What Is a Seed Phrase? Recovery Phrase Explained & Safety

What is a seed phrase?

A seed phrase is a human-readable backup of a Crypto Wallet. It is a short list of ordinary words in a fixed order. Wallets also call it a recovery phrase, a secret recovery phrase or a mnemonic phrase. "Mnemonic" simply means a memory aid.

The phrase matters because of how crypto ownership works. Your coins are not stored inside an app. What you hold is the secret key that can authorise spending, and the phrase encodes the master secret from which all your keys are generated.

This is the core idea of a Non-Custodial Wallet: you hold the phrase, so you control the funds, and no company can reset it for you. Most wallets use 12 or 24 words. Some also offer advanced options such as a passphrase or Shamir's Secret Sharing, covered below.

How it works (BIP-39 words, key derivation)

Most wallets follow a standard called BIP-39 (Bitcoin Improvement Proposal 39). It defines how random data, called entropy, becomes a list of words. Many wallets reuse the method, so one phrase can often be loaded into different apps.

1. The wallet generates random entropy of 128 to 256 bits.
2. It adds a short checksum taken from a SHA-256 hash of that entropy. The checksum lets software catch typing mistakes.
3. The result is split into 11-bit pieces. Each piece picks one word from a fixed list of 2,048 words.
4. The words, plus an optional passphrase, go through a key stretching function (PBKDF2 with HMAC-SHA512, 2,048 rounds) to produce a 512-bit seed.
5. The seed is the root from which the wallet derives all private keys and addresses, in a repeatable order.

BIP-39 allows phrases of 12, 15, 18, 21 or 24 words. A 12-word phrase carries 128 bits of entropy and a 24-word phrase carries 256 bits. The same words always rebuild the same keys.

Why it matters (backup and recovery)

A seed phrase lets you recover your wallet if your phone breaks, your laptop is stolen or a hardware device is lost. You install a compatible wallet, choose the restore option and enter the words. The same accounts and addresses come back.

It is also the reason the backup is so sensitive. A Software Wallet such as MetaMask shows a phrase when you create a wallet, and it states that the phrase gives full control over the wallet. MetaMask also says it cannot recover a wallet for you if you lose the phrase.

• Backup: one copy of the words can restore many accounts and addresses.
• Portability: you can move to another compatible wallet.
• Single point of failure: if the phrase is lost, funds are usually gone for good. If it is stolen, funds can be moved by someone else.

How to store it safely (offline backups, no photos or cloud)

The goal is to keep the words private, offline and protected from fire, water and loss. Official wallet guidance is consistent on the basics. MetaMask, for example, advises writing the phrase down by hand, keeping it in a secure offline place only you can reach, and not storing it in cloud folders, password managers, emails or files on a computer.

• Write the words by hand, in order, and number them. Then re-read them against the wallet screen.
• Do not take a screenshot or photo, and do not paste the words into notes apps, email or chat. Anything on a connected device or cloud account can be copied by malware or through a hacked account.
• Keep the backup somewhere dry and fireproof where you can find it later.
• Consider more than one copy in separate secure places, so a single accident does not destroy your only backup.

Common scams (fake support, phishing sites, "validate your wallet")

Scammers cannot break the maths, so they try to trick you into handing over the words. With your phrase, they can empty the wallet from their own device.

• Fake support: someone messages you on social media or a chat app, claiming to be wallet support, and asks for your phrase to "fix" a problem. MetaMask says it will never ask for your phrase or private keys.
• Phishing sites and fake apps: lookalike websites or apps ask you to "restore" your wallet. Check the address and download apps only from official sources.
• "Validate your wallet" or "sync your wallet" pages: these claim you must enter your phrase to claim an airdrop, fix an error or avoid suspension. No genuine service needs this.

Advanced options (passphrase, Shamir's Secret Sharing, multisig)

A single sheet of paper is a single point of failure, so some users add extra layers. Each option below trades convenience for safety, and each adds a new thing that can be lost. Treat them as advanced tools.

Passphrase

BIP-39 lets you add an optional passphrase, sometimes called a "25th word". It becomes part of the input to the seed derivation, so the same 12 or 24 words with a different passphrase open a completely different wallet. A wrong passphrase does not show an error. It simply opens a different, empty wallet. If you forget the passphrase, the funds are unrecoverable, even with the correct words.

Shamir's Secret Sharing

Shamir's Secret Sharing is a method that splits a secret into several shares. A chosen number of them, the threshold, is needed to rebuild it, and fewer than that reveal no information. For example, you could make five shares and require any three. SLIP-39 is the standard that applies this idea to wallet backups: each share is a list of 20 words (for a 128-bit secret) or 33 words (for 256 bits).

Losing one share does not lose the wallet, and stealing one share does not give access. But SLIP-39 shares are not a BIP-39 phrase, not every wallet supports them, and you must track where the shares are.

Multisig

A Multisig Wallet needs several separate keys to approve a transaction, for example two out of three. Each key can have its own seed phrase and sit in a different place or device. This spreads risk, but setup and recovery are more complex.

Frequently asked questions

Related terms

• Crypto Wallet
• Non-Custodial Wallet
• Paper Wallet
• Multisig Wallet
• MetaMask
• Software Wallet

Sources

1. BIP 39: Mnemonic code for generating deterministic keys Bitcoin Improvement Proposals
2. SLIP-0039: Shamir's Secret-Sharing for Mnemonic Codes SatoshiLabs (SLIPs)
3. User guide: Secret Recovery Phrase, password, and private keys MetaMask Support
4. Basic safety and security tips for MetaMask MetaMask Support