Your seed phrase is your Bitcoin — lose it, lose everything. This complete guide covers BIP39 standards, 12 vs 24 words, passphrases, metal backup options, safe storage, and what to never do.
Your seed phrase is your Bitcoin. Not your wallet, not your exchange account — your seed phrase. Those 12 or 24 words are the master key to every Bitcoin address your wallet has ever generated. Understand them, protect them, and never compromise them.
A seed phrase (also called a recovery phrase, mnemonic phrase, or backup phrase) is a sequence of 12 or 24 common English words generated randomly when you first create a non-custodial Bitcoin wallet.
Example (24 words):
abandon ability able about above absent absorb abstract absurd abuse access
accident account accuse achieve acid acoustic acquire across act action actor
actress actual
(This is an example — never use this or any published seed phrase)
These words encode a 128-bit or 256-bit random number called entropy. From this entropy, your wallet derives:
The entire structure is deterministic — the same seed always generates the same addresses. This is why restoring your seed phrase on any compatible wallet perfectly reconstructs all your addresses and balances.
Modern seed phrases follow BIP39 (Bitcoin Improvement Proposal 39), published in 2013. BIP39 defines:
Because BIP39 is a standard, your seed phrase works across hundreds of compatible wallets. If Ledger goes out of business tomorrow, your 24-word Ledger seed restores perfectly on Trezor, Coldcard, or any BIP39-compatible wallet.
| 12 Words | 24 Words | |
|---|---|---|
| Entropy | 128 bits | 256 bits |
| Security | Extremely high | Even higher |
| Practically crackable? | No | No |
| Used by | Trezor (default), most mobile wallets | Ledger, Coldcard, Foundation |
Both are uncrackable with current technology. A 128-bit keyspace has 2^128 possible combinations — exceeding the number of atoms in the observable universe. No supercomputer can brute-force it.
Recommendation: Use whatever your hardware wallet generates. Don't try to choose or remember your seed phrase — let the device generate it with true hardware randomness.
From your seed, your wallet derives keys following a path like:
m/84'/0'/0'/0/0 ← First Native SegWit address
m/84'/0'/0'/0/1 ← Second address
m/86'/0'/0'/0/0 ← First Taproot address
Different address types use different derivation paths:
If you restore your seed on a different wallet and your balance appears wrong, check that you're using the same derivation path as the original wallet.
BIP39 supports an optional passphrase — an extra word (or phrase) appended to your seed. This is sometimes called the "25th word" even though it can be any word or phrase you choose.
How it works: Your passphrase generates a completely different wallet. Wrong passphrase = empty wallet (or a decoy wallet). Right passphrase = your real funds.
Why use it:
Why it's dangerous:
Recommendation: Enable a passphrase for holdings over $5,000–$10,000. Store it separately (different location, different medium) from your seed phrase.
Always generate on a hardware wallet. Hardware wallets use a certified hardware random number generator (HRNG) to generate entropy. This ensures your seed is truly random — not influenced by software bugs, OS entropy issues, or malware.
Never generate online. Websites that "generate" seed phrases are dangerous — they may be logging your phrase, using weak randomness, or compromising entropy in other ways. The only acceptable online exception is airgapped tools like Ian Coleman's BIP39 tool run on an offline machine.
Verify the word list. When your hardware wallet shows your seed phrase during setup, verify that every word appears in the BIP39 word list. Your wallet should also provide a word confirmation step (asking you to select words in order). Complete it carefully.
Write it down immediately. Don't rely on memory, even briefly. Write all words clearly on paper before doing anything else.
This is where most people fail. Your storage plan needs to survive:
Recommended approach:
Step 1: Write on paper immediately during setup. Use a pen (pencil fades). Print clearly — no ambiguous handwriting.
Step 2: Transfer to metal backup. Paper degrades. Metal survives house fires. Options:
| Product | Method | Fire Rating |
|---|---|---|
| Cryptosteel Capsule | Pre-made steel tiles | 1400°C |
| Billfodl | Slide-in letter tiles | 1400°C |
| Blockplate | Stamp your own letters | 1400°C |
Step 3: Store in two locations. Home fireproof safe + bank safe deposit box, or a trusted family member's location. Never store both copies in the same place.
Step 4: Test your backup. Buy a second hardware wallet (or factory reset your device), restore from your seed phrase, and verify your Bitcoin address matches. Do this before depositing significant funds.
Never photograph it. Cloud photo services are not secure. Screenshots sync to iCloud/Google Photos automatically.
Never type it into a computer. No "seed phrase checker" websites, no notes apps, no cloud storage, no email to yourself. If your computer has malware, it can capture keystrokes.
Never say it aloud near smart speakers or in public places.
Never enter it into any app except your hardware wallet device. Legitimate wallets never ask for your seed phrase via a software interface.
Never share it with anyone, including "Coinbase support," "Ledger support," or any person claiming to help you recover funds. These are always scams.
Never store it in a password manager. Password managers are software — they can be hacked. Your seed phrase is more valuable than any password.
If you need to restore (new device, lost device, hardware failure):
For hardware wallets: Each brand has its own restoration procedure, but all accept BIP39 seed phrases. A Ledger seed restores on Trezor and vice versa.
What if I lose my seed phrase? If you lose your seed phrase and your hardware wallet fails, your Bitcoin is unrecoverable. This is why backup is critical. If you still have your hardware wallet, move your funds to a new wallet immediately and generate a new seed phrase with a robust backup plan.
Can someone guess my seed phrase? No. A 12-word seed has 2^128 possible combinations — more than atoms in the observable universe. Brute-forcing is computationally impossible with any foreseeable technology.
Is my seed phrase the same as my private key? Not exactly. Your seed phrase generates your master private key, which then derives an unlimited number of individual private keys (one per address). Think of the seed phrase as the master root from which all keys grow.
What if I make a typo writing down my seed phrase? Restore from seed on a second device before depositing funds. This catches typos immediately. If you discover a typo later, try common variations (similar-looking BIP39 words) — most recovery tools support fuzzy matching.
Can I use the same seed phrase on multiple wallets? Yes — BIP39 is designed for this. The same seed generates the same addresses regardless of which compatible wallet you use. Many people use their primary seed with both a hardware wallet (spending) and a watch-only mobile wallet (monitoring balance).
Related: Bitcoin Security Tips 2026 · Best Hardware Wallets 2026 · How to Set Up Bitcoin Multisig
Get our free Beginners Guide to Buying Bitcoin plus weekly insights for long-term holders.
Hardware wallets store private keys on dedicated offline devices. Software wallets store keys in apps. This guide explains when each makes sense, which specific products to use in 2026, and how serious bitcoiners use both — hardware for savings, software for spending.
Bitcoin multisig requires multiple keys to spend — 2-of-3 is the gold standard. This step-by-step guide covers hardware wallet setup, Sparrow Wallet configuration, PSBT signing, and key distribution.
Bitcoin is public by default — every transaction visible forever. This guide covers address hygiene, CoinJoin, Lightning privacy, no-KYC acquisition, and Tor for Bitcoin users who want genuine financial privacy.