What is a seed phrase and what happens if you lose it

Seed phrase (also called a recovery phrase or mnemonic phrase) is usually a sequence of 12, 18, or 24 words shown by a wallet when it is created. It is not a “hint” or just another backup file. Under the BIP39 standard, the mnemonic is used to derive a cryptographic seed, from which the wallet can generate private keys and addresses.

One important point: your coins are not stored on your phone or inside a hardware wallet. They exist on the blockchain, while the device holds the private keys needed to sign transactions. Losing a phone is inconvenient, but it is not critical if your seed phrase is safely backed up. If the seed phrase is gone and you no longer have access to the wallet itself, a self-custody wallet cannot be restored.

This article explains how a seed phrase works, why losing it can mean losing access to your funds, which storage mistakes are most common, and how to protect your backup properly.

What is a seed phrase, in plain English?

A seed phrase is usually a set of 12, 18, or 24 words you receive when creating a crypto wallet. Those words are the foundation of the wallet. They are used to derive the private keys and addresses that ultimately let you sign transactions.

Put simply, it is the main recovery secret for your wallet and the assets it controls.

12, 18, or 24 words: what is the difference?

When you create a wallet, it starts with cryptographically random data and maps it to words from a standard list (the 2,048-word BIP39 wordlist). The words appear in a specific order, and that order matters. BIP39 also supports 15- and 21-word mnemonics, although those formats are much less common.

The most common formats are:

• 12 words — the basic and most common format (128 bits of entropy)
• 18 words — less common
• 24 words — a longer format with 256 bits of entropy

In theory, a 24-word phrase has a larger brute-force security margin. In practice, a properly generated 12-word phrase is also considered secure today, provided it has not been exposed to anyone else.

Two details matter:

• Every word must be recorded correctly
• The word order must not change

If a word is wrong or the order is changed, the wallet will usually fail the checksum validation. If an incorrect combination happens to pass the checksum, it will derive a different wallet with different addresses.

If your wallet rejects the phrase during recovery, see our separate guide: “Recovery phrase is invalid: why your wallet won’t accept your seed phrase”.

A seed phrase is not a password

A password or PIN usually protects access to an app or a specific device. How it can be changed or reset depends on the wallet, while the keys in a non-custodial HD wallet are recovered from the wallet backup itself.

A seed phrase is the basis from which the wallet reconstructs private keys and addresses. If you still have the words, you can restore access in a compatible wallet. If the seed phrase is lost and you no longer have access to the keys, there is nothing to recover from. In a self-custody wallet, no provider keeps a spare copy for you.

The seed phrase is created when the wallet is set up and cannot be changed in place. The only way to get a new one is to create a new wallet with a new seed phrase and transfer your assets to it.

The key point is simple: the seed phrase can restore the wallet, while a leak can give someone else the same recovery capability. If the seed phrase is lost but the device still works, you can move the funds to a new wallet; if you have neither the seed phrase nor access to the keys, recovery is not possible.

If your seed phrase is already lost but the wallet still works, we have a separate step-by-step guide on what to do after losing your seed phrase.

How a seed phrase works: from words to keys

When a wallet is created, it first generates random data called entropy. That data is then encoded as words from a list of 2,048 words, where each word corresponds to an index from 0 to 2047. A seed phrase therefore looks like ordinary language, but underneath it is a human-readable way to represent cryptographic randomness.

The seed is used to derive private keys

The seed is the root of an HD wallet. From it, the wallet derives private keys, and from those keys it derives addresses.

A wallet is rarely limited to a single address. It can generate many addresses for the same asset, as well as separate addresses for different networks and accounts. This is useful for both organization and privacy: you can receive funds to different addresses while they remain controlled by keys derived from the same seed.

Where all those addresses come from (BIP44)

Wallets do not generate addresses at random. They follow a derivation path. One widely used structure is described in BIP44:

m / purpose’ / coin_type’ / account’ / change / address_index

In practice:

• account — lets one seed contain multiple independent accounts
• change — 0 is the external branch used for receiving addresses, while 1 is the internal branch used for change addresses
• address_index — the address counter (0, 1, 2, 3…), which is why one wallet can expose many addresses

A seed phrase can restore access in a compatible wallet

If you enter the same seed phrase into a compatible wallet that supports the required network and derivation scheme, it can reconstruct the same addresses and display the same balances, because the assets are not stored inside the original device.

