Skip to content
Financial Context Wiki

Seed phrase

A seed phrase is a human-readable recovery secret from which a compatible wallet can derive accounts and private keys. This entry explains BIP-39 word counts, passphrases, recovery compatibility, offline backups, and what to do after loss or disclosure.

Updated

For educational purposes only; not investment advice. Investing may result in loss.

Direct answer

A seed phrase, also called a recovery or mnemonic phrase, is a human-readable secret that a compatible wallet can convert into a seed and then use to derive accounts and private keys. It is a recovery credential, not a public wallet address or an ordinary login password. Anyone who obtains it can usually recreate the covered wallet without the original device.

Under BIP-39, computer-generated entropy plus a checksum is represented by 12, 15, 18, 21, or 24 words from a defined wordlist. The allowed entropy range is 128-256 bits. A longer phrase is not created by choosing extra familiar words: the wallet must generate the entropy and valid checksum.

Not every wallet uses BIP-39, and the words alone do not guarantee that all accounts will appear in another app. Recovery can also depend on the original wordlist, an optional passphrase, derivation paths, network, and account settings. Record the wallet and recovery standard used, but never place that note where it reveals the phrase itself.

Treat the phrase as a root secret. Keep an accurate offline backup, preserve word order, protect it from both disclosure and physical loss, and never send it to support staff or enter it into a website prompted by a message.

Seed phrase
0 / 5
0 items reviewed; 5 items still unresolved

Completing this review does not prove an asset, transaction, or system is safe.

How it works

For BIP-39, the wallet starts with random entropy, appends checksum bits, and divides the result into 11-bit values. Each value selects one of 2048 entries in the chosen wordlist. The checksum can catch some transcription mistakes, but it is not authentication and does not make a disclosed phrase safe.

The mnemonic and optional passphrase are processed with PBKDF2-HMAC-SHA512 using 2048 iterations to produce a 512-bit, or 64-byte, seed. BIP-32 or another wallet-specific scheme can then derive a tree of keys and addresses from that seed. The phrase is therefore upstream of many private keys rather than being a private key for just one address.

The optional BIP-39 passphrase is part of recovery. Every passphrase produces a seed, so a typo may open a different, empty wallet instead of showing an error. Losing the passphrase can be as final as losing the words. A device PIN or app password serves a different purpose and does not replace the phrase or passphrase.

Example

Suppose a hardware wallet created a 24-word BIP-39 phrase and the owner also enabled an optional passphrase. The device later fails. On a trusted compatible wallet, the owner selects the same wordlist, enters the 24 words in order, supplies the exact passphrase, and uses the original network and account settings. The wallet can then derive the same addresses; the assets never resided inside the failed device.

If the expected address does not appear, an empty balance does not prove that the assets are gone. The owner should stop and verify the wallet standard, spelling and order, passphrase, network, account, and derivation path. Entering the phrase into random “recovery” sites or sending it to a helper turns a compatibility problem into a theft risk.

Before relying on a backup, test the documented recovery process in a controlled setting with a trusted device and verify a known address. Do not photograph the words, store them in cloud notes, or type them on an Internet-connected device merely to make another copy. Use durable offline copies in protected locations, and do not invent an ad hoc scheme that splits words among places without understanding its failure modes.

If a phrase may have been exposed, changing the device PIN is insufficient. Create a new wallet from fresh entropy and transfer the assets to addresses controlled by the new seed. If the only backup is lost but the wallet still works, migrate before the remaining device fails.

Risks

Seed-phrase safety has three separate requirements: secrecy, availability, and recoverability. A photo, cloud sync, phishing form, compromised printer, or person with access to the backup can defeat secrecy. Fire, water, theft, fading media, or an undocumented passphrase can defeat availability. Unsupported wordlists, wrong derivation paths, and incomplete account records can defeat recovery even when the words are correct. Balance these risks with multiple protected offline copies, clear recovery metadata, periodic condition checks, and a tested inheritance process appropriate to the amount at risk.

Common misconceptions

Myth 1: A seed phrase and a private key are identical

A seed phrase can generate a wallet seed from which many private keys may be derived. A single private key normally controls one keypair or address context; exposing either secret is dangerous, but they are not interchangeable data.

Myth 2: The checksum will reject every wrong word

The BIP-39 checksum detects only some mistakes. A different sequence can still have a valid checksum, and an incorrect passphrase always produces a valid but different seed.

Myth 3: A PIN protects a leaked backup

A PIN protects access to a particular device. An attacker with the phrase and any required passphrase can restore the wallet elsewhere without that PIN.

Myth 4: Support can recover a missing phrase

In a non-custodial wallet, there is normally no central reset. If every usable copy of the phrase or required passphrase is lost, neither the wallet maker nor the network can recreate it.

Sources

Navigation

Search the wiki...