How It Works
W2QR encrypts your seed phrase into a QR code protected by your password. Every password produces a valid seed phrase — attackers can never tell which one is real. Use the Strong Password Generator to derive a quantum-resistant password from a memorable phrase and store it as a password QR. Print both QR codes on plastic cards for easy, durable access. Back up to Google Drive or split into Shamir shares for extra redundancy.
Encrypting Your Seed Phrase
Enter or generate your seed phrase
Type or paste your 12- or 24-word seed phrase, or let W2QR generate one for you. W2QR checks it for validity before continuing.
Set your encryption password
Type a password directly, or use the Strong Password Generator to derive a cryptographic password from a memorable phrase you can easily remember. The generated password has over 150 bits of entropy — quantum-resistant — and can be stored as a separate password QR for convenient scanning. W2QR runs the password through Argon2id, a deliberately slow, memory-hard process that makes each guess expensive for an attacker.
Your encrypted QR is created
Your seed phrase is encrypted using honey encryption: if anyone tries a wrong password, they still get a valid-looking seed phrase with real wallet addresses. There is no way to tell the difference between the real result and a decoy. The encrypted result is packed into a compact QR code you can download as PNG, SVG, or JSON.
Back up and print
Back up your encrypted QR to Google Drive for safekeeping, or split your seed phrase into Shamir shares for distributed redundancy. Print your wallet QR and password QR on plastic cards — two credit-card-sized cards that together give you easy, durable access to your wallet.
Unlocking Your Wallet
Scan or upload your QR code
Use your camera to scan the QR, or upload the image file. W2QR detects the format automatically.
Enter your password
The same slow password processing runs entirely in your browser — no server is involved.
Your seed phrase appears
The decryption reverses the encryption process and your original seed phrase appears on screen. It exists only in your browser for as long as you keep the page open — it is never stored or sent anywhere.
Shamir Shares Mode
Split your seed phrase into pieces
Your seed phrase is mathematically divided into separate shares. You choose how many shares to create and how many are needed to restore. For example, split into 3 shares where any 2 can rebuild the original — fewer than the threshold reveal nothing.
Choose password mode
Same password: one password protects all shares. Individual passwords: each share gets its own password — ideal when different people hold different pieces.
Each share becomes a QR code
Each share is independently encrypted with the same honey-encryption protection. A wrong password on any share produces a valid-looking decoy. The result is a set of standalone QR codes you can distribute.
To restore: collect the required shares
Scan or paste the minimum number of share QR codes, enter each share's password, and the original seed phrase is reconstructed automatically. No server, no account — fully offline.
Why Honey Encryption?
With traditional encryption, a wrong password produces obviously random garbage. An attacker trying passwords knows instantly when they hit the right one — the output suddenly looks like real data.
Honey encryption removes that signal entirely. Every password — right or wrong — produces a valid seed phrase that controls a real-looking wallet with real addresses. An attacker trying a million passwords gets a million plausible wallets.
To find the real one, they would have to check each wallet on the blockchain. Combined with the slow password processing that makes each attempt expensive, brute-force becomes economically pointless.
Security Summary
- ✓All encryption and decryption runs in your browser — nothing is sent to a server.
- ✓Slow, memory-intensive password processing makes each guess expensive for attackers.
- ✓Every wrong password produces a valid seed phrase — there is no way to tell the real result from a decoy.
- ✓Strong passwords derived from your memorable phrase require ~10⁴⁵ years to brute-force on classical hardware and ~175 billion years with quantum computers.
- ✓Optional Google Drive backup and Shamir share splitting provide extra redundancy.
- ✓No password verifier is stored anywhere — there is nothing for an attacker to check against.
W2QR Cards
Design and print your card
Create a card with a pre-generated QR code using the Card Designer. Choose a template, add a nickname and wallet code, then print the card at CR80 (credit card) size or save it as a digital image.
Activate with your password
Scan the card QR and choose a password. Thanks to honey encryption, the card's random data combined with your password produces a unique, valid BIP-39 mnemonic — your new wallet seed phrase.
Optionally back up
After activation, back up your encrypted QR to Google Drive or split your seed phrase into Shamir shares for extra redundancy.
Plastic Card Activation
Receive your card
You receive a physical card with a pre-printed QR code — ready to activate with just a password.
Scan the QR code
Open W2QR in your browser and scan the card with your camera, or upload a photo of it.
Create a strong password
Choose a password for your wallet. This becomes the key that protects your seed phrase.
Card is activated
Your card is now active. Optionally back up the encrypted QR to Google Drive or split into Shamir shares for extra redundancy.
Strong Password & Password QR
Open the Strong Password Generator
Type a memorable phrase
Enter a sentence you can easily remember, in any language — for example, "I was born in London, and my whole family is from that same area."
W2QR derives a cryptographic password
Your phrase is transformed into a long, complex password with over 150 bits of entropy. Brute-forcing it would take ~10⁴⁵ years on a powerful GPU cluster, or ~175 billion years even with a hypothetical quantum computer.
Store the password as a QR code
Save the generated password as a separate QR code. Print it on a plastic card and store it apart from your wallet QR — two physical pieces that must be combined to open the wallet. If you ever lose the password QR, simply regenerate it from the same phrase.