A seed phrase (also called a recovery phrase or mnemonic) is a list of 12 or 24 words that can restore every private key in your crypto wallet. Anyone who sees it can take all your funds, and if you lose it, nobody can recover them for you. Protecting it is the single most important part of crypto security.
Key takeaways
- Your seed phrase = full control of your wallet. Treat it like the keys to a vault.
- Write it down offline — never photograph, type, email or store it in the cloud.
- No legitimate company, support agent or app will ever ask for it.
- Keep at least two physical backups in separate secure locations.
How a seed phrase works
Most wallets follow a standard called BIP-39. During setup, the wallet generates a random number and encodes it as words chosen from a fixed list of 2,048 English words. From those words, the wallet mathematically derives all of your private keys and addresses. That’s why entering the same phrase into any compatible wallet restores the same funds — and why the phrase must stay secret.
The 12 rules
1. Write it down by hand, offline
Use pen and paper (or a metal backup). Don’t type it into notes apps, password managers on your phone, documents or chat messages.
2. Never take a photo or screenshot
Photos sync to cloud services automatically and are a favorite target of malware.
3. Never enter it on a website
Legitimate wallets only ask for your seed phrase when you choose to restore a wallet in the app itself. A website asking you to «validate», «sync» or «unlock» your wallet with your seed phrase is a scam — every time.
4. Nobody legitimate will ask for it
Not exchange support, not wallet developers, not «recovery services», not someone you met online. Anyone asking is trying to steal from you.
5. Check the words and the order
Write the words in the correct order and number them. Double-check spelling against what the wallet shows.
6. Verify your backup
Most wallets ask you to confirm some words. Even better: with a small amount, practice restoring the wallet from your written backup to prove it works.
7. Make at least two copies
A single paper can be lost, burned or flooded. Keep a second copy in a different secure location.
8. Consider a metal backup
Stamped or engraved steel plates survive fire and water far better than paper.
9. Store it where you’d store valuables
A home safe, a safe deposit box, or another location only you (and a trusted person, if you choose) can access.
10. Don’t split it naively
Cutting a phrase into halves stored in different places weakens security if one half is found. If you need distributed backups, use purpose-built solutions like multisig wallets or Shamir backups supported by your wallet.
11. Add a passphrase if you understand it
Many wallets support an optional extra word («25th word» or passphrase) that creates a separate hidden wallet. It adds protection if your seed phrase is found — but if you forget the passphrase, the funds are lost.
12. Plan for inheritance
If something happens to you, can your family access your crypto? Leave clear, secure instructions with a trusted person or professional — without exposing the phrase prematurely.
Common scams that target seed phrases
- Fake wallet apps and browser extensions that look identical to real ones.
- Phishing emails claiming your wallet will be «deactivated» unless you verify it.
- Fake support agents who reply to your social-media complaints.
- Pre-configured hardware wallets shipped with a seed phrase card included.
- «Wallet validation» sites promoted through airdrop or giveaway messages.
See the full list in 15 common crypto scams and how to spot them.
What to do if your seed phrase is exposed
- Act immediately — attackers often use automated tools that drain wallets within minutes.
- Create a brand-new wallet with a new seed phrase on a clean device.
- Transfer all funds from the compromised wallet to the new one.
- Revoke token approvals on the old wallet if you used it with DeFi apps.
Frequently asked questions
Is a 24-word seed phrase safer than 12 words?
Both are considered secure against brute-force guessing. A 24-word phrase offers more theoretical security, but how you store either phrase matters far more.
Can I store my seed phrase in a password manager?
Many security experts advise against it, because any device compromise or account breach could expose it. Offline storage is the safer default.
Is a seed phrase the same as a private key?
Not exactly. A seed phrase generates many private keys. Exposing it is even worse than exposing a single key.
Related: Hot wallet vs cold wallet
