A passphrase is an optional extra secret — any text you choose — that combines with your recovery phrase to produce a different wallet. It is often called the 25th word, which is a friendly name for something with a very sharp edge.
It is the only mechanism that protects you if somebody finds your written words. It is also the single easiest way to lose your funds permanently. Both of those are true because of the same design decision, so it is worth understanding what it actually does before deciding whether you want one.
It does not lock your phrase — it makes a new wallet
The common mental model is “a password on top of my seed phrase”. That is wrong, and the difference matters enormously.
Under BIP-39, your words are stretched into a master seed, and the passphrase is mixed into that calculation as salt. Change the passphrase and you change the seed — which changes every key, every address, and therefore the entire wallet.
- Words alone → wallet A
- Words +
correct horse→ wallet B - Words +
Correct Horse→ wallet C, completely unrelated to B - Words +
correct horse(trailing space) → wallet D, also unrelated
Here is the consequence that catches people: every passphrase is valid. There is no list of correct ones, no check, and therefore no error message. Mistype it and the wallet opens perfectly — showing a balance of zero, because you have opened a different wallet that has never been used.
Compare that with the words themselves, which carry a checksum that rejects most typos. The passphrase has no such safety net. It fails silently, and silent failure looks exactly like theft.
What it is genuinely good for
It defeats the discovery of your written backup. This is the real benefit and it is substantial. Every other protection — a PIN, a safe, a hardware wallet’s secure element — is bypassed by someone who finds the card with your words on it. A passphrase is not: the words alone open an empty wallet, and the thief has no way to know anything is missing.
It enables a decoy wallet. Keep a modest, real balance on the words alone, and the serious holdings behind a passphrase. Someone who compels you to open the wallet finds money — plausibly all of it. This is a real design pattern, and worth being sober about: it depends entirely on the decoy being convincing, and on you never being caught in the lie.
It splits your secret across two places. The words can live in a safe and the passphrase somewhere else. Neither location alone is sufficient.
What it costs you
- There is no recovery. The passphrase is not stored on the device, not held by the manufacturer, not derivable from anything. Forget it and the funds are gone with complete finality.
- Typos are silent and indistinguishable from theft. A capital letter, a trailing space, a smart quote your phone substituted — each produces an empty wallet with no explanation.
- It doubles the backup problem. You now have two secrets that must both survive, and they must not be stored together, or the protection evaporates.
- It is an inheritance hazard. Heirs who find perfect words and know nothing of a passphrase will restore an empty wallet and reasonably conclude the crypto is gone.
If you use one
- Write it down. Memory is not a backup. People are confident about passphrases they have not typed in eighteen months, and they are wrong at a rate that should frighten you.
- Store it apart from the words — different room at minimum, different building ideally. Together on one card, it protects nothing.
- Avoid ambiguity. No leading or trailing spaces, no characters that your phone might autocorrect or substitute, no unusual Unicode. Simple words with deliberate capitalisation beat clever symbols.
- Record the fact that one exists on the backup itself — the word “PASSPHRASE: YES”, never the passphrase. This single mark is what prevents a future restore being abandoned as empty.
- Test the whole thing. Wipe and restore using both secrets, from your written records only, before you rely on it. The method is here.
Should you?
Probably not, if this is your first wallet. The risk a passphrase addresses — somebody physically finding your written backup — is real but not the most likely way you will lose money. The risk it introduces, forgetting an unrecoverable secret, is a leading cause of permanent loss. For most people the honest advice is to get the basics right first: metal backup, two locations, tested restore.
Consider one if your backup has to live somewhere you do not fully control, if you hold enough that targeted theft is plausible, or if you have already built the discipline that a second unrecoverable secret demands.
Either way, the standing rule holds: nothing legitimate ever asks you to type your recovery phrase or passphrase into a web page. Not a balance checker, not a support agent, and not this site.
Sources
- BIP-39 — the optional passphrase, and how it enters the seed derivation as salt