Seed phrases explained

What is a seed phrase, in plain terms?

Every crypto account is controlled by a private key: a very large secret number that signs transactions. Many wallets do not ask you to back up that number directly. Instead they show you a short list of everyday words once, at setup, and ask you to write it down. That list is the seed phrase.

The words are not a password that unlocks a company account. They are the secret itself, written in a form people can copy by hand. Ethereum's official security guide calls the recovery phrase the master key to your wallet. Feed the same words into compatible wallet software on any phone or computer, and it will rebuild the same keys and show the same balances.

This is also why a wallet app is not where your coins live. As ethereum.org puts it, a wallet is a tool for using your keys; the assets sit on the blockchain. If you are new to wallets, start with crypto wallets explained.

How do 12 words turn into your private keys?

Many wallets follow BIP-39, a Bitcoin Improvement Proposal created in 2013 and now marked as deployed. The process runs in one direction only:

1. Random number. The wallet generates 128 to 256 random bits, called entropy. For a 12-word phrase it is 128 bits.

2. Checksum. It hashes that number with SHA-256 and adds the first few bits of the result (4 bits for 12 words). This lets software catch a mistyped word.

3. Words. The 132 bits are cut into 12 groups of 11 bits. Each group is a number from 0 to 2,047 that points to one word in the official list.

4. Seed. The words, plus an optional passphrase, go through a key-stretching function (PBKDF2 with 2,048 rounds) to produce a 512-bit seed.

5. Keys. From that seed the wallet derives as many private keys and addresses as it needs, always in the same order.

Two details are useful in practice. The BIP-39 wordlist was chosen so that the first four letters identify each word, so a smudged ending is often still readable. And because the last word carries the checksum, you cannot simply invent 12 words of your own: most random combinations fail the check, and the standard advises against phrases not generated this way.

Seed phrase, private key, PIN or passphrase: what does each one protect?

Beginners often mix up the secrets a wallet uses. They protect very different things, and losing each has very different consequences.

Why is a partly exposed seed phrase almost as bad as a full leak?

Twelve words drawn from 2,048 options give 2,048¹² possible sequences. Only one in 16 of them passes the checksum, which still leaves 2¹²⁸ valid phrases, roughly 3.4 × 10³⁸. Nobody can guess a properly generated phrase from scratch. The protection collapses, though, once most of the words are known.

The same arithmetic explains why splitting a phrase into two halves and storing them in different drawers is weaker than it sounds. A thief who finds six of the 12 words cuts the search from about 3.4 × 10³⁸ phrases to about 4.6 × 10¹⁸ (2,048⁶ ÷ 16), and finding the second drawer ends it. If you need protection against a single stolen backup, a passphrase or a multisig setup is designed for that job.

How should you store a seed phrase?

The official guidance from ethereum.org and bitcoin.org points the same way: keep the words offline, keep more than one copy, and keep them where only you, or people you trust with your estate, can reach them.

• Write it by hand. Copy the words in order, numbered, and check every spelling against the screen before you confirm.
• Never photograph it. Ethereum's security guide warns that screenshots can sync to cloud storage, where attackers may reach them. The same goes for notes apps, email drafts and chat messages to yourself.
• Keep at least two copies in separate places. Bitcoin.org recommends multiple backups in different secure locations, so a single fire, flood or move does not wipe you out.
• Plan for your family. Bitcoin.org also suggests a backup plan for relatives. Funds nobody can find are lost for good.

A seed phrase on paper is a form of cold storage, but the device you type it into matters too. Our guide to hardware vs software wallets explains where the words should be entered, and where they never should.

What mistakes do beginners make with seed phrases?

• Typing the words into a website. A page asking you to "validate", "sync" or "restore" your wallet by entering your phrase is a phishing page. Ethereum.org is blunt: no legitimate service, support agent or website will ever ask for it.
• Sharing it with "support". Scammers pose as helpdesk staff in private messages and on social media. Our guide to common crypto scams shows the scripts they use.
• Storing it digitally "just for now". Cloud photos, password-protected documents and email drafts are all online copies.
• Skipping the double-check. One misspelled or out-of-order word can make the backup useless when you need it most. Compare each numbered word against the screen before you confirm, and fix unclear handwriting while you still can.
• Forgetting the passphrase exists. If you add one, back it up separately. Without it the words open a different wallet.