<blockquote>
<p>Will this strategy offer a high enough level of protection</p>
</blockquote>
<p>&quot;High enough&quot; seems subjective. Someone might consider it high enough to protect 0.00003 BTC but not high enough to protect 0.3 BTC</p>
<p>The more complex the scheme, the more points of failure it has. If you lose your note, the words you remember are useless. If you misremember your memorized words, as humans are prone to do, especially at longer intervals, you may not be able to recover the whole phrase.</p>
<p>Consider what you might want to happen if you die in a car crash. Is there anybody you would like to inherit, how would they do that?</p>
<p>I would try to list the threats I am trying to protect against. Then I would try to list some countermeasures whose cost I think is appropriate for the sums involved.</p>
<p>I would try to list the possible ways I might lose control over the money through forseeable failings in memory or storage (fire, flood, mice etc) and what countermeasures might be cost effective.</p>
<p>Sometimes people think that knowing the seed-phrase is enough. Some of those people post questions here when they find it isn't. You might also need a note of what software you used, what version and what derivation path was selected, maybe some sample addresses that were generated etc etc. I think you need to test the recovery process.</p>
<p>Related:</p>
<ul>
<li><a href="https://bitcoin.stackexchange.com/questions/102567/help-in-recovering-btc-from-seed-phrase?rq=1">Help in recovering BTC from seed phrase</a></li>
</ul>

CC BY-SA 4.0
2023-07-11T14:46:04.250Z
Thanks @RedGrittyBrick; you raise some great points that surround this topic for me to consider. My focus here is the somewhat exposed seed phrase, that I _intend_ to keep safe and secret, and if I only have to memorise (or safe keep) _some_ of the words, I prefer those odds, no matter the recovery strategy. I appreciate it's a two-part solution, that carries its own risk though.
pjlangley
CC BY-SA 4.0
2023-07-11T10:50:28.413Z
2023-07-11T11:01:28.463Z
2023-07-11T11:01:28.463Z
RedGrittyBrick
<p>I want (a substantial amount of) the strength in numbers of a self-custody 24 word Bitcoin wallet, but I don't want to memorise all 24 words; laziness prevails.</p>
<p>My idea: create a note (probably digital) containing <em>n</em> of the 24 words, in order (not scrambled), and to only memorise the <em>n</em> number of blanks. The <em>n</em> blanks will not be in digital form and will be fully committed to memory.</p>
<p>E.g. 8 of the 24 words are left blank in the note:</p>
<pre><code>grab merit ___ can
___ ___ floor car
exit mother ___ festival
october ___ camp ___
trial nephew ___ fabric
galaxy napkin ___ apple
</code></pre>
<p><em>Note: This seed was referenced from <a href="https://www.whatisbitcoin.com/security/guess-my-seed-phrase" rel="nofollow noreferrer">here</a>.</em></p>
<p>Out of curiosity, does the location of the blanks offer a varying number of possibilities? E.g. having the blanks front loaded, rather than spread out?</p>
<p>I'm pretty flexible with this, in the sense of hitting the &quot;sweet&quot; spot with how many word omissions to remember, without considerably compromising the security of my wallet. I'd also consider a wallet/seed rotation cycle every x interval, just in case my copy with gaps is ever unknowingly compromised.</p>
<p>Will this strategy offer a high enough level of protection, practically speaking, or are people already cursing me with the thought of this trade off in security? Pros and cons welcomed in equal measures.</p>

<wallet><wallet-security><seed>
The practical security implications of an exposed 24 word seed phrase with "blanks"
pjlangley
# The practical security implications of an exposed 24 word seed phrase with "blanks"

(Asked by: username_0 on 2023-07-10)

I want (a substantial amount of) the strength in numbers of a self-custody 24 word Bitcoin wallet, but I don't want to memorise all 24 words; laziness prevails.

My idea: create a note (probably digital) containing *n* of the 24 words, in order (not scrambled), and to only memorise the *n* number of blanks. The *n* blanks will not be in digital form and will be fully committed to memory.

E.g. 8 of the 24 words are left blank in the note:

```
grab merit ___ can
___ ___ floor car
exit mother ___ festival
october ___ camp ___
trial nephew ___ fabric
galaxy napkin ___ apple

```

*Note: This seed was referenced from [here](https://www.whatisbitcoin.com/security/guess-my-seed-phrase).*

Out of curiosity, does the location of the blanks offer a varying number of possibilities? E.g. having the blanks front loaded, rather than spread out?

I'm pretty flexible with this, in the sense of hitting the "sweet" spot with how many word omissions to remember, without considerably compromising the security of my wallet. I'd also consider a wallet/seed rotation cycle every x interval, just in case my copy with gaps is ever unknowingly compromised.

Will this strategy offer a high enough level of protection, practically speaking, or are people already cursing me with the thought of this trade off in security? Pros and cons welcomed in equal measures.

**Tags:** wallet, wallet-security, seed


---

## 1 answers

### Answer by username_1 on 2023-07-11. Score: 0

> Will this strategy offer a high enough level of protection

"High enough" seems subjective. Someone might consider it high enough to protect 0.00003 BTC but not high enough to protect 0.3 BTC

The more complex the scheme, the more points of failure it has. If you lose your note, the words you remember are useless. If you misremember your memorized words, as humans are prone to do, especially at longer intervals, you may not be able to recover the whole phrase.

Consider what you might want to happen if you die in a car crash. Is there anybody you would like to inherit, how would they do that?

I would try to list the threats I am trying to protect against. Then I would try to list some countermeasures whose cost I think is appropriate for the sums involved.

I would try to list the possible ways I might lose control over the money through forseeable failings in memory or storage (fire, flood, mice etc) and what countermeasures might be cost effective.

Sometimes people think that knowing the seed-phrase is enough. Some of those people post questions here when they find it isn't. You might also need a note of what software you used, what version and what derivation path was selected, maybe some sample addresses that were generated etc etc. I think you need to test the recovery process.

Related:

* [Help in recovering BTC from seed phrase](https://bitcoin.stackexchange.com/questions/102567/help-in-recovering-btc-from-seed-phrase?rq=1)

> **Comments:**
> **username_0**: Thanks @username_1; you raise some great points that surround this topic for me to consider. My focus here is the somewhat exposed seed phrase, that I _intend_ to keep safe and secret, and if I only have to memorise (or safe keep) _some_ of the words, I prefer those odds, no matter the recovery strategy. I appreciate it's a two-part solution, that carries its own risk though.  

---

