Seed Phrase Security: 12 Words Equal All Your Assets

Direct answer: The 12 or 24 words your wallet shows at setup are a BIP39 mnemonic: a human-readable encoding of the random seed from which every private key and address in that wallet is derived. Anyone who reads those words in the right order can rebuild the wallet on any compatible software and move everything, with no password, device or 2FA required. Store the phrase offline and by hand, in at least two separate locations, test that it actually restores, and never type it into a website, app or chat, whatever the reason given.

What a seed phrase actually is

Per the BIP39 specification (checked 2026-11-01), a wallet first generates 128 to 256 bits of random entropy, appends a short checksum, and splits the result into 11-bit groups. Each group indexes one word from a fixed list of 2,048 words. That is why the phrase is always a multiple of three words:

The words are then run through a key-stretching function (PBKDF2 with HMAC-SHA512, 2,048 rounds, per the same specification) to produce a 512-bit master seed. From that seed, deterministic derivation produces every account, key and address the wallet will ever use. Three consequences follow:

• The phrase is the wallet. The device, the app and the PIN are just interfaces. Lose the device but keep the words, and nothing is lost. Leak the words, and the device's security is irrelevant.
• Order matters. The same 12 words in a different order are a different (almost certainly empty) wallet, and the checksum will usually reject them.
• 12 words are not "weaker" in any practical sense. 128 bits of entropy is far beyond brute-force reach; 24 words add margin, not a different class of safety. Where you keep the words matters more than how many there are.

The seed phrase, private key and password explainer covers how these three differ if you are new to the terms.

Threat model: how seed phrases are actually lost

Seed phrases are almost never cracked. They are read, photographed, phished or misplaced. Rank your defences against these realistic paths rather than against movie-style attacks.

Ledger's own guidance states that a genuine device never asks you to enter the recovery phrase on a computer, phone or website, and that any prompt to do so is a scam (checked 2026-11-01). The same holds for every reputable wallet vendor.

Step-by-step: backing up a seed phrase correctly

1. Generate it on a trusted device, offline if possible. A hardware wallet generates and displays the words on its own screen. If you must use a software wallet, use a freshly installed official app on a clean device, and treat that wallet as hot money only. See the hardware wallet setup guide.
2. Write it by hand, numbered. Print letters, one word per line, with the position number. Double-check spelling against the wallet's own display; BIP39 words are unique in their first four letters, so an illegible fifth letter is survivable, but a wrong first four is not.
3. Make a second copy on a different medium. Paper in a sealed envelope plus a stamped metal plate is a common pairing. Store them in two different buildings.
4. Run a restore test before depositing anything. Reset the device, restore from the written words, and confirm the first receiving address matches what you recorded. This catches transcription errors while they are still free.
5. Decide on a passphrase deliberately. BIP39 allows an optional passphrase (sometimes called the 25th word) that produces a completely different wallet from the same words. It protects against someone finding the paper, but a forgotten passphrase is unrecoverable. If you use one, store it separately from the words and document that it exists.
6. Fund with a test amount first, then the balance, following the withdraw-to-wallet guide for address and network checks.
7. Write an inheritance note. Explain where the copies are and how to use them, stored so that the right person can find it and nobody else can. A seed phrase nobody can locate is as lost as one that was stolen.

Mistakes and risks

• Keeping one copy "to be safe". A single copy fails to fire, flood and simple misplacement. Two separate copies are the minimum.
• Storing the words in a password manager. Password managers protect passwords well, but they are online and synchronised, which puts the phrase one account takeover away from theft.
• Splitting the phrase into halves in two places. Each half dramatically reduces the search space for whoever finds it, while doubling your own failure points. If you want split storage, use a proper threshold scheme or a multisig wallet instead.
• Reusing a seed phrase that was ever displayed on a connected computer. Once typed into a browser or shown by a software wallet on an everyday laptop, assume it may be compromised; migrate to a fresh hardware-generated seed.
• Entering the phrase to "fix" a wallet problem. Sync errors, missing balances and app updates never require the phrase on a website. Scammers posing as support rely on this exact reflex; see the fake support checklist.
• Confusing approvals with the seed. A dApp can drain tokens via a malicious approval without ever seeing your words. The seed is the master key, but the token approvals guide covers the other door.
• Telling people you hold crypto. Social engineering and physical coercion begin with knowing who to target.

Related tools and guides

• Seed phrase vs private key vs password
• Hardware wallet setup
• Public and private keys explained
• Cold vs hot wallets: where should your coins live?
• Self-custody guide
• Multisig wallets for larger holdings
• Crypto security checklist
• How to avoid phishing

FAQ

Is a 24-word phrase safer than 12 words?

Marginally in theory, not meaningfully in practice. Both exceed any realistic brute-force capability under the BIP39 design (128 vs 256 bits of entropy, checked 2026-11-01). Real losses come from exposure and misplacement, which affect both equally. Protect the words rather than counting them.

Can I store my seed phrase encrypted in the cloud?

It is better than plaintext, but it still turns an offline secret into an online one and adds a second secret (the encryption key) you can lose. For long-term holdings, offline physical copies remain the standard recommendation from wallet vendors.

What if I lose the hardware wallet?

Nothing is lost if you have the phrase. Buy a new device from the manufacturer, restore from the words, and your balances reappear. This is exactly why the restore test matters: it proves the backup works before you depend on it.

Someone asked for my phrase to help recover an airdrop. Is that ever legitimate?

No. Claiming, verifying, syncing, migrating or recovering never requires typing the phrase into a website or sharing it with a person. Treat the request itself as proof of a scam.

I already typed my phrase into a suspicious site. What now?

Act immediately: create a new wallet with a fresh seed on a trusted device, move all assets to it starting with the most valuable, then revoke any approvals from the old address. Assume the old wallet is permanently compromised, even if nothing has moved yet.

Bottom line

Your seed phrase is not a backup of your wallet; it is your wallet. Twelve or twenty-four words, generated on a trusted device, handwritten in two separate places, test-restored once and never typed into anything online: that is the whole discipline. Every theft story involving a seed phrase breaks one of those rules, and almost none involve the cryptography being broken.

Educational content only, not investment or security advice. Wallet software, device procedures and standards can change; verify current instructions with your wallet's manufacturer.