Shamir Backup and Splitting a Seed Phrase

A Shamir backup splits your wallet's recovery secret into several shares, each written down as its own set of words, so that a chosen number of them (for example any 2 of 3) can restore the wallet while fewer shares reveal nothing useful. It lets you store backups in different places without any single location holding the full key.

This solves a real dilemma. A single seed phrase backup is a single point of failure: if it is lost, your funds are gone, and if it is found, your funds can be stolen. Making more copies reduces the risk of loss but increases the risk of theft. Shamir backup is designed to reduce both at once, but it also adds complexity, and doing it wrong can lock you out.

How Shamir's Secret Sharing Works

Shamir's Secret Sharing was described by cryptographer Adi Shamir in 1979. The core idea relies on a mathematical fact: you need a certain number of points to define a curve. Two points define a straight line, three define a parabola, and so on.

In simple terms:

1. 1The secret is encoded as one point on a randomly chosen curve.
2. 2Different points on that curve are handed out as shares.
3. 3With enough shares (the threshold), the curve can be reconstructed and the secret recovered.
4. 4With fewer, infinitely many curves fit, so the shares say nothing about the secret.

That last property is what makes it different from splitting a phrase into pieces.

Shamir Backup in Wallets: SLIP-39

Hardware wallet maker SatoshiLabs, the company behind Trezor, published a standard called SLIP-39 for Shamir backups. Wallets that support it generate shares as lists of words, similar to a seed phrase but from a different word list and format.

When you set up a Shamir backup, you typically choose:

• The number of shares: for example 3 or 5.
• The threshold: how many shares are needed to recover, such as 2 or 3.

Some implementations also allow groups, for example "one share from the family group and two from the personal group," for more complex setups.

Compatibility warning

SLIP-39 shares cannot be entered into a wallet that only supports BIP-39, the standard most wallets use for 12 or 24-word seed phrases. Before relying on a Shamir backup, confirm which wallets can restore it and record that information with your plan.

Why You Shouldn't Just Cut a Seed Phrase in Half

A common do-it-yourself approach is to write words 1–12 on one paper and 13–24 on another. It seems clever but has two problems:

Splitting a phrase makes each piece valuable to a thief and makes every piece essential. You get the downsides of both. If you want distributed backups, use a proper scheme. If you want to go further, read Wallet Derivation Paths Explained.

Shamir Backup vs Other Options

Our guides to passphrases and multisig for shared funds cover those alternatives.

How to Set Up a Shamir Backup Safely

1. 1Use a wallet that supports it and is downloaded or bought from the official source.
2. 2Pick a sensible threshold. 2-of-3 is a common starting point: you can lose one share and still recover, and one stolen share is useless.
3. 3Write each share carefully by hand, labeled with its share number and the threshold, and never photograph it.
4. 4Store shares in separate locations, such as your home and a trusted second place. Keeping all shares in one drawer defeats the purpose.
5. 5Test recovery with the threshold number of shares before you fund the wallet heavily.
6. 6Document the plan so a trusted person knows the scheme exists, how many shares are needed and which wallet type restores it. See our guide on inheritance planning for crypto.
7. 7Consider metal backups for each share to protect against fire and water.

Common Mistakes

• Setting a threshold equal to the total number of shares, so losing one share means losing everything.
• Giving too many shares to people who know each other, who could combine them.
• Forgetting which wallet standard the shares use.
• Never testing the recovery.
• Treating Shamir as protection against malware on the signing device; it isn't.

Bottom line

Shamir backup lets you spread a wallet's recovery secret across several locations so that one lost or stolen share doesn't cost you your funds. It's far safer than cutting a seed phrase in half, but it requires compatible wallets and careful documentation. For most people holding Bitcoin or other crypto in self-custody, a well-stored single backup is enough; Shamir makes sense when the amount and your planning justify the extra steps. Start with the fundamentals in our guide to backing up a seed phrase the right way.