Definition
Shamir's Secret Sharing (SSS), published by Adi Shamir in 1979, is a cryptographic method for splitting a secret into multiple shares so that any chosen threshold of them reconstructs the original, while any smaller number reveals absolutely nothing about it. SLIP39 is the SatoshiLabs standard that adapts SSS specifically to hierarchical-deterministic Bitcoin wallet seeds.
How threshold backups work
You pick two numbers: n, the total shares created, and t, the threshold needed to recover. A "2-of-3" backup, for example, produces three shares where any two reconstruct the seed and any single share is useless to an attacker. Mathematically, SSS treats the secret as a point on a polynomial; the shares are other points, and recovering the curve requires at least t of them. SLIP39 encodes each share as a list of 20 or 33 words drawn from its own wordlist, distinct from the BIP39 list.
Why sovereign holders use it
A single seed phrase is a single point of failure: lose it and funds are gone, find it and an attacker has everything. SLIP39 lets you geographically distribute shares so no one location compromises your coins and no one loss locks you out. It is the default backup type on recent Trezor hardware wallets. The trade-off versus a plain seed is added complexity and the need to manage share locations carefully.
SLIP39 protects the same seed material described in standard BIP44 derivation path wallets. For collaborative control of live funds rather than backup, compare it with on-chain approaches like MuSig2 (BIP327).
In Simple Terms
Shamir’s Secret Sharing (SSS), published by Adi Shamir in 1979, is a cryptographic method for splitting a secret into multiple shares so that any chosen…