Seed Phrase

A seed phrase (also called a recovery phrase or mnemonic) is a human-readable backup of a Bitcoin wallet's master secret, encoded as an ordered list of 12 or 24 common words. Standardized in BIP39, the words are drawn from a fixed list of 2,048 and map deterministically to the random entropy that seeds your wallet. From that single seed, the wallet derives every private key and address it will ever use — which is why the phrase, and only the phrase, is what you must protect and back up. Everything else about a wallet can be reinstalled, re-synced, or re-derived; the seed cannot.

Why words instead of a raw key

The mnemonic encoding exists because humans transcribe words far more reliably than long hexadecimal strings. Twelve words encode 128 bits of entropy; twenty-four words encode 256 bits. BIP39 also builds in a checksum, so a mistyped or out-of-order word is usually detected on restore rather than silently producing an empty wallet. The word list itself was chosen so that the first four letters of every word are unique — you can abbreviate when stamping metal and still recover unambiguously. But the friendliness of the format cuts both ways: anyone who obtains your words can recreate your wallet on any device and spend your coins, and anyone who loses them with no other backup loses the funds permanently. There is no support line, no reset flow, no recourse. The seed phrase is the single most sensitive object in self-custody.

Generating and storing it properly

Best practice is to generate the seed on a dedicated hardware wallet, where the entropy comes from a device that never touches the internet, and to keep the signing keys in cold storage. Write the words on durable media — paper at minimum, stamped or punched metal if the value justifies it, since paper loses to fire and flood. Never photograph the phrase, never type it into an internet-connected device, never store it in a password manager or cloud note, and never read it aloud near anything with a microphone. Store backups in separate physical locations so that no single fire, theft, or seizure takes both the wallet and its backup. And test your backup: a recovery phrase you have never actually restored from is a hypothesis, not a backup. Do the test with a small amount first — restore the phrase on a second device, verify the same addresses appear, then wipe it. Ten minutes of rehearsal buys certainty that the words on your steel actually reconstruct your wallet.

Extending the model

Two standard tools extend the basic phrase. A BIP39 passphrase adds an optional user-chosen secret — sometimes called the 25th word — that combines with the seed to derive a completely different wallet, giving you a second factor and plausible deniability at the cost of one more thing you can never lose. Shamir's Secret Sharing (SLIP39) splits the backup into threshold shares, so that, for example, any three of five distributed shares can reconstruct the seed but two reveal nothing. For larger holdings, many Bitcoiners sidestep single-seed risk entirely with multisig, where several independent seeds must cooperate to spend and no single phrase is a catastrophic loss.

The root of the tree

Under the hood, the phrase feeds a key-derivation function that produces the master seed for a hierarchical-deterministic wallet, and every account and address grows from that root along a BIP44 derivation path. That determinism is what makes the whole scheme work: twelve words on a piece of steel in a safe can regenerate a lifetime of addresses on any compatible wallet, decades from now, with no company, server, or permission involved. That is the entire sovereignty proposition of Bitcoin compressed into something you can hold in one hand — treat it accordingly.