Seed Vault

Overview

Meaning and scope

Seed Vault is a highly protected repository or custody process dedicated to storing wallet seed material and recovery information. It focuses on root recovery secrets rather than routine transaction signing or daily wallet balances. Operationally, seed backups are encrypted or physically protected, geographically separated, access-controlled, versioned where necessary, and tested through secure recovery exercises.

How it works

A seed vault protects recovery material from routine application use. A sound design limits exposure while still permitting tested disaster recovery through approved participants.

Operational checks and limits

A seed vault protects recovery or derivation seed material under controlled access, backup and restoration procedures. Its design should avoid exposing the seed to routine payment systems.

Practical example

A merchant stores an encrypted offline recovery seed while online watch-only servers generate and monitor deposit addresses.

Distinctions

A seed vault safeguards root key material; a hot vault may hold readily accessible signing capability for daily transactions.

How to evaluate it

Asset availability and authority to move an asset are different questions; for Seed Vault, map who can initiate, approve, sign, recover, and audit a movement, and which keys or institutions control each step. When evaluating Seed Vault, the recovery plan should consider compromised credentials, unavailable signers, incorrect destination information, and frozen or delayed transfers; test access changes without assuming that a displayed balance guarantees immediate spendability.

Operational edge cases

Document how backups are generated, sealed, distributed and verified without displaying the seed to unauthorized staff. Losing all copies makes assets unrecoverable; letting one compromised workstation reveal a complete seed defeats the vault’s purpose. Related concepts: Cryptographic Key Management; Key Management System (KMS).