The Billfodl is the seed phrase backup we have sold the most of since 2017, and it is the one we hand to customers who ask "which one should I just get". It is a stainless steel case with sliding letter tiles, it needs no tools, and it is impossible to ruin on the first try. This review covers how it works, what it survives, where it is weaker than punched titanium plates, and whether it is worth the price.

What it is

The Billfodl is a two piece frame of marine grade 316 stainless steel, about the size of a credit card and the thickness of a few stacked together. Inside are 24 rows, each holding four slots. You slide small steel tiles, each stamped with a letter, into the slots to spell the first four letters of each recovery word. Then you close the frame and screw it shut. The tiles are held by the frame, not by adhesive, so there is nothing to degrade.

Four letters is enough because the 2,048 words in the BIP39 list that every hardware wallet uses are unique in their first four letters. Any wallet will accept the full word when you restore.

Filling it in

The kit includes more tiles than you need, sorted into bags by letter. Working from your wallet's recovery sheet, you pick the four tiles for each word and slide them into the row. A full 24 word phrase takes 20 to 40 minutes the first time. If you make a mistake, you slide the tiles out and redo the row. This is the Billfodl's real advantage over punched or stamped plates: nothing is permanent until you close it, and even then it can be reopened and changed if you ever move to a new wallet.

Work with no cameras in the room and no phone on the table, and test the backup by restoring it into a spare or wiped device before you trust it. Our seed backup guide covers storage and testing in more detail.

What it survives

316 stainless steel melts at around 2,500 degrees Fahrenheit. A house fire typically peaks between 1,100 and 1,500 degrees, so the Billfodl comes through with the tiles legible. It is unaffected by water, including salt water, and by the ordinary knocks of a drawer or a safe. Independent torture tests, including the well known ones by Jameson Lopp, have found that tile based designs can lose tiles if the frame is deformed by extreme crushing; in practice that requires force far beyond anything a fire or flood applies.

Where it is weaker

  • Crushing. A punched titanium plate such as the Cryptotag Zeus is a single solid piece with nothing that can shift. If your threat model is a building collapse, that is the more robust choice.
  • Size. It is bigger than the Cryptosteel Capsule, which hides more easily.
  • Price. At around $100 it costs more than the Keystone Tablet, which uses a similar tile approach for about half as much.

The Multishard version

The Billfodl Multishard splits a 24 word phrase across three plates using a scheme where any two plates recover the whole phrase, but any single plate reveals nothing useful. Keep one at home, one at a relative's house and one in a bank box and no single theft or disaster can expose or destroy your backup. It costs more than two standard Billfodls and is the right tool for larger holdings.

Who should buy it

Anyone who owns a hardware wallet and still has the recovery words on paper. The Billfodl is the easiest backup to get right, it survives everything that is likely to happen to a house, and it can be corrected or reused. If you want the absolute toughest option and do not mind an evening with a center punch, buy the Cryptotag. If you are on a budget, buy the Keystone Tablet. Otherwise, buy this.

The Crypto Merchant is an authorized Billfodl reseller. It ships from Florida with free US delivery, and our bundles pair it with a Ledger or Trezor at a lower combined price.