How to Back Up and Verify a New Bitcoin Seed After Migration

Frederick Staunch connects post-incident migration to the recovery system that has to survive after the old Coldcard seed is abandoned. He explains how to verify a genuinely new seed, evaluate backup formats and storage tradeoffs, and avoid treating durable metal or a replacement device as a substitute for a tested recovery process.

@FredStaunchBTC Last updated 3 Aug 2026

Moving Bitcoin away from a potentially weak Coldcard seed is only half of the migration.

The migration is not complete when a replacement wallet displays a new receiving address. It is complete only when the new seed has been generated through a fixed or independent process, recorded accurately, verified without digital exposure, tested through a legitimate recovery method, and stored in a way that can survive the failures you actually expect.

The core rule: a new hardware wallet without a new and verified seed is not a new security boundary.

This guide explains how to create a dependable backup and recovery path after migration. It also compares seven Bitcoin Plaster seed-storage reviews so you can choose a format that matches your seed, workspace, correction tolerance, storage plan, and ability to verify the finished record.

Security notice: Never enter seed words, passphrases, PINs, dice sequences, private keys, or recovery screenshots into a website, chat, email, support form, cloud note, password manager, or internet-connected seed checker.

What a Seed Backup Can and Cannot Do

A seed backup preserves the secret that controls the wallet. It does not improve the quality of the secret itself.

If the new seed was generated securely, a durable backup can protect the recovery record against fire, water, physical damage, fading ink, and accidental paper loss. If the seed was generated with weak entropy, engraving those words into steel only preserves the same weak seed more permanently.

A metal backup can help with:

physical durability;
long-term legibility;
water and heat resistance, depending on the product and evidence;
clear word order and position;
recovery after the signing device is lost or destroyed.

A metal backup cannot:

repair a weak or reused seed;
protect words that have already been photographed or uploaded;
make an incorrect transcription recoverable;
protect a passphrase that was forgotten or stored badly;
replace a recovery test;
make device and backup co-location safe;
prove that a manufacturer claim applies to your finished backup.

The correct order is therefore:

generate a genuinely new seed;
record it privately and accurately;
verify the record;
prove the recovery path;
move the full balance only after the destination is ready;
store the device and backup in separate failure domains.

Step 1: Confirm That the Seed Is Genuinely New

The replacement wallet must be based on a new seed, not on the recovery words from the affected wallet.

These actions do not create a new seed:

restoring the old Coldcard words on another device;
updating firmware while continuing to use the old wallet;
changing the device PIN;
changing companion software;
adding a passphrase and assuming the original wallet is repaired;
copying the same words onto a new metal backup.

If you are still preparing the transfer, follow the migration sequence first:

How to Move Bitcoin From a Potentially Weak Coldcard Seed Without Making It Worse

When the new seed is created, keep the old wallet and old backup available until the replacement wallet has been funded, verified, and proven recoverable. Destroying the old recovery material too early can turn a controlled migration into permanent loss.

Step 2: Record the New Seed Without Creating a Digital Copy

Use a private, offline workspace. Remove phones, cameras, smart glasses, connected computers, microphones, and unnecessary observers.

Record the words exactly as displayed by the signing device. Preserve:

every word;
the exact word order;
the correct word positions;
the correct seed standard and word count;
any separate passphrase or multisig recovery information required by the wallet design.

Do not improvise abbreviations unless the backup system explicitly relies on a standard and the resulting words can be reconstructed unambiguously. Do not invent private shorthand that another trusted person could not interpret during recovery.

Temporary Paper Can Be Useful During Setup

A temporary handwritten copy can be useful while you verify word order and prepare a permanent backup. It should remain private, offline, controlled, and temporary.

Do not discard the temporary copy until:

the permanent backup has been completed;
every word and position has been checked;
the wallet has passed a legitimate backup verification or recovery test;
the migration transaction has completed;
the new wallet can receive and spend correctly.

Step 3: Match the Backup Product to the Seed Format

Do not buy a metal backup merely because it is described as compatible with Bitcoin.

Confirm:

whether the seed uses 12, 20, or 24 words;
whether it is BIP39, SLIP39, or another recovery format;
whether the product records full words, four-letter prefixes, numbered positions, or character tiles;
whether every word in the current standard can be represented unambiguously;
whether the product stores one complete backup or a multi-share recovery structure;
whether the required tools are included;
whether a mistake can be corrected safely;
whether the finished backup can be inspected and recovered without vendor software.