One detail often causes confusion: a different wallet may show a different set of addresses if it uses another network, account, address type, or derivation path. If the seed phrase is correct and the wallet supports the required standard, the funds have not disappeared — you may simply need to select the correct account or derivation path.

Where your funds actually are

Many people assume crypto is stored on a phone or inside a hardware wallet. It is not.

• Your phone — an interface for interacting with the wallet
• A hardware wallet — a tool for keeping private keys isolated and signing transactions
• The blockchain — the ledger where the assets are recorded

That means:

• Lost the device, but still have the seed phrase → access can be restored
• Lost the seed phrase and no longer have access to the device → the wallet cannot be restored

In crypto, control of the private keys is what gives you the ability to move funds. For an HD wallet, the seed phrase is the primary backup used to reconstruct those keys.

Why losing a seed phrase can permanently lock you out of your funds

A seed phrase is not a formality. It is what lets the wallet reconstruct the keys used to sign transactions. If the seed phrase is lost and you no longer have access to those keys, there is nothing left to reconstruct them from, and without the keys you cannot authorize a transfer.

There is no support desk that can restore it

No one keeps a backup copy on your behalf. The wallet manufacturer cannot recover your seed phrase because it does not know it. An app password may be replaceable. A seed phrase is not.

The blockchain does not know who you are

The network does not keep identity records for the owner of a wallet. What matters is whether a transaction carries a valid signature from the correct key. The network does not check your passport, phone number, or email — it checks the signature. No valid signature means no ability to spend those funds.

If someone else gets your seed phrase

Someone who obtains your seed phrase can restore the same wallet and sign transfers just as you can. Once a blockchain transaction is confirmed, there is generally no built-in way to reverse it.

A partial leak is still a risk

Brute-forcing a complete, properly generated seed phrase from scratch is not realistic. The situation changes when an attacker has partial information: several words, their positions, or a photo showing part of the backup. The more information they have, the smaller the remaining search space becomes.

Treat any leak of part of your seed phrase as a potential compromise. The safe response is to create a new wallet and move the assets while you still control the old one.

Common seed phrase storage mistakes

Taking a photo of it

A photo of your seed phrase may feel convenient until something goes wrong. It is just another file: it sits in your photo library, may be included in device backups, and can sync to the cloud automatically. A phone can be stolen or unlocked, and the image itself can be opened or shared by mistake.

Saving it in the cloud or in notes

Google Drive, iCloud, Notes, Telegram Saved Messages, email, PDFs, password managers, and screenshots all move the seed phrase into a digital environment where an account compromise or malware can expose it.

Once a seed phrase is uploaded to the cloud, it is no longer a private offline record. Access is now governed by the security of your account. If photo backup is enabled, images can be uploaded automatically. A compromised cloud account may therefore expose those files as well.

The broader problem with cloud storage is that you are relying not only on your own security practices but also on the account, the service, and every device used to access it. For a seed phrase, that is an unnecessary risk that can be avoided by keeping the backup offline.

Fake support and requests for your words

If “support” asks you to send your seed phrase or enter it on a website or in a chat, treat that as a scam. Legitimate support does not need your seed phrase. You should never provide it for “verification,” “unlocking,” or “recovering funds.”

The pattern is usually the same: urgency, a warning that your funds are at risk, and a link to an “official” chat or website. You enter the words, and the attacker restores your wallet on another device.

Keeping only one physical copy

The other extreme is doing everything offline but keeping only one copy. Paper can be lost, soaked, burned, or thrown away with old documents. None of those scenarios require a sophisticated attack.

For long-term storage, you can use metal seed backup plates: they are more resistant than paper to moisture, high temperatures, and physical damage.

How to store a seed phrase safely

You may rarely need your seed phrase, but losing it or exposing it can have serious consequences. The logic is simple: the fewer digital copies that exist, the fewer opportunities there are for a leak. Hardware-wallet manufacturers give the same basic advice.

