A seed phrase (also called a recovery phrase or mnemonic) is a sequence of 12 or 24 ordinary English words that encodes your master private key. The single backup for all accounts in your wallet, write it down on paper, store it safely, and you can recover all your funds on any compatible wallet software if your device is lost or destroyed.
What Is a Seed Phrase?
3 min read
The short version
Think of a seed phrase as the master key to a building that contains all your apartments. Each apartment is a different crypto account. If you lose the building (your phone breaks), anyone holding the master key (the 12/24 words) can open every apartment and access everything inside. Both the power and the danger of a seed phrase.
How It Works
A seed phrase is generated using BIP-39, a standard that maps random entropy to words from a fixed list of 2,048 English words. For a 12-word phrase: the wallet generates 128 bits of randomness, appends a 4-bit checksum (from SHA-256), splits the resulting 132 bits into twelve 11-bit segments, and maps each segment to a word in the BIP-39 wordlist. The phrase is then converted to a 512-bit seed using PBKDF2-HMAC-SHA512 (2048 rounds with the passphrase "mnemonic" + optional user passphrase). From this seed, a hierarchical deterministic (HD) wallet derives unlimited private keys using BIP-32/BIP-44 derivation paths. One seed phrase generates keys for Bitcoin, Ethereum, and any other supported network simultaneously.
Recovering a wallet after a phone theft
Your phone is stolen. Your wallet app (MetaMask) was PIN-protected, but you assume the thief might crack it. You buy a new phone, install MetaMask, and tap "Import using Secret Recovery Phrase." You enter your 12 words: abandon ability able about above absent absorb abstract absurd abuse access accident. MetaMask re-derives your master key, then generates the same Ethereum accounts in the same order. Your 2.4 ETH and all tokens appear immediately, they never left the blockchain. If you also had Bitcoin accounts through the same seed, you import the same phrase into a Bitcoin wallet (like BlueWallet) and those funds appear too. Total recovery time: under 5 minutes.
What People Get Wrong
The seed phrase is stored by the wallet company
No wallet company stores your seed phrase. When you write it down during setup, that is the only copy in existence. If you lose it and your device dies, your funds are permanently inaccessible.
A 12-word phrase is less secure than 24 words
12 words encode 128 bits of entropy, equivalent to the security of a 128-bit encryption key. This is computationally unbreakable. 24 words (256 bits) add theoretical margin but both are secure against any known or projected attack.
You can change your seed phrase
The seed phrase IS your wallet identity. Changing it means creating an entirely new wallet with new addresses. You would need to transfer all funds to the new wallet.
Digital photos of your seed phrase are safe in cloud storage
Cloud accounts get hacked. Photos get synced to services you forgot about. A seed phrase photographed on a phone has likely been uploaded to iCloud/Google Photos automatically. Write it on paper or metal, never digitize it.
Keep Reading
Sources & Further Reading
- BIP-39: Mnemonic Code Specification
Full specification for how seed phrases are generated and converted to master keys
- BIP-39 Word List (English)
The complete 2,048-word list used in standard seed phrase generation
Questions People Also Ask
- What happens if I lose one word of my seed phrase?
- With 11 of 12 words known, the missing word can be brute-forced from the 2,048-word BIP-39 list in seconds (the checksum narrows it to roughly 128 valid possibilities). Open-source tools like BTCRecover and seedrecover.py handle this. Losing 2 words is harder (4 million combinations, takes hours). Losing 3+ words is effectively unrecoverable without specialized paid services and even then success is not guaranteed.
- Can someone guess my seed phrase?
- A 12-word phrase has 2^128 possible combinations, roughly 340 undecillion. Trying one billion combinations per second would take 10^22 years. It cannot be guessed or brute-forced.
- Are all seed phrases compatible across wallets?
- Most wallets use BIP-39, making phrases portable. However, derivation paths differ (Bitcoin uses m/84'/0'/0', Ethereum uses m/44'/60'/0'). The same phrase will produce different addresses in wallets that use different derivation paths, but the phrase itself works in any BIP-39 compatible wallet.