AI Summary
Show More
Quickly grasp the article's content and gauge market sentiment in just 30 seconds!
When setting up a non-custodial wallet for the first time, many users wonder: what is a seed phrase? A seed phrase is a 12 or 24-word backup for a crypto wallet. It's the master key that restores access on any device.
However, that also means that whoever has the seed phrase can spend the funds associated with it. This guide explains the cryptographic standards behind seed phrases, how to store them safely and common mistakes to avoid.
Key Takeaways
A seed phrase is the 12 or 24-word master key to a self-custodial crypto wallet.
Anyone with your seed phrase can spend your funds immediately. Many users store it offline across two physical locations and avoid sharing it - even with someone claiming to be support.
The same seed phrase works across most wallets because Bitcoin Improvement Proposal 39 (BIP-39), BIP-32 and BIP-44 generate private keys in the same predictable order.
A seed phrase is a human-readable backup that generates your private keys, which allow you to move crypto assets on-chain. It is also commonly referred to as a recovery phrase, a mnemonic phrase, or a backup phrase. All these terms mean the same thing.
Seed phrases are only generated when using non-custodial wallets. Non-custodial wallets give users full control over the cryptographic key pair associated with their funds. With no third party involved, the seed phrase is the only way to recover access if your wallet becomes unavailable.In contrast, when using custodial wallets, a custodian holds the keys on the user's behalf. If login credentials are lost, the exchange can usually restore access by verifying the user's identity.
While all keys are usually long strings of characters and numbers, seed phrases consist of a list of words derived using a stack of Bitcoin Improvement Proposals (BIPs). There is no single standard, but a stack of related proposals that work together to turn strings of alphanumeric characters into human-readable form.
The first is BIP-39, which standardizes the word list that seed phrases are generated from. There are a total of 2,048 possible words. Each word corresponds to a segment of random data (entropy) generated by the wallet. A built-in checksum, encoded in the final bits of the phrase, lets wallets detect typos during recovery. BIP-39 then takes that word list and generates a single long number from it: the seed.
Once the seed has been generated, BIP-32 defines how the wallet derives a whole tree of public and private key pairs (and wallet addresses) from that seed deterministically. Because one seed determines the rest of the hierarchy, such wallets are also called hierarchical deterministic (HD wallets).
After the keys are generated, BIP-44 defines the structure of the tree that is built. It defines which branch is used for which coin, which account, and what address. This ensures users will see the same accounts and balances regardless of which compatible wallet app they use.
Because BIP-39 always produces the same seed from the same words, BIP-32 derives keys deterministically, and BIP-44 standardizes the derivation path, the same phrase works across any wallet that follows the standard, such as MetaMask, Trust Wallet or Phantom.
(Disclaimer: References to third-party software or hardware are provided solely as illustrative market examples for educational purposes. Bybit EU GmbH does not operate, control or endorse these protocols and makes no representation as to their availability, security or suitability. Any protections applicable to services provided by Bybit EU GmbH do not automatically apply to a user's independent use of third-party services or protocols.)
Portability hits its limits only when wallets or specific blockchains use non-standard derivation paths. In that case, the same phrase can occasionally produce different accounts.
The word count also affects security. Twelve words encode 128 bits of entropy; 24 words encode 256. The more words it contains, the harder the phrase is to guess.
The seed ultimately produces private keys, public keys and wallet addresses.
Unlike a password, a seed phrase governs access to every address and asset derived from it. No company or support team can reset it.
Once the seed phrase is gone, so is your access to the funds. The coins will still exist on the blockchain, but you lose your only way to move them.
Consequently, if your seed phrase is leaked to another person, they will gain control over your funds. Unlike a bank account, the blockchain only verifies ownership using cryptographic keys, not identity. Blockchains record addresses and keys, not names. There is no identity layer to appeal to.
Considering the consequences of losing a seed phrase, it’s important to store them safely.
Storage method | Fire/water resistance | Risk of physical loss | Complexity | Best suited for |
Paper backup | Low, damaged quickly by fire, water and physical wear | High | Very low | Getting started; smaller balances |
Metal/steel backup | High, survives fire and water exposure | Medium: still susceptible to theft or misplacement | Low | Most self-custody users as a long-term solution |
Shamir Backup (SLIP-39) | Depends on the format of each share | Low, losing some shares doesn't mean losing access, as long as the threshold is met | High | Large balances; shared or institutional custody |
Choosing the right storage format is only part of securing a seed phrase. An optional passphrase , sometimes called the BIP-39 25th word, adds an extra custom word or phrase that changes how the wallet generates your keys. Without it, the written backup alone opens a different, empty-looking wallet. That means someone who finds your backup still can't reach your real funds. The downside is that forgetting the passphrase locks you out permanently.