A technically durable product can still be the wrong product when the word count, standard, setup method, or correction model does not match the wallet.

Step 4: Choose Permanent Marks or Reusable Components

Seed backups generally fall into two operational families.

Permanent Plate, Punch, Stamp, or Engraving Systems

Permanent systems are difficult to alter casually and can produce a simple final object with no loose letter tiles.

The tradeoffs include:

irreversible mistakes;
noise and workspace requirements;
alignment and legibility risk;
the need to practice before touching the final plate;
variation between aluminum and stainless steel;
difficulty correcting a word or position after marking.

Reusable Cassette and Tile Systems

Reusable systems allow correction and may be easier for users who do not want to stamp or engrave metal.

The tradeoffs include:

small components;
tile-order dependency;
retention mechanisms that must remain closed;
possible movement under impact or mishandling;
the need to secure unused letters and setup residue.

Neither category is universally safer. The better format is the one you can assemble accurately, inspect completely, verify independently, and store under access control.

Step 5: Verify the Finished Backup Before Fully Funding the Wallet

Reading the words twice is not the same as proving recovery.

Use the device manufacturer's supported backup-check function when available, or perform a controlled recovery drill on compatible hardware according to a documented process.

The verification should prove that:

the words are correct;
the word order is correct;
the seed standard and word count are correct;
the passphrase, when used, opens the intended wallet;
the restored wallet matches the expected wallet fingerprint or known receiving addresses;
the backup can be read without interpretation or guesswork.

Never verify a seed by typing it into a website or an ordinary internet-connected computer.

For the detailed process, use:

Step 6: Verify the Destination Wallet Before Moving the Full Balance

A verified seed backup proves that the wallet can be reconstructed. You must still prove that the destination wallet is the wallet you intend to fund.

Open the new wallet through the intended coordinator or companion application.
Confirm the wallet fingerprint or other non-secret identity information.
Generate a receiving address.
Verify the complete receiving address on the signing device screen.
Send a small test transaction.
Wait for confirmation.
Confirm that the new wallet sees and can spend the test amount.
Move the remaining balance only after the test succeeds.

This sequence prevents a correct backup from being paired with the wrong receiving address, wrong passphrase wallet, wrong derivation path, or incorrect multisig configuration.

Step 7: Separate the Device, Backup, and Passphrase

A hardware wallet and its seed backup should not be exposed to the same theft, fire, flood, search, or access event.

Do not store:

the device and only backup together;
the seed and passphrase in one plainly labeled package;
multiple backup copies in the same building while calling the setup geographically redundant;
recovery instructions next to every secret needed to spend;
the backup where routine visitors, cleaners, contractors, or family members can discover it casually.

Separation does not mean making recovery so complicated that you or your heirs cannot complete it. The design must balance access control, physical resilience, privacy, and recoverability.

Special Boundaries for Passphrases and Multisig

BIP39 Passphrases

A passphrase creates a different wallet from the same seed words. A perfectly recorded seed with a lost or incorrect passphrase does not recover the intended wallet.

Document the passphrase recovery process separately. Do not assume memory is a backup. Do not store the passphrase beside the seed by default unless your threat model deliberately accepts that single point of failure.

Multisignature Wallets

A multisignature recovery plan requires more than backing up several seed phrases.

Preserve:

each signer seed under its own security boundary;
the wallet descriptor or equivalent configuration information;
derivation paths and signer fingerprints;
the threshold policy;
clear recovery instructions;
proof that the threshold can be reconstructed after one component is unavailable.

A multisig wallet can become unrecoverable even when every seed survives if the descriptor, key order, derivation information, or coordinator configuration is lost.

Seven Reviewed Seed-Backup Options

Affiliate disclosure: The product links below are affiliate links. Bitcoin Plaster may earn a commission at no extra cost to you. Recommendations are based on product fit, setup method, recovery requirements, hands-on work where available, and the evidence described in each full review.

