Seed Phrase
Updated Apr 13, 2026
A seed phrase is a sequence of 12, 18, or 24 randomly generated words that serves as the master backup for a cryptocurrency wallet. These words alone fully reconstruct every address, private key, and transaction history associated with that wallet.
Seed phrases are also called recovery phrases, backup phrases, or mnemonic phrases. The words themselves are not random language; the BIP39 standard defines a fixed list of 2,048 English words that most wallets follow today. If your phone breaks, your wallet app is deleted, or your hardware wallet is lost or damaged, your seed phrase is the only thing standing between you and permanent loss of access to your funds. It is the single most important piece of information associated with any self-custody wallet.
How a Seed Phrase Works
When you create a new wallet, the software generates a large random number called entropy. That number is converted into a sequence of words from the BIP39 word list, producing your seed phrase. From there, a deterministic algorithm (defined by BIP32 and BIP44) derives an effectively unlimited number of private keys and public addresses, all from that one phrase.
The process looks like this:
- The wallet generates a random number (128 to 256 bits of entropy depending on phrase length)
- The system converts that number into 12 to 24 words from the BIP39 word list
- The words are passed through a key stretching function (PBKDF2) to produce a 512-bit seed
- That seed feeds into a hierarchical deterministic (HD) algorithm to generate your wallet's full key tree
- Every address your wallet ever creates across multiple blockchains derives from that same root
This is why restoring a wallet is so reliable. The phrase does not store your keys directly. It stores the instructions to rebuild them. Enter the same words in the same order into any BIP39-compatible wallet, and you get the same addresses and private keys, every time.
The final word in a seed phrase is a checksum - a mathematical verification that you recorded the other words correctly. If you accidentally transpose two words or copy one incorrectly, most wallets will catch the error before you try to restore.
Types of Seed Phrases
12-Word Phrases
Generated from 128 bits of entropy. Used by most mobile wallets and many hardware wallets. Offers approximately 2^128 possible combinations, which is considered computationally unbreakable with current technology.
24-Word Phrases
Generated from 256 bits of entropy and preferred by many hardware wallets, including Ledger and Trezor. Roughly 2^256 possible combinations, the added length provides a larger security margin, though both are practically unguessable.
Passphrases (BIP39 Extension)
An optional extra word added to a seed phrase that acts as a 25th (or 13th) word. It does not come from the BIP39 word list and can be any string of characters, creating a completely separate wallet from the same base seed phrase. Even if someone finds your seed phrase, they cannot access your funds without the passphrase. This is sometimes called a "hidden wallet."
Proprietary Recovery Systems
Some wallets use non-BIP39 recovery formats. Older Electrum wallets, for example, use their own word list. These are not cross-compatible. Always confirm which standard your wallet uses before attempting a restore.
Seed Phrase vs Private Key vs Password
These three things are often confused, and confusing them can lead to real losses.
| Factors | Seed Phrase | Private Key | Password |
|---|---|---|---|
| What it is | Master backup for an entire wallet | Key for one specific address | Access control for an app or account |
| What it controls | Every address and key in the wallet | Funds at a single address only | Login access, not funds directly |
| If someone gets it | Full access to all your funds, forever | Full access to that address only | Depends on the platform's security |
| If you lose it | The wallet may be unrecoverable | That address is unrecoverable | Usually resettable |
| Format | 12 to 24 words | 64-character hex string | Anything you choose |
| Stored where | Written on paper, stamped in metal | Derived from a seed, stored in a wallet | Wallet app, password manager |
A private key and a seed phrase are both cryptographic secrets, but a seed phrase sits one level above. It is the root that generates all private keys in a wallet. Your password protects your wallet app. Your seed phrase protects your funds.
Seed Phrase in Practice: What Happens When You Use It
Say you set up Trust Wallet on your phone, write down your 12-word seed phrase, and store it at home. Six months later, your phone is lost. You download Trust Wallet on a new phone, select "Import Wallet," and enter your 12 words in the exact order you wrote them. The wallet derives the same key tree as before. Within seconds, your addresses reappear, your balances load from the blockchain, and you have full access to your funds again.
The same seed phrase works across any BIP39-compatible wallet, not just Trust Wallet. You could restore it in MetaMask, Exodus, or Tangem's app. The wallet app is just an interface. The seed phrase is the actual ownership.
Now consider the opposite scenario. Your phone is lost, and you never wrote down your seed phrase because you assumed the app would ask you to set a backup later. The app is gone. It stored the keys, and now they're gone too. The funds are still on the blockchain, permanently, at addresses that can receive but can never spend. There is no recovery path, and no customer support team can help - making it one of the most common causes of permanent crypto loss.
Risks and How to Protect Your Seed Phrase
Writing It Down Incorrectly
Transposing words, skipping a word, or recording the wrong word from the list are all easy mistakes to make. Most of these produce an invalid phrase that wallets will reject. But a subtle error - like writing "army" instead of "armed" - can produce a valid phrase that restores a completely different, empty wallet.
