What Is a Bitcoin Seed Phrase?
Your seed phrase is 12 or 24 words that control every Bitcoin in your wallet. Lose it and your Bitcoin is gone forever. Share it and someone else has your Bitcoin. This is the most important concept in self-custody, explained properly.
The essentials
- 1. A seed phrase is 12 or 24 random words that are the complete backup of your Bitcoin wallet.
- 2. Anyone with your seed phrase controls your Bitcoin. Keep it offline and private.
- 3. Write it on paper or metal. Never photograph, email, or type it into any device or app.
- 4. If your hardware wallet breaks, your seed phrase restores everything.
- 5. If you lose your seed phrase and your wallet is gone, your Bitcoin is unrecoverable.
How Does a Seed Phrase Actually Work?
Bitcoin wallets don't store Bitcoin. They store private keys, which are just very large numbers. These numbers prove ownership of specific Bitcoin addresses on the blockchain and authorize transactions. Your seed phrase is a human-readable encoding of those private keys.
When your hardware wallet generates a seed phrase, it's doing this: picking 12 or 24 words at random from a standardized list of 2048 words (the BIP-39 wordlist). Those words, in that exact order, encode a very large random number. That number seeds a deterministic algorithm that generates all your private keys and Bitcoin addresses.
The same 12 or 24 words, entered in the same order into any BIP-39 compatible wallet, will always produce the exact same private keys and addresses. This is why you can restore your wallet on a brand new hardware device and see all your funds. The Bitcoin isn't "on" the device. It's on the blockchain, and your seed phrase proves you own it.
Warning: These are the first 12 words of the BIP-39 wordlist in order. This is not a real wallet. Never use any seed phrase you didn't generate yourself.
What Is BIP-39 and Why Does the Standard Matter?
BIP-39 is the standard that all major Bitcoin wallets follow for generating seed phrases. It was proposed in 2013 and is now universally adopted. It defines:
The wordlist
2048 carefully chosen English words. Each word is unique in its first 4 letters, so you can abbreviate and still restore correctly. Other languages have official BIP-39 translations (Spanish, French, Japanese, and more).
The entropy
12 words = 128 bits of entropy. 24 words = 256 bits. Both are mathematically unguessable. The last word is a checksum that catches transcription errors.
The derivation
The mnemonic feeds into PBKDF2 with HMAC-SHA512 to produce a 512-bit seed, which then feeds into BIP-32 to derive all private keys. Deterministic and reproducible.
Wallet compatibility
Because wallets follow BIP-39, your Trezor seed restores on a Ledger, your Ledger restores on Sparrow, your Coldcard restores anywhere. You're not locked into any manufacturer.
The standard compatibility across wallets is the practical reason BIP-39 matters. You're not trusting any single company to stay in business. If Trezor closes, your 24 words work in Sparrow Wallet, Electrum, and every other BIP-39 wallet. Your seed phrase is portable.
How Should You Back Up Your Seed Phrase?
Backing up your seed phrase is the most important security step in Bitcoin. Do it the moment you generate the phrase, before you put any Bitcoin in the wallet. Here's how to do it right:
Do this
- ✓ Write all words on paper in the exact order shown
- ✓ Double-check every word against the screen before closing the setup
- ✓ Keep one backup at home in a fireproof safe or sealed envelope
- ✓ Keep a second backup in a separate location (trusted family, safe deposit box)
- ✓ Consider metal backup (steel plate) for long-term storage
- ✓ Test your backup: use your recovery phrase to verify it restores correctly
Never do this
- ✗ Photograph it on your phone
- ✗ Email it to yourself
- ✗ Type it into Notes, Google Docs, or any cloud app
- ✗ Screenshot it
- ✗ Tell anyone your seed phrase (including support staff)
- ✗ Store it in your wallet app's notes or in a password manager
- ✗ Keep only one copy in one location
The two-location rule
Keep two complete copies in two physically separate locations. One at home, one somewhere else you trust. If your house burns down, you still have your Bitcoin. If one location gets broken into, you still have your Bitcoin. You only lose everything if both locations are compromised simultaneously.
