How to Split a Seed Phrase

Splitting a seed phrase is really two tasks. First, you generate shares from the original seed. Second, you scatter those shares across separate locations. Each share alone should reveal as little as possible. Together, the right shares rebuild the full phrase.

The goal is clear: no single point of failure. No single point of theft. No trusted third party. The method you choose decides how well you reach that goal.

Some splits are straightforward but weak. Others are engineered to hold up under pressure. This guide walks you through the options, from simple to secure, so you can match the method to your threat model.

Why Split Your Seed Phrase

Your seed phrase is the master key to your bitcoin. Lose it and your funds are gone. Let the wrong person see it, and they can take everything. In that context, using a single backup is fragile. It can be lost, damaged, or stolen. Splitting reduces that risk by spreading it across many hands and places.

The threats you face fall into three groups.

• Loss: Fire, flood, corrosion, or a mislaid backup. Your wealth is gone with it. Single-location storage fails here.
• Theft: A burglar, a housemate, or a malicious actor who copies the phrase. They gain full control instantly. A single copy is a single point of capture.
• Coercion: Someone pressures you to reveal the seed, using the infamous $5 wrench attack. With one copy, there’s little between you and them.

Each threat wants something different. Loss demands redundancy. Theft demands separation. Coercion demands that no one individual holds the backup.

The method you choose decides how well you meet each one. The honest move is to pick the tradeoff that fits your situation, then design for it deliberately.

Before You Start

Splitting only divides the material you already hold. Handle the foundation first:

• Control where the seed came from: Generate it yourself. If a supplier generated it, they hold it. A seed compromised at birth is compromised for good.
• Confirm the seed has real entropy: If it came from weak randomness, then even the strongest split rests on a weak foundation. A low-entropy seed is a weak seed.
• Confirm the seed is valid: Test the recovery properly by wiping and restoring your device, checking the receive address is the same, and that you can receive/send coins.
• Control the environment: Go fully offline. No phone, no cameras, no smart devices in the room. Do not say the words out loud.

Three Methods to Split Your Seed Phrase

Not all methods are equal. Some simply cut the words apart and are easy to manage but leak real material. Others add redundancy at the cost of secrecy.

Shamir Secret Sharing (SSS) is another cryptographic method. But it requires a calculator or computer to implement, making it impractical for manual seed phrase splitting.

Simple Seed Phrase Splitting

Simple splitting cuts your seed phrase into separate shares, each holding real words from the original. In the most common form, you divide a 24-word seed in half: share A holds the first twelve words, and share B holds the last twelve. Reconstructing the phrase requires both shares.

The approach has real limits:

• Loss: Losing one share means losing everything, since both are required.
• Theft/Coercion: Each share keeps real seed words in it. Whoever finds one share holds a large chunk of the actual phrase. While brute-forcing the missing half is not feasible today, a future computer could bring it within reach.

Those limitations are exactly why this method is a convenience choice, not a long-term high-value solution. It fits smaller amounts, temporary storage, or situations where a more complex split feels out of reach.

To proceed:

1. Take your seed.
2. Write the first twelve words and their position on share A.
3. Write the last twelve words and their position on share B.
4. Record the name of the wallet with each share.

Simple Splitting with Redundancy (2-of-3)

This method, from Igor Sretano’s split guide (PDF in Russian), builds three shares, arranged so that any two of them reconstruct the full seed. You can lose one and still recover everything.

It’s because the shares overlap, so the gaps in any one share are covered by another. Whichever pair you hold (A+B, B+C, or A+C), you can rebuild the seed from scratch.

The approach improves on plain splitting on one axis but weakens it on another:

• Loss: Losing one share is no longer fatal. Any two shares remain enough to recover.
• Theft/Coercion: Each share holds sixteen real words. While still impractical to brute-force on ordinary hardware, it’s a far weaker position to be in.

Because it buys redundancy rather than secrecy, it suits the same kind of user and amounts as plain splitting, but with the comfort that this setup can survive losing one share.

To proceed:

1. Take your seed.
2. Write the positions and words for share A (words 1–16).
3. Write the positions and words for share B (words 9–24).
4. Write the positions and words for share C (words 1–8 and 17–24).
5. Record the name of the wallet with each share.

Cryptographic Seed Phrase Splitting (Penlock)

Penlock is a twist on the one-time pad, a method that lets you generate three shares cryptographically. Any two shares reconstruct the full seed, and a share contains no information about the seed itself.

The method is wallet-agnostic, quantum-proof, and relies entirely on paper tools. The shares are encrypted, so even if one is captured, it provides no insight into the seed phrase.

This approach addresses the weaknesses of simple splitting:

• Loss: Any two shares remain enough to recover, making a single lost share not fatal.
• Theft/Coercion: Each share is encrypted and reveals nothing.