How to reduce it: After writing your phrase, verify each word against the BIP39 word list. Many wallets will prompt you to confirm your phrase by re-entering words in a specific order.
Storing It Digitally
Screenshots, notes apps, cloud drives, emails, and messaging apps are all internet-connected. Any seed phrase stored digitally is effectively a hot wallet, regardless of how cold your hardware is.
How to reduce it: Store your seed phrase only on physical media. Paper is the minimum. Fireproof metal plates (like Cryptosteel or Bilodeau) are better for long-term storage.
Sharing It With Anyone
No legitimate wallet, exchange, support team, or tool will ever ask for your seed phrase. Requests for seed phrases are always scams.
How to reduce it: Treat your seed phrase the way you would treat a signed blank check for your entire net worth. Never photograph it, type it into any website, or dictate it over any call.
Physical Loss or Damage
Paper burns, fades, gets wet, and decays. A seed phrase written in pencil on a notebook page is one house fire away from being permanently lost.
How to reduce it: Use archival-quality paper and permanent ink whenever possible. For significant holdings, consider engraving your phrase on stainless steel.
Single Copy Risk
Most people store one copy of their seed phrase. If it is lost, stolen, or destroyed, there is no fallback.
How to reduce it: Keep two or three copies in separate physical locations. A fireproof safe at home and a bank safety deposit box are a common approach. If you use a passphrase (BIP39 extension), the seed phrase and passphrase should be stored separately - someone finding one without the other cannot access your funds.
Common Misconceptions
- "My wallet provider can recover my seed phrase if I lose it." No wallet provider stores your seed phrase. If they did, they would have access to your funds. The entire point of self-custody is that no one else has this information.
- "A longer seed phrase is always better." Both 12-word and 24-word phrases are computationally unguessable. The difference is theoretical margin, not practical security. Physical security of the backup matters far more than the length of the phrase.
- "If I never move my crypto, no one can take it." Funds can only be sent from an address if someone signs a transaction with the private key. But if an attacker finds your seed phrase, they do not need to wait for you to transact. They import the wallet, and the funds move immediately.
How Tangem Approaches Seed Phrase
Most wallets generate a seed phrase during setup and ask you to write it down immediately, creating a persistent paper backup that holds the master key to everything in your wallet. Securing that backup becomes an ongoing responsibility; physical damage, theft, and improper storage are all real failure points.
Tangem takes a different approach. The private key is generated inside the card's secure chip and never leaves it. The wallet does not generate a seed phrase by default - the card itself is the backup, and Tangem recommends purchasing a set of two or three cards that all share the same wallet, so you have physical redundancy without a paper phrase that could be found or copied. If you lose one Tangem card, you can access your wallet with another card from the same set.
For users who want a seed phrase for cross-wallet compatibility, Tangem offers an optional mode that generates and displays a standard BIP39 phrase. The result is a wallet that removes the seed phrase as a liability while keeping the user in full self-custody of their funds.
Frequently Asked Questions About Seed Phrases
What happens if I lose my seed phrase?
If you lose your seed phrase and your wallet device is also lost, broken, or wiped, your funds are permanently inaccessible. There is no recovery option. Writing down your seed phrase immediately and storing it securely is the first and most critical step when setting up any self-custody wallet.
Can someone guess my seed phrase?
Not in any practical sense. A 12-word phrase has approximately 2^128 possible combinations - more than the number of atoms in the observable universe. Brute-force guessing is computationally impossible with any existing or foreseeable technology. The real threat is physical exposure, not a cryptographic attack.
Is it safe to store my seed phrase in a password manager?
No. A password manager is software running on a connected device. If that device or service is compromised, your seed phrase is exposed. Seed phrases should exist only as physical backups.
What is the difference between a seed phrase and a recovery phrase?
They are the same thing. "Seed phrase," "recovery phrase," "backup phrase," and "mnemonic phrase" all refer to the same 12 to 24-word backup. Different wallets use different names for it.
Can I use my seed phrase with any wallet?
Any wallet that follows the BIP39 and BIP32 standards will restore the same addresses from the same seed phrase. Most modern wallets do. However, some older or proprietary wallets use different standards and may not be cross-compatible. Always check before assuming portability.
Should I take a photo of my seed phrase as a backup?
No. A photo stored on a phone, synced to a cloud service, or backed up to any digital storage means your seed phrase is on an internet-connected server. That defeats the purpose of cold storage entirely. Write it by hand on paper.
What is a passphrase, and do I need one?
A BIP39 passphrase is an optional extra word added to your seed phrase that creates a hidden wallet. It significantly increases security if someone finds your seed phrase backup without the passphrase; the phrase alone restores a different empty wallet. It is worth considering for significant holdings, but it adds complexity: you must back up the passphrase separately and never forget it.
How many words should my seed phrase be?
Both 12 and 24-word phrases are secure for any realistic threat model. If your wallet gives you a choice, 24 words provide a larger theoretical security margin. In practice, protecting the physical backup matters far more than the length of the phrase.