SeedMask Features

A password manager on a phone or laptop is convenient — and exposed to the same malware and cloud sync risks as everything else on that machine. SeedMask keeps credentials offline: generate or store them on the device, then reveal or send only after you confirm on the 3.5″ screen.

Use it for accounts that matter: exchange logins, email, and any service where a leak would put funds or identity at risk. For stricter generation rules, see Advanced options — advanced password creation.

Keep in mindTreat SeedMask passwords like seed material: offline by default, human confirmation before anything leaves the device.

Phone notes sync, get screenshotted, and sit next to the same apps that browse the web. SeedMask notes are meant for small, high-sensitivity text that should live with your cold vault — not in iCloud or Google.

Good fits: wallet labels, safe-deposit reminders, passphrase hints that are useless alone, or setup steps for a recovery you might need years later. Bad fits: long documents, anything you need to edit every day, or secrets you also store in cleartext elsewhere.

Keep in mindIf a note would be catastrophic if leaked, it belongs on SeedMask — and nowhere that auto-syncs.

Authenticator apps on phones are better than SMS — but the phone is still online, lost, reset, and backed up in ways you may not control. SeedMask can hold TOTP secrets and display codes only when you unlock and open them on the device.

That pairs well with exchange and email accounts that already demand 2FA. The code lives behind your PIN and physical device, not in a notification shade on a compromised handset.

Keep in mind2FA on SeedMask raises the bar: stealing a password alone is no longer enough if the second factor never leaves the vault.

A passphrase (sometimes called a “25th word”) combines with your seed to derive a different wallet. The same seed with no passphrase is not the same vault as the same seed with a passphrase.

People use this for stronger isolation or plausible deniability. Both uses fail if you forget the passphrase, mistype it into the wrong place, or store it less carefully than the seed itself.

Keep in mindPassphrase is power with sharp edges. If you are unsure, use seed-only until your backup discipline is rock solid.

BIP85 lets you generate child seeds from a master seed in a deterministic way. That can help you spin up separate wallets for different purposes without inventing unrelated backups from scratch.

The master remains the root of recovery for those children. That is convenient — and it means the master backup is even more important. Compromising the master compromises the tree.

Keep in mindBIP85 is organization for advanced users. Master-seed discipline still rules everything downstream.

Stateless use means the device does not need to retain your wallet between sessions. When you wipe the seed from SeedMask, nothing sensitive should remain on it — the unit acts like a fresh device until you restore again.

That is useful if you want the hardware itself to hold no lasting custody state: travel, shared handling, or a deliberate “empty vault” habit. Many people run this as their primary model — not a toy mode — as long as their seed (and passphrase, if any) backup is solid and private.

Funds are not stored “in” the wiped device. They follow the seed. Wipe carefully, restore carefully, and confirm every send on-screen the same as always.

Keep in mindOnce the seed is wiped, SeedMask should act as new. Your backup — not the device memory — is what keeps you whole.

Air-gapped signing means the keys stay offline while you still complete real transactions. Coordinator prepares; SeedMask authorizes; the result goes back out for broadcast.

QR is fast for many flows: show or scan what needs to cross the gap. MicroSD helps when payloads are larger or you prefer a physical handoff. Either way, the point is the same — the signing brain does not need Wi‑Fi sitting next to your browser.

Keep in mindQR and MicroSD are transport. Confirmation on the 3.5″ screen is still the security boundary.

Writing twenty-four words carefully is the classic backup. A backup code is meant to make restoration less painful when you must bring a wiped SeedMask — or a replacement unit — back to a working signer.

It does not remove the need for offline, private storage. Anyone who can read the backup code can recreate the wallet. Treat it with the same seriousness as the seed itself: offline media, private place, verified copy.

Keep in mindBackup code is convenience for recovery — not permission to get sloppy with where the code lives.

Advanced options are for people who already understand seed, PIN, and backup basics. They add power — and more ways to confuse yourself if you skip documentation and practice.

Keep in mindAdvanced features multiply outcomes. Clarity on paper beats cleverness in your head.