What Is a Seed Phrase and How Should You Store It?

Most crypto losses from self-custody wallets come down to one thing: someone else got the recovery words. Understanding what those words are makes the security rules obvious.

What people on X are asking

In July 2025 someone simply replied to a post asking what a seed phrase is. In July 2026 a "learning Web3 from scratch" series devoted a day to the question what is a seed phrase, after covering public and private keys, and in August a regional exchange ran a light-hearted "wrong answers only" prompt on the same term. Here is the right answer, with the security rules that follow from it.

The fact-checked answer

What the words are. Most wallets follow BIP-39, a Bitcoin Improvement Proposal published in 2013 and also used across Ethereum and many other networks. The wallet generates random data (entropy), adds a short checksum and maps every 11 bits to one word from a fixed list of 2,048 English words. A 12-word phrase holds 128 bits of entropy plus a 4-bit checksum; a 24-word phrase holds 256 bits plus 8. The phrase is then turned into a binary seed from which the wallet derives all keys and addresses.

Seed phrase lengths under BIP-39

Entropy and checksum lengths from the BIP-39 specification; the number of valid phrases equals 2 to the power of the entropy bits. Calculated by UXS. Tap a column header to sort.

Words	Entropy (bits)	Checksum (bits)	Possible phrases (approx.)
12	128	4	3.4 × 10^38
15	160	5	1.5 × 10^48
18	192	6	6.3 × 10^57
21	224	7	2.7 × 10^67
24	256	8	1.2 × 10^77

Why it is all-or-nothing. The phrase is not a password the wallet checks; it is the secret itself. Anyone who types your words into any compatible wallet app gets the same keys, from anywhere in the world, with no further check. That is why guessing is hopeless (2^128 possibilities for 12 words) but theft is easy if you reveal the words.

The optional passphrase. BIP-39 allows an extra passphrase, sometimes called a "25th word". The same 12 or 24 words plus a different passphrase produce a completely different wallet. It adds protection if the words are found, but if you forget the passphrase the funds cannot be recovered.

Exchange accounts are different. If your coins sit on an exchange, the exchange holds the keys; you log in with a password and two-factor code instead. That trade-off is covered in should you keep crypto on an exchange and hot vs cold wallets.

How scammers go after it. Many crypto scams start with someone impersonating a business, a government agency or tech support. With wallets, the typical routes are a fake "wallet validation" website, a support account replying to your complaint, or a fake app. Each asks you to enter the words. The stablecoin or token you hold makes no difference once the words are out.

UXS decision diagram

Someone asks for your recovery words. What now?

Text version of the diagram

1. Is the request coming from a website, message, call or support agent? If yes: Stop: no genuine service needs your seed phrase. Do not enter it
2. Are you restoring your own wallet, in the official app you installed yourself? If no: Do not type the words anywhere else
3. Is the device free of screen-sharing or remote-access software? If no: Disconnect and remove that software before restoring
4. Did you download the app from the official source, checking the publisher name? If no: Reinstall from the official source first
5. Otherwise: Restore offline-first, then check that the first receiving address matches your records

Diagram drawn by UXS. A simplified decision aid for education, not a recommendation.

Storage checklist

1. Write the words by hand in order; check the spelling against the BIP-39 list.
2. Never photograph them, email them or store them in a cloud note.
3. Keep at least two copies in different secure places; consider a metal backup against fire.
4. Test recovery with a small amount before relying on the backup.
5. Tell a trusted person how to find the backup if something happens to you, without giving them the words today.

Free PDF

Seed phrase backup and safety checklist (PDF)

Print this checklist, not your words. Keep it with your records.

Before writing the backup

1. Wallet app installed from the official source
2. No cameras, screen recording or remote access running
3. Pen and paper or metal plate ready, offline

Backup record (do not write the words here)

Red flags

1. Anyone asking for the words, for any reason
2. A website that wants the words to "validate", "sync" or "claim"
3. A support agent who contacts you first
4. A pre-filled seed phrase card in a new device package

Fill-in fields in the PDF: Wallet name and type; Number of words (12 / 24) and passphrase used? (yes / no); Date backup created and tested; Location of copy 1 (description only); Location of copy 2 (description only).

Download the PDF (44 KB, made by UXS, no sign-up)

Keeping your words safe does not protect you from buying a bad token; see what a rug pull is.

Where the phrase is stored matters; see whether a hardware wallet is safer than a hot wallet for small amounts.

Moving coins to your own wallet costs an on-chain fee; see why bitcoin fees spike when the mempool fills.

Scammers posing as support staff often ask for exactly this; see how fake crypto support accounts on X try to steal wallets.

Common mistakes

• Typing the phrase into a website to "fix" a wallet problem.
• Keeping the only copy in a phone photo album.
• Using a device that arrived with words already printed on a card.
• Losing the optional passphrase, which makes the funds unrecoverable.

FAQ

What is a seed phrase in crypto?

A list of 12 or 24 words that encodes the master secret of a self-custody wallet and can rebuild all its keys.

Is a seed phrase the same as a private key?

Not exactly: the phrase generates a master key, from which many private keys are derived.

Can a seed phrase be hacked or guessed?

Guessing a correctly generated 12-word phrase is practically impossible (2^128 options); stealing a written or typed copy is the real risk.

What happens if I lose my seed phrase?

If the device still works, move the funds to a new wallet with a new backup immediately. If the device is lost too, the funds cannot be recovered.

Should I store my seed phrase in a password manager?

That puts it on internet-connected devices; many security guides prefer offline paper or metal backups.

Does an exchange account have a seed phrase?

No. The exchange holds the keys; you rely on its security and your login protection instead.