Penlock suits those storing enough on-chain value to feel unsafe with a simple seed phrase but not wanting the complexity and cost of multi-signature.

To proceed:

1. Print and assemble the wheel, tiles, worksheet (for 12, 18, or 24 words), and wordlist.
2. Write your seed phrase on the worksheet, using the wordlist format of 6 characters.
3. Generate the first character of the shares.
   1. Align the wheel’s pointer with the first character from your seed phrase.
   2. Shuffle the tiles thoroughly and randomly select one.
   3. Locate the numbered window on the wheel that corresponds to your selected tile.
   4. Take the character from that window and record it as the first character of share 1
   5. Move to the next numbered window and record that character as the first character of share 2.
   6. Move to the next numbered window and record that character as the first character of share 3.
4. Repeat for each character until all shares are complete.

Important notes:

• The wheel has 29 numbered windows. When you reach window 29, the “next” window loops back to window 1 (and then 2, 3, etc.).
• If any character in your seed phrase happens to be “=,” all three shares will receive the exact same character from the selected window.

The complete instructions are available on the official Penlock splitting guide.

Verify Your Shares

Before discarding your seed phrase, you need to ensure you can recover it from the shares you just created. Verification is crucial because a single mistake could render your shares useless for recovery, potentially leading to permanent loss of your funds.

So, you’ll need to:

1. Confirm all words are written clearly and legibly.
2. Check that word positions are marked correctly.
3. Reconstruct your seed phrase and make sure it matches the original exactly.

Both simple splitting methods (12+12 and 2-of-3 with overlap) share the same verification approach since they include seed words:

• For 12+12: combine both shares to confirm you have all 24 words.
• For 2-of-3: test all three possible pairs (A+B, A+C, B+C) to ensure each combination reconstructs the full phrase.

Penlock’s verification process is more sophisticated due to the encrypted shares. And it includes built-in error correction, ensuring the resulting backup is correct and sound. Proceed character by character:

1. Position the wheel’s pointer at the current character from your seed phrase.
2. Find the first character of share 1 on the wheel’s inner ring.
3. Check that the corresponding character on the outer ring matches the first character of share 2.
4. Locate the first character of share 2 on the inner ring.
5. Confirm that the character on the outer ring matches the first character of share 3.
6. Continue this process for each character position until all shares have been fully verified.

Protect Your Shares

Protecting your shares is just as important as creating them correctly. The right storage strategy ensures your backup remains secure and accessible when needed.

While you may have generated your shares on paper, the medium is vulnerable to time, fire, water, and physical destruction. For maximum security and durability, stamp your seed words (or their encrypted counterparts) on backups made of metal.

For Penlock specifically, you can store one share digitally since it’s encrypted. However, this should be the only digital share. Never digitize two shares, as this defeats the security purpose. You can store that one share in a cloud-synced password manager to keep multiple copies.

You can also create multiple physical copies of shares for redundancy, but be aware: more copies provide better protection against loss but create more opportunities for unauthorized access or compromise.

Finally, store your shares in separate geographical locations (separate from your hardware wallet) to protect against localized disasters and coercion.

Destroy Your Seed Phrase

Only once you’ve verified your shares, destroy your original seed phrase. The entire purpose of splitting is to eliminate this single point of failure. Keeping it around defeats this security benefit.

For seed phrases on paper, use a cross-cut shredder or burn the material completely. If you have a metal backup, destruction requires more effort. You can use a metal shredder, grind the metal into powder, or dissolve it using appropriate chemical methods.

You should also destroy any notes, worksheets, or temporary materials used during the splitting process. These may contain partial information that could aid an attacker in reconstructing the seed phrase.

Conclusion

Splitting your seed phrase is one of the most effective ways to harden your Bitcoin backup. It allows you to eliminate the single point of failure of single-signature wallet backups.

Several methods exist, each with its own tradeoffs. Simple splitting offers ease of use and can be made redundant to improve loss tolerance. But it reveals real words in each share. Cryptographic splitting provides encrypted shares that reveal nothing individually while allowing any two to reconstruct the full phrase.

Whatever method you choose, remember that security extends beyond the splitting itself. Proper verification ensures your shares will work when needed. Careful storage and protection prevent exposure. Timely destruction of the original eliminates unnecessary risk.

For the strongest security, consider using Penlock. The kit provides all the tools you need to execute safe 2-of-3 splitting entirely on paper. Being open-source, you can also download all the files from their website or their GitHub repository for free.

Once you’ve split your seed, protect your shares with Seed Keys. Made from corrosion-resistant materials, the modular backup provides long-term durability and a tamper-evident, compact design.

By combining proper seed phrase splitting with durable backups, you create a security foundation that protects your coins for decades to come.