Paper vs Metal: Which Backup Should You Use?
| Method | Fire resistant | Water resistant | Cost | Best for |
|---|---|---|---|---|
| Paper (pencil) | No (233C) | No | Free | Getting started, low amounts |
| Laminated paper | No | Yes | ~$1 | Flood protection only |
| Fireproof bag/pouch | Partial | Yes | $20-40 | Apartment with limited space |
| Steel plate (Cryptosteel, Blockplate) | Yes (1400C) | Yes | $50-120 | Long-term, serious holdings |
| Titanium plate | Yes (1668C) | Yes | $80-150 | Maximum durability |
Paper is fine to start. Once your holdings grow to where losing them would be painful, upgrade to steel. Products like Cryptosteel and Blockplate are popular options. A $60 steel plate protects Bitcoin worth far more.
What Is a Passphrase and Should You Use One?
A passphrase is an optional extra layer on top of your seed phrase. Sometimes called the “25th word,” it can be any word, phrase, or string you choose. The passphrase + your seed phrase together derive a completely different wallet than your seed phrase alone.
Benefits
- + Even if someone finds your seed phrase, they can't access your Bitcoin without the passphrase
- + Creates a plausible “decoy” wallet (empty or small amount on the plain seed, real funds on passphrase wallet)
- + Stored in your memory, not written down
Risks
- - If you forget the passphrase, your Bitcoin is permanently inaccessible
- - If you die without telling your heirs, they can't recover the funds (see our inheritance guide)
- - Adds complexity to recovery in stressful situations
For most people: skip the passphrase until you're confident you understand the risks. The seed phrase alone is already extremely secure. Passphrases are for situations where physical theft of your written seed phrase is a realistic threat, not a paranoid one.
What Happens When You Lose or Damage Your Hardware Wallet?
This is the scenario your seed phrase was made for. If your Trezor, Ledger, or Coldcard is lost, stolen, or stops working:
Don't panic
Your Bitcoin is on the blockchain, not on the device. The device never held your Bitcoin. It held your private keys. If you have your seed phrase, you have everything.
Get a new device
Order a replacement hardware wallet from the official manufacturer's website. You can also use wallet software (Sparrow Wallet, Electrum) on a computer temporarily if you need faster access.
Restore with your seed phrase
During setup of the new device, choose 'Restore from seed phrase' instead of 'Create new wallet.' Enter your words in the exact order they were generated. The wallet will derive all your private keys and show your full balance.
Verify your balance
Once restored, check that your balance matches what you expected. If it does, you're done. Your Bitcoin is now accessible again through the new device.
Consider a new wallet
If your old device was stolen (not just lost or broken), consider creating a brand new wallet with new seed words and transferring your Bitcoin to it. A stolen device means someone may have your PIN or could attempt hardware attacks.
What Are the Most Common Seed Phrase Scams?
Most Bitcoin theft doesn't involve hacking. It involves tricking people into giving up their seed phrases voluntarily.
Fake wallet support
Someone contacts you via Twitter, Telegram, or Discord claiming to be wallet support staff. They ask for your seed phrase to "verify your account" or "fix a sync issue." Legitimate wallet support never asks for your seed phrase. Ever.
Fake hardware wallet sent by mail
A hardware wallet arrives in the mail with instructions to "activate" it by entering a pre-printed seed phrase. The device is fake, the seed phrase is already known to the attacker. Only buy from official manufacturer websites.
Phishing wallet setup pages
A fake website that looks like a wallet setup page asks you to enter your seed phrase to "verify" it. The page harvests your phrase immediately. Never type your seed phrase into a website. Only enter it on a hardware device screen.
Seed phrase "checker" tools
Online tools that claim to verify if your seed phrase is correct or check your balance. Any tool that asks you to enter your full seed phrase is trying to steal it. The only legitimate use of your seed phrase is restoring a wallet on a hardware device.
Inheritance scams
Fake lawyers or family members claim to need your seed phrase to process an inheritance or access a deceased person's funds. This is always a scam. Legitimate estate processes never work this way.
The rule is simple
Never share your seed phrase with anyone. No support team, no verification tool, no website, no recovery service. Your seed phrase stays private or your Bitcoin is gone.
Frequently Asked Questions
What is a Bitcoin seed phrase?
