What did you find?

The object in your hands determines the rules that apply. The first step is never to touch, type or photograph anything: it is to recognise what you have. This page covers every common crypto-related thing a family can find after a death, what it likely is, and your safe next move.

Not holding an object, but know crypto existed somewhere? The mirror question is where was the crypto held?, found something versus held somewhere.

The golden rules: they apply to everything below

• Preserve it exactly as found. Do not reset, wipe, charge, update or “check” anything.
• Record only that you found it (what, where, when) never the contents.
• Never photograph, scan or send any words, keys, passwords or wallet files, and never type them into a website, app or form. The only legitimate place it is entered is the official device or wallet software from the official channel that you are certain is genuine, after authority is confirmed.
• Possession is not authority. Finding something does not make you the owner; legal authority comes from the estate process. See legal authority vs technical access.

Step by step

This page works in five steps. The table below is the complete reference.

1. Find your item in the table. The left column is what you found; the middle says what it probably is; the right column gives the correct first action.
2. Follow the “Your next step” column. For most items that means: preserve it untouched, do not open, type, photograph, scan, charge, reset or update it.
3. Read the linked guide for the full rules. Each row links to the guide that explains how access works and what happens when the estate is ready.
4. Item not in the table? Treat it as possibly sensitive: preserve it, record only that it exists, and ask the estate’s authorised person, do not test it or enter it anywhere.
5. Do not conclude anything from a first glance. A visible balance, a file name or a QR code proves nothing about ownership, access or title.

Quick reference

Not sure where to begin? Read the golden rules above, then find your item below.

Does one of these look familiar? These are the items most often found:

Recovery card	Metal backup plate	Hardware wallet

Paper wallet	USB flash drive	Phone with wallet app

You found…	It is likely…	Your next step
Words on paper or metal (any count)	Seed phrase	Preserve flat and private; never photograph or type it
A device with a screen (Ledger, Trezor and other brands)	Hardware wallet	Keep with its box and cable; never guess the PIN
A file named wallet.dat	wallet.dat file, also used by Litecoin, Dogecoin and other Bitcoin-family clients	Leave it on its medium; never open it in fresh software
A file starting with UTC-- (keystore/JSON)	Ethereum keystore	Preserve it with its password; import only in the right program, after authority
A file named wallet.aes.json	Blockchain.com legacy backup	Preserve it with its password; import only in the right program, after authority
A file named .wallet or .key (MultiBit)	Legacy MultiBit Bitcoin wallet	Preserve it; the file and its password together are the wallet
An Electrum wallet file	Software wallet	Preserve it; the password matters as much as the file
A string starting with 5, K, L, or 64 hex characters	Private key	Treat it as the secret itself; never type or photograph it
A string starting with 6P	Encrypted private key (BIP38)	The password matters; never type or photograph it
A printed sheet with an address and a QR code	Paper wallet	Keep the whole sheet flat, dry and unphotographed
A metal plate or stamped cards	Seed phrase (possibly multi-part, Shamir)	All parts together are the secret; preserve every part
Words in a notebook, sticky note or address book	Seed phrase (handwritten)	Preserve the original; never photograph it into cloud services
A text or notes file with a word list	Seed phrase saved digitally	Preserve the medium; never open, copy or send it
A key starting with xpub, ypub or zpub	Extended public key	Read-only view of the wallet; sensitive data, not spendable
A QR code	Address, payment request, or a private key	Never scan it into any app or website
An address (1, 3, bc1, 0x…)	Public address	Look it up on an explorer; a visible balance proves nothing
A phone with wallet apps	Wallet apps and/or 2FA	Preserve it; do not charge or unlock carelessly
A computer with wallet software	Possible software wallet	Preserve it; no updates, repairs or “rescans”
A USB stick or external drive	Possible backups	Preserve it; do not plug it into unknown machines
An encrypted drive or container (VeraCrypt, TrueCrypt, BitLocker, encrypted archive)	Encrypted storage	Preserve it; the password and software version matter as much as the medium
A hardware security key (YubiKey and similar)	2FA factor	Preserve it; it is part of the access path
A SIM card	Possible 2FA / account-recovery factor	Preserve it with the phone; keep the number active
Exchange emails, statements or an app	Exchange account evidence	Official procedure applies; never log in without authority
Bank or card statements showing transfers to an exchange	Evidence of an account	Keep with the estate file; part of the search trail
Tax records mentioning crypto	Evidence of assets	Keep with the estate file; the official reporting route applies
A crypto debit card	Account evidence	Treat like exchange evidence; contact the issuer officially
A password manager or authenticator app	Credentials and authentication codes	Access is governed by the same authority rules as the accounts
Handwritten notes	Passwords, usernames, pointers	Keep originals together; never photograph them into cloud services
A will or lawyer’s letter mentioning crypto	Guidance document	Read it; secrets should never be inside it
A safe-deposit-box key or bank/notary envelope	Physical storage of secrets	Lawful access only, through the estate process
A transaction hash or block-explorer link	Public record	Viewable by anyone; proves nothing about access
A screenshot of a balance	Indication only	Not proof of ownership, access or title
NFT artwork or files	Possible NFTs	Preserve; valuation is a separate, honest step
Mining equipment or configuration files	Evidence of addresses	Preserve; technical asset with its own records