Best fit	Product	Primary strength	Main tradeoff
Best overall evidence-backed permanent option	Trezor Keep Metal	Guided punching workflow, strong finished construction, and multiple recovery-format variants	You must choose the exact 20-word or 24-word version before purchase
Heavy-duty plate user	Coinplate Alpha	Substantial plate format and simple permanent record	Permanent marking demands practice, alignment, and legibility
Correction-friendly reusable cassette	Billfodl	Reusable letter-tile system without hammering or engraving	Small components and retention must remain controlled
Compact reusable format	ELLIPAL Seed Phrase Steel	Compact tile-and-screw assembly	Compactness increases dependence on correct tile order and secure closure
Lower-cost reusable tablet	Keystone Tablet	Reusable tile approach at the lower Keystone tier	Basic retention and construction may not fit users seeking the strongest assembly
Premium reusable retention	Keystone Tablet Plus	More robust reusable construction and tile retention	Higher price and continued small-part dependency
Multi-plate permanent workflow	SecuX XSEED	Several model and plate options for permanent or reusable workflows	The family contains materially different products that must not be confused

Best Overall: Trezor Keep Metal

Best for: users who want a guided permanent backup with a clean finished object and a model selected for the exact recovery format.

Why it fits after migration: the workflow is designed around indexed word positions and permanent punched marks. Bitcoin Plaster's review also has stronger destructive and hands-on evidence than most alternatives in this set.

Skip it if: you need a reusable format, dislike irreversible punching, or have not confirmed whether the new wallet uses a 20-word single-share, 20-word multi-share, or 24-word BIP39 backup.

Choose the exact product variant. Do not treat the three versions as interchangeable.

Check Keep Metal 20-word Single-share Read the full Trezor Keep Metal review

Check Keep Metal 20-word Multi-share Check Keep Metal 24-word BIP39

Best Heavy-Duty Plate: Coinplate Alpha

Best for: users who prefer a substantial plate and permanent marking without a cassette or retained letter tiles.

Why it fits after migration: Coinplate Alpha creates a simple physical record with no internal tile order to maintain after setup.

Skip it if: you cannot practice the marking method, need easy correction, or are likely to accept shallow or ambiguous marks.

Check Coinplate Alpha at the official store Read the full Coinplate Alpha review

Best Reusable Cassette: Billfodl

Best for: users who value correction and reuse and prefer assembling letter tiles to permanently marking a plate.

Why it fits after migration: a mistake can be corrected without replacing an entire stamped plate, which can reduce setup pressure during a carefully controlled migration.

Skip it if: loose components, tile handling, or cassette retention create more operational risk for you than permanent marking.

Check Billfodl at the official store Read the full Billfodl review

Best Compact Reusable Format: ELLIPAL Seed Phrase Steel

Best for: users who want a compact tile-and-screw backup and understand the importance of component order, closure, and word-format compatibility.

Why it fits after migration: the compact body is easier to place than a large plate, and the reusable format allows correction before final storage.

Skip it if: compact components are difficult for you to handle, inspect, or preserve under impact and long-term storage.

Check ELLIPAL Seed Phrase Steel Read the full ELLIPAL review

Best Lower-Cost Reusable Tablet: Keystone Tablet

Best for: buyers who want a reusable tile system at the lower Keystone product tier.

Why it fits after migration: it avoids irreversible stamping and gives users a clear route into reusable metal backup without paying for the Plus model.

Skip it if: you want the strongest Keystone retention system or would rather eliminate removable tiles entirely.

Check Keystone Tablet at the official store Read the full Keystone Tablet review

Best Premium Reusable Tablet: Keystone Tablet Plus

Best for: users who want a more robust Keystone assembly and stronger tile retention while preserving correction and reuse.

Why it fits after migration: it improves the reusable-tablet experience for users who are willing to pay for the stronger construction.

Skip it if: the standard Tablet is sufficient, the higher price is not justified, or any removable-tile design conflicts with your threat model.

Check Keystone Tablet Plus Read the full Keystone Tablet Plus review

Best Multi-Plate Family: SecuX XSEED

Best for: users who deliberately want the XSEED family's permanent or reusable options and are prepared to verify the exact model before purchase.

Why it fits after migration: XSEED Plus offers a permanent multi-plate stamping route, while other XSEED models use materially different workflows.

Skip it if: you are likely to confuse the basic, Plus, and Pro models, or if you expect all included plates and materials to provide the same durability and setup method.

