The problem with one sheet of paper
A standard Bitcoin wallet backup is twelve or twenty-four words on a single sheet. Anyone who finds that sheet owns your coins. There's no middle ground, no partial protection, no "well, at least they only got half."
A Shamir backup changes that. It splits your wallet's recovery secret into several shares, and you only need a minimum number of them to rebuild the seed. Trezor sells this as Shamir Backup, sometimes labeled SLIP39. You set the threshold yourself, maybe 2-of-3. Lose one share and you're fine. Lose too many and the wallet is gone.
What a Shamir share actually is
Here's where most explanations go wrong. A Shamir share is not a fragment of your seed phrase, like half a password waiting for its other half. Each share is a complete-looking set of words that carries no recoverable information on its own. You can't read one share and guess the others. That's the entire design.
Your secret gets mathematically divided, and each piece alone reveals nothing useful. Only when you combine enough shares does the original seed reappear. The threshold is the number that matters: a 2-of-3 setup means any two shares reconstruct the wallet, and a 3-of-5 setup needs any three of the five.
Why the threshold matters more than the share count
Beginners fixate on how many shares to make. The threshold is what actually protects you.
Picture a 2-of-3 split. One share at home, one in a bank box, one with a trusted relative. Any single location failing doesn't hurt you. A house fire destroys one share and you still recover with the other two. Now picture 3-of-5: more redundancy, but you need three locations to survive. More resilience and more complexity at the same time.
| Setup | Shares needed | Survives losing |
|---|---|---|
| 2-of-3 | 2 | 1 share |
| 3-of-5 | 3 | 2 shares |
| Single seed | 1 | Nothing |
A single seed phrase survives zero disasters. That's the honest comparison.
A scenario you might recognize
Say you hold some bitcoin and you want your spouse to recover it if something happens to you. You don't want your nephew who visits every Thanksgiving to stumble onto the whole seed.
You create a 2-of-3 Shamir backup on your Trezor. Share A goes in your home safe. Share B goes to your spouse. Share C sits in a bank deposit box. Your spouse alone can't spend your coins. Your nephew finds nothing in the safe except a strange list of words he can't use. If your house burns down, you and your spouse still recover everything.
The mistake that defeats the whole thing
People store all the shares together. Two shares in the same drawer means your threshold is already met for any thief who opens it. Physical separation isn't optional. It's the feature.
Shamir versus a BIP39 passphrase
A BIP39 passphrase adds a secret word to your existing seed. It's powerful, but it has a brutal flaw: forget the passphrase and the funds are unrecoverable. There's no partial credit.
Shamir spreads risk across geography instead of memory. You don't need to remember anything unusual. You need to physically possess enough shares.
Which one fits your situation?
- Choose Shamir if you want inheritance-friendly redundancy and you trust a few people or places with single shares.
- Choose a passphrase if you're comfortable memorizing a secret and your main worry is someone finding your written seed.
Plenty of people use both. There's no rule against layering protections.
Setting one up on a Trezor
Not every Trezor model supports Shamir Backup, so check your specific device first. On supported models, you pick the feature during initial setup or through the wallet interface, then choose your total shares and threshold. The device generates the shares and shows them one at a time.
Write each one down by hand. Don't photograph them. Don't type them into a computer. Don't store them in a password manager.
Test before you trust
Wipe the device and restore it using your shares before you move serious money onto it. Find out now whether you wrote them down correctly, not during an emergency when your hands are shaking.
Common questions
Can I recover a Shamir backup on a different wallet brand?
Shamir Backup follows the SLIP39 standard, and some other wallets support it too, but compatibility isn't universal. Trezor devices handle it natively. If you're relying on recovery with a different brand, verify that specific wallet supports SLIP39 before you count on it.
What happens if I lose one share in a 2-of-3 setup?
Nothing breaks. You still have two shares, which meets your threshold, so you can recover the wallet normally. You'd want to create a fresh backup afterward, though, because you're now down to exactly the minimum.
Are Shamir shares safe to store digitally?
Generally no. A photo, cloud file, or text document can be copied by malware or exposed in a cloud provider breach. Paper or metal backups kept offline in separate physical locations avoid that whole category of risk.
Does Shamir Backup hide my balance from someone with one share?
Yes. A single share reveals nothing about your seed or your funds. Someone would need to meet your threshold before any recovery is possible, which is exactly why splitting shares across locations works.
Pick your threshold today, write the shares by hand, and store them in three places that can't all burn down at once.