What is a seed phrase?

CrabChain.org Team | Updated 13 October 2026

In the cryptocurrency ecosystem, few strings of words carry as much responsibility as a seed phrase. Also known as a recovery phrase, it is one of the fundamental elements of self-custody wallets because it allows the keys controlling digital assets held in them to be recovered. Its importance, however, often causes confusion. A seed phrase is not a conventional password, nor is it exactly a private key. Strictly speaking, the words that compose it are a human-readable representation of certain cryptographic information.

HD wallets and BIP-39

The concept became particularly important with the expansion of hierarchical deterministic wallets, known as HD wallets. These wallets make it possible to generate multiple keys and addresses from a single starting point. Instead of having to back up each private key independently, a user can keep a single seed phrase that acts as the root of the entire set. From that seed, the wallet software can reconstruct the different accounts and addresses by following specified mathematical processes and derivation paths.

One of the most widely used standards for representing this information is BIP-39, used by numerous cryptocurrency wallets. In this system, the seed is generated from a specified amount of random entropy. That information is combined with a checksum and then divided into groups of bits that are translated into words taken from a predefined list. For this reason, a seed phrase commonly consists of 12, 15, 18, 21, or 24 words. In the most common cases, 12-word phrases represent 128 bits of entropy and 24-word phrases represent 256 bits, with additional checksum information.

The use of words is primarily a practical choice. A binary sequence would be extremely difficult to memorize, verify, or copy manually. Words from a standardized list allow cryptographic information to be handled by people without having to interpret a string of zeros and ones directly. Even so, the fact that a seed phrase is readable does not make it easy to guess. When it is correctly generated through a secure process with sufficient randomness, the space of possible combinations is extraordinarily large.

It is also important to distinguish the mnemonic phrase from the cryptographic seed derived from it. In BIP-39, the words are first converted into a sequence of binary data and then subjected to a derivation process based on cryptographic functions. This produces the seed used by deterministic-wallet systems to generate keys. In everyday language, both concepts are often called the seed, but technically they are not exactly the same. The seed phrase is a mnemonic representation intended to facilitate backup and recovery, while the cryptographic seed is a result used internally by the derivation processes.

Restoring a wallet

This mechanism explains why the same phrase can restore an entire wallet on another compatible device. When a person correctly enters the seed phrase into a new wallet using the same derivation scheme, the software can reproduce the private keys associated with the same cryptographic root. In this way, funds are not physically stored inside the phone, computer, or hardware device. What exists on the blockchain network are ownership or control records associated with particular addresses, while the wallet stores or reconstructs the keys needed to authorize operations.

The most important consequence of this design is that whoever possesses the seed phrase has, in practical terms, the ability to recover control of the assets associated with it. There is no central entity that can reset a lost seed phrase in the same way that a web service can send an email to recover a password. In a self-custody wallet, losing the phrase may mean permanently losing access to funds, provided no other valid copy exists. Likewise, if another person obtains the phrase, they may try to restore the wallet and move the assets without needing to know the original owner's identity.

Risks and storage

This characteristic makes the seed phrase one of the main targets of attacks directed at cryptocurrency users. Criminals may try to obtain it through fake websites, malicious applications, fraudulent support messages, compromised extensions, or social-engineering techniques. A legitimate wallet never needs a user to reveal their seed phrase to a third party. An unexpected request to enter it on a website or send it by email is an obvious warning sign. The fundamental rule of self-custody is that the seed phrase must remain secret.

The way it is stored also has important implications. Keeping it only on an internet-connected computer can expose it to malware, credential theft, or system failures. Taking a photograph and storing it in cloud-storage services can introduce additional risks, particularly if the corresponding account is compromised. For this reason, security strategies commonly prioritize physical backups protected against unauthorized access, damage, fire, and accidental loss. Some users rely on resistant storage media, especially when the wallet contains significant amounts.

There is also a less visible issue related to backups. A seed phrase should not be treated as information that can be shared with family members, companies, or support services without considering the consequences. Every additional copy expands the exposure surface. The challenge is to strike a balance between security and recoverability. A phrase that is too accessible can be stolen, but a phrase that is excessively protected and whose location no one can identify may be useless in an emergency, incapacity, or death.

Passphrase and compatibility

Another related concept is an additional passphrase, which some wallets allow a user to enter together with the seed phrase. It is often informally called the twenty-fifth word, although that expression can be misleading. It is not necessarily part of the original mnemonic phrase. In certain systems, it acts as an additional component used during cryptographic derivation. Two configurations with the same seed phrase but different passphrases can generate completely different wallets. This feature can strengthen security, but it also increases complexity and the risk of loss if the passphrase is not properly preserved.

Recovery also depends on compatibility. Not all wallets use exactly the same standards, derivation paths, or account architectures. Therefore, having the correct words does not always guarantee that an application will automatically display the same addresses as another. In certain cases, a specific derivation path or compatible format must be selected. This issue is particularly relevant when migrating funds between different wallet manufacturers or software applications.

The seed phrase is one of the clearest manifestations of the self-custody philosophy associated with cryptocurrencies. The user obtains greater direct control over their assets, but that control means assuming responsibilities that, in traditional financial systems, are usually handled by banks, custodians, or service providers. There is no real separation between ownership and responsibility when the keys are held personally.

Understanding what a seed phrase is, therefore, involves more than knowing that it consists of a series of words. It means understanding that these words can act as the cryptographic root from which an entire wallet can be reconstructed. Their value lies in the ability to recover the keys and, through them, control over particular assets. That same ability explains why a seed phrase must remain out of third parties' reach, be preserved through secure backups, and be linked to a recovery procedure that its owner understands and can execute. In the self-custody model, the seed phrase is not merely a technical backup. It is a central component of digital asset security.

Sources

• BIP-39: Mnemonic code for generating deterministic keys — Bitcoin Improvement Proposals
• BIP-32: Hierarchical Deterministic Wallets — Bitcoin Improvement Proposals