In a nutshell: A seed phrase is a list of 12 or 24 ordinary words that your crypto wallet creates as a master backup. Anyone who has those words can rebuild your wallet and move your coins, so you should write it down offline, store it somewhere safe, and never type it into a website or share it with anyone. Educational only; not financial advice.
Last updated: October 10, 2026.
When you set up a self-custody crypto wallet, the app usually shows you a short list of random words and asks you to write them down. That list is your seed phrase, and it is the single most important thing you will ever own in crypto. This guide explains what a seed phrase is, how it works, how it differs from a private key and a password, how to store it safely, and the most common mistakes that cost people their coins. If you are new to holding your own keys, start with our guide to self-custody in crypto.
Table of contents
What Is a Seed Phrase?
A seed phrase (also called a recovery phrase, mnemonic phrase or backup phrase) is a human-readable backup of your wallet. It is normally 12 or 24 words long, chosen from a fixed list of 2,048 English words defined in a Bitcoin standard called BIP-39. Most popular wallets for Bitcoin, Ethereum and many other coins use this same standard.
The key idea: your coins are not stored “in” your phone or hardware device. They live on the blockchain. Your wallet only holds the keys that can sign transactions. The seed phrase is the master copy of those keys. If your phone breaks, gets stolen or is wiped, you can install a compatible wallet on a new device, type in the words, and get access to the same addresses and funds again. Ethereum.org describes the recovery phrase as the way to restore your account and warns that anyone with it can take your funds.
That is why the US Securities and Exchange Commission’s investor education site stresses, in its custody basics bulletin, that if you hold your own crypto, losing your keys can mean losing access permanently.
How a Seed Phrase Works
You do not need the math to use a seed phrase safely, but a quick picture helps you understand why it is so powerful:
- Random number. The wallet generates a large random number (128 bits for 12 words, 256 bits for 24 words), according to BIP-39.
- Checksum and words. A small checksum is added, and the result is split into chunks that each map to one word on the 2,048-word list. The checksum is why a wallet can often tell you when you mistype a word.
- Seed. The words (plus an optional passphrase) are turned into a binary “seed.”
- Key tree. From that one seed, the wallet derives a whole tree of private keys and addresses using a method described in BIP-32 (hierarchical deterministic, or “HD,” wallets).
Because every key comes from the same seed, one backup covers every address the wallet will ever create, across many coins if the wallet supports them. Before HD wallets, users had to back up each new key separately, as Bitcoin.org’s wallet security page explains when it recommends regular, offline backups.
Seed Phrase vs Private Key vs Password
These three are often mixed up. Here is how they differ:
| Seed phrase | Private key | Wallet password / PIN | |
|---|---|---|---|
| What it is | 12 or 24 words that generate all your keys | One long secret number for one address | Local lock on the app or device |
| What it controls | Every address in the wallet | Only its own address | Only access to that one device |
| Can restore on a new device? | Yes | Yes, for that address only | No |
| Can it be reset? | No | No | Usually yes, using the seed phrase |
In short, the password protects the device; the seed phrase is the wallet. Someone who learns your PIN but does not hold your device usually gets nothing. Someone who learns your seed phrase gets everything.
12 Words or 24 Words?
Both lengths are part of the BIP-39 standard. A 12-word phrase encodes 128 bits of randomness and a 24-word phrase encodes 256 bits. Even 128 bits is far beyond what anyone can guess by brute force with today’s computers, so for most people the real risk is not guessing; it is theft, phishing or loss. Use whatever your wallet creates, and focus your energy on storing it well.
One note: some wallets use their own formats (for example, Trezor’s multi-share backups based on SLIP-39, or some exchange-linked wallets). A phrase from one format may not work in a wallet that only supports another. Check that your backup is compatible before you rely on it.
What Is a Passphrase (the “25th Word”)?
BIP-39 allows an optional extra passphrase that you choose yourself. It is combined with the words to create a completely different seed. The same 24 words with a different passphrase open a different wallet. People sometimes call it the “25th word.”
- Benefit: if someone finds your written words but not your passphrase, they cannot reach the funds protected by it.
- Risk: if you forget the passphrase, those funds are gone. There is no reset.
