Seed Phrase: What It Is and How It Works

How a seed phrase works

When you create a self-custody wallet, the software generates a large random number. Rather than showing you that number, it follows the BIP-39 standard and turns it into words:

1. The random value (128 to 256 bits) gets a short checksum added to it.
2. The result is split into groups of 11 bits; each group picks one word from a fixed list of 2,048 words.
3. That produces a phrase of 12, 15, 18, 21 or 24 words; 12 and 24 are the most common.

The phrase, optionally combined with an extra passphrase, is turned into a binary seed. Following the BIP-32 standard for hierarchical deterministic (HD) wallets, that one seed generates a whole tree of private keys and addresses, across many accounts and, in most wallets, many blockchains.

Because everything is derived deterministically, typing the same words into any compatible wallet recreates exactly the same keys. That is why the phrase is enough to recover your funds if a phone breaks or a hardware wallet is lost, and also why anyone else who reads it can take them. The checksum lets wallets catch most typos, and the official word lists are designed so that the first four letters identify each word.

How to store a seed phrase safely

• Write it down offline, by hand, in the correct order, and double-check every word. Metal backup plates survive fire and water better than paper.
• Never store it digitally: no photos, screenshots, notes apps, emails, cloud drives or password-manager notes that sync online.
• Never enter it on a website or share it with anyone. Wallet makers, exchanges and support staff never ask for it. A request for your seed phrase is a scam.
• Keep it separate from the device, and consider a second copy in another secure place.
• Consider a passphrase (sometimes called the "25th word"). It creates a different wallet from the same words, so a stolen phrase alone is not enough; but a forgotten passphrase cannot be recovered either.
• Plan for inheritance. Someone you trust should be able to reach the backup, or know how to, if something happens to you.

Seed phrase vs private key vs password

Custodial accounts on an exchange do not give you a seed phrase, because the exchange holds the keys. Some smart-contract wallets replace a single phrase with social recovery or multi-party computation, but most hot and cold wallets still rely on BIP-39 phrases.