Ledger Recover is a promise. Here are five keys instead.
In 2023 Ledger offered to back up your seed phrase — for a monthly fee, a copy of your passport, and your trust in three companies you have never heard of. You have better options. All of them are cheaper, and none of them is a promise.
Short answer
You do not need Ledger Recover. A steel plate in one or two locations covers fire and flood; a passphrase covers theft of the plate; multisig removes the single point of failure entirely. Every alternative below keeps your seed in your hands — no custodians, no ID, no subscription, no trust. If you remember one thing: a backup that three companies can reassemble is not your backup. It is theirs.
What Ledger Recover actually is
Ledger Recover is an optional paid service (launched 2023, about $10/month) that encrypts your seed phrase on the device, splits it into three encrypted fragments using Shamir-style secret sharing, and distributes them to three separate companies. To restore, you verify your identity with a government ID and the fragments are reassembled onto a new Ledger device.
On paper it sounds reasonable — an insurance policy against losing your seed phrase. The controversy is not the concept of backups. It is what you give up:
- Your identity is bound to your coins. Recover requires KYC. A government-issued ID linked to the existence and location of your bitcoin is exactly the data leak that burned Ledger customers in 2020.
- The seed leaves the device. Encrypted, split, yes — but the firmware was proven capable of extracting it. That precedent matters more than the feature.
- Three custodians, one subpoena. The fragments sit with companies subject to jurisdictions, breaches, mergers and coercion. Your threat model now includes their lawyers.
- A subscription for something steel does free. You pay monthly, forever, for a backup you could stamp into a $30 steel plate in an afternoon.
Five safer alternatives, ranked
| Alternative | Protects against | Cost | Trust required |
|---|---|---|---|
| 1. Steel backup plate | Fire, flood, time | $20–80 once | None |
| 2. Steel + passphrase | Theft of the plate itself | Free | Your memory |
| 3. 2-of-3 multisig | Loss and theft of any single key | 2 extra devices | None — no single point of failure |
| 4. Dice-generated seed | Compromised device RNG | Free | Mathematics |
| 5. Open-source wallet swap | Vendor backdoors in firmware | Price of the device | Auditable code, not a company |
1. Steel backup plate — the baseline
Paper burns at 451°F and dissolves in a flood. Steel survives house fires (1200°F+) and decades of humidity. Stamp or engrave your 12 or 24 words into a steel plate, store it somewhere discreet, and you have solved 90% of backup risk for the price of a pizza. This is the minimum every holder should have.
2. Steel plate + passphrase — the free upgrade
Add a BIP-39 passphrase (a “25th word”) and the steel plate becomes a decoy: even a thief who finds it gets an empty wallet. The real funds live behind the passphrase, which you memorise and give to an heir through your will. Threat covered: physical theft. Cost: nothing.
3. 2-of-3 multisig — the endgame
Why protect one seed when you can eliminate the concept of a single seed? In a 2-of-3 multisig, any two of three keys move the funds — so losing one key is an inconvenience, not a catastrophe, and stealing one key yields nothing. Keys from three different vendors (e.g. Trezor, Blockstream Jade, Keystone) mean no single company’s failure, backdoor or bankruptcy touches your bitcoin. This is what Ledger Recover pretends to offer, minus the custodians.
4. Dice-generated seed — fix it at the source
Part of Recover’s pitch is “what if your device made a bad seed?” The actual fix is to stop trusting the device’s random number generator in the first place: generate your seed with 99 dice rolls and verify the checksum yourself. A seed born from physics and math needs no insurance — it was never in anyone’s hands but yours.
5. Move to an open-source wallet
If the Recover episode broke your trust in closed firmware, the honest answer is not a better service from the same vendor — it is a vendor whose code you can verify. Our Trezor vs Ledger comparison covers the switch in detail, and the hardware wallet guide profiles six wallets that publish their code.
The one legitimate use case
In fairness: Recover exists for people who would otherwise keep bitcoin on an exchange because seed management terrifies them. If the true alternative for someone is “custodial exchange, forever,” Recover is arguably less bad. But you are reading a self-custody guide. You are not that person. The five alternatives above are cheaper, stronger, and keep the promise this entire guide is built on: keys, not promises.
How to migrate away from Recover in one afternoon
- Cancel and delete. Turn off Recover in Ledger Live and request deletion of your KYC data from the custodians (they are bound to honour GDPR-style requests where applicable).
- Generate a fresh seed with dice on an air-gapped device — never re-use a seed that has been fragmented and shipped to third parties.
- Stamp the new seed into steel. Add a passphrase. Store the plate and the passphrase in separate locations.
- Move the funds on-chain to the new wallet. Verify the receive address on the device screen, not the computer screen.
- Wipe the old seed from every device and every backup. It is compromised-by-exposure even if nobody ever touched it.
Frequently asked questions
Is Ledger Recover safe to use?
It is functional and the fragments are encrypted, but it binds your government ID to your bitcoin, proves closed firmware can export your seed, and places your backup in the hands of three companies. For a self-custody holder, steel, a passphrase or multisig are strictly safer.
What is the best alternative to Ledger Recover?
For most people: a stamped steel backup plate plus a memorised BIP-39 passphrase — near-zero cost, no custodians. For larger amounts: a 2-of-3 multi-vendor multisig, which removes the single point of failure entirely.
Does Ledger Recover mean my Ledger is backdoored?
It proves the firmware is technically capable of exporting the seed — a capability the marketing long implied was impossible. Whether you call that a backdoor is semantics; what matters is that closed source means you cannot verify what any future update does.
Can custodians or governments reassemble my Recover fragments without me?
The fragments are encrypted and require your ID verification to combine, but the custodians are companies subject to legal process in their jurisdictions. Your security now depends partly on their policies, their security and their governments.
Should I re-use my old seed after cancelling Recover?
No. Treat any seed that has been fragmented and distributed as permanently exposed. Generate a new seed (ideally with dice), move the funds on-chain, and wipe every copy of the old one.