A household with cryptocurrency holdings faces a coordination problem distinct from single-user wallet management. One person may hold the primary recovery phrase, but what happens if that person becomes unavailable, incapacitated, or dies? Another family member might need emergency access to funds for living expenses or medical bills, yet sharing a recovery phrase directly creates immediate custody and security risks. The conventional advice—”never share your recovery phrase”—is sound but incomplete when applied to family structures that must survive loss or injury.

Phantom Wallet, available as a browser extension and mobile application for iOS, Android, and Chrome, is a self-custodial wallet that manages assets across Solana, Ethereum, Base, Polygon, Bitcoin, Sui, and HyperEVM networks. Because Phantom does not store assets locally and cannot recover lost credentials, the responsibility for securing recovery phrases and authorizing transactions rests entirely with the user. This design offers security and control, but it also creates a family problem: how to balance individual key custody with collective resilience.

The custody model and why family structures require different rules

Phantom is a self-custodial solution in which users maintain full control over their recovery phrases and private keys, and Phantom cannot access wallets or recover lost credentials. This design transfers both control and responsibility to the individual. For a family that may include children, elderly members, or individuals unfamiliar with cryptocurrency, that concentration of responsibility creates a single point of failure. If one person controls the recovery phrase and cannot communicate it during an emergency, the family’s funds may become inaccessible regardless of their size or importance.

The instinct to keep one recovery phrase safe in a single location is understandable but creates a different kind of risk. If that location is a home safe, a safety deposit box, or a memorized phrase, access during an emergency may be impossible. If it is a digital service such as cloud storage, email attachment, or password manager, then the recovery phrase has effectively moved from a self-custodial model toward a cloud-dependent model where a data breach, account compromise, or service termination could expose it. The family strategy should therefore treat the recovery phrase as a structural asset that must survive multiple failure modes: device loss, human incapacity, death, and selective access by designated family members.

The practical middle ground involves creating explicit, tested protocols before an emergency occurs. This includes written instructions that are themselves properly secured, a clear chain of custody for recovery information, explicit authorization for who may access funds under what circumstances, and regular review to ensure that changes in family structure or asset holdings are reflected. The legal framework also matters: estate planning, powers of attorney, and documented wishes should align with the technical controls so that whoever has physical access to the recovery phrase also has legal authority to use it.

A common mistake is to assume that multiple family members should each have identical copies of the same recovery phrase. This approach creates maximum accessibility but also maximum exposure. If one copy is compromised, all funds are at risk. If a family member becomes estranged or hostile, or if a device is stolen, the attacker gains full access without needing to compromise the other copies. A better model often involves splitting the recovery phrase using a secret sharing scheme, where multiple pieces are distributed to different family members such that a quorum (for example, two out of three) is needed to reconstruct the complete phrase. This approach is more complex to set up and test, but it aligns custody with family decision-making rather than depending on a single trusted person.

Creating multiple Phantom accounts and their role in family access

Phantom supports account creation via Secret Recovery Phrase or Google/Apple authentication. A household with multiple needs—one person managing long-term holdings, another handling day-to-day spending, a third with limited access for educational purposes—should consider using multiple accounts within a single Phantom instance or across separate instances. This compartmentalization reduces the damage if one account is compromised and allows more granular access control.

A practical household structure might include a primary account holding significant assets, a spending account with smaller regular balances, and a readonly or view-only account that allows family members to see balances without authorization to move funds. Phantom’s portfolio viewing feature can display holdings across multiple networks, making it easier for a family member to understand what assets exist without necessarily being able to transact. Some families also use a designated “emergency account” that is funded with a small amount—perhaps one to three months of household expenses—specifically for access during crises.

The separation of accounts also creates an opportunity to use different authentication methods strategically. An emergency account might use Google or Apple authentication, which can be recovered through standard account recovery procedures if the device is lost. A primary account holding larger amounts might rely solely on a secret recovery phrase that is stored in multiple physical locations. This hybrid approach acknowledges that no single authentication method is equally resilient to all failure modes. If you need to learn more about setting up multiple accounts or configuring recovery options, the official documentation provides step-by-step guidance.