A passphrase is an advanced tool. If you use one, back it up separately from the words and make sure a trusted person or your estate plan knows how to find both.
How to Store a Seed Phrase Safely
Good storage balances two risks: someone else finding it, and you losing it. These are widely recommended practices:
- Write it by hand, offline. Use paper or a metal backup plate. Do not take a photo, screenshot it, email it, save it in notes apps or cloud drives, or store it in a password manager connected to the internet unless you fully understand that trade-off.
- Double-check every word and its order. Most wallets ask you to confirm the words. Spelling and order both matter.
- Consider metal for durability. Paper can burn, fade or get wet. Steel or titanium plates resist fire and water. Our guide to paper wallets covers why paper alone is fragile.
- Keep it somewhere private and secure. A home safe or a safe deposit box are common choices. Some people keep two copies in different locations to guard against fire or flood, accepting that each copy is another thing to protect.
- Test your backup. With a small amount, try restoring the wallet on a spare or reset device to make sure the words work.
- Plan for inheritance. If you are the only person who knows where the phrase is, your crypto may be lost if something happens to you. Write clear instructions for your heirs without exposing the words themselves.
For larger amounts, a hardware (cold) wallet keeps the keys off internet-connected devices; see our hot wallet vs cold wallet guide. Some people also use a multisig wallet so that no single seed phrase can move the funds.
Common Seed Phrase Mistakes and Scams
Most seed phrase losses come from human error and social engineering, not hacked cryptography. Watch out for:
- “Support” asking for your words. No real wallet company, exchange or support agent will ever need your seed phrase. The FTC warns that scammers impersonate businesses and support staff to steal crypto.
- Fake wallet apps and websites. Phishing sites and look-alike apps ask you to “verify” or “sync” your wallet by entering the phrase. Download wallets only from the official site or app store listing.
- Pre-filled recovery cards. If a hardware wallet arrives with words already printed, do not use it. A genuine device generates a fresh phrase for you.
- Digital copies. Photos and cloud files can be exposed if an account is breached or malware reads your files.
- Sharing with “investment” contacts. Romance and investment scams often end with a request for wallet access. The FBI’s Internet Crime Complaint Center collects reports of these frauds in the US; in Canada, report to the Canadian Anti-Fraud Centre.
What If You Lose Your Seed Phrase?
It depends on whether you still have working access to the wallet:
- You lost the paper but the wallet still opens: act quickly. Create a brand-new wallet with a new seed phrase, back it up properly, and send your funds to it. Do not just write the old words down again if there is any chance someone else saw them.
- You think someone else saw your phrase: treat the wallet as compromised and move funds to a new wallet right away.
- You lost both the phrase and device access: in self-custody, there is usually no way to recover the funds. No company holds a copy. This is the core trade-off compared with a custodial wallet, where an exchange can reset your login.
Be very careful with “recovery services” that promise to get lost crypto back. Many are scams, a pattern the FTC also flags.
FAQ
Is a seed phrase the same as a recovery phrase?
Yes. Seed phrase, recovery phrase, mnemonic phrase and backup phrase all usually mean the same list of words.
Can I change my seed phrase?
Not on an existing wallet. You create a new wallet, which gives you a new phrase, and move your funds to it.
Do exchanges like Coinbase give me a seed phrase?
Not for a regular exchange account, because the exchange holds the keys. Self-custody wallet apps, including some made by exchanges, do give you a seed phrase.
Can one seed phrase hold Bitcoin and Ethereum?
Yes, if your wallet supports both. The same seed can derive keys for many blockchains.
Is it safe to store my seed phrase in a password manager?
It is more convenient but adds online risk. Many security guides, including Bitcoin.org, favor offline backups for significant amounts.
Sources
- BIP-39: Mnemonic code for generating deterministic keys
- BIP-32: Hierarchical Deterministic Wallets
- SEC / Investor.gov: Crypto Asset Custody Basics for Retail Investors
- Ethereum.org: Ethereum wallets
- Bitcoin.org: Secure your wallet
- FTC: What to know about cryptocurrency and scams
- SLIP-39: Shamir’s Secret-Sharing for Mnemonic Codes
Educational content only. This is not financial or investment advice. Crypto is volatile, and losing or exposing a seed phrase can mean permanent loss of funds.
