Testing a Wallet's Backup Flow

The most consequential moments in a wallet’s life happen in the first five minutes. We test that sequence specifically.

What we check

Is the recovery phrase shown before the wallet can receive funds?

Two of the wallets we tested allowed receiving before the backup step was completed. That ordering is backwards and it is how people end up with funded wallets they cannot recover.

Is the phrase confirmed? A wallet that shows the words and moves on has not verified that you wrote them down. Better implementations ask you to re-enter a selection.

Are screenshots discouraged or blocked? Several wallets block screenshots on the phrase screen. This is a small thing that prevents the single most common storage mistake.

Is the warning specific? “Keep this safe” is weaker than an explicit statement that anyone with these words can take everything, from anywhere, and that nobody can recover them for you.

Is the passphrase option explained? If offered, whether the wallet makes clear that a passphrase creates a different wallet rather than protecting the same one.

Is a restore test suggested? Almost none do, and it is the step that catches transcription errors while they are still fixable.

What we found

The best implementations block screenshots, require confirmation of the phrase, prevent funding until backup is complete, and state the consequence plainly.

The worst show the words with a generic warning and allow everything else immediately.

None suggested a restore test, which remains the largest gap in wallet onboarding across the category.

The sequence we recommend regardless of wallet

1. Generate the phrase
2. Write it by hand, checking each word against the screen
3. Read the whole thing back against the screen once more
4. Complete any confirmation step
5. Wipe and restore from your paper
6. Confirm the first address matches
7. Record that address alongside the phrase
8. Send a small test amount
9. Then fund it properly

Steps five and six are the ones no wallet prompts for and the ones that prevent unrecoverable loss.

Why this matters more than feature comparisons

Losing access is the most common way people lose crypto, ahead of every attack.

A wallet with excellent security features and a poor backup flow produces more losses than one with the reverse, because the backup is the single point of failure in self-custody.

For the portion at a platform we ran a full withdrawal through, recovery is an identity process with a support desk, which is a completely different failure model and the reason we keep a tier there.