What dice can and cannot change

Physical randomness can reduce dependence on a device’s random-number source when a correctly implemented workflow actually incorporates it. It does not protect against malicious software that ignores or exposes the input, a compromised computer, a photographed backup, or a mistaken recovery procedure. Avoid promises of “unbreakable” entropy. Choosing a workflow you can verify and reproduce matters more than a dramatic security label. Do not improvise a conversion from dice numbers into seed words or use an online seed-generation page.

Use the instructions for the exact device

COLDCARD’s current advisory distinguishes adding independent dice from its separate advanced Dice Rolls Only workflow. Consult the current status and dice conditions before deciding whether an existing seed is affected. The BitBox Diceware guide describes generating words with a printed table and restoring those words on the device; it is not a generic “manual entropy” toggle in the app. The Trezor Safe 5 setup guide documents the Suite create-wallet flow. This article does not claim a touchscreen menu for entering dice rolls.

Before starting a real wallet

Use the official manufacturer site, verify the device and firmware as instructed, and practise only with an empty wallet. Keep the workspace private and the written backup away from cameras and cloud notes. Confirm recovery before putting meaningful funds at risk. If any instruction differs from what your device shows, stop and consult the manufacturer. A wallet PIN, seed backup, optional BIP39 passphrase and ZeroLatch Private phrase serve different purposes; label them clearly without placing them together in an exposed document.

Prepare the instructions your person would need

Keep wallet seed words and master passwords out of a general handoff message. Start with a non-secret inventory, document locations and a person to contact. ZeroLatch is an online conditional delivery service: check-ins keep a delivery on hold, and a missed deadline plus the safety period can make it eligible for release. Recipient access also depends on verification and service availability. Simple uses service-managed key recovery; Private requires a separate secret. Neither mode guarantees a financial or legal outcome.

Save the free handoff checklist, or try a fictional delivery without signup. The sample uses no real wallet data.