What is seed phrase (recovery phrase)?

A list of 12 or 24 words that can regenerate all the private keys in a wallet.

Anyone with the seed phrase controls the wallet. It should be written down and stored offline; never photograph it, store it in the cloud, or type it into a website.

The phrase is not a password for your wallet. It is the wallet. Restoring it into any compatible software anywhere in the world reproduces every key, every address, and every balance, with no permission required from the original device or its manufacturer.

How it works

1. The wallet generates entropy, a large random number, and encodes it as words drawn from a fixed list of 2,048 (source: BIP-39). Twelve words carry 128 bits of entropy, twenty-four carry 256.
2. A checksum is built in. The last word encodes a check over the rest, so a mistyped or wrong word is rejected rather than silently producing a different empty wallet.
3. The words become a seed, from which a whole tree of keys is derived deterministically. See hd wallet and bip 39.
4. Every address in the wallet comes from that tree. Backing up the phrase backs up every address the wallet will ever generate, across every supported chain.
5. An optional passphrase adds a secret. Sometimes called a thirteenth or twenty-fifth word, it produces an entirely different wallet from the same words. See passphrase.

Word order matters, spelling matters, and the word list is fixed, which is why wallets can autocomplete after a few letters and reject anything not on it.

Example

The reason guessing is not the threat: twelve words drawn from a 2,048-word list represent 128 bits of entropy, which is roughly 340 undecillion possibilities, a number with 39 digits. No amount of computing power searches that.

Every real loss comes from somewhere else. A photograph in a cloud backup that syncs automatically. A phrase typed into a fake recovery page found through a search advertisement. A single paper copy destroyed in a flood. A phrase stored in a password manager whose account was compromised. The cryptography is not the weak point and never has been.

For higher amounts, shamir backup splits the secret into shares so that no single location holds it, and multisig removes the single-secret problem entirely.

Why it matters when you buy

The seed phrase is what you take on when you move coins off an exchange. It replaces the risk that a company fails with the responsibility for a secret nobody can reissue, and there is no support line for either mistake. Write it on paper or metal before funding the wallet, and test recovery with a small amount first. Seed phrase backup methods, your first crypto wallet, and what to do about a lost seed phrase cover it.

Related terms

private key — what the phrase regenerates; bip 39 — the word list standard; hd wallet — the key tree derived from it; passphrase — an optional extra secret; shamir backup — splitting the secret into shares; self custody — the responsibility it represents.

Questions

Is 24 words safer than 12?

Both are far beyond brute force, so the difference is theoretical rather than practical. Twenty-four words matter more for long-horizon assumptions than for any attack available today.

Can I store it in a password manager?

It concentrates your crypto and your password vault into one compromise, so most guidance is against it. Paper or stamped metal in a secure physical location, ideally duplicated across two locations, is the standard approach.

What if I lose it?

If you still have a working wallet, move the funds to a new wallet with a new phrase immediately and back that one up properly. If the device is also gone, the funds are unreachable permanently, because no one can regenerate the keys.