Words and recovery material

A list of 12, 15, 18, 21 or 24 words. The standard seed-phrase counts (BIP-39), used by most wallets. An 18-word phrase is a standard BIP-39 length, not an error. Extremely sensitive. Preserve it flat, dry and private. Never photograph, scan or send it, and never type it into a website, app or form. The one legitimate place is the official device or wallet software you have verified yourself, after authority is confirmed. It provides technical access; not legal authority. See what is a seed phrase.

The number of words varies, do not rely on counting. Some wallets use other lengths: 13, 20, 25 and 33 are real formats too, and a partially copied or miscopied list can have any number at all. The count alone never identifies what you have: preserve every word exactly as found and identify the format instead of judging it by length.

A partially written list (some words missing, crossed out, or cut). Still a seed phrase, and still the most valuable object in the estate. A few missing words can sometimes be reconstructed later; a fully missing phrase cannot. Preserve every fragment exactly as found. See wallet recovery: what is realistically possible.

A separate extra word, hint or note (the “25th word”). Likely a passphrase on top of the seed phrase. Without it, an intact seed phrase can be useless; with it, access exists. Preserve it separately from the words, and never photograph either. See wallet passwords and passphrases.

Multiple cards or plates, each with part of a phrase. Likely a Shamir (SLIP-39) split: several parts must be combined. Every part is secret material. Preserve all parts together and never record which parts exist for strangers. See what is a seed phrase.

A “recovery card” or kit from a wallet service. Newer wallets ship recovery or inheritance features with cards and service processes. Follow the service’s official process, and never send the card’s content to anyone, including people who “help” with it. See digital legacy tools for crypto.

Devices

A hardware wallet (Ledger, Trezor and other brands). Keep it with its packaging and cable. Do not guess the PIN, many devices wipe after a small number of wrong attempts (commonly 3–16, depending on the device, for example 3 on Ledger devices and up to 16 on some Trezor models). The device is the vault, not the contents; the recovery words matter more than the device itself. See how to preserve a hardware wallet.

A phone with wallet apps. Apps like MetaMask, Trust Wallet, Exodus or exchange apps may hold accounts, keys or 2FA codes. Do not charge it carelessly, do not let it update or sync, and do not unlock it repeatedly. Phones are covered in old computer or phone with a wallet.

A computer with wallet software. Bitcoin Core, Electrum, browser extensions and more may live on it. Do not update, “repair”, rescan or open anything. See old computer or phone with a wallet.

A USB stick or external drive. The most common place for wallet backups. Preserve it and its label; do not plug it into machines that are not part of the estate process.

A hardware security key (YubiKey and similar). A second factor that may protect wallet software, password managers or exchange logins. It is part of the access path, preserve it and record that it exists. See 2FA and wallet access after a death.

A SIM card. May be the second factor for exchange, email or bank accounts (SMS codes). Preserve it with the phone, and do not deactivate or port the number during the estate process: losing it can lock accounts. A SIM only matters for accounts that verify by SMS; typically exchanges, banks or wallet services with account recovery. It never opens a self-custody wallet; that path is the seed phrase, the keys and the passphrase.

Files and backups

A file like wallet.dat. Bitcoin Core’s wallet file, sensitive, often unencrypted by default, and easy to destroy by accident. Opening it in fresh software can create an empty file that looks like the wallet while the real one sits elsewhere. See wallet.dat files.

A keystore/JSON file (UTC--…). An encrypted private key for Ethereum wallets, protected by a password. The wrong network or wrong software can show an empty balance even when assets are intact. See Ethereum keystore (UTC—) files.

A file named wallet.aes.json. A legacy encrypted backup from Blockchain.info / Blockchain.com. Preserve it with its password and import it only in the right program, never into a website or app that offers to “check” it; see Blockchain.com wallets.

A MultiBit wallet file (.wallet or .key). A legacy Bitcoin desktop wallet from the 2011–2017 period. The file and its password together are the wallet, and older versions show nothing in modern software. Preserve both separately; the estate-specific rules are in MultiBit wallets after a death.

An Electrum wallet file. A software wallet whose password and file both matter. Preserve the file and any written password separately.

Backup archives and encrypted containers (zip files, VeraCrypt/BitLocker-style volumes, old disks). May contain any of the above. Preserve the medium and its labels; never “extract to check” on a connected machine.

