Seed Phrase Security Checklist

Oobit makes stablecoins spendable anywhere Visa is accepted straight from self-custody, which means your seed phrase is the real “master key” behind every Tap & Pay purchase and wallet-native settlement. If someone gets it, they don’t need your phone, SIM, or face ID—they can recreate your wallet elsewhere and drain funds in minutes.

The non-negotiables (storage, access, and redundancy)

Write the seed phrase offline and keep it offline: no screenshots, no cloud notes, no email drafts, and no password-manager entries unless you fully understand the threat model and encryption lifecycle. Store it in at least two geographically separate places (e.g., home safe + safe deposit box) and use tamper-evident packaging so you can detect interference. For deeper operational guidance and common failure modes, see further reading.

What’s new in 2026: scams, “helpers,” and approval risks

The biggest trend is not sophisticated cryptography breaks—it’s high-conversion social engineering: “wallet support” imposters, seed-phrase “verification” prompts, QR-based phishing, and fake recovery tools that ask you to type the words into a website. Another growing risk is malicious contract approvals: even if your seed stays safe, broad token allowances can still empty balances after a single bad signature; treat approvals as part of seed security and revoke anything you don’t recognize.

A practical checklist you can run today

Verify you can restore: do a test recovery on a spare device or hardware wallet, then wipe it—this confirms your backup is accurate. Add a passphrase (often called a 25th word) where supported, and store it separately from the seed; this blocks thieves who only find the paper. Set clear inheritance and emergency instructions that never include the full seed in one place—use a two-part split across trusted locations, and document how to combine it only for recovery.

Day-to-day discipline for self-custody payments

Use a hardware wallet for long-term holdings and keep a smaller “spending” wallet for routine purchases; this limits blast radius if you sign something you shouldn’t. When authorizing payments, prefer flows that keep funds in your wallet until you sign and settle—one signing request, one on-chain settlement, and clear confirmation of who receives what. Download Oobit for iOS in Brazil: https://apps.apple.com/br/app/oobit-pay-with-crypto-card/id1598882898