This content is for educational purposes only and should not be considered financial advice. Crypto investments carry risks, including loss of capital. Always do your own research or consult a licensed advisor before investing.This content is for educational purposes only and should not be considered financial advice. Crypto investments carry risks, including loss of capital. Always do your own research or consult a licensed advisor before investing.
A seed phrase is a human-readable backup that restores your crypto wallet. Under the BIP-39 standard, 12 or 24 words encode strong randomness plus a checksum, which a wallet converts into a master key that can derive every account and address. Protect it offline, never share it, and consider a passphrase for extra security.
Seed phrases use words instead of numbers or code because words are easier for humans to read, write, and transcribe without errors. If your backup were shown in raw hexadecimal (a string of long numbers and letters), the chance of mistakes would skyrocket.
To solve this, BIP-39 introduced a fixed wordlist of 2048 carefully chosen words. These lists exist in multiple languages (English, Spanish, French, Italian, Chinese, Japanese, Korean, and others). Each word has a unique position in the list (from 0 to 2047). When your wallet generates entropy, it slices the random bits into chunks of 11 bits. Each chunk corresponds to a number between 0 and 2047, which is then mapped to a word from the list.
This is why:
The official wordlists are published in the BIP-39 standard on GitHub (maintained by Bitcoin developers). The most common one is the English wordlist, which includes words like âapple,â âglobe,â âribbon,â âzebra.â The words were chosen to avoid ambiguityâthere are no similar-looking pairs like âpearâ vs âpeer,â or words with accents.
So, your seed phrase is not just ârandom wordsâ picked from a dictionary. Itâs structured randomness mapped to a standardized list, making it both human-friendly and cryptographically secure.
âEntropyâ is a measure of randomness. More bits mean more possibilities.
Even 128 bits is astronomically large. At an unrealistically fast 10^18 guesses per second, the average time to brute-force 128 bits is over 5 trillion years. Twenty-four words provide a margin far beyond that.
The words are not arbitrary. They come from the BIP-39 standard, which defines a fixed dictionary of 2048 unique words per language. By converting entropy (randomness) into words, wallets achieve three goals at once:
Each word corresponds to a number from 0 to 2047. Your entropy is split into 11-bit chunks, mapped to words, and combined with a checksum to ensure validity. Most wallets use the English list by default, but others exist.Â
The key rule: always restore in the same language and keep the order intact.
Your recovery words come from BIP-39, which defines how entropy (randomness) is turned into a mnemonic phrase and then into a seed. That seed is the starting point for everything else.
From there, BIP-32 takes over. It uses the seed to generate a hierarchical deterministic (HD) tree of private and public keys. This means a single root can deterministically produce unlimited accounts and addresses.
Finally, BIP-44 adds structure, standardizing derivation paths so different wallets know where to âlookâ for your keys.
This layered design is why one set of 12 or 24 words can unlock all your coins, tokens, and accounts across any compatible wallet:
SHA-256 (Secure Hash Algorithm 256-bit) is a cryptographic hash function widely used in Bitcoin and many other blockchain systems. A hash function takes any input text, numbers, or data and produces a fixed 256-bit output (a long string of letters and numbers).
Key properties of SHA-256:
In the context of seed phrases and wallets, SHA-256 plays several roles:
Think of SHA-256 as a digital fingerprint machine: no matter what you feed it, it produces a unique, fixed-size fingerprint. Even a tiny change in input â flipping one bit â completely changes the fingerprint.
In BIP-39, the checksum is created by taking a SHA-256 hash of the entropy and appending a few bits of that hash to the end of the entropy. These extra bits act as an error check: if a word is mistyped or placed in the wrong order, the checksum will fail and the wallet will reject the phrase as invalid.
Bottom line: 12 words are enough for almost everyone. Choose 24 if you want maximum theoretical security or operate with very large holdings.
A passphrase is optional text you add to your seed phrase. It is not one of the 2048 BIP-39 words. You choose it freely, like a password.
When you combine your 12 or 24 words with a passphrase, the wallet generates a completely different set of keys and accounts. Without the passphrase, that wallet cannot be restored.
SLIP-39 splits a secret into multiple word shares using Shamirâs Secret Sharing. You might set 2-of-3 or 3-of-5 shares to recover. This reduces single-point risk, but support is not universal and it is not the same as BIP-39. Only use SLIP-39 if you understand the compatibility trade-offs.
Think of BIP-39 as the language of your backup, BIP-32 as the family tree of keys, and BIP-44 as the addressing scheme for different coins and accounts.
If your device dies and your seed is gone, funds are unrecoverable. If someone else gets your seed, they can take everything. There is no central recovery. This is why careful backups matter. If you used a passphrase, you also need that passphrase to recover.
Several approaches reduce direct seed handling. They do not remove responsibility, they shift it.
BIP-39 supports 12, 15, 18, 21, and 24 words. Most wallets default to 12 or 24. There is no meaningful security advantage to odd lengths beyond the entropy increase that comes with longer phrases.
A standard that turns randomness into mnemonic words and then into a root seed used to derive keys.
The hierarchical deterministic method that derives a tree of keys from that seed.
A path convention that organizes accounts and coins so different wallets agree on where keys live.
A Shamir sharing approach that turns the backup into multiple word shares with thresholds for recovery.
A fixed 2048-word list defined by BIP-39 in several languages, with English most common.
Entropy is the randomness used to generate your recovery phrase. It ensures your 12 or 24 words are unpredictable. More entropy means more possible combinations: 12 words encode ~128 bits of entropy, while 24 words encode ~256 bitsâmaking brute-force attacks virtually impossible.
A checksum is a small piece of error-detecting data added to the entropy before the words are chosen. In BIP-39, it helps prevent mistakes: if you mistype or reorder a word, the checksum wonât match, and the wallet will reject the phrase as invalid.
Security margin. Twelve words are already extremely strong. Twenty-four words provide a larger theoretical margin.
Use it if you can store it safely and will not forget it. It meaningfully hardens your backup.
If you also lose access to the device and do not have a passphrase and backup, yes. There is no central recovery.
They remain the most widely compatible backup. MPC, social recovery, and seedless UX are growing, with different trade-offs.
Typing your seed into websites, storing photos of it, keeping a single copy, and losing a passphrase.
Features
Improvements
Bug fixes
