SLIP39 is the default wallet backup standard we have set for the Trezor Safe 5 and Trezor Safe 3.
SLIP39 may seem complex initially, but it becomes straightforward once you start using it. Here are some answers to common questions about Single-share and Multi-share SLIP39 backups.
To help you digest the full potential of SLIP39, we’ve included the basic questions at the beginning, and the more advanced questions in a separate section at the end of this FAQ.
SLIP39 is for anyone who wants to increase the security of their self-custody setup. You don’t have to be an advanced user to understand SLIP39 or to use it to safely store your funds!
SLIP39 is designed to empower you in managing your own security. We recommend learning how SLIP39’s flexibility can support your self-custody needs.
SLIP39 is the most advanced and secure wallet backup standard.
In practice, SLIP39 is a simple way to back up your wallet without the need to move your funds, and a way to create future backups after your wallet was already created, which is not possible with other wallet formats.
SLIP39 improves your security by letting you split your wallet backup into multiple parts, called recovery shares. Unlike a standard wallet backup, SLIP39 allows you to control how many recovery shares you want and how many are needed to recover your wallet, called the threshold.
This can be helpful because you have the option to spread recovery shares across different locations, which may reduce the risk of losing access if one recovery share is lost or compromised.
At Trezor, we believe in empowering you through safe self-custody, where you securely have full control over your crypto. However, self-custody also means you’re responsible for your wallet backup, and losing it would prevent you from accessing your funds.
SLIP39 offers a safer, more flexible way to manage this risk compared to other backup methods.
SLIP39 backups are safer for several reasons:
Yes, SLIP39 can still help you recover your wallet even if you lose access to your Trezor device. Since SLIP39 stores your wallet backup as multiple recovery shares, you can restore your wallet on a new Trezor device or another SLIP39-compatible wallet if you have enough recovery shares to meet your threshold.
To restore your wallet on a new device:
If you need assistance with the recovery process, refer to Trezor’s recovery guide or contact Trezor Support for additional help.
A Single-share Backup is a SLIP39 wallet with only one recovery share, meaning it has a 1-of-1 setup: a single recovery share provides full access to the funds.
A Multi-share Backup, on the other hand, allows you to create up to 16 recovery shares in an X-of-Y setup, where you need a specified number (X) out of the total (Y) shares to access the funds. This flexibility reduces the risk of losing access if one or more recovery shares are lost.
Choosing between a Single-share, Multi-share, or standard wallet backup depends on your personal security needs.
A Multi-share SLIP39 wallet can be a good option if you want to avoid a single point of failure, as it lets you create multiple recovery shares that can be stored in separate locations.
If you choose a Single-share SLIP39 wallet, it carries similar risks to a standard wallet since it relies on a single recovery share. This risk also applies if you upgrade from a Single-share to a Multi-share Backup but decide to keep the Single-share backup as a master key. Keeping this additional backup can add flexibility, but it may also reduce the security benefits of a Multi-share setup.
Ultimately, the best setup is the one that meets your needs. With SLIP39, you can create new backups and adjust how you store your private keys over time without having to move funds to a new wallet, which is required with other wallet types.
Yes! One of the great advantages of SLIP39 is flexibility allowing you to update or switch backups as needed. Whether you want to switch from a Single-share to a Multi-share setup, adjust the configuration of your existing Multi-share Backup, or even revert to a single-share, you can create a new backup at any time. For example:
In each case, the old backup remains valid and can still recover your wallet unless you decide to securely destroy it. This allows you to always have the option to adjust your security and backup strategy without losing access to your funds.
SLIP39 is supported by the Trezor Safe 5, Trezor Safe 3 and Trezor Model T.
When you upgrade from a Single-share backup to a Multi-share Backup, the new configuration creates additional recovery shares.
For increased security and to avoid a single point of failure, consider securely destroying any copies of the Single-share backup once you complete the Multi-share setup (e.g., by physically destroying paper backups).
Keeping the original Single-share backup as a fallback is an option, but note that it may reduce some of the security benefits of a Multi-share setup, as anyone with access to the original backup could still access your wallet.
No, your original Single-share backup cannot be combined with a new Multi-share Backup, and you cannot add new shares to an existing Multi-share Backup. Each backup is created as a unique set of shares, which are not interchangeable.
Once a backup is set up, its configuration cannot be modified. However, you can always create new backups with different setups if you wish to update your configuration. If you create a new backup, remember to securely dispose of any old backups that you no longer need to maintain your security.
You can make as many backups as you want, and each backup can consist of a maximum of 16 shares. You then choose a number of shares from your backup needed to access the funds, called a threshold.
If you lose a recovery share, there’s no need to worry right away. As long as you still have enough remaining shares to meet the threshold you set when creating your SLIP39 backup, you can still recover your wallet. For example, if your backup is set to require 3 out of 5 shares, you’ll be able to access your wallet as long as you still have any 3 of those 5 shares.
However, to maintain your security, consider creating a new backup configuration if possible. With SLIP39, you can create a fresh backup with updated shares and securely dispose of the old backup if needed, helping you keep your setup resilient and up-to-date.
As long as you have enough recovery shares to meet your threshold, you’ll be able to recover your Multi-share Backup and access your funds. Any combination of shares that meets or exceeds the threshold will allow recovery of the wallet.
For example, if you create a 2-of-3 Multi-share Backup, you can lose one share and still access your funds. However, losing two shares would prevent recovery with that backup. If you still have your original Single-share backup, you may use it as a fallback.
When setting up your Multi-share Backup, consider the threshold and number of shares carefully to match your needs and risk tolerance.