On top of choosing a storage format, consider keeping a second copy in a separate physical location. A single copy is still vulnerable to fire, flooding or burglary. A second copy in a different location removes that single point of failure.
For very large balances, multisig goes further. It requires multiple separate key approvals per transaction, so no single key can move funds alone.
What to avoid for security reasons:
Storing a seed phrase digitally.
Saving it in cloud storage.
Taking a photo or screengrab of it.
Entering it into any website or app. The only exception is importing into a new wallet you control.
The same rules apply whether you use a software wallet such as MetaMask, Trust Wallet or Phantom, or a hardware wallet such as Ledger, Trezor or Keystone.
Since scams evolve, staying up to date on the latest patterns is an important part of crypto security. Common patterns in 2026 include:
Fake support DMs: someone pretending to be part of the customer support team of an exchange asking for your seed phrase. Legitimate support will never do this.
Phishing sites: a fake page mimicking a legitimate wallet’s interface to trick you into entering your seed phrase.
Fake hardware wallet: a tampered device with its seed phrase already generated and printed. Once you use them, scammers gain access.
Clipboard malware: which swaps a copied wallet address for the attacker’s to trick you into sending funds to them.
Drainer dApps: they do not target seed phrases but simply ask users to approve a transaction that gives the attackers access.
There are two possible scenarios. If the wallet is still installed and unlocked, users typically move funds to a new wallet as quickly as possible. The old wallet may already be compromised.
If both the seed phrase and the device are gone, funds are permanently unrecoverable. There is no support team, company or recovery service that can restore your access. Those claiming otherwise are almost certainly scammers.
As the master key to access your funds, seed phrases should be kept offline, stored across at least two locations and never be shared online. By following best practices and knowing common scam patterns, users can decrease the likelihood of losing access due to scams.
What is a seed phrase used for?
A seed phrase restores access to a self-custodial crypto wallet on any new device. When a wallet generates a seed phrase, it becomes the only backup for the private keys controlling the funds. Losing the device doesn't mean losing the funds as long as the seed phrase is intact and stored offline.
What happens if I lose my seed phrase?
When you lose your seed phrase, you permanently lose access to your funds. The crypto will still remain on-chain, but without the seed phrase, you can’t transfer them. No support team or recovery service can restore access. If your wallet is still installed and unlocked, transferring funds to a new wallet and generating a fresh seed phrase is typically the first step.
Is a seed phrase the same as a private key?
A seed phrase is not the same as a private key. A private key is a single string of characters that controls a specific wallet address. A seed phrase is a human-readable backup that generates an entire tree of private keys and wallet addresses from a single source. Losing the seed phrase means losing access to all the addresses and coins associated with it at once.
How long is a seed phrase?
A seed phrase is either 12 or 24 words long. Both lengths are drawn from the BIP-39 wordlist of 2,048 possible words. Twelve words encode 128 bits of entropy and are common in most software wallets. Twenty-four words encode 256 bits and are standard on most hardware wallets, offering greater randomness and a larger pool of possible combinations.
Where should I store my seed phrase?
A seed phrase should be stored offline: on paper or stamped into metal. A metal backup reduces the risk of fire or water damage. In addition to picking a medium, location matters. Ideally, keep copies across two separate physical locations to reduce single failure risk. Never store it digitally: not in the cloud, not as a phone photo and not inside a password manager.
Can someone steal my crypto with my seed phrase?
Anyone with access to a seed phrase can import it into a compatible wallet and move the funds immediately. No additional verification is required. Seed phrase theft most commonly happens through phishing sites, fake support requests or drainer apps. A seed phrase is best never shared with anyone, and best never entered into a website or app you did not initiate yourself.Users who suspect fraud can report it to their national competent authority (e.g., FMA in Austria, AFM in the Netherlands, AMF in France, BaFin in Germany).
Is it safe to take a photo of my seed phrase?
No, taking a photo of a seed phrase puts it at risk immediately. Phone photos sync automatically to cloud storage on most devices, meaning the phrase is no longer truly offline. If the cloud account is compromised, so is the wallet. Write the phrase on paper or stamp it into metal instead.
This content constitutes a marketing communication from Bybit EU GmbH. Investing in crypto-assets is associated with risks, including high volatility and the potential loss of capital. Inform yourself thoroughly about the risks before making an investment decision. The information provided herein is strictly for educational and informational purposes and should not be construed as financial or investment advice.