A seed phrase is a list of 12 or 24 ordinary English words that is your cryptocurrency wallet. Not a password to it, not a backup of it — the thing itself. Every private key, every address, every coin in that wallet is mathematically derived from those words. Whoever holds them holds the money, and nobody can take them back for you.
That single sentence explains almost every rule you will read about seed phrases. This page explains where the words come from, what they can and cannot do, and what follows from that.
Where the words come from
Almost every wallet you will meet — hardware or software, Bitcoin or Ethereum — follows a standard called BIP-39. It works like this.
Your wallet starts by generating a large random number. For a 12-word phrase that number is 128 bits long; for 24 words it is 256 bits. That number is the actual secret. Everything else is presentation.
Raw binary is miserable to write on paper, so BIP-39 encodes it as words. The standard defines a fixed list of 2,048 words. That number is not arbitrary: 2,048 is 211, so each word carries exactly 11 bits of the secret. Do the arithmetic and the phrase lengths stop looking random:
- 12 words × 11 bits = 132 bits — 128 bits of secret plus a 4-bit checksum
- 24 words × 11 bits = 264 bits — 256 bits of secret plus an 8-bit checksum
The checksum is the interesting part. Those extra bits are taken from the SHA-256 hash of the secret, which means the words are not independent of each other. You cannot invent a seed phrase by picking 12 words you like — roughly 15 out of every 16 random 12-word combinations fail the checksum and your wallet will simply reject them. It is a typo detector, and a decent one.
One more convenience worth knowing: every word in the list is uniquely identified by its first four letters. “abandon” and “ability” diverge by the third character. This is why hardware wallets let you type four letters and pick from a shortlist, and why a smudged fifth letter on a paper backup is survivable.
How words become an unlimited number of addresses
Your phrase is stretched into a 512-bit master seed, and that seed is the root of a tree of keys — the scheme is called hierarchical deterministic derivation, BIP-32. Each branch of the tree produces a different account, and each account produces an endless run of addresses.
Two practical consequences follow, and both surprise people:
- You do not back up addresses. Ever. A new receiving address is not a new secret; it is another leaf on a tree you already hold. Back up the phrase once and every future address is already covered.
- One phrase covers many coins. Bitcoin, Ethereum and most others live on different branches of the same tree. A single 12-word phrase can hold all of them.
This is also why restoring a wallet on a different brand of device usually works, and occasionally does not: the phrase is standard, but wallets sometimes disagree about which branch of the tree an account lives on. If a restore shows the right wallet but a zero balance, the funds are almost never gone — you are usually looking at the wrong branch, and the fix is to check the derivation path rather than to panic.
Four things a seed phrase is not
It is not a password. Passwords are checked by a server that can rate-limit guesses, lock accounts and reset credentials. A seed phrase is checked by mathematics. There is no server, no lockout, and no reset.
It is not protected by your PIN. The PIN on a hardware wallet stops someone using that device. It does nothing for the phrase written on the card in your drawer. Anyone who finds that card can type it into any wallet, anywhere, and take everything — without ever touching your device.
It is not recoverable. There is no support desk. No exchange, wallet vendor, or law-enforcement agency can regenerate it, because none of them ever had it. This is the entire point of self-custody and it is also its sharpest edge.
It is not something a website ever needs. No legitimate service — not a wallet, not an exchange, not a “balance checker”, not an airdrop — needs your seed phrase. There is no exception to this and no situation where the exception applies to you.
Could someone guess it?
No, and it is worth understanding why, because the answer is what lets you stop worrying about the right things and start worrying about the real ones.
A 12-word phrase carries 128 bits of entropy. That is roughly 3.4 × 1038 possibilities — a 39-digit number. There is no computer, and no realistic future computer, that brute-forces that. A 24-word phrase doubles the exponent to 256 bits, which is beyond astronomically overkill rather than merely astronomically overkill.
Which tells you something important: seed phrases are essentially never broken by guessing. They are lost, photographed, typed into fake websites, stored in cloud notes, or handed over by their owner. The mathematics is the strongest part of the system. You are the weakest, and so is your filing cabinet.
That is also the reason the scams that work do not attack the cryptography at all. They ask you for the words, politely, on a page that looks correct.
The rules that follow
Every sensible seed-phrase practice is a consequence of the facts above rather than a separate thing to memorise:
- Write it on something physical. If it is in a photo, a password manager, a cloud note or an email to yourself, it is exposed to every future breach of that service. Paper is a floor, metal is better.
- Never type it into a screen you did not initiate. Entering it to restore a wallet you chose to restore is normal. Entering it because a page asked you to is how people are robbed.
- Assume anyone who sees it owns the money. That includes anyone standing behind you, and any camera in the room while you write it down.
- Test the backup before you rely on it. An untested backup is a guess. This is the step nearly everyone skips and the one that decides whether any of the rest mattered.
- Plan for the case where you are not around. A perfectly secured phrase nobody can find is indistinguishable from a lost one. See inheritance.
Where to go next
If you already have a phrase written on the card that came in the box, the useful next steps are storing it somewhere that survives a house fire and confirming it actually works. If you are still deciding how to hold crypto at all, start with whether you need a hardware wallet — the honest answer depends on how much you hold, and for some people it is no.
One promise about this site, since the subject invites bad actors: no page or tool on SteelPhrase will ever ask you to enter a recovery phrase, private key or passphrase — not even with an assurance that it stays in your browser. Normalising that habit is exactly what thieves depend on.
Sources
- BIP-39: Mnemonic code for generating deterministic keys — the wordlist, entropy sizes and checksum rules
- BIP-32: Hierarchical Deterministic Wallets — how one seed becomes a tree of keys
- BIP-44: Multi-account hierarchy — the derivation paths behind “right wallet, wrong branch”
The entropy and checksum figures above are arithmetic you can reproduce yourself from the BIP-39 specification rather than claims you have to take on trust.