When creating these accounts, the family should document which account holds which assets, on which networks those assets exist, and which family members have access to which recovery information. This documentation should be separate from the recovery phrases themselves and should be stored in a location that is accessible to multiple trusted family members—a physical safe deposit box, a notarized letter held by an attorney, or a scanned copy maintained by an executor. The goal is that at least one family member can locate the documentation during an emergency and understand the structure before attempting to access funds.

Securing and distributing recovery phrases across family structures

The secret recovery phrase is the master key to a Phantom wallet. Anyone with access to this phrase can authorize any transaction and transfer all funds. For a family, this means that the security of the recovery phrase directly determines whether funds are accessible only to authorized family members or whether they could be stolen by an intruder, a compromised device, or a family member acting without permission. The phrase cannot be recovered by Phantom if it is lost, and it cannot be changed without creating an entirely new wallet. The initial choice of where and how to store it is therefore consequential.

One approach is to use a multi-part distribution scheme. The recovery phrase is divided into segments, with each segment stored by a different trusted family member in a secure location known only to that person. For example, a 12-word phrase could be split into three groups of four words, with each group stored separately. Reconstruction requires all three family members to cooperate and share their segments, which provides both security and collective decision-making. The downside is that if any family member loses their segment or becomes unavailable, the recovery is complicated. This method also requires family members to understand that they are holding part of a shared secret and that sharing their segment without consent could compromise the entire wallet.

A second approach uses redundancy with controlled overlap. Multiple complete copies of the recovery phrase are created and stored in geographically diverse, physically secure locations. One copy might be in a home safe, another in a safety deposit box at a bank, and a third with a trusted attorney or executor. The advantage is that losing one copy does not prevent recovery; only one copy needs to be accessible in an emergency. The disadvantage is that each copy is a complete key to all funds, so security depends on the physical security of multiple locations and the trustworthiness of multiple people. This approach is simpler to execute and test but concentrates custody more than a split scheme.

A third approach combines technology and physical security using a hardware wallet or a device specifically dedicated to holding the recovery phrase offline. Some families maintain an air-gapped computer—one that has never connected to the internet—used solely for creating wallets and signing transactions. The recovery phrase is stored on that device and never written to a network-connected machine. This approach requires technical knowledge to set up and significant discipline to maintain, but it isolates the recovery phrase from most compromise vectors. The device itself must be stored securely, and access to it should be documented in family records so that a designated heir or attorney can locate it if needed.

Setting up emergency access and succession plans

An emergency access plan should specify which family members have authorization to use funds under defined circumstances, the process for that authorization, and the location of recovery information needed to execute it. This plan is not merely a technical document; it should align with legal structures such as powers of attorney, healthcare directives, and wills. An attorney familiar with both estate planning and cryptocurrency can help ensure that the technical access plan corresponds to the family’s legal intentions.

A practical emergency access plan includes trigger conditions: What constitutes an emergency? Medical expenses? Loss of income? Death of the primary account holder? The answer should be documented and communicated to all family members so that decisions about accessing emergency funds are made collectively rather than unilaterally. The plan should also specify access timelines. Is the emergency fund meant for immediate use within hours, or is there flexibility for a multi-day approval process? Faster access is more convenient but requires that recovery information be more easily accessible, which increases security risk.

Succession planning for cryptocurrency holdings requires explicit action that standard estate law does not automatically handle. A will can designate an heir to receive assets, but it cannot transfer the recovery phrase or authorize the heir to use it without legal interpretation and technical assistance. A better approach is a “dead man’s switch” or formal documentation that specifies exactly which family member should access which recovery phrase and when. Some families appoint an executor specifically for cryptocurrency assets and provide that executor with sealed envelopes containing recovery information, with instructions that the envelope be opened only after death is confirmed and the will is being executed.

This process should be tested periodically—not by actually moving funds, but by ensuring that the documented recovery procedure works as described. A trusted family member should be able to locate the physical storage location, retrieve the recovery information, verify that it is legible and complete, and confirm that it would successfully recreate the wallet. These tests catch errors such as incomplete phrases, damage to physical storage, or recovery information that was stored in a location that is no longer accessible. They also give family members confidence that the plan is workable rather than a theoretical exercise.

Managing shared device access without compromising individual security

If multiple family members use the same device to access Phantom wallets, security depends on the device’s authentication controls and the trust relationship among family members. iOS and Android both support per-user accounts and application-level permissions, but Phantom itself does not compartmentalize access at the application level. One family member with access to the device can switch between accounts and potentially view transaction history or balances of other family members’ wallets.

