Two failure directions, pulling opposite ways
A recovery phrase stored beside the backup it unlocks weakens confidentiality: whoever finds one finds both. A phrase stored only on the protected phone weakens availability: losing the phone loses both.
Good storage sits between those, and the tension is why this is harder than it first appears. The goal is separation without making the secret impossible for you to find.
Write down what it unlocks
A phrase found later without context is nearly useless. Record which backup it corresponds to, the date, and the application that produced it — without recording anything that reveals the phrase itself.
This also matters for anyone who may need to recover on your behalf. A secret nobody can identify is a secret nobody can use.
Choosing a location
Physical storage is generally better than digital for this specific secret, because it is immune to account compromise and remote deletion. A written copy in a home safe, a deposit box, or with a trusted person are all reasonable depending on who you are protecting against.
If permanent loss would be unacceptable, more than one copy is appropriate — each in a separately governed location, which is a deliberate confidentiality trade made with open eyes.
Storing it properly
- Record exactly which backup the phrase unlocks, and when it was created.
- Choose a location independent of both the phone and the backup file.
- Consider household access, fire, water, and account loss as separate risks.
- Do a private read-back: confirm you can read your own handwriting and that the phrase restores.
- Update your recovery instructions when the backup or phrase changes.
Storage choices that fail
- Saving a screenshot of the phrase into the same cloud photo library the vault was protecting you from.
- Adding a hint that effectively reveals the whole phrase.
- Emailing it to yourself, which places it in an account with its own recovery weaknesses.
- Failing to update instructions you left for someone else after rotating the phrase.
A fictional example
Maya starts with a non-sensitive test: “Write down exactly which backup the phrase unlocks.” Next, Maya follows the second check: “Choose a location independent of the phone and backup file.” This fictional scenario demonstrates the decision process; it is not a report of product testing.
Common mistakes
- Saving a screenshot in the same cloud photo library
- Adding hints that reveal the whole phrase
- Failing to update trusted recovery instructions
What this workflow does not change
- Saving a screenshot in the same cloud photo library
- Adding hints that reveal the whole phrase
- Failing to update trusted recovery instructions
Questions people ask
Can support recover a missing phrase?
A well-designed encrypted backup may be intentionally unrecoverable without its secret.
Should I memorize it only?
Memory alone is fragile for long-term disaster recovery.