The one fact that matters
Whoever has the seed phrase controls the wallet. Not your password. Not your device. Not the wallet brand. The phrase. Lose it and your coins are gone. Leak it and someone else's wallet now owns them.
That's why self-custody is so heavy on backups — there's no reset button.
What it actually is
A seed phrase (or "mnemonic") is a human-readable encoding of a large random number. The standard most wallets use is BIP39:
- The wallet generates 128 or 256 random bits of entropy.
- It appends a small checksum (4 or 8 bits).
- The bits are sliced into 11-bit groups.
- Each 11-bit number maps to one of 2,048 words in the BIP39 word list.
12 words ≈ 128 bits of entropy. 24 words ≈ 256 bits. Either is impossible to brute-force with realistic computing power for the foreseeable future.
How the phrase becomes keys
The phrase (plus an optional passphrase) is run through a key-derivation function (PBKDF2 with 2,048 rounds) to produce a 512-bit seed. From that seed, the wallet derives a hierarchical tree of private keys — one for each account, each address. This is BIP32 / BIP44 / SLIP-44 territory.
The practical consequence: the same phrase always derives the same keys. Restore it in any compatible wallet on any device, and your balance reappears.
Backup methods, ranked
Good
- Paper, by hand, in two separate physical locations. Boring, effective.
- Stamped metal plate (Cryptosteel, Billfodl, hand-stamped washers). Survives fire and water.
- Shamir Secret Sharing — split the seed into N shares, any K of which restore. Advanced, but eliminates single points of failure.
Bad
- Photo on your phone — backed up to iCloud / Google.
- Note in a cloud document or email draft.
- Encrypted file on the same machine as the wallet.
- Password manager that syncs to the cloud.
- Telling a friend "in case something happens".
The optional BIP39 passphrase ("25th word")
A passphrase you add to the seed phrase creates an entirely different wallet — same words, different passphrase, different coins. Useful for plausible-deniability setups: the 12 words alone unlock a decoy wallet, the words + passphrase unlock the real one. Also a massive footgun if you forget the passphrase. Lose it and the funds are unreachable.
How seed phrases get stolen
- Phishing. Fake "wallet support" asks you to "verify" your seed. Real support never does.
- Clipboard malware. Anything you paste — including a seed — can be captured.
- Cloud sync. A photo on your phone sits on Apple/Google servers forever.
- Physical access. A roommate or burglar finds the sticky note.
- Social engineering. "I'm from the IRS / police / wallet team. Read me your words."
Nobody legitimate ever needs your seed phrase. Ever.
If you suspect compromise
- Generate a brand-new wallet (new seed, fresh device if possible).
- Move all funds to the new wallet immediately.
- Retire the old phrase — never reuse it.
Cross-wallet compatibility
BIP39 + BIP44 means a phrase from one wallet usually restores in another wallet of the same chain. Always test restoration on a tiny amount before trusting the backup at scale.
Frequently asked questions
What is a seed phrase?
A list of 12 or 24 ordinary English words that encode the master private key for your wallet. Anyone with the phrase can spend all your coins; anyone without it can't.
Why 12 or 24 words?
12 words encode 128 bits of entropy; 24 words encode 256 bits. Both are vastly beyond brute-force range. 24 is the standard for hardware wallets; 12 is common in software wallets.
Can I store my seed phrase digitally?
Strongly discouraged. Cloud documents, photos, password managers all expand attack surface. Write on paper or stamp on metal, store offline in multiple physical locations.
What if I lose my seed phrase?
If you also lose the device and there's no backup, the coins are gone forever. There is no support number for self-custody.