Foundations

Seed Phrases & Backups

The 12–24 words that can restore your entire wallet — how they work and how to back them up properly.

A seed phrase (also called a recovery phrase or mnemonic phrase) is a sequence of 12 to 24 ordinary English words that encodes the master secret for your entire crypto wallet. Lose your phone, break your hardware device, or wipe your computer — and those words are all you need to recover every account and every coin that wallet ever controlled.

That single fact makes seed phrases both the most powerful and the most dangerous thing in self-custody crypto. Understanding how they work, and how to protect them, is not optional knowledge.

Where seed phrases come from

When you create a crypto wallet, the software generates a large random number — typically 128 or 256 bits of entropy — and then maps it onto a list of 2,048 common English words defined by a standard called BIP-39 (Bitcoin Improvement Proposal 39). The result is your seed phrase.

From that single phrase, a mathematical process called key derivation generates a practically unlimited tree of public and private key pairs. Each address you use — whether on Bitcoin, Ethereum, or dozens of other networks — is a branch of that same tree. The seed phrase is the root.

Why words instead of numbers? A string like 7f3a9c... is hard to write accurately and easy to transpose. Human-readable words are slower to mistype, easier to double-check, and simpler to dictate or copy by hand. The words are drawn from a fixed list, so any ambiguous abbreviation (is that “abandon” or “absent”?) can be resolved without guessing.

The checksum word

The last word in a BIP-39 phrase is not fully random — it is a checksum, derived from the other words. Wallet software uses it to catch transcription errors. If you type in a phrase and the final word does not validate, you know you made a mistake somewhere. This does not protect your phrase from theft, but it does prevent you from restoring the wrong wallet by accident.

What a seed phrase controls

Because all keys in the wallet descend from the same root, the seed phrase effectively controls everything at once:

What you holdWhat the seed phrase recovers
A Bitcoin addressAll BTC held at derived addresses
An Ethereum addressAll ETH and ERC-20 tokens
Multiple accounts in one walletEvery account in that wallet’s tree
NFTs and DeFi positionsAnything accessible via those keys

One important nuance: the seed phrase restores access to funds on-chain. It does not store the blockchain itself — it just regenerates the private keys that prove ownership. The actual transaction history lives on the network, not in your phrase.

How to back up a seed phrase safely

This is where most people make costly mistakes. The goal is simple to state: store your seed phrase somewhere you can access it, that an attacker cannot access, and that survives the kinds of disasters that destroy digital hardware.

Write it on paper — but not just once

Paper is the default starting point. Use a pen (not pencil — pencil fades), write clearly, number each word, and double-check spelling against the standard BIP-39 word list. Store it somewhere physically secure: a safe, a lockbox, or a fireproof document bag.

One copy is not enough. A single paper backup can be destroyed by fire, flood, or an overzealous house clean. Most people who take self-custody seriously keep at least two copies in different physical locations.

Consider metal backups for long-term storage

Paper is fragile. Metal backup products — small plates or tiles where you stamp or engrave your words — survive fire and water that would destroy paper. If you plan to hold funds for years, a metal backup is worth considering. This is especially relevant if you use a cold wallet for significant holdings.

What NOT to do

  • Do not photograph your seed phrase. Photos sync to cloud services automatically on most phones. Cloud accounts get hacked.
  • Do not store it in a password manager. A password manager secured by a password is not the same security model as a physical secret.
  • Do not type it into any website or app unless you are actively restoring a wallet in the wallet’s own official interface — and even then, think twice. Legitimate wallet software will never ask for your seed phrase to “verify” your account or “unlock” a reward.
  • Do not share it with anyone. No support agent, no exchange, no developer needs your seed phrase for any legitimate purpose. This is the single most common vector in crypto scams.
  • Do not store it digitally on an internet-connected device — not in email drafts, notes apps, or text files on your desktop.

The geographic split approach

Some people split their phrase across two locations — for example, words 1–12 in one place and words 13–24 in another — so that finding one half alone is useless. This does raise resilience against a single location being compromised, but it also creates a new failure mode: if you lose access to one location, you lose access to the phrase entirely. Think carefully about whether this trade-off suits your situation.

Passphrase: the optional 25th word

BIP-39 supports an optional passphrase — sometimes called the “25th word” — that you add on top of your seed phrase. Unlike the phrase itself, this passphrase is not derived from the standard word list and is chosen freely by you.

With a passphrase, the same 24-word seed generates a completely different wallet. This is useful because:

  • If someone finds your written seed phrase, they still cannot access funds without the passphrase.
  • You can maintain a decoy wallet on the phrase alone with a small amount of funds.

The downside is significant added complexity. Forget the passphrase and your funds are gone, even if you have the seed phrase. Hardware wallets like Ledger and Trezor support this feature, but it requires careful documentation strategy — you need to store both the phrase and the passphrase, separately, in a way you can reconstruct.

For most beginners, a well-protected seed phrase without an additional passphrase is safer in practice than a passphrase poorly remembered or inconsistently stored.

Seed phrases vs. private keys

You may also encounter the concept of an individual private key. A private key controls a single address. A seed phrase controls the entire tree of addresses. If you are managing a self-custody wallet, you almost always work with seed phrases rather than individual keys — but understanding the relationship matters if you ever import a standalone key or interact with older wallet formats.

Key takeaways

  • A seed phrase is 12–24 words that regenerate every private key in your wallet; controlling it means controlling all funds.
  • Seed phrases follow the BIP-39 standard and include a checksum word to catch transcription errors.
  • Back up on paper in at least two physical locations; metal backups add resilience against fire and water.
  • Never store your seed phrase digitally on an internet-connected device, and never share it with anyone.
  • An optional passphrase (25th word) adds security but introduces complexity — approach it with a clear documentation plan.
  • No legitimate service will ever ask for your seed phrase to verify your account or unlock anything.

Next up: Hot vs. Cold Wallets