Seed Phrase Security

When you set up a new Bitcoin wallet — hardware or software — the device generates a seed phrase. This is typically 12 or 24 English words, drawn from a standardised list of 2,048 words (BIP-39). The seed phrase is a human-readable encoding of the master key from which all of your wallet's private keys are derived.

This means the seed phrase can fully reconstruct your wallet. If your hardware wallet is lost, destroyed, or stolen, the seed phrase is all you need to recover every address and every balance. It is the single point of recovery — and the single point of failure.

The Rules

Seed phrase security is not complicated, but it is absolute. There are no partial measures. Either the phrase is secure or it is not.

1. Write it down on a physical medium

Write the seed phrase on paper immediately when the wallet generates it. Do not type it into a computer. Do not take a photograph. Do not store it in a notes app, a password manager, or a cloud service. Any digital copy is a copy that can be remotely accessed by malware, by a compromised cloud provider, or by an attacker who gains access to your account.

2. Use a durable medium for long-term storage

Paper degrades. It burns. It dissolves in water. For savings you intend to hold for years or decades, stamp or engrave the seed phrase into metal. Products like Seedplate, Cryptosteel, and Billfodl are designed for this purpose. A stainless steel plate with stamped letters will survive house fires, floods, and the ordinary entropy of time.

3. Store it in a secure location

The seed phrase should be stored somewhere that is physically secure and that you control. A home safe is a reasonable first step. A safety deposit box at a bank adds geographic separation but introduces a third party. The right choice depends on the amount being secured and your threat model.

4. Create a backup in a separate location

A single copy of the seed phrase in a single location is a single point of failure. If that location is destroyed — fire, flood, theft — the funds are gone. Create at least one backup, stored in a different physical location. Both copies should be equally secure.

5. Never share it

No legitimate service, support agent, wallet manufacturer, or Bitcoin developer will ever ask for your seed phrase. Anyone who does is attempting to steal your funds. There are no exceptions to this rule.

The Passphrase Option (25th Word)

Most hardware wallets support an optional passphrase — sometimes called the "25th word" — that is added to the seed phrase during key derivation. The passphrase creates an entirely different set of keys and addresses from the same seed phrase. Without the passphrase, the seed phrase alone produces a different (empty) wallet.

This provides two benefits. First, it adds a layer of protection: an attacker who obtains the seed phrase but not the passphrase cannot access the funds. Second, it enables plausible deniability: the base wallet (without passphrase) can hold a small amount, while the real funds are in the passphrase-protected wallet.

The trade-off is that the passphrase must also be backed up. If you lose both the seed phrase and the passphrase, the funds are unrecoverable. If you remember the passphrase but lose the seed, the passphrase alone is useless.

What You Are Protecting

The seed phrase is not a password. A password protects access to an account held by someone else. The seed phrase is the account. It is the mathematical root from which your entire Bitcoin holdings derive. Losing it is not "forgetting your login." It is the permanent, irrecoverable loss of the funds.

Treat it accordingly. The time you spend securing it is proportional to what it protects.