Most people never test a cold wallet backup. They write twelve or twenty-four words on a card, put it in a drawer, and assume the day will never come when those words are the only thing standing between them and their balance. The gap between "I have a backup" and "I have a backup that restores access" is where money quietly disappears.
A backup you have never restored is a hypothesis, not a safeguard. On a Trezor or any hardware wallet, the restore process has enough moving parts that one wrong assumption can lock you out of funds that are still sitting on-chain, untouched and unreachable.
An untested backup is a liability, not insurance
Consider a holder who sets up a Trezor Model T, writes the 24-word seed on the card that ships in the box, and locks it in a fireproof safe. Three years later the device fails. He buys a replacement, enters the words, and gets an "invalid recovery seed" error. Somewhere along the way he transcribed one word wrong, and nobody checked. The coins are fine. He is not.
Transcription errors are among the most common self-custody failures, and the fix costs about twenty minutes. Skipping it can cost the whole balance.
The recovery drill, in three phases
A real test catches a different class of error at each stage. Run all three.
Phase 1: Check the written backup against the device
Trezor Suite includes a recovery seed check that confirms the words you wrote match what the device holds, without exposing the seed to a screen or keyboard. Do this the same day you set up the wallet, not months later when you have forgotten which word you hesitated over.
Phase 2: Restore onto a second device
Borrow or buy a second hardware wallet, wipe it, and run a full recovery using only your written backup. This is the only test that proves your backup is complete and in the right order. If a second device is out of reach, an offline recovery tool in a secure environment is the fallback, but a second device remains the standard worth aiming for.
Phase 3: Confirm the addresses match
After the restore, compare the first receiving address on the recovered device with the one on your original. A match means the backup is valid. A mismatch means stop and investigate before moving a single satoshi.
Storage method matters as much as the words
Where the backup lives determines whether it survives long enough to be useful. Common approaches compare like this:
| Method | Durability | Privacy risk | Best for |
|---|---|---|---|
| Paper in a safe | Low (fire, water, fading) | Low if hidden | Quick start |
| Stamped metal plate | High | Low | Long-term holdings |
| Split across locations | Medium | Medium | Larger balances |
| Digital photo or cloud note | N/A | Very high | Never |
Test the physical backup too. Pull the plate out of the safe, read it under good light, and confirm every word is legible. A metal plate you cannot read offers no more protection than one that burned.
When someone else has to restore it
You may know your seed cold. Your spouse or adult child almost certainly does not, and an inheritance plan that depends on them restoring the wallet after you are gone needs rehearsal, not good intentions.
Walk your heir through a restore once. Watch them do it alone a second time. Then leave written instructions that explain where the backup lives and how to use it, stored separately from the seed itself. A seed phrase and its instructions in the same envelope is a single point of failure dressed up as a plan.
- Keep the seed and the instructions in two different physical locations.
- Have your heir complete one full restore on a test device.
- Review the plan annually and after any device change.
Questions that come up during testing
How often should I test my cold wallet backup?
Test once at creation, then again whenever you change devices, move significant funds, or change how you store the backup. An annual check suits long-term holdings. The point is catching drift before it matters, not performing a ritual.
Is it safe to enter my seed into a second device?
Yes, if that device is a hardware wallet you bought directly from the manufacturer and control yourself. Never type a seed into a website, an unverified phone app, or a device of unknown origin. The test itself should never involve a computer keyboard.
What if the restored addresses do not match?
Stop and do not move funds. A mismatch usually means a transcription error, wrong word order, or a different derivation path. Recheck each word against your written backup. If it stays unresolved, contact the manufacturer's official support, never a stranger offering to "fix" it for you.
Open your calendar now and book twenty minutes this week. Pull out the backup, run the restore, and confirm the addresses match. That is the whole task, and it is the difference between an inheritance plan and a hope.