A seed phrase is a human-readable list of usually 12 or 24 words that encodes the master secret of a crypto wallet, from which all of the wallet’s private keys and addresses are derived. In crypto & blockchain custody it is the ultimate backup: anyone who holds the phrase can recreate the entire wallet on any compatible device and spend its assets, and anyone who loses it without another backup may lose access permanently.
The phrase is also called a recovery phrase, mnemonic phrase or secret recovery phrase. Most wallets generate it according to the BIP-39 standard, which converts random data into words from a fixed list, and then use hierarchical deterministic derivation so that one secret can produce an unlimited number of keys across many blockchains.
How a seed phrase is generated and used
A seed phrase is generated from random entropy plus a checksum, mapped to words from a 2,048-word list. Because 2,048 equals two to the eleventh power, each word encodes 11 bits. A 12-word phrase carries 128 bits of entropy plus a 4-bit checksum, and a 24-word phrase carries 256 bits plus an 8-bit checksum.
To use the phrase, the wallet runs it through a key-stretching function, PBKDF2 with HMAC-SHA512 and 2,048 iterations, which produces a 512-bit binary seed. That seed becomes the root of a hierarchical deterministic wallet, defined in BIP-32, which derives child keys along standardized paths.
| Word count | Entropy | Checksum | Typical use |
|---|---|---|---|
| 12 words | 128 bits | 4 bits | Most software wallets |
| 15 words | 160 bits | 5 bits | Rarely used |
| 18 words | 192 bits | 6 bits | Some hardware wallets |
| 21 words | 224 bits | 7 bits | Rarely used |
| 24 words | 256 bits | 8 bits | Hardware wallets, long-term storage |
The last word partly contains the checksum, so a randomly chosen final word is usually invalid. This lets a wallet detect most typing mistakes during recovery, although it cannot detect two words swapped into another valid combination in every case.
From one phrase to many accounts
A single seed phrase can control many accounts across many blockchains because derivation paths separate them deterministically. The same phrase entered into another compliant wallet reproduces the same keys, provided the wallet uses the same paths and the same optional passphrase.
| Layer | What it is | Defined by |
|---|---|---|
| Mnemonic words | Human-readable encoding of entropy | BIP-39 |
| Optional passphrase | Extra secret mixed into seed creation | BIP-39 |
| Binary seed | 512-bit output of key stretching | BIP-39 |
| Master key and tree | Hierarchy of derived key pairs | BIP-32 |
| Derivation path | Address of a key in the tree by coin and account | BIP-44 and related proposals |
| Address | Public identifier funds are sent to | Each blockchain’s own format |
The optional passphrase, sometimes called a 25th word, creates a completely different wallet from the same words. It adds protection if the words are found, but it must be backed up as carefully as the phrase, because forgetting it makes the funds unrecoverable.
Seed phrase compared with related secrets
A seed phrase differs from a private key and a password in scope and recoverability. A private key controls one address, a password protects access to a device or app, while the seed phrase regenerates every key in the wallet and cannot be reset by any provider.
| Secret | What it controls | Can a provider reset it | Exposure risk |
|---|---|---|---|
| Seed phrase | All keys derived from the wallet | No | Total loss of all assets |
| Private key | One address or account | No | Loss of that address’s assets |
| Wallet password or PIN | Access to the device or app | Reset by restoring from the phrase | Local access only |
| Exchange login | A custodial account | Yes, through account recovery | Depends on platform security |
| Multisig key share | One signature of several required | No | Limited unless enough shares leak |
Custodial wallets usually do not show a seed phrase to the user because the provider controls the keys. Smart contract wallets and MPC wallets may also avoid a single phrase, replacing it with social recovery, guardians or distributed key shares, which changes the backup model rather than eliminating it.
Storing a seed phrase safely
Storing a seed phrase safely means protecting it against both theft and loss at the same time. A phrase hidden too well may be lost in a fire or forgotten; a phrase copied too widely is easy to steal. Good practice balances the two with offline, durable and limited copies.
| Storage method | Protects against | Main weakness |
|---|---|---|
| Paper in a secure location | Online theft | Fire, water, fading |
| Stamped or engraved metal plate | Fire, water, physical decay | Theft if discovered |
| Copies in separate locations | Loss of a single site | More places to secure |
| Shamir backup or split shares | Theft of one share | Complexity, need to recover enough shares |
| Photo, cloud note or email | Nothing worth the risk | Exposed to hacking and syncing |
The firm rule is that the phrase should never be typed into a website, photographed or stored online. Legitimate wallets ask for it only during recovery on the device itself, and no support agent ever needs it.
Common mistakes and scams
Most seed phrase losses come from social engineering rather than broken cryptography. A properly generated 12-word phrase cannot be guessed by brute force, so attackers focus on persuading owners to reveal it or on finding careless copies.
- Fake support requests: messages claiming that a wallet needs verification and asking for the phrase.
- Phishing sites and apps: imitations of wallet software that capture the words during a fake recovery.
- Preseeded devices: hardware wallets bought from unofficial sellers with a phrase already printed in the box.
- Self-chosen words: phrases invented by people instead of generated randomly, which are far easier to guess.
- Untested backups: written copies with spelling errors or missing words, discovered only when recovery is needed.
A prudent owner verifies the backup by performing a test recovery with a small amount before depositing significant funds, and plans how heirs could access the assets without exposing the phrase prematurely.
In plain words
A seed phrase is a short list of ordinary words that works as the master key to a crypto wallet. If a phone breaks or a device is lost, typing the words into a new wallet brings everything back.
That power works both ways. Anyone who sees the words can take the money, and nobody can reset them. Treat the phrase like the only key to a safe deposit box, kept on paper or metal and never shared.
A real-world example
A teacher buys a hardware wallet directly from the manufacturer to hold savings in bitcoin and ether. During setup, the device displays 24 words on its own screen, and she writes them on the supplied card in order, checks each spelling against the list, and later stamps them onto a steel plate kept in a home safe, with the paper card stored at a relative’s house.
Before transferring her savings, she sends a small amount, resets the device and restores it from the words, confirming that the same addresses reappear. Two years later the device is damaged in a move. She buys a replacement, enters the phrase and regains full access to every account within minutes. Shortly afterward she ignores an email, styled as a wallet security alert, that asks her to confirm her recovery phrase online.