What Is a Seed Phrase and How to Keep It Safe

A seed phrase is a list of 12 to 24 common words that encodes the master key to a crypto wallet. Anyone who has those words in the right order can rebuild the wallet and spend everything in it, which is why the backup matters more than the device.

Most people meet the term at wallet setup, when the app shows a word list and asks them to write it down. What follows explains how that list turns into keys, where the words are stored, and how a seed phrase backup should be made and checked.

What Is a Seed Phrase and How Does It Rebuild a Wallet?

A seed phrase is a human-readable form of a long random number. The wallet generates that number once, at creation, and it never changes. Every private key the wallet will ever need is calculated from it on demand.

The word list is standardized. Bitcoin and most other wallets use the BIP-39 English list of 2,048 words, and each word stands for 11 bits of data. Twelve words carry 128 bits of entropy, 24 words carry 256. A checksum is built into the last word, so a typo usually shows up as an invalid phrase rather than a wrong wallet.

The chain from words to spendable coins runs in one direction:

1. The wallet draws random entropy and encodes it as words.
2. The phrase is hashed into a 512-bit seed. This step uses PBKDF2 with 2,048 rounds of HMAC-SHA512.
3. The seed produces a master private key, and a derivation path such as m/84'/0'/0' produces the individual account keys.
4. Each private key yields a public key, and the public key yields the address you share.

Restoring a wallet means running the same steps on another device. The phrase is the input, the derivation path is the setting, and the addresses come out identical. That is why the words are enough to recover funds after a phone is lost or a hardware wallet is destroyed.

The Terms Around a Seed Phrase Backup

Wallet vendors use several labels for closely related things. Getting them straight prevents mistakes during a restore.

• Seed phrase also called a recovery phrase or mnemonic phrase. The word list that encodes the master secret.
• Recovery seed the binary value the words represent. Same information, different form.
• Private key a single key for a single address. A seed phrase generates many of them.
• Passphrase an optional extra word or sentence added by some wallets. Words alone open nothing if a passphrase is set.
• Derivation path the rule that decides which addresses a seed produces. A mismatch in path settings can make a restored wallet look empty.
• Seed phrase backup the physical or encrypted record of the words, kept separate from the device.

The passphrase point deserves attention. In BIP-39 wallets that support it, the passphrase is mixed into the seed calculation. The same 12 words with a different passphrase create a completely separate wallet. Lose the passphrase and the words restore an empty wallet, not your funds.

A Worked Example of How One Phrase Covers Many Addresses

The numbers below are illustrative and simplified; real wallets use far longer keys.

Suppose a wallet generates a 12-word phrase. The list is written down as word1 word2 … word12. Hashing that phrase produces a master seed. From the seed, the wallet follows a Bitcoin path and a separate Ethereum path.

The Bitcoin path produces address A1 for the first receive, then A2, A3 and so on for later ones. The Ethereum path produces a single account address. All of them trace back to the same 12 words. A user who has received coins at 40 different addresses still needs only the one phrase to recover all 40 balances, provided the wallet uses the same derivation paths on restore.

That last condition is the practical catch. Two wallets can follow different path conventions, especially for newer chains or smart accounts. If a restore shows zero balance, the words are usually fine and the path setting is wrong. Checking the path before moving funds is cheaper than discovering the gap later.

Common Misconceptions About Seed Phrases

Most losses in self-custody trace back to a few recurring misunderstandings rather than to broken cryptography.

"The phrase is the same as my password." A password unlocks a local app or an exchange login. A seed phrase is the key material itself. It works in any compatible wallet, with no server involved, which is why it cannot be reset by a support team.

"My exchange account has a seed phrase." Custodial accounts do not give customers one. The exchange holds the keys. A phrase only exists when you control the wallet, which is the dividing line between custodial and self-custody models covered elsewhere on this site.

"A photo of the words counts as a backup." A photo syncs to cloud storage and shows up on lock screens and in galleries. It also gives a phone thief everything needed to drain the wallet. Digital copies of any kind, including password manager notes, email drafts and screenshots, create a single point of failure.

"More words are always safer." A 24-word phrase carries more entropy than 12, but a 12-word phrase with 128 bits of entropy is already far beyond brute-force guessing. The realistic risk is discovery, not guessing. A 24-word phrase that gets photographed is weaker than a 12-word phrase stored well.

How to Make a Seed Phrase Backup That Survives

A backup has to survive three events: a lost device, a house fire or flood, and a burglary. Most people plan for the first and ignore the other two.

Start with materials. Pen on ordinary paper fades and burns. A pencil on acid-free paper or an etched metal plate lasts longer. Steel plates cost more and are worth considering once a wallet holds meaningful value, but they are not required on day one.

Write the words by hand, in order, and never type them into a computer. Label the position of each word or number the lines, since order is part of the secret. For a business treasury, record the location and custodian of each copy in a document kept apart from the copies themselves.

Store at least two copies in separate places: for example, a home safe and a safe deposit box, or a home and a trusted second location in a different building. Avoid addresses tied to your public identity in the same place as the backup. Consider whether any single person should ever see the full list.

Test the backup before relying on it. Wipe a spare device, or use a wallet's watch-only restore, and enter the words from the written copy rather than from memory. A restore that produces the expected first address confirms the backup works. Rehearse this once a year and after any change, such as adding a passphrase.

Where Seed Phrase Backups Fail

Attacks on self-custody rarely break encryption. They target the backup and the person holding it.

Phishing is the most common route. A fake wallet site, browser extension or support chat asks for the phrase to "validate" or "migrate" a wallet. No legitimate wallet, exchange or support agent ever needs the phrase. Any request for it is theft in progress.

Physical discovery comes next. A written phrase left in a desk drawer, a note in a phone case or a copy in a relative's email is exposed to cleaners, guests, contractors and heirs who may not understand what they found. A written copy in a home office is also a known target for intruders who understand crypto.

Single-copy setups are a quieter failure. One card in one apartment survives a lost phone but not a fire, and a fire destroys the only route to the funds. Splitting the phrase across locations reduces the risk of a single theft, but halves written in two places can be lost one half at a time. A common middle ground is a full copy in two secure locations rather than fragments.

Inheritance is the last gap. If nobody knows a backup exists, the funds are unreachable after the holder dies. A sealed letter with an executor, describing where the backup is without containing the full phrase in plain text, solves more problems than it creates.

Why the Backup Deserves More Attention Than the Wallet

Wallets are replaceable and mostly free. The phrase is not, and it controls every address the wallet has ever produced. A hardware wallet adds protection against malware on a computer; it does not remove the need for a careful seed phrase backup, because the device can fail, be lost or be stolen.

The order of priorities is consistent across custody models: generate the phrase on a device you trust, write it down offline, store it in more than one secure place, test the restore, and never share it with anyone. Everything else is secondary.

Self-custody also creates obligations. Losses from a stolen phrase are usually irreversible, and recovery services that claim to help often ask for the very secret that must stay private. For business treasurers, the backup is a control that belongs in written policy, alongside approval rules and record keeping, not an informal note kept by one employee.

Treat the phrase as the account itself. If it is lost, the funds are gone; if it is copied, they can be taken. The habits above are cheap, and they cover the failure modes that account for most real-world losses.

This article is general information, not financial, legal or tax advice.