If you lose more recovery shares than your threshold allows, it won’t be possible to recover your SLIP39 wallet, and access to your funds will be permanently lost. To reduce this risk, we recommend setting a threshold and number of shares that balance security with flexibility.
SLIP39 offers the advantage of customizing your backup to suit your needs, but it’s important to keep your setup manageable. Avoid making it too complex, and ensure you have enough room to recover your wallet.
Everyone’s security setup should be catered to their needs. A general rule of thumb is to distribute recovery shares geographically, making it difficult to access the funds without access to several locations.
You can easily test your Single-share and Multi-share Backups by using the Check backup feature. When using the Check backup feature, you will test the minimum number of shares required to meet the threshold and not every single recovery share. To test more shares, you will have to do a separate Check backup process with your other shares.
Check backup on Trezor Model T
Our long-term philosophy is based on open-source principles and industry-wide accessibility. When you use SLIP39, our intention is that you have the ability to use your SLIP39 wallet across multiple wallets and platforms and not just Trezor devices.
We strongly believe that this enhanced standard will be widely adopted by other wallet developers, and are actively encouraging its integration into other wallets through a bounty program. At this time, it is possible to import your SLIP39 wallet backup into Electrum wallet, Rabby, Sparrow and Keystone among others.
Shamir’s Secret Sharing (SSS) is an algorithm that allows one wallet backup to be split into multiple wallet backups, called recovery shares. You need a certain number (referred to as a threshold) of these recovery shares to reconstruct the original wallet backup.
This makes it a secure way to back up your wallet, as no single recovery share can grant access to your key, ensuring your assets remain protected even if something happens to a share.
In June 2024, we introduced an updated version to our SLIP39 standard which allows you to use SSS to create backups of your wallets after they have been created.
Yes, you can use a passphrase with a SLIP39 wallet. However, you should be aware that this is an advanced feature which adds even more complexity to your setup.
If you send funds to a passphrase wallet, you must have the correct passphrase to access them. If you forget or lose the passphrase, you will not be able to access your funds!
We do not have access to any passphrases you set. Even with your complete Single-share or Multi-share Backup, you will not be able to access your funds without the passphrase if you send your funds to a passphrase wallet.
This only happens in the case of a Single-share backup. A Single-share backup will be able to fully control the funds and the private key. It is not possible to access the funds with one share of a Multi-share Backup.
The word “academic” appearing twice in the third and fourth space on your backup is used to indicate that this is a Single-share backup. It’s a similar feature to the www that appears at the beginning of a web address. If you create a Multi-share Backup in the future you may notice that one or both of these words change. The academic/academic words are not used to secure your wallet, rather they just are there to tell the Trezor that this backup consists of a single share.
Let’s start with the similarities between BIP39 and SLIP39 - both standards represent your private keys by using a word list. This word list serves as your wallet backup, and your funds can be controlled by inputting the word list into a compatible device. It is not possible to change your list of words in either standard.
The most important difference between these two standards is that a SLIP39 wallet can be split into multiple different word lists which can then be accessed by a combination of these lists, providing a significant advantage to your security. These lists are referred to as “recovery shares”.
As a SLIP39 user, you are able to choose how many recovery shares you want to create, and how many of those shares are required to access your funds. The most interesting part is that these backups can be created after the wallet was created, meaning you don’t need to move your funds to a new wallet if you want to change your wallet backup setup.
Another difference is the list of words themselves. SLIP39 wallets use a different word list from BIP39 wallets. SLIP39’s word list is optimized for error resistance with distinguishable words, reducing the likelihood of typos and errors when performing a recovery of your wallet backup and providing a much more user friendly experience.
SLIP39 is not multisig, although they share some similar characteristics. In the context of removing a single point of failure, SLIP39 can be seen as an alternative to multisig.
There are key differences between SLIP39 and BIP39, particularly in how each handles backup security and flexibility.
Managing a multisig wallet requires managing multiple keys and devices which becomes complicated for a single user. Multisig is ultimately an appropriate solution for groups of people who control a single wallet, and SLIP39 is more user friendly for the individual.
We recommend individual users who want to distribute their keys geographically and avoid a single point of failure to use a SLIP39 Multi-share Backup instead of a multisig wallet.
While technically possible, converting a BIP39 wallet to a SLIP39 wallet is not recommended due to several limitations and security concerns. Trezor Suite will not allow you to convert your BIP39 wallet to a SLIP39 wallet. If you chose to do this, you will need to use trezorctl, Trezor’s command-line tool.
There are several reasons why this approach is not recommended:
For a safer approach, create a new SLIP39 wallet and transfer your funds there. This keeps your backup fully compatible with SLIP39’s features and reduces security and user error risks.
Converting SLIP39 wallets back to BIP39 isn’t possible due to key differences in how both standards generate and secure wallets.
If you ever need to access your funds on a BIP39-only device, you can simply recover SLIP39 shares in a SLIP39 compatible wallet and move funds to a new BIP39 wallet. This offers compatibility without any risk of vendor lock-in.
SLIP39’s word list was determined by the following criteria:
Yes, SLIP39 offers a more advanced option called the "two-level" setup, which allows for greater flexibility in controlling access to your wallet backup. Unlike the standard single-level backup where all shares are created equally and require a single threshold (e.g., any 3-of-5 shares to recover the wallet), a two-level setup introduces an additional layer of control.
In a two-level SLIP39 setup:
This structure is especially useful when you want different groups to have partial access, such as in scenarios where family members might need to work with trusted friends to restore the wallet. This advanced two-level setup is not available in Trezor Suite and must be configured using trezorctl, Trezor’s command-line tool. You will also need to use trezorctl to test your recovery shares and to send funds from the wallet.