For a household where device sharing is unavoidable, the practical approach is to use separate Phantom instances or profiles on the shared device. On iOS, this might involve creating separate user accounts on the device for each family member, with each account having its own installed Phantom application and recovery information. On Android, the “Work Profile” feature or a similar device-level user separation can provide some isolation, though many devices do not support robust multi-user support. The security of this approach depends entirely on the device’s ability to isolate user accounts, which varies by device and operating system version.

A more straightforward option is to use separate devices: a primary device for the household head to manage assets, and secondary devices for other family members with limited or view-only access. Phantom’s portfolio viewing feature allows a family member to see balances without the ability to authorize transactions, which can satisfy the informational need without creating custody risk. If transaction authorization is necessary, it can happen on a single secure device rather than being distributed across shared hardware.

For a family with young members learning about cryptocurrency, a dedicated educational account with small balances on a shared device makes sense. The account should be clearly labeled to distinguish it from household holdings, and transaction amounts should be small enough that loss would be educational rather than harmful. The recovery phrase for this account should be stored securely but accessibly to the learning family member, so that they understand the concept of personal custody while stakes remain low. This approach combines security practice with education.

Documentation, communication, and regular review

Cryptocurrency management in a family context requires documentation that extends well beyond the recovery phrase. A family asset registry should list each wallet, the networks on which assets are held, the primary account holder, who has access to recovery information, and under what circumstances that access is authorized. This registry should be separate from the recovery phrases themselves and should be accessible to multiple trusted family members—either a physical document in a safe location or a document stored with an attorney or executor.

The registry should also include procedural instructions: How do you create a new account in Phantom? How do you import an account if the device is lost? What should you do if you suspect compromise? These instructions need not contain sensitive information such as recovery phrases; they are workflow documentation that helps a family member execute a recovery plan if they have never done it before. Written procedures reduce panic and error during an actual emergency. They also clarify roles: if one person is responsible for recovery and another for authorization, the instructions should reflect that division.

Regular review of the plan and documentation is essential. At minimum, the family should revisit the plan annually or whenever family structure changes significantly—a marriage, birth, death, estrangement, or change in asset holdings. The review should confirm that recovery information is still secure, that all family members who need it know where to find it, that new assets have been added to the registry, and that changes in family relationships have been reflected in the access permissions and succession plan. This review also provides an opportunity to test procedures in a low-stakes way without moving actual funds.

Communication about the plan should balance information accessibility with security sensitivity. Not every family member needs to know the complete recovery phrase, but those who might be called upon to execute the plan should know the general structure and their specific role. A trusted adult should know that cryptocurrency assets exist and where to find documentation about them. If the primary account holder dies unexpectedly, an executor or heir should not be searching a hard drive for random files hoping to find recovery information. Explicit communication, combined with secure documentation, ensures that knowledge is distributed without needlessly exposing sensitive data.

Recovery and remediation after compromise or loss

If a device running Phantom is lost or stolen, the security of assets depends on whether the recovery phrase has been compromised. If the device itself is lost but the recovery phrase remains secure in other locations, the family can create a new wallet on a new device using the recovery phrase, and the assets will be accessible. This process should be tested in advance so that during an actual emergency, a family member understands that the device is replaceable but the recovery phrase is not. Creating a new wallet is straightforward; losing the recovery phrase means permanent loss of access.

If there is any possibility that an attacker has obtained the recovery phrase or a family member has acted without authorization to move funds, the remediation requires creating a new wallet immediately and transferring all accessible assets to it. This is not a situation where waiting and hoping is advisable. The new wallet requires a new recovery phrase stored in multiple secure locations following the family’s established procedures. Funds should be moved from the compromised wallet to the new wallet through a transaction that can be verified on the blockchain. The old wallet should then be considered compromised and not used for future transactions.

For situations where a family member has died or become incapacitated and the recovery phrase is inaccessible, the situation is unfortunately permanent with current cryptocurrency technology. There is no “forgot my recovery phrase” option that Phantom or any other self-custodial wallet can provide. This underscores why the initial setup of multiple storage locations and a family succession plan is so critical. The plan should be implemented before an emergency arises, not after one has already occurred. If the plan was never created or the recovery information was never stored securely, those assets are effectively lost.