A seed phrase is a list of words, usually 12 or 24, that a crypto wallet creates when you set it up. It is the master backup of the wallet. Anyone who has the seed phrase can rebuild every key in the wallet on any device and move every coin it controls. Nobody else can stop them, and nobody can reverse the transfer. Treat the seed phrase as the coins themselves.
This guide explains what a seed phrase is, how to write it down and store it, how to test that the backup works, and how the most common thefts happen. The rules are simple, and most losses come from breaking one of them under pressure.
What a seed phrase is
Most wallets use a common standard, known as BIP-39, which turns random numbers into a list of words chosen from a fixed list of 2,048 words. Each word carries 11 bits of information. A 12-word phrase carries 128 bits of secret randomness plus a checksum, and a 24-word phrase carries 256 bits. Both are far beyond what anyone could guess by trying combinations, so the phrase itself is safe from guessing. The danger is in copying, storing and sharing it.
From the seed, the wallet derives its keys in a fixed, repeatable way. The same words always produce the same keys. That is why a seed phrase can restore a wallet on a new phone, and also why whoever holds the words holds the wallet.
Why it controls everything
The private keys that sign transactions are derived from the seed. If your phone breaks, the wallet app can be reinstalled and the seed restores the keys. If someone else obtains the seed, they can do the same thing on their own device, and they can move the coins before you notice.
A password on the app does not protect the seed. The app password only locks the app on one device. The seed works on any device, which is why the seed deserves more care than any password you have.
A worked example: two ways to lose the same wallet
Suppose you hold 3,000 in a wallet and keep the seed phrase in two places: a photo on your phone and a note in a cloud document. A thief who gets into your cloud account reads the note, installs the wallet on their own phone, restores it and moves the coins in minutes. The phone's screen lock never came into it.
Now suppose you write the seed on paper and keep the paper in a locked drawer at home, with a second copy in a safe at a relative's house. A house fire at home would not destroy both copies, and nobody can take the coins without physically getting the paper. The second setup is slower and less convenient, and it is much harder to steal from.
| Storage | Who can reach it | Main risk |
|---|---|---|
| Photo on phone | Anyone who unlocks the phone or the photo library | Phone theft, cloud sync |
| Cloud note or email | Anyone with the account password | Account hack, phishing |
| Paper in one place | Anyone who finds the paper | Fire, flood, theft at home |
| Paper or metal in two places | Anyone who reaches both places | Slower to access, harder to lose both |
How to write it down
Write the words by hand on paper, in order, with the number of each word next to it. Check the spelling against the list the wallet shows, and check that the count matches the wallet's requirement. A mistake in one word can make the backup useless.
Paper can burn, fade or tear. For larger holdings, a metal backup is more durable. Small metal plates or sheets engraved with the words survive fire and water, and they are sold for this purpose. Whatever medium you use, keep it dry, out of sunlight and away from any device that could photograph it.
Do not store the words in any digital form. That includes a photo, a note app, a password manager entry that syncs to the cloud, an email to yourself, or a message to a friend. Each one creates a copy that can be hacked or read by someone with access to the account.
Where to keep it
Keep the backup somewhere you can reach but others cannot. Two separate locations protect against a single disaster. A safe deposit box, a home safe or a trusted relative's secure storage can all work, depending on your situation. If you use a relative, agree in advance who can access the backup and how, so it does not become a problem later.
Consider what happens if you die or become unable to act. A seed phrase that only you know is lost along with you. A sealed letter with instructions, kept with a lawyer or trusted person, can give your family a way to recover the coins. Keep the instructions separate from the words themselves, so that neither alone is enough to steal from you.
Test the backup before you rely on it
A backup you have never tested is a hope, not a backup. Before you move a large amount into a wallet, send a small test amount, then restore the wallet from the written seed on a second device. Check that the same addresses and the same balance appear. Then send the test amount back if you wish, and note that the restore worked.
Repeat the test if you ever change the backup, move the wallet to a new app or replace your device. It takes a few minutes, and it shows whether the words you wrote are complete and correct.
The passphrase option
Some wallets offer an optional extra passphrase, sometimes called the 25th word. It changes the keys derived from the seed, so the same seed with a different passphrase opens a different, empty wallet. A passphrase adds protection if someone finds the paper, but it adds a serious risk. If you forget the passphrase, the coins are gone, and no support team can recover them. Use it only if you understand the risk and keep a separate, secure record of it.
How the thefts happen
Most seed phrase thefts follow a few patterns. A fake support agent contacts you on social media or a messaging app, says your wallet has a problem, and asks you to enter the seed to fix it. A fake website asks you to restore your wallet on a form, and sends the words to the thief. A fake app copies the wallet's look, and asks for the seed during setup. A phone or cloud account is hacked and the stored note is read.
Every one of these depends on you typing or sharing the words. No real wallet, exchange or support team will ask for your seed phrase, ever. If anyone asks, the request itself is the warning sign.
Common mistakes
Storing it digitally. A photo or note feels convenient, and it is the most common way the words leak.
Writing it on a sticky note or a card in your wallet. Anyone who finds it has everything.
Keeping one copy. A single fire, flood or theft can remove the only backup.
Never testing the backup. You may discover the words are wrong only when you need them.
Sharing it to get help. Real help does not require the seed phrase.
Checklist
- Write the words by hand, in order, and check each one against the wallet's list.
- Keep at least two copies in two separate places, on paper or metal.
- Store nothing digital, and keep the backup out of sight and out of reach of anyone who visits.
- Test the restore with a small amount before you move a large one.
- Tell a trusted person how to recover the coins if something happens to you, without giving them the words in advance.
- Never type the seed into any website, app or message, whoever asks.
Key takeaways
A seed phrase is the master backup of a crypto wallet, and whoever holds it controls every coin in the wallet. It is safe from guessing, but it is exposed to copying, storage and sharing. Write it by hand, keep two copies in separate places, store nothing digital, and test the restore before you rely on it. Never give the words to anyone, and treat any request for them as an attack.
This guide is for general information, not financial advice. See the disclaimer.