Bitcoin · Self-custodyNon-custodial wallet · Bitcoin only
Bad WalletGet early access

All articles

Creating a wallet: the part everyone rushes

The create flow takes about ninety seconds and looks like signing up for an app. Several of the decisions inside it can’t be revisited. Here’s the slow version, done once, properly.

Security·Beginner·6 min read
6 of 9 · Hold it without fear

Most people meet their for the first time in about ninety seconds. Tap create, glance at some words, tap next, done. It feels like signing up for an app, largely because it looks exactly like signing up for an app.

It isn’t. Those ninety seconds produce the only thing standing between you and your money, and several of the decisions inside them can’t be revisited later. This is the slow version. It’s worth doing once, properly.

Before you tap create

Three things are worth settling before the words appear, because once they do you want your full attention on them.

  • Get the app from the right place. Fake wallets turn up in app stores and search ads, and they look right. Follow a link from the project’s own site rather than trusting a search result. Spotting scams before they spot you covers the wider pattern.
  • Be somewhere private. Not a café, not a train, not a video call, and definitely not while sharing your screen. Your words will be on display for a few minutes, and a camera over your shoulder is all it takes.
  • Have the pen and paper in your hand. Not in a drawer: in your hand. The most common way this goes wrong is starting the flow, seeing the words, and deciding to write them down in a minute.

Twelve words or twenty-four?

The app will offer you a choice. Both options are far past the point where anyone could guess them, for reasons worth understanding once. Twenty-four words buy margin against a distant future. Twelve are half as much to write down, check, and store correctly.

That second point carries more weight than it first appears. Almost nobody loses coins to a guessed phrase. People lose coins to a backup that was rushed, miscopied, or never finished. If twelve words means you actually complete the backup and verify it, then twelve words is the safer choice for you. Move to twenty-four once the routine is familiar and the amounts justify it.

Write them down before you tap next

The screen showing your phrase is the one screen in the app you should treat as a live wire. Write the words in order, numbered, on paper. Then read them back against the screen once, slowly.

Spelling matters more than you’d expect. The standard word list contains near-twins, and a wallet can hinge on whether you wrote ridge or rigid. Where your handwriting could be ambiguous a year from now, print instead of scrawling.

Not a photo. Not the notes app.Screenshots, camera rolls, cloud notes, and syncing password managers are the first places an attacker looks. Your seed phrase is everything covers where the backup should live instead, and why metal beats paper for anything meant to last.

Take the verification quiz seriously

Most wallets ask for a few words back before they’ll call you backed up. With the phrase still one screen away it’s tempting to treat that as a formality. It isn’t. It’s the only moment the app can tell you your copy is wrong while that’s still a cheap problem to have.

If you catch yourself wanting to flick back and check, that’s the quiz doing exactly its job. Fix your paper copy, then start the check again.

Rehearse the recovery, with nothing at stake

Here is the step almost nobody takes, and the one that would prevent most real losses.

Before you put anything meaningful into the wallet, restore it from your written words. Delete the wallet and enter the phrase again, or type it into a second wallet app on another device. If the same come back, your backup works. If they don’t, you’ve just found out on a wallet holding nothing, which is the cheapest possible moment to find out.

The only backup you can trust is one you have already used.

Do it once, now. You won’t need to do it again unless the phrase changes.

Fund it slowly

Send a small amount in, then send some of it back out to another address you control. That exercises the whole loop rather than just the receiving half. Sending Bitcoin without the cold sweat walks through the sending ritual itself. Once the round trip works, move the rest.

What to leave for later, on purpose

, setups, , inheritance plans: every one of these is genuinely useful, and none of them belongs in your first ten minutes. Each extra layer is another thing to back up, remember, and lock yourself out of. A setup you half understand is more dangerous than a simple one you’ve mastered.

The whole thing, in orderPrivate room, pen already in hand. Choose your word count. Write the words down and read them back. Pass the verification honestly. Restore from paper before funding. Send a small amount in, and back out again. Then, and only then, start thinking about the advanced layers.

In Bad Wallet

Rehearsing your recovery before you fund the wallet takes about a minute here.

Your words are made on your phone and shown once, with screenshots blocked. Then Bad Wallet asks for three of them back, one at a time, and the wallet keeps saying Not Verified until you finish. Importing a phrase lives in the same app, so the dry run this article recommends is something you can actually do on a wallet holding nothing.

The one thing to remember

Write the words down before you tap next, take the verification quiz seriously, and restore from your paper backup before you put real money in. Leave passphrases and multisig for later, on purpose.

Security · 4 min

Spotting scams before they spot you

Bitcoin’s irreversibility is a feature, and it’s why scammers love it. The good news: nearly every scam follows the same tired script.

Beginner

Hold it without fear