Seed Phrases: What They Are and How to Protect One
Twelve ordinary English words are the single most valuable thing most crypto holders own, and most people store them worse than they store a spare key.
Key points
- The words are a human-readable encoding of a large random number, defined by the BIP-39 standard.
- From that number, a whole tree of private keys and addresses is derived deterministically.
- The word list is designed so the first four letters identify each word uniquely.
- Anyone with the words has the funds. Storage is the entire security problem.
What the words actually encode
A seed phrase is not a password and it is not an encryption of your keys. It is an encoding of the random number from which every key in your wallet is generated.
The process, standardised as BIP-39:
- The wallet generates 128 or 256 bits of randomness.
- A checksum is appended — 4 bits for 12 words, 8 for 24.
- The result is split into groups of 11 bits, each indexing one of 2,048 words in a fixed list.
- The words are stretched into a 512-bit master seed using PBKDF2 with 2,048 iterations.
Twelve words therefore carry 128 bits of entropy, which is the same order of security as a 256-bit private key and comfortably beyond brute force. The checksum is why a phrase with a wrong word is usually rejected rather than opening a different, empty wallet — roughly one random 12-word combination in sixteen passes the check.
Why these particular words
The 2,048-word list was designed with several constraints that are worth understanding:
- First four letters are unique. “abandon” and “ability” differ by their third letter; no two words share the first four. This means a steel backup only needs the first four characters stamped, and hardware wallets can offer autocomplete after four keystrokes.
- No similar pairs. Words likely to be confused when written by hand or read aloud were excluded.
- Common, short words that are easy to write and hard to misspell.
- Sorted alphabetically, which makes efficient lookup possible on constrained devices.
Word lists exist in several languages, but the English list is the default and the most widely supported. A phrase generated in one language cannot be restored on a wallet that only supports another.
One phrase, thousands of addresses
From the master seed, BIP-32 derives a hierarchical tree of keys. A derivation path names a branch:
This is why a single phrase backs up every account and every currency in the wallet, and why your wallet can generate a fresh receiving address for every transaction without needing a new backup.
It is also the explanation for one of the most alarming experiences in crypto: restoring a correct seed phrase into a different wallet and seeing a zero balance. The funds are almost always on a different derivation path. Most wallets let you scan alternative paths, and this is a configuration problem rather than a loss.
Storing one so it lasts
The threats to a seed phrase backup are, in rough order of how often they actually cause losses:
| Threat | Mitigation |
|---|---|
| Digital compromise | Never photograph, type or upload it — offline only |
| Fire | Steel plate or capsule rather than paper |
| Flood | Steel, or sealed waterproof container |
| Loss or misplacement | Two copies in separate secure locations |
| Theft | Safe, or a passphrase so the words alone are useless |
| Your own death | Documented instructions with a solicitor |
| Transcription error | Verify by restoring before funding |
Splitting a phrase across locations is popular and needs care. Naive splitting — six words here, six there — both weakens each half and creates a situation where losing one half loses everything. Proper schemes such as Shamir secret sharing, implemented by some wallets, split it so that any two of three shares reconstruct the secret and any single share reveals nothing.
Test your backup. The most common catastrophic failure is not theft but a phrase written down wrongly and never checked. Wipe the device and restore from your written words before you put real money on it.
Frequently asked questions
Can I change my seed phrase?
Not directly — it is determined by the original randomness. To change it, create a new wallet with a new phrase and move the funds across. That is the correct response if you believe your existing phrase may have been exposed, and it should be done immediately.
Is it safe to store it in a password manager?
It is better than nothing and worse than paper. A password manager is a networked, encrypted store with a master password that can be phished, and its vault can be exfiltrated. For meaningful amounts, keep the phrase offline.
What is a BIP-39 passphrase?
An optional additional secret that, combined with the words, produces an entirely different wallet. Someone who finds your written phrase gets an empty or decoy wallet. The cost is absolute: forget the passphrase and the funds are unrecoverable even with the correct words.
Why does my correct phrase show an empty wallet?
Almost always a derivation path mismatch between wallets. Check whether the software lets you select a different path or account type — legacy, SegWit and native SegWit paths all produce different addresses from the same phrase.