For the full identification and preservation rules for encrypted storage (VeraCrypt, TrueCrypt, BitLocker, LUKS, encrypted archives and backups) see encrypted drives and containers.

For the full index of every format, see the wallet format library.

Cloud backups. Folders, sync apps or encrypted archives in cloud storage may hold wallet files. Access them lawfully, through the estate’s representatives, see the note apps and cloud storage entry below.

Secret strings and public data

A long string starting with 5, K, L, or 64 hex characters. Likely a private key (WIF format). The secret itself, as sensitive as a seed phrase. Do not type, photograph or send it.

A string starting with 6P. An encrypted private key (BIP38, from the paper-wallet era). The password matters as much as the key; never type or photograph either, the only legitimate place either is entered is the official device or wallet software from the official channel that you are certain is genuine, after authority is confirmed.

A long key starting with xpub, ypub or zpub. An extended public key. It reveals the wallet’s full address history, a read-only view. It cannot be used to spend, but treat it as sensitive personal data, not a public address.

A QR code. Could be an address, a payment request, account details, or even a private key. Do not scan it into any app or website.

A wallet address (starting with 1, 3, bc1, 0x…). A public address can be looked up on a block explorer. A visible balance is an indication, it proves nothing about ownership, access or legal title. See why a wallet balance proves nothing.

A transaction hash or block-explorer link. A public record of a transaction. Anyone can view it; it proves nothing about who controls the wallet today.

A screenshot of a balance. An indication, not proof. Screenshots are easily fabricated and say nothing about access.

Paper and physical storage

A printed or handwritten sheet with an address and a QR code. A paper wallet, common in the 2013–2018 period. The private part (key, seed phrase or QR) is the wallet. Keep the whole sheet flat, dry and unphotographed.

Handwritten notes (notebooks, sticky notes, loose pages). Often the only record of access that exists: passwords, usernames, recovery words, or pointers to a safe, a bank box or a device. Do not photograph them into cloud services or type them anywhere. Keep the originals together and make one paper copy for the executor’s records, stored separately.

A will or a lawyer’s letter mentioning crypto. Guidance documents, they may say that crypto exists and where guidance lives. Read them; if they contain secrets, that is an error in the plan, not a reason to repeat it. See crypto in a will.

A safe-deposit-box key or a bank/notary envelope. Physical storage where devices, words or documents may be held. Access follows the estate’s lawful process, see who can help with inherited crypto.

Account evidence

Exchange evidence (emails, statements, 2FA device, app). An account may exist with a company. The exchange’s official procedure for account holders who have passed away applies, never log in without authority. See exchange accounts after a death.

Bank or card statements and tax records. Transfers to an exchange, or tax filings that mention crypto, are evidence that an account or asset existed: not proof of a balance or of access. Keep them with the estate file; they are part of the search trail. See how to find someone’s crypto after they passed away. These records lead somewhere only for accounts held with a company: the exchange route. For self-custody, documents and addresses alone give no access: the seed phrase, keys, passphrase and devices are the only path.

A crypto debit card. Evidence of an account with the card issuer or its partner. Treat it like exchange evidence: official procedure, official contact, never “help” from unexpected messages.

A password manager or authenticator app. May hold account credentials and 2FA codes. Access to it is governed by the same authority rules as the accounts themselves. See 2FA and wallet access after a death.

A note app or cloud storage. May contain inventories, recovery information or documents. Preserve access to it lawfully, through the estate’s representatives.

Special cases

NFT artwork or files. Artwork, collectibles or domain files may represent NFTs. Preserve the files and any associated wallet; valuation is a separate, honest step. See NFTs in an estate.

Mining equipment or configuration files. Hardware, worker settings or pool accounts point to addresses and earnings. Preserve the configuration and treat the accounts like exchange evidence.

An encrypted drive or container. VeraCrypt, TrueCrypt, BitLocker, LUKS and encrypted archives all protect whatever is inside, often the wallet files and backups. Preserve the medium and any written password separately, and never try to open or “unlock” it. See encrypted drives and containers.

An old phone or computer with a wallet app from the 2010s (Breadwallet/BRD, Jaxx, Coinomi, Mycelium, Armory and similar). The app may be discontinued, but the recovery phrase or files it created are the access path, see the old wallet apps table in the wallet format library.

What happens next

You have identified what was found. The next step is understanding how access actually works: what the family can do itself, in the right order, and where legal authority comes first, see accessing a deceased loved one’s crypto.

The rule that applies to everything

Whatever you found: preserve it, record only that it exists, never share its contents, and let the estate process decide what happens next. The order is always the same, see first steps after a death, and if nothing has been found yet, how to find someone’s crypto after they passed away is the search method.