We cover the main ways to store a seed phrase safely, together with their trade-offs for long-term self-custody, in a separate guide.

Keep it out of digital storage

Avoid:

• Photos and screenshots
• PDF files and scans
• Notes on your phone
• Password managers
• Email drafts or Saved Messages in messaging apps
• Cloud storage and device backups

A phone protected by a passcode and biometrics is still not the right place for a seed phrase. A sound self-custody practice is to keep the seed phrase offline in physical form and avoid copying it into files, notes, or cloud services.

Keep a backup in a separate location

Keeping only one copy of a seed phrase means betting that nothing will ever happen to that storage location. A basic self-custody practice is to keep at least two offline copies in places where a single incident cannot destroy both at once. Bitcoin.org recommends the same general principle.

The key rule is that two copies in the same safe are almost the same as one. A sensible split might be:

• One copy at home in a secure location
• A second copy somewhere else: a bank safe-deposit box, another property, or a separate safe

For very long storage periods, paper is the weak point: it is vulnerable to water, fire, and time. That is why some people stamp or engrave the seed phrase into a purpose-built metal backup.

One important distinction: a metal plate does not make the seed phrase more secret — it makes the backup more physically durable. If someone finds the plate, they have the same recovery information they would get from a paper copy. Treat it accordingly.

Trezor on keeping wallet backups and physical media safe →

Passphrase: what it is and why it is called the “25th word”

A passphrase is an additional secret that you use together with your seed phrase. Under BIP39, it directly affects which wallet is derived: the same words with a different passphrase produce a different set of keys and addresses.

We cover setup, common mistakes, and the trade-offs in our separate guide “What Is a Passphrase or 25th Word?”.

Why “25th word” is not quite accurate

Many guides call a passphrase the “25th word” because it sounds like one extra word added to a 24-word seed phrase. Ledger also uses the term. But the important detail is that a passphrase does not have to be a BIP39 word at all. It can be a longer string, is case-sensitive, and spaces count as characters.

How it works

Think of the seed phrase as the base and the passphrase as an additional secret used during derivation:

• Without a passphrase → the seed phrase derives the standard wallet
• With a passphrase → entering the seed phrase without that passphrase opens the standard wallet, but the passphrase wallet and its balances will not appear

This creates a common recovery scare: someone enters the correct seed phrase but does not see the expected balance. Often the reason is simple — the passphrase was not entered, or one character differs because of capitalization, an extra space, or a typo.

What a passphrase actually adds

A passphrase is especially useful when someone might gain access to the physical backup of your seed phrase.

Some people keep a small balance in the standard wallet and the main balance in a passphrase wallet. The passphrase acts as an additional independent secret: even if the seed phrase becomes known to someone else, they still cannot derive the corresponding passphrase wallet without the exact passphrase.

The main drawback: you can lose the passphrase yourself

If you forget or lose the passphrase, access to the wallet derived from it is permanently lost even if the seed phrase is still intact. That is why a passphrase is not necessary for everyone: it adds protection, but it also increases the risk of locking yourself out.

How to use a passphrase responsibly

• Choose a format you will be able to reproduce exactly years from now
• Verify your backup using the wallet manufacturer’s built-in backup check or dry-run recovery feature when available. Never enter your seed phrase on third-party websites or into unfamiliar software.
• Store the passphrase separately from the seed phrase, especially if it is meant to protect against compromise of the physical seed backup
• If your device lets you attach a passphrase to a separate PIN, still have an independent backup plan for the passphrase itself

Who a passphrase is for

• People storing funds for the long term who consider physical compromise of the seed backup a realistic risk
• People willing to maintain the extra discipline: an exact backup, recovery testing, and separate storage

Quantum computers and the role of a passphrase

Today’s wallets rely on cryptography that is considered secure against classical computers. Quantum computers could theoretically change the threat model, but there is no known timeline for cryptographically relevant quantum computers. There is no practical quantum threat to ordinary crypto-wallet users today.

