What is a seed phrase?
A seed phrase (also called a recovery phrase) is a list of words that encodes the private keys for your cryptocurrency. When you set up a hardware wallet, the device generates that seed phrase and uses it to derive the private keys that control your crypto. Think of the seed phrase like the master key to a safe deposit box: anyone with it can open the box.
This article covers seed phrase basics, the difference between 12 vs 24 seed phrase lengths, and the BIP-39 seed phrase standard used by many wallets (including Trezor models). I’ll share practical steps I use in testing and day-to-day handling.
BIP-39 seed phrase: how it works
BIP-39 is a widely-used standard that converts random entropy into human-readable words from an agreed wordlist. The standard adds a short checksum so the device can detect typos when you restore a phrase. (Entropy is the randomness used to generate the phrase.)
Key facts:
- 12-word seed phrase = 128 bits of entropy (plus checksum).
- 24-word seed phrase = 256 bits of entropy (plus checksum).
Those numbers matter mathematically, but what they mean for you in practice is different. A 12-word phrase already represents extremely strong protection against brute-force attacks today. A 24-word phrase raises that strength further—mainly relevant for long-term, high-value holdings.
BIP-39 phrases are widely compatible across wallets, but some advanced features (like Shamir backups) use different standards. See SLIP-39 / Shamir backup for alternatives.
12 vs 24 seed phrase — quick comparison
| Feature |
12-word seed phrase |
24-word seed phrase |
| Entropy (bits) |
128 |
256 |
| Typing / restore time |
Faster |
Slower |
| Human error surface (write/transpose) |
Lower |
Higher |
| Long-term brute-force margin |
Strong |
Stronger |
| Common wallet compatibility |
Very high |
Very high |
Which should you choose? Ask two practical questions: how long will you hold, and how comfortable are you with added complexity at recovery time? For many users a 12-word phrase gives a very good balance of security and convenience. But if you’re storing a lifetime of assets or prefer maximum headroom, 24 words remove nearly all theoretical brute-force concerns. And yes, 24 words means more to write down accurately.
Step by step: generate and record your seed phrase (How to)
This is a condensed, practical guide that matches what I do during hardware wallet setup.
- Unbox and verify the device. Follow the vendor’s supply-chain verification guide (or see our supply chain tips).
- Update firmware before creating a seed (if possible). Firmware checks reduce attack surface—more on that below.
- Initialize the device on its own screen (not on a computer). Choose "Create new" and select 12 or 24 words.
- Write each word exactly as shown. Use a pen and a printed recovery card or metal plate. Do not photograph the screen or copy to cloud storage.
- Confirm the phrase when prompted by the device (this verifies that you wrote it correctly).
- Store backups in separated, secure locations (see backups section).
Image: ![Seed phrase written on a recovery card — placeholder image]
If you want step-by-step screenshots and Trezor-specific flows, check the unboxing and setup guide and the differences in desktop vs web flows at [/trezor-suite-vs-web-wallet].
Passphrase (25th word): benefits and risks
A passphrase (commonly called the 25th word) is an optional extra string you add to your seed phrase to create a different wallet. It can protect against someone who finds your written seed, because without the passphrase the seed restores a different account.
Benefits:
- Adds a layer of plausible deniability (you can have a “decoy” wallet).
- Creates effectively infinite extra wallets from one seed.
Risks and caveats:
- If you forget the passphrase, the funds are unrecoverable.
- Managing passphrases increases operational complexity (and mistake risk).
In my testing, passphrases are powerful for users who understand operational security and have a disciplined recovery process. But they are not a substitute for physically secure backups. See the full passphrase guide at [/passphrase-guide-25th-word].
Seed phrase best practices and backup options
Follow these core rules every time:
- Never store a seed phrase digitally (no photos, no cloud text, no password managers).
- Use metal backup plates for durability (fire, flood, corrosion). See [/metal-backups-plates].
- Make at least two independent backups and store them geographically apart.
- Test recovery with a small transaction before moving large balances.
- Consider multisig for very large holdings—multisig splits risk and supports flexible recovery. See [/trezor-multisig-guide] and [/multisig-wallet-compatibility].
Shamir (SLIP-39) is an alternative that splits a recovery into multiple shares. It reduces the need to store a single monolithic seed in one place. Learn more at [/slip39-shamir-backup].
And remember: your biggest practical risk is human error, not theoretical brute-force attacks. Store copies clearly and verify them.
Firmware, supply chain and broader security links
Seed phrases protect your private keys, but device integrity matters too. A compromised firmware or a tampered device can undermine seed security.
- Always verify firmware updates before applying. See [/firmware-updates-verification].
- Use supply-chain verification checks if available (unseal, tamper-evidence). See [/supply-chain-tamper-verification].
- For high-safety signing, consider air-gapped signing workflows. See [/air-gapped-signing-psbt].
If you’re unsure about buying a device, review our guides on where to buy safely and buying used.
Common mistakes and FAQ
Common mistakes:
- Photographing or typing the seed phrase into a phone.
- Storing the only backup in one place (single point of failure).
- Using passphrase without a recovery plan.
- Buying used hardware without reinitializing.
FAQ
Q: Can I recover my crypto if the device breaks?
A: Yes—use your seed phrase to restore on a compatible hardware wallet or compatible software that supports BIP-39. For device-specific steps, see [/recovering-a-trezor].
Q: What happens if the company goes bankrupt?
A: Your recovery phrase still controls your private keys. Hardware manufacturer status doesn’t change ownership of keys. However, future compatibility and support can be affected—keep software and firmware options in mind.
Q: Is Bluetooth safe for a hardware wallet?
A: Bluetooth introduces additional attack surface compared with USB-only flows. For maximum isolation use wired or air-gapped signing workflows. See [/connectivity-usb-bluetooth-nfc] and [/air-gapped-signing-psbt].
Q: Should I use 12 or 24 words?
A: Both are secure for most users. Use 24 words if you want maximum theoretical margin and don’t mind longer restores. Use 12 words if you prioritize speed and simplicity.
Conclusion and next steps (CTA)
Seed phrase basics are simple in theory but where most real-world mistakes happen. I believe a disciplined setup and hardened backups protect assets far better than speculation about impossible attacks. Test a recovery, keep offline backups, and consider multisig or metal plates for larger holdings.
Next steps:
- Walk through a device setup: [/trezor-unboxing-and-setup]
- Learn about passphrases in detail: [/passphrase-guide-25th-word]
- Harden your backups: [/metal-backups-plates]
If you want a deeper security primer, see [/trezor-security-overview] and [/secure-element-explained].
