A backup that has never been tested is an assumption. A recovery drill can expose a missing word, wrong passphrase, unsupported derivation path, or forgotten device PIN before an emergency. The drill must be designed so the main balance remains untouched and the recovery secret never enters a networked form. This guide is for educational planning; the correct procedure depends on the wallet software, device, and local obligations.
Define the drill boundary
Choose a spare device or an isolated software installation and decide what evidence will count as success: expected public addresses, a known tiny test balance, and a visible account label. Write down the original wallet’s public metadata before starting. Do not use a work computer with monitoring software or a shared family phone. The boundary makes it clear that the drill tests recovery mechanics, not a transfer of meaningful funds.
Restore the seed offline
Obtain the wallet application from its verified source and disconnect unnecessary networks during setup. Enter the recovery words only on the trusted device or offline environment specified by the vendor. Never type them into a browser, helpdesk form, or computer keyboard that you do not control. If a passphrase or derivation path is required, retrieve it from the separate documented procedure. A blank wallet may mean a configuration mismatch, not missing funds.
Compare public addresses
Use the restored wallet to derive a receiving address and compare it with an address recorded from the original setup. Check several account indexes if the wallet uses a gap limit, and verify the network. A watch-only copy can monitor balances without signing authority, but it must use the correct descriptor or public key. Save only the public comparison results. Delete temporary screenshots that contain QR codes or account metadata you no longer need.
Test a tiny transaction only if needed
A small receive-and-send test can confirm the signing path, fee display, and broadcast process, but it creates an on-chain record and network fee. Decide whether that evidence is worth the privacy and cost. If you test, use a tiny amount and verify the transaction on an independent explorer. Never send a large balance to “prove” a backup. A successful test does not prove that a future device or service will be available.
Write emergency instructions
Instructions should name the wallet model, software source, network, derivation details, passphrase location, and a trusted contact path without printing the seed. Explain how to recognize official support and list phrases that a real support agent must never request. Use plain language and a translated version reviewed by another person. Keep the instructions in a secure location separate from signing secrets and update them after every major change.
Close and review the drill
After confirming public addresses, wipe the test environment according to the vendor’s guidance and ensure no cloud backup captured the seed. Record the date, software version, result, and any limitation. Schedule another drill after an update, relocation, or change in trusted contact. The value of a drill is early discovery: it gives the owner time to fix a configuration while the original wallet still works.
Operational worksheet
Use a drill worksheet with expected address, derivation setting, software version, test balance, result, and limitation. A limitation might be “watch-only comparison passed; signing not tested” or “passphrase restored by owner only.” Store the worksheet without recovery words and delete temporary logs that could contain them. Ask a second person to follow the emergency instructions without opening the secret storage; if they cannot find the official support page, improve the instructions. After a vendor update, repeat the public-address comparison before trusting the new setup. If a recovery produces an empty wallet, stop and compare network, account index, passphrase, and derivation path. Do not send funds to an unverified address to make a test appear successful. The drill is successful when it reveals uncertainty early and leaves the original balance untouched.