Seed XOR

Seed XOR splits a BIP-39 seed into multiple phrases by combining them with the bitwise exclusive-OR (XOR) operation. Take an original 24-word seed and XOR it against one or more random BIP-39 phrases of the same length; the result is a new, valid-looking phrase. Each output part looks like an ordinary seed, but only by XOR-ing every part back together do you recover the original. Holding any single part on its own reveals nothing useful about the secret.

How the split works

The operation is performed on the underlying entropy bits, not the words directly. In a 24-word phrase the last word encodes an 8-bit checksum; Seed XOR excludes those checksum bits from the math and recomputes a valid checksum for each part, so every share is still a verifiable BIP-39 phrase. Popular hardware signing devices can split a seed into two, three, or four parts entirely offline, and the math is simple enough to verify or even reconstruct by hand on paper.

When to choose it

Seed XOR is an all-or-nothing scheme: unlike a threshold split, you need every single part to rebuild the seed, so losing one part means losing the wallet. That makes it ideal when you want geographic distribution without trusting any one location, but it offers no fault tolerance. If you need to survive the loss of a share, a threshold approach such as Shamir's Secret Sharing fits better.

A common pattern is to stamp each part onto its own steel seed backup and store them in separate secure locations, so no burglar or fire at a single site can ever reconstruct your keys.