Trail notes
- In self-custody, whoever has your private keys or seed phrase controls your crypto, and there is no reset.
- Key loss covers three problems: losing access, theft and inheritance gaps.
- Digital copies of a seed phrase, such as photos or cloud notes, are a common route to theft.
- In Canada, lost or stolen crypto has no CDIC coverage, and good records help both your heirs and your tax filing.
What key loss risk is
When you hold crypto in a self-custody wallet, the wallet does not store your coins. It stores the private keys that let you move them on the blockchain. Most wallets let you back up those keys as a seed phrase: a list of words that can recreate the wallet on any compatible device.
Key loss risk covers three things: losing access (you cannot find or read your keys), theft (someone else gets them) and inheritance (no one can reach the funds after you die or can no longer act). In self-custody there is no reset button, no support line that can restore access and no institution that can move the coins for you without the key.
We rate key loss 4 (high) on the Mitey risk scale, our editorial teaching scale inspired by avalanche danger ratings: 1 low, 2 moderate, 3 considerable, 4 high, 5 extreme. It is a general teaching guide, not advice. We put it at 4 because the loss is usually total and permanent, though careful habits lower it a great deal.
How it happens
- Lost or destroyed backups. Paper burns, floods and fades. Notes get thrown out during a move. A hardware wallet fails and the seed phrase was never written down.
- Incomplete backups. A missing word, words in the wrong order or a forgotten extra passphrase can make a backup useless.
- Theft of the seed phrase. A photo in your camera roll, a note in a cloud document or a screenshot emailed to yourself can be found by anyone who gets into that account.
- Phishing and fake support. Scammers pose as wallet support or a platform and ask for your seed phrase to “verify” or “recover” your wallet. No legitimate service needs it.
- Malware and fake apps. Look-alike wallet apps can steal keys, and some malware swaps a copied address for the attacker’s when you paste it.
- Household access. Anyone who can reach your backup can copy it, often without you noticing.
- Inheritance gaps. Family members may not know the wallet exists, where the backup is kept, or how to use it safely.
Losing your device is usually not the problem; a new device and the seed phrase restore everything. Losing the device and the seed phrase together is the problem. So is a seed phrase that someone else has quietly copied.
See the full infographic with notes.
A hypothetical example
Notice that the hardware wallet did its job. The weak point was the backup, which is where most of your attention belongs.
Warning signs
- Your seed phrase exists anywhere online: a photo, screenshot, cloud note, message or email.
- You have never tested restoring the wallet from your backup.
- Only one copy of the backup exists, in one place.
- No one you trust knows that the wallet exists or how to begin finding help.
- Someone has asked for your seed phrase, for any reason.
- You installed a wallet app from a link rather than the official source.
- You use the same device for large transactions and for everyday browsing and downloads.
How to reduce it
- Write it down offline. Record the seed phrase on paper or a metal backup, never in a photo, cloud file or message. The seed phrase security guide covers the details.
- Keep more than one copy, in more than one place. Two well-protected copies in separate locations guard against a single fire or flood.
- Test the backup. With a small amount, practise restoring the wallet from the seed phrase on a fresh device before you rely on it.
- Never share it. Treat any request for your seed phrase as a scam, no matter who seems to be asking.
- Separate everyday and long-term funds. Use a small wallet for day-to-day DeFi and a separate, rarely used wallet for larger amounts.
- Plan for inheritance. Leave clear instructions, stored separately from the seed phrase, that explain what you hold and how a trusted person can get help. A lawyer can advise on fitting this into your estate plan.
- Use the tools. Work through the wallet backup checklist and the self-custody readiness tool.
No wallet maker, platform, regulator or tax authority will ever need your seed phrase. Anyone who asks for it, by message, phone, email or website form, is trying to take your funds.
The Canadian angle
Canada has no recovery service for self-custodied crypto. CDIC protects eligible deposits at member institutions, and its “What’s covered” page (checked 2026-10-30) lists cryptocurrencies, including stablecoins, as not covered. A lost seed phrase is not something a bank, regulator or insurer can reverse.
CRA’s page on keeping crypto records (modified 2025-11-10) asks you to keep the addresses of each wallet you use, the units, dates and CAD values of each transaction and your yearly balances, for at least six years from the end of the last tax year they relate to. The same records help an executor understand what you held. Never store the seed phrase alongside them.
Choosing a platform to hold your crypto moves this risk rather than removing it: you swap key loss for platform failure. The custodial vs self-custody comparison sets out the trade-off. If your seed phrase is stolen through a scam, the theft is still worth reporting; see how to report fraud for where to go in Canada.
Your checklist
Questions people ask
Can I recover crypto if I lose my seed phrase?
Usually not. If you lose both your wallet device and your seed phrase, no company, bank or regulator can restore access to a self-custody wallet. If the device still works, move the funds to a new wallet with a fresh, properly backed-up seed phrase right away.
Is it safe to store my seed phrase in the cloud?
No, it is risky. Anyone who gets into that account, through phishing or a data breach, can copy the phrase and take your funds. Offline backups on paper or metal avoid that exposure.
What happens to my crypto when I die?
It stays where it is, but your heirs can reach self-custodied funds only if they can find and use the keys. Clear instructions, good records and legal advice on your estate plan make that possible.
Does CDIC cover lost or stolen crypto?
No. CDIC’s “What’s covered” page lists cryptocurrencies, including stablecoins, as not covered.
Sources and dates
- Ethereum wallets — ethereum.orgreference
No date shown on page · checked 2026-10-31. What wallets are and how they hold keys. - Ethereum security and scam prevention — ethereum.orgreference
No date shown on page · checked 2026-10-31. Wallet security habits and common scams. - What's covered — Canada Deposit Insurance Corporationin force
No date shown on page · checked 2026-10-30. Up to $100,000 per category per member institution; cryptocurrencies, including stablecoins, are not covered. - Keeping books and records of crypto-assets for tax filing — Canada Revenue Agencyin force
Page date 2025-11-10 · checked 2026-10-30. What to record per transaction, wallet addresses, yearly balances; export platform history; keep records at least six years. - Report fraud and cybercrime — Canadian Anti-Fraud Centrereference
No date shown on page · checked 2026-10-31. How Canadians report fraud and cybercrime, including crypto scams.
Education only. Nothing on this page is financial, investment, tax or legal advice, or a recommendation to buy, sell, stake, lend or borrow any crypto-asset. Crypto-assets can lose some or all of their value and are not covered by CDIC. Canadian rules change: check the dated sources above and talk to a qualified professional about your situation. Full disclaimer.