Shamir Backup (SLIP-39) & Metal Backup Plates

What this guide covers

This guide explains Shamir Backup (SLIP-39) and practical ways to store shares using metal backup plates seed phrase engraving. I write from hands-on testing with Safe Series hardware wallets and metal backups, so you'll get step-by-step actions to follow, plus real-world trade-offs. What I've found will save time and reduce mistakes.

What is Shamir Backup (SLIP-39)? — quick explanation

Shamir Backup (SLIP-39) is a way to split a seed phrase into multiple pieces (called shares) so that a subset can recover the full recovery phrase. It’s based on Shamir’s Secret Sharing. SLIP-39 organizes those shares into a standard format so wallets can restore from them.

Why use it? Simple: instead of one paper seed phrase that’s a single point of failure, Shamir lets you distribute risk. You can require, for example, 2-of-3 shares to recover (two shares out of three). That helps if one share is damaged or lost, or if you want geographically separated backups.

(Short answer: Shamir gives configurable redundancy and access control.)

How SLIP-39 differs from BIP-39

BIP-39: single seed phrase (12/24 words) that directly encodes the private keys. Easy to understand, widely compatible.
SLIP-39: splits the seed into N shares with a recovery threshold T (T-of-N). It stores metadata so compliant wallets can reconstruct the original seed phrase.

Key implications:

SLIP-39 adds operational complexity during setup and recovery. Longer setup, more steps.
SLIP-39 is not universally supported in every wallet or recovery tool. Check compatibility before committing.

If you want a quick primer on general backup options, see the seed backup guide.

Pros and cons of using Shamir

Pros:

Greater resilience: you can lose some shares and still recover.
Better secret distribution: shares can be split across family members, safe deposit boxes, etc.
Flexible threat-model choices (access recovery vs coercion resistance).

Cons:

More complex to set up and restore — user error risk rises.
Requires secure storage plan for multiple physical items.
Compatibility: not all wallets or recovery services support SLIP-39.

And yes, Shamir is not a silver bullet. It reduces some risks and increases others. But for long-term holdings I believe it’s worth considering.

Step-by-step: create Shamir shares on a Safe Series hardware wallet

Note: the exact screen text and sequence vary by model and firmware. See your device setup page: safe-3-setup or safe-5-setup. Also follow firmware verification steps in firmware-updates-guide.

Before you start

Update firmware on the device to the latest verified release.
Use a factory-sealed purchase source (see buying-safely).
Have metal backup plates and a non-digital pen ready (for temporary notes only).

On-device flow (what to expect)

Choose "Create new wallet" → select "Shamir Backup (SLIP-39)" if shown.
Choose N (total shares) and T (threshold). Example: 3-of-5 or 2-of-3. Pick based on how many physical locations and trusted holders you’ll use.
The device will generate shares and display each share on screen (or give a QR/USB export option depending on the model). Write or punch each share onto your metal plate immediately.
The device will typically ask you to confirm one or more shares to ensure they were recorded correctly.

Practical tips during setup

Use a metal backup plate for each share if you can. Don’t store multiple shares together unless you intend them to be found together.
Photograph nothing. Do not store shares on cloud or phone photos.
Test a single recovery (after waiting a day) to confirm your process — use a secondary device or testnet if available.

Metal backup plates for seed phrase storage

Metal backup plates seed phrase engraving protects against fire, water, and time. There are three common methods:

Stamped or punched letters (mechanical impressions).
Laser-etched plates (permanent surface mark).
Stainless steel tile systems where words are assembled (modular tiles).

Types and what I recommend

My preference is stainless steel plates with mechanical punch or laser etching for permanence. They resist corrosion and, unlike paper, survive house fires and floods. But quality varies — use a reputable plate made from 316 stainless.

How to mark Shamir shares on metal plates

Mark the plate with share ID and index (e.g., Share 1 of 5). That prevents confusion later.
Record the full SLIP-39 share string exactly as shown (alphanumeric). Some shares are word lists; others are base58 strings — follow your device guidance.
Consider duplicate plates: one primary, one geographically separated copy. (But not too many copies.)

Multisig, Shamir, and compatibility

Shamir is a single-key redundancy method; multisig is an on-chain scheme requiring multiple on-chain keys to sign a transaction. They solve different problems.

Want on-chain access control (prevent single key theft)? Use multisig. See multisig-guide.
Want robust single-key recovery and distribution? Use SLIP-39.

Can you combine them? Yes. For example, create each co-signer key with Shamir shares stored separately. But recovery processes become more complex. Ask yourself: do you need multisig's on-chain protections, or do you mostly need backup redundancy?

Common mistakes and troubleshooting

Buying used devices or unverified firmware. (Always check supply-chain-authenticity.)
Storing multiple shares together in a single physical location.
Confusing share index numbers during recovery.
Using passphrase incorrectly (see passphrase-guide).

If recovery fails, stop and verify you have the correct threshold of shares and the right passphrase. Restoring without panic reduces error.

FAQ

Q: Can I recover my crypto if the device breaks?

A: Yes — with the required threshold of SLIP-39 shares and any passphrase you used. Follow the device’s recovery flow or an approved recovery tool. See recovery-and-restore.

Q: What happens if the company behind the hardware wallet goes bankrupt?

A: Your keys (and shares) are independent of the company. Recovery depends on standards support (SLIP-39) — keep copies of compatible recovery instructions.

Q: Is Bluetooth safe for a hardware wallet when using Shamir?

A: Bluetooth affects device communication, not the on-device secret generation. For highest assurance use USB or air-gapped signing (see air-gapped-guide).

Who this is for / who should look elsewhere

This approach is for long-term HODLers and estate planners who want recoverable single-key storage with redundancy. If you prefer simplicity or maximum cross-wallet compatibility, a standard BIP-39 24-word backup may be better. If you need on-chain access controls to prevent single-key misuse, consider multisig instead — see multisig-guide.

Conclusion and next steps (CTA)

Shamir Backup (SLIP-39) plus metal backup plates is a practical way to protect a seed phrase against physical hazards and single-point loss while giving you flexible recovery thresholds. But it adds operational steps, so practice the flow and test recovery before you commit large holdings.

If you want a step-driven walkthrough for the Safe Series model you own, start with the device setup guides: safe-3-setup or safe-5-setup. For more on long-term strategies and inheritance planning, see seed-backup-guide and inheritance-planning.

Need a quick checklist to take with you to the setup? I keep a short printed checklist when I create shares — it saves time and reduces mistakes. But always verify by doing a recovery test.

Ready to plan your backup? Follow the checklist, pick your metal plates, and run one test recovery before moving funds.