Seed (Recovery) Phrase

Last Updated: October 30, 2026

Quick Answer: A seed phrase, also called a recovery phrase or mnemonic, is a list of 12 to 24 words that encodes the master secret of a self custody crypto wallet, so anyone who has the words can recreate the wallet and move its funds on any compatible device. Most wallets generate it under the BIP39 standard, using words from a fixed list of 2,048. It is the ultimate backup of your crypto: if you lose it you may lose access, and if someone else sees it you can lose everything.

Key Takeaways

• A seed phrase is generated by the wallet, not chosen by you, and it is the master backup for every account and address in that wallet
• Under BIP39, a phrase has 12, 15, 18, 21 or 24 words; 12 words carry 128 bits of randomness and 24 words carry 256 bits
• An optional passphrase (sometimes called the 25th word) creates a completely different wallet from the same words
• Some hardware wallets now use SLIP39 backups of 20 words, including Trezor’s Safe 3 (since June 2024), Safe 5 and Safe 7
• No real wallet provider, exchange or support agent will ever ask for your seed phrase; in August 2026, Swiss authorities reported phishing for it by email, phone and even paper letters

How a Seed Phrase Works

The BIP39 specification, assigned in September 2013 and now marked “Deployed,” defines how most wallets turn randomness into words and words into keys:

1. Randomness. The wallet generates 128 to 256 bits of random data (entropy).
2. Checksum. It adds a short checksum (entropy length divided by 32) so typing mistakes can be detected.
3. Words. The result is split into 11 bit chunks, and each chunk picks one word from a list of 2,048 (2 to the power of 11).
4. Seed. The words, plus an optional passphrase, go through PBKDF2 with HMAC SHA512 and 2,048 iterations to produce a 512 bit seed.
5. Keys. The wallet derives every private key and address from that seed, which is why one backup restores all your accounts.

Guessing a properly generated phrase is not realistic; phrases are lost to people, not to brute force. BIP39 publishes word lists in 10 languages, but the specification strongly discourages non English lists because fewer wallets support them.

Passphrase. BIP39 says “every passphrase generates a valid seed.” Adding a passphrase protects you if someone finds your words, but if you forget the passphrase, the funds behind it are unrecoverable, and a typo opens a different, empty wallet.

The BIP39 Word List and Creating a Secure Phrase

The English BIP39 word list is published in the Bitcoin BIPs repository on GitHub. It has 2,048 words in alphabetical order, from “abandon” to “zoo,” and BIP39 says the list is built so that “it’s enough to type the first four letters to unambiguously identify the word.” Bitcoin wallets that use BIP39 phrases draw on this same list.

A secure phrase is one the wallet generates from strong randomness, ideally on an offline hardware wallet or a well established open source wallet. Best practices:

• Do not choose the words yourself. BIP39 says it is “not a way to process user-created sentences (also known as brainwallets),” and hand picked words lack true randomness and usually a valid checksum.
• Avoid online seed phrase generators. Any phrase shown on a website may be copied by whoever runs it.
• Check the backup with your wallet’s verification or recovery test before adding funds.

Examples in 2026

Different backup standards. According to Trezor, its Model One uses a 24 word BIP39 backup and Model T a 12 word one, while the Safe 3 (from June 2024), Safe 5 and Safe 7 default to a 20 word SLIP39 single share backup. SLIP39 can also split a backup into several shares with a threshold; in Trezor’s example, any three of five shares restore the wallet. Trezor says an existing BIP39 backup cannot be converted to SLIP39 directly: you create a new wallet and move the funds.

Phishing for seed phrases. In its weekly review published August 18, 2026, Switzerland’s National Cyber Security Centre (NCSC) described paper letters, sent in the name of crypto wallet providers, that asked recipients to scan a QR code for a “quantum resistance” security update. The fake site then asked for the seed phrase. The same review named Ledger, Trezor and MetaMask among the brands impersonated in phishing emails and described spoofed support calls that pressed victims to read out their phrase.

Scale of crypto fraud. The FBI’s 2025 Internet Crime Report recorded 181,565 complaints and $11.366 billion in losses involving cryptocurrency in 2025, about 54% of the $20.877 billion in total reported losses. The report does not break out seed phrase theft separately.

Risks and Common Misconceptions

• “The wallet company can restore my phrase.” In self custody, the provider does not store your phrase. If it is lost and your device fails, nobody can recover it.
• “A photo or cloud note is a safe backup.” Screenshots, cloud drives and email are common targets for malware and account takeovers.
• “A seed phrase is the same as a private key.” The phrase creates the master seed from which many private keys are derived. Exposing it exposes every account in the wallet.
• “All 24 word phrases work in every wallet.” Most wallets support BIP39, but some use other formats (for example SLIP39 shares or wallet specific seeds), and derivation paths can differ.

Related Terms

• Private Key
• Hardware Wallet
• Non Custodial Wallet
• Bitcoin Improvement Proposal (BIP)
• Best Self Custodial Crypto Wallets

Frequently Asked Questions

What is a seed phrase?
A seed phrase, or recovery phrase, is a list of 12 to 24 words created by a self custody wallet when you set it up. The words encode the wallet’s master secret, from which all private keys and addresses are derived. Entering the phrase into a compatible wallet restores your funds, which is why it must be stored offline and never shared with anyone.

Is a 12 word or 24 word seed phrase better?
Both are considered secure. Under BIP39, 12 words carry 128 bits of randomness and 24 words carry 256 bits, and both are far beyond realistic brute force guessing. Security depends mainly on how you store the phrase. A 24 word phrase takes longer to write down and check, so a careful 12 word backup is better than a careless 24 word one.

What happens if I lose my seed phrase?
If your wallet device or app still works, move your funds to a new wallet with a fresh phrase that you back up properly. If the device is also lost or broken, the funds are normally unrecoverable, because self custody wallet providers do not keep a copy. Be wary of anyone offering to recover a lost phrase, as these offers are common scams.

Can someone steal my crypto with just my seed phrase?
Yes. Anyone who has your seed phrase can import it into a wallet and transfer your funds, without your device, password or PIN, unless you also use a BIP39 passphrase they do not know. Transactions on most blockchains cannot be reversed, so once funds are moved they are very hard to get back. Treat the phrase like the keys to a vault.

Where should I store my seed phrase?
Write it on paper or stamp it on metal, in the correct order, and keep it somewhere private and protected from fire and water. Many people keep a second copy in a separate secure location. Avoid photos, screenshots, cloud storage, email and messaging apps. Never enter the phrase on a website or share it with support staff.

What tools can safely generate and store a seed phrase?
The safest generator is the wallet itself, ideally a hardware wallet that creates the phrase offline and shows it only on its own screen. For storage, paper kept in a secure place or a fire and water resistant metal backup plate avoids the online risks of photos and cloud files. Websites or apps that generate phrases for you to copy should be avoided, because their operator could keep a copy.

Data sources: BIP39 specification and word lists (Bitcoin BIPs repository on GitHub), Trezor (wallet backup guide), Swiss National Cyber Security Centre (weekly review, August 18, 2026), FBI IC3 2025 Internet Crime Report.