NIST has already published the first post-quantum cryptography standards and recommends that systems prepare in advance for migration away from algorithms that could become vulnerable to sufficiently capable quantum computers.

Scenario A: brute-force search

Grover’s algorithm can theoretically provide a quadratic speedup for brute-force search. If an attacker already has the seed phrase, the passphrase remains a separate secret; a strong passphrase expands the search space and prevents recovery of that wallet without its exact value.

Scenario B: attacks on signatures

If sufficiently capable quantum computers can break today’s public-key signature schemes, the target is not the seed phrase itself but the keys used to sign transactions. In that scenario, a passphrase is not a quantum-resistant shield. It does not replace migration of networks and wallets to new signature algorithms.

The bottom line: a passphrase does not make a blockchain post-quantum. Its value is that it adds a second independent secret on top of the seed phrase and makes attacks harder when the seed phrase is known but the passphrase remains secret and sufficiently strong.

5 things to do right now

1. Make sure you have a correctly recorded seed phrase — if it is already lost but you still have access to the wallet, create a new wallet with a new seed phrase and move the funds
2. Do not keep digital copies — no photos, screenshots, notes, or cloud files. If the seed phrase may already have been exposed, moving to a new seed phrase is safer.
3. Record the seed phrase offline — on paper or a metal backup, with every word correct and in the right order
4. Make a second copy — and store it in a different physical location
5. Verify the backup — use the official backup-check feature or another recovery-check method recommended by your wallet manufacturer; never enter the seed phrase into third-party services

Conclusion

A seed phrase is a mnemonic backup from which a wallet can reconstruct private keys and addresses. If the seed phrase is intact, access can usually be restored in a compatible wallet. If the seed phrase is lost but the current device still works, move the funds to a new wallet; if you have neither the seed phrase nor access to the keys, recovery is not possible.

If someone else gets the seed phrase, they can restore the wallet without your permission. A passphrase wallet also requires the exact passphrase. That is why a seed phrase leak should be treated as a potential compromise, and moving the funds to a fresh wallet should not be delayed.

Many failures come from ordinary decisions rather than sophisticated attacks: taking a photo, saving the words in notes or the cloud, sending them to “support,” or relying on a single paper copy with no backup.

A sensible baseline is to keep the seed phrase offline, avoid digital copies, and maintain two copies in separate physical locations. For long-term storage of significant amounts, a metal backup can improve physical durability.

A passphrase can make sense if you understand what it does: it derives a separate wallet from the same mnemonic words. But a typo or a lost passphrase makes that specific wallet impossible to recover, even with the correct seed phrase.

We hope this guide was useful.

FAQ

What is a seed phrase in simple terms?

It is a mnemonic backup that allows a wallet to reconstruct its private keys and addresses. For a standard wallet without a passphrase, someone who has the seed phrase can generally restore access to the funds it controls.

What should I do if I lose my seed phrase?

If you still have access through the current device, create a new wallet with a new seed phrase immediately and transfer all assets to it. If you have neither the seed phrase nor any other access to the private keys, the wallet cannot be recovered.

Can I change a seed phrase?

No. A seed phrase is generated when the wallet is created and cannot be changed in place. The only option is to create a new wallet with a new seed phrase and move the assets.

12 or 24 words: which is better?

Both are considered secure when generated and stored correctly. A 12-word BIP39 phrase contains 128 bits of entropy, while a 24-word phrase contains 256 bits. In practice, 128 bits already provides a very large brute-force security margin, so the more important issue is generating the seed phrase correctly and protecting it from loss and exposure.

Can I store a seed phrase in a password manager?

It is generally not recommended. A password manager is still a digital environment with its own risks, including master-password compromise, cloud synchronization, and malware. A seed phrase is best kept offline in physical form.

What is a passphrase, and do I need one?

A passphrase is an additional secret used with a seed phrase to derive a separate wallet. It can be useful if you want the physical seed backup alone to be insufficient for access. But if you forget the passphrase, you lose access to that wallet even with the correct seed phrase.

Someone got my seed phrase. What should I do?

Act immediately: create a new wallet with a new seed phrase and move all assets while you still control the old wallet.