How to Check If Someone Copied Your Seed Phrase
How to Check If Someone Copied Your Seed Phrase
You cannot directly check if someone copied your seed phrase, because copying a paper or metal backup leaves no log, no alert, and no change to the words themselves. What you can check is the physical evidence around the backup, the seal and position you left it in, and whether your wallet shows any unexpected activity. If those checks give you real reason for doubt, treat the phrase as compromised and move your bitcoin to a new wallet.
Why a copy leaves no trace
A seed phrase is not an account with a login history. It is a set of words that can recreate your wallet anywhere, on any compatible device, without asking your original wallet for permission. A 12-word BIP39 phrase has 128 bits of entropy, which makes guessing it practically impossible, but copying it takes only a photo or a few minutes with a pen.
If someone reads your backup, photographs it, and puts the original back exactly as they found it, nothing in the wallet records the event. No device beeps. No app shows a new login. The copy only becomes visible if the person later uses it, and by then they can move the bitcoin in a single transaction.
Detection therefore focuses on the physical backup, not the phrase itself. The wider routine is covered in the Never Lose Bitcoin guides.
How to check if someone copied your seed phrase: what you can actually check
Start with the backup in its storage place, and check it in private. Do not open it in front of the person you are worried about, and do not photograph it to compare it later. Work through the signs you set up in advance.
First, look at the container before you touch the backup itself. Was a sealed envelope, tamper evident bag, or wax or sticker seal broken, replaced, or resealed in a slightly different way. Was the backup moved, turned, or put back at a different angle or in a different order than you left it. Small details matter here, which is why many people place a backup in a precise position they will remember.
Second, check the hiding place for disturbance. Dust patterns, moved objects in front of the backup, a drawer or box that was clearly opened, or a lock that no longer sits as you left it can all be clues. None of them proves copying on its own, but a disturbed hiding place plus access by someone else is a serious signal. The hiding principles in best hiding spots for a seed phrase that burglars miss work best when the spot also shows you when it has been found.
Third, check your wallet without entering the phrase anywhere. Open your usual wallet as normal and look at your balance and history. An unexpected outgoing transaction is not just a sign of copying, it is active theft. A correct balance is reassuring, but it does not clear the backup, because a copied phrase can sit unused for months.
Signs that raise real concern
Some signs are weak alone and strong in combination. A broken or missing seal is strong, because a seal has only one job. A backup in a different position than you left it is strong if you store it consistently. Questions about where you keep your backup are weaker, but they matter if that person also had access to where it lives.
Access matters most of all. Ask who could physically reach the backup since you last verified it: household members, guests, cleaners, tradespeople, or anyone who was alone in the space. If you store a backup in a shared home, the risks described in how to store a seed phrase in an apartment with roommates apply directly. Opportunity plus a disturbed backup is enough reason to act, even without proof.
What does not prove anything either way
A tidy backup in an unbroken seal does not prove no one copied it before you sealed it, or during setup. A normal balance does not prove the phrase is safe, because a copy can be used months later. Arguing about it does not secure the bitcoin.
Do not try clever tests that expose the phrase further. Do not enter it into a website or app that claims it can tell you whether your phrase has been leaked. No legitimate service can check that, and entering the words is itself a compromise. Real verification is done offline, on a trusted device, as shown in how to test your seed phrase backup without risking funds.
What to do if you suspect a copy
Do not wait for proof. Proof usually arrives as an empty wallet. If your seal is broken, your backup was clearly disturbed, or someone with access had both motive and opportunity, move to a new wallet.
Create a brand new wallet, ideally on a hardware wallet you trust, in a private place and not on a computer or phone that may be compromised. Write down the new seed phrase on a fresh backup, verify it carefully, and store it in a new location with a new seal. Then send your bitcoin from the old wallet to the new wallet address. Use a small test amount first if the balance is large, confirm it arrives, then move the rest.
Once the funds are in the new wallet and confirmed, the old phrase no longer controls your bitcoin. Deal with the old backup calmly, following how to safely destroy an old seed phrase backup. Do not reuse the old phrase, and do not tell the person you suspect you have moved the funds until the move is complete.
How to make future copying detectable
You cannot make copying impossible to hide, but you can make access hard to hide. Store the backup in a tamper evident bag or a sealed, signed envelope, and keep a private note of the seal number or the exact way you signed across the flap. Place the backup in a precise position inside a place that is rarely disturbed, so movement shows. Check it on a regular schedule, as in how often should you check your seed phrase backup, and keep those checks private and brief.
For larger amounts, reduce what a single copy can steal. A strong passphrase creates a different wallet from the same seed phrase, so a copied phrase alone does not reach that wallet. Multisig goes further, because no single phrase can move the funds alone. Both add complexity, so only use them if you can document and test the setup properly.
Above all, limit who knows a backup exists in your home at all. A backup that is sealed, hidden, unlabelled, and never discussed is far harder to copy quietly.
Schnelle Antworten
Can I check if someone copied my seed phrase? Not directly. There is no log or alert when a paper or metal backup is read or photographed. You can only check the seal, position, and hiding place for disturbance, and check your wallet for unexpected transactions.
What is the strongest sign my backup was copied? A broken or replaced tamper seal, or a backup that was clearly moved from the exact position you left it, combined with someone else having access to the place where it was stored.
My balance is unchanged. Am I safe? Not necessarily. A copied phrase can be held unused for a long time. An unchanged balance rules out theft so far, not copying.
Should I confront the person I suspect? Secure the bitcoin first. Move it to a new wallet with a fresh seed phrase stored in a new place, and only then decide whether a conversation is useful or safe.
Can a website or app check my phrase for me? No. Never enter your seed phrase into a website or an app someone sends you. That act itself gives away the phrase, and no service can detect a private copy of it.