Check SecuX XSEED at the official store Read the full SecuX XSEED review

Common Backup Mistakes After an Emergency Migration

Reusing the old seed: a new metal plate does not create new private keys.
Photographing the new words: physical durability does not remove the digital copy.
Funding before verification: a wallet should not receive the full balance before its recovery path is proven.
Buying the wrong format: a product can be durable but incompatible with the new seed standard.
Skipping practice: permanent marking should be tested on spare material first.
Storing everything together: device, backup, and passphrase should not fail in one event.
Destroying the old backup too early: preserve it until migration and recovery are fully confirmed.
Calling duplicate plates redundancy: copies stored together share the same failure domain.
Ignoring setup residue: temporary paper, unused tiles, packaging notes, and practice material can expose the seed.
Assuming metal means verified: an unreadable or incorrectly ordered steel backup is still a failed backup.

Completion Checklist

The seed is completely new and not restored from the affected wallet.
The words were recorded in a private offline workspace.
The backup format matches the exact seed standard and word count.
Every word and position was inspected.
The backup passed a supported verification or recovery drill.
The intended wallet fingerprint or receiving addresses were confirmed.
A small test transaction arrived and was spendable.
The full migration completed successfully.
The device, seed backup, and passphrase do not share one failure domain.
Temporary copies and setup residue were retired safely after verification.
The old seed and device were preserved until the new setup was fully proven.

Frequently Asked Questions

Should I Put the Old Coldcard Seed on a New Metal Backup?

Not as a replacement for migration. A metal backup preserves the old seed and therefore preserves the same private keys. Move the Bitcoin to a wallet created from a completely new seed.

Should I Back Up the New Seed Before Sending the Test Transaction?

Yes. The new backup should be recorded and verified before the wallet receives the full balance. A small test transaction should come after the destination and recovery path are prepared.

Is Paper Enough?

Paper can be a valid recovery record when it is protected from fire, water, fading, discovery, and physical loss. Metal is an optional durability layer, not a cryptographic requirement.

Is a Metal Backup Fireproof?

Do not treat all metals, products, markings, and finished assemblies as equivalent. Review product-specific evidence and understand that manufacturer temperature claims are not automatically Bitcoin Plaster test results.

Can I Verify the Seed in a Software Wallet?

Do not enter a cold-storage seed into an ordinary internet-connected computer merely to check it. Use the hardware wallet's supported backup-check process or a controlled recovery drill on compatible hardware.

Should the Passphrase Be Stored With the Seed?

Usually not when separation is part of the threat model. However, a passphrase that exists only in memory can be lost permanently. Design a separate recoverable passphrase process rather than relying on memory or placing every secret together.

When Can I Destroy the Old Backup?

Only after the full balance has moved, the new wallet has been verified, the new backup has passed recovery testing, and there is no remaining operational, legal, accounting, or evidentiary reason to preserve the old material.

Which Metal Backup Is Best Overall?

Trezor Keep Metal is Bitcoin Plaster's default overall recommendation in this reviewed set when the exact product variant matches the seed format. Coinplate Alpha is the heavy-duty permanent plate route, while Billfodl and the Keystone products fit users who prefer reusable components.

Final Recommendation

A migration is successful only when the new secret can survive the loss of the device.

Generate a genuinely new seed. Record it without digital exposure. Select a backup product that matches the exact recovery format. Verify every word and position. Prove the recovery path before moving the full balance. Separate the device, backup, and passphrase according to a threat model you can actually maintain.

The product matters, but the complete recovery process matters more.

Update Log

August 11, 2026

Published the complete post-migration seed backup and verification sequence.
Added recovery, passphrase, multisig, storage-separation, and old-backup retention boundaries.
Compared all seven current Bitcoin Plaster seed-storage product reviews.
Added product-specific affiliate routes with campaign attribution.

Primary Sources and Internal Evidence

Coinkite, Coldcard Security Advisory.
Coinkite, Technical Deep Dive into the Entropy Issue.
Bitcoin Plaster hands-on and evidence notes contained in the linked Trezor Keep Metal, Coinplate Alpha, Billfodl, ELLIPAL, Keystone, and SecuX product reviews.
Bitcoin Plaster seed-backup verification, recovery drill, storage, threat-model, and metal-selection guides linked throughout this article.