never photograph your seed "just to be safe." A phone photo is the single most common way self-custodied crypto leaks — it backs up to the cloud, syncs across devices, and survives in places you will never think to wipe.

Durability, fire, and the theft question

Not all metal is equal, and the marketing rarely tells you the number that matters: melting point versus the temperature of an actual fire. A typical house fire burns between roughly 600°C and 800°C, and a sustained structure fire can reach about 1,100°C.

Stainless steel — grades 304 and the more corrosion-resistant marine-grade 316 — melts around 1,400–1,450°C, comfortably above almost any residential fire. Titanium does even better, melting near 1,600–1,670°C, which is why premium plates use it. Aluminum is the one to avoid: it liquefies around 660°C, below the temperature your kitchen reaches in a serious blaze. For flood and long-term damp, 316 stainless and titanium both resist corrosion well; cheap mild steel can rust over the decades you are planning for.

The January 2025 wildfires in Los Angeles made the abstract concrete for thousands of people: paper documents, hardware wallets, and laptops in those homes did not survive, and there is no insurer or agency — not the IRS, not a bank — that can restore a destroyed self-custodied Monero wallet. A stamped stainless plate in a fireproof safe, with a duplicate stored miles away, is the difference between a stressful afternoon and a permanent, total loss.

Theft is the other half of the threat model, and here Monero is less forgiving than Bitcoin. BIP39 wallets can add a passphrase — a "25th word" — or split the seed across shares with SLIP-39 Shamir backup, so a stolen plate alone is not enough. Monero has no standard passphrase or Shamir scheme. A few wallets, including Feather and Monerujo, offer a "seed offset" passphrase that you can layer on top, and using one means a thief who photographs your plate still cannot spend without the offset you keep in your head. If you do not use an offset, treat the physical plate as the whole secret: hide it well, and never store both copies where one search would find them.

FAQ

Can I use a regular BIP39 metal backup for Monero?

Only if it stores letters. Stamping kits and letter-tile devices like the Cryptosteel Capsule work fine because they record the actual characters of your words. Binary dot-grid plates such as the OneKey KeyTag do not work, because they store each word's number in the 2,048-word BIP39 list, and Monero's seed words are not on that list. If the device makes you look up a number per word, it cannot hold a Monero seed.

Do I need to engrave all 25 words, or can I shorten them?

You can shorten them. Monero's English wordlist is built so that each word is uniquely identified by its first three letters, and the wallet truncates to that prefix internally anyway. Recording the first four letters of each word is the safe, unambiguous choice and fits capacity-limited devices easily. Just be consistent and always preserve the word order, since position is part of the secret.

Is stainless steel actually fireproof enough?

For a house fire, yes. Stainless steel melts at roughly 1,400–1,450°C, while typical house fires burn between 600°C and 800°C and even severe structure fires top out near 1,100°C. Titanium is even better at 1,600–1,670°C. Avoid aluminum, which melts near 660°C — within the range a serious fire can reach.

What is Polyseed and does it change how I back up?

Polyseed is a newer 16-word Monero seed format supported by wallets like Feather, Cake Wallet, and Monerujo, with a built-in wallet creation date. It is still letter-based, so any letter-stamping or letter-tile metal backup handles it the same way as a classic 25-word seed. It is not BIP39, though, so a binary dot-grid plate still will not work with it.

Should I store one metal plate or two?

Two, in separate locations. A single plate at home still loses to a fire or flood that destroys the whole building, and to a burglar who finds your safe. One copy at home and a second in a different secure location — a safe deposit box or a trusted relative's safe — defeats the single-disaster scenario. If you are worried about theft, add a wallet-level seed offset passphrase so a found plate alone is not enough to spend.

Conclusion

The best metal seed backup for Monero is the one that stores letters and survives a fire: a stamping kit for maximum durability and capacity, or a Cryptosteel-style letter-tile device if you prefer to assemble rather than hammer. The one thing to never buy for XMR is a BIP39 binary dot-grid plate — it is built for a standard Monero does not use and physically cannot hold your 25 words. Get the mechanism right, record the unique prefix of each word in the correct order, verify with a real test restore, and keep two plates in two places. Do that, and your seed will outlive your hardware, your house, and probably you. When you are ready to add to your stack, you can buy Monero anonymously through MoneroSwapper with no account — then put the seed straight onto metal before you spend another coin.