A seed phrase (also called a recovery phrase or mnemonic) is a list of 12 or 24 random words generated by your Bitcoin wallet. It encodes your private keys in a human-readable format. Anyone with your seed phrase can access all the Bitcoin in your wallet from any device in the world. It's both the master key and the full backup of your funds.
What is the difference between 12 and 24 words?
Both are secure. A 12-word phrase provides 128 bits of entropy, a 24-word phrase provides 256 bits. Neither can be brute-forced with any technology that exists or is plausible. The main practical difference: 24 words are harder to transcribe accurately. Most hardware wallets now default to 24 words. Both follow the BIP-39 standard.
What happens if I lose my seed phrase?
If you lose your seed phrase and your hardware wallet breaks, gets lost, or is stolen, your Bitcoin is gone permanently. There is no customer support to call. No reset password option. No recovery process. This is why proper backup is critical. Write it down the moment you set up your wallet, verify it, and store it securely before putting any Bitcoin on the wallet.
Is it safe to store my seed phrase digitally?
No. Never photograph your seed phrase, type it into a notes app, email it to yourself, or store it in cloud storage. Any digital copy creates pathways for theft: malware, cloud breaches, camera roll syncs, screenshot tools. The only secure storage is physical: paper, metal, or another offline medium in a physically secure location.
What is a passphrase and how is it different from a seed phrase?
A passphrase (sometimes called the 25th word) is an optional extra word you add to your seed phrase. It creates an entirely different wallet from the same seed words. Without the correct passphrase, the wallet shows a different (usually empty) balance. It adds an extra layer of protection: even if someone finds your written seed phrase, they can't access your Bitcoin without also knowing the passphrase. The downside is that if you forget it, your Bitcoin is inaccessible.
Should I split my seed phrase across multiple locations?
Splitting into thirds (4 words each) without overlap means any single location gives an attacker nothing useful. But it also means losing any single location cuts your recovery odds sharply. A better approach for most people: store two complete copies in two physically separate secure locations. For advanced users, Shamir's Secret Sharing or multi-signature setups provide better splitting without that tradeoff.
Can someone guess my seed phrase?
No. The words are chosen randomly from a 2048-word list. A 12-word phrase has 2^128 possible combinations, a 24-word phrase has 2^256. These numbers are larger than the number of atoms in the observable universe. No computer ever built, or buildable with any conceivable technology, can brute-force a correctly generated seed phrase.
What is BIP-39 and why does it matter?
BIP-39 (Bitcoin Improvement Proposal 39) is the standard that defines how seed phrases are generated and formatted. It specifies the 2048-word English wordlist (and translations), the checksum, and the key derivation algorithm. Because wallets follow this standard, you can restore your wallet from any BIP-39 compatible wallet software, regardless of which hardware wallet originally generated it.
Do I need a seed phrase for a custodial wallet?
No. Custodial wallets (like keeping Bitcoin on Coinbase or Kraken) don't give you a seed phrase because you don't control the private keys. The exchange holds them on your behalf. This is convenient but means you're trusting the exchange not to get hacked, go bankrupt, or freeze your account. 'Not your keys, not your coins.'
What should I do if I think my seed phrase has been compromised?
Act immediately. Create a brand new wallet on a different device, generate a new seed phrase, and transfer all your Bitcoin to the new wallet as fast as possible. Do this before the attacker does. Once Bitcoin is transferred out by an attacker, it can't be recovered. Speed matters.
What is metal seed phrase backup and do I need it?
Metal backup means stamping or engraving your seed words onto a steel or titanium plate. Paper burns at 233C, floods destroy it, and it degrades over years. Metal survives fire, floods, and decades. If your Bitcoin is worth more than the cost of a metal backup ($30-100), it's worth doing. Products like Cryptosteel, SeedSigner backups, and Blockplate are popular options.
Can I store my seed phrase in a bank safe deposit box?
You can, but it's not ideal. Safe deposit boxes aren't FDIC-insured, bank staff sometimes have access, and governments can freeze them. A better approach: use a safe deposit box as one of two backup locations, not the only one. Keep the other backup somewhere you personally control.
Ready to Hold Your Own Keys?
A hardware wallet generates your seed phrase offline, signs transactions without ever exposing your keys to the internet, and makes self-custody practical for everyday users.