You set up a wallet, and it showed you 12 or 24 plain English words and told you to write them down. The screen probably made it sound important without saying why. Here is why.
The short answer: a seed phrase is your master key written as words. Those words are a readable version of one very large random number. Your wallet uses that number to calculate every private key and every address it will ever use. Your coins are not stored in the app or the device. They are recorded on the blockchain, the shared public ledger of transactions, and the words are the only thing that proves they're yours. Anyone who has the words can move the funds, from any wallet, anywhere, and nobody can reverse it.
What does a seed phrase actually mean?
Most wallets follow an open standard called BIP39, the specification for mnemonic seed phrases. A mnemonic is simply something designed to be easy to remember or copy. The process works like this:
- The wallet generates random data, called entropy: 128 bits for a 12-word phrase or 256 bits for 24 words. A bit is a single 0 or 1.
- It adds a short checksum, a few extra bits calculated from the random data, so typing errors can be caught.
- It splits the result into chunks of 11 bits. Each chunk is a number from 0 to 2,047.
- Each number is looked up in a fixed list of 2,048 words. That word is written down.
So the words aren't a password you picked. They're a translation of a number into a format humans can copy by hand without mistakes.
What is the seed phrase word list?
The list is published and identical in every wallet that follows the standard. The English version has 2,048 words, and each one can be identified by its first 4 letters. Words like "abandon", "zoo" and "ability" are on it. Because the list is public, the words themselves are not secret. The secret is which words you have and their exact order.
| Feature | 12 words | 24 words |
|---|---|---|
| Random data (entropy) | 128 bits | 256 bits |
| Checksum | 4 bits | 8 bits |
| Total bits encoded | 132 | 264 |
| Possible combinations | about 3.4 × 1038 | about 1.2 × 1077 |
| Brute-force guessing | Not practical | Not practical |
Both lengths are far beyond guessing by computer. The real danger is never someone guessing your words. It's someone seeing them.
How do 12 words control every address?
The wallet runs your words, plus an optional passphrase, through a function called PBKDF2. It repeats a cryptographic hash 2,048 times and produces a 512-bit seed. A hash is a one-way calculation: easy to run forward, practically impossible to reverse.
From that seed, the wallet derives a master private key. Using fixed rules called derivation paths, it calculates child keys from the master in a numbered sequence: key 0, key 1, key 2 and so on. Each child key produces one address. Same words, same rules, same addresses, every time, on any compatible wallet. That's why one backup covers thousands of addresses. It can cover Bitcoin and Ethereum accounts in the same wallet too.
Here's an everyday comparison. Think of a locksmith's master key for an apartment block. Each flat has its own key, but the master opens every door. If a tenant loses their key, the master still works. If a stranger copies the master, every flat is open to them. Your seed phrase is that master, and the building can never change its locks.
Why does anyone with the words own the funds?
Blockchains have no account manager and no customer service. A transaction is valid if it's signed with the right private key. Nothing else counts, not your ID or your email. The words recreate the keys, so whoever holds the words can sign. Bitcoin's own wallet security guidance stresses keeping backups offline and safe for exactly this reason. Once a transaction is confirmed, it can't be cancelled.
The optional passphrase, sometimes called a "25th word", changes the result completely. The same 12 words with a different passphrase produce a different, unrelated set of addresses. It adds protection if your paper is found. Forget the passphrase, though, and the funds behind it are gone for good.
What does safe handling look like in practice?
- Do write the words by hand, in order and numbered 1 to 12 or 1 to 24, on paper or a metal backup plate.
- Do check every word against the official list and confirm the backup when the wallet asks.
- Do store at least 2 copies in separate secure places, safe from fire and water.
- Don't photograph, screenshot, email, or store the words in cloud notes or a password manager linked to your phone.
- Don't type the words into any website, form, or chat, ever.
- Don't use example phrases from guides. Known test phrases are watched by thieves, and anything sent to them is taken within seconds.
If you're planning how heirs could access funds, speak to a qualified estate lawyer rather than improvising.
What the research says
The BIP39 standard defines the 2,048-word list, the 11-bits-per-word encoding, the checksum, and the 2,048-round PBKDF2 step described above. Ethereum's security guide warns that no legitimate support team will ever ask for your seed phrase. It also warns that anyone who has it controls your funds. The FBI's Internet Crime Complaint Center receives reports of crypto fraud, including fake support and fake wallet scams built to collect recovery words. For the devices that hold your wallet, CISA's Secure Our World guidance recommends software updates and phishing awareness. These matter because malware on your phone or computer can capture words as you type them.
Common mistakes
- Thinking the wallet app holds the coins. Deleting the app or breaking the device loses nothing if you have the words. Losing the words with no other backup loses everything.
- Believing support staff need the phrase to help. No genuine wallet maker, exchange, or recovery service needs it. A request for it is a scam, every time. If you've already shared it, move remaining funds to a new wallet with a new phrase immediately. Then report it to IC3 or your local authority.
- Assuming word order is flexible. The order is part of the number. The same 12 words in a different order are a different key, and most shuffles fail the checksum entirely.
This article is general security information, not financial or investment advice. Never share your seed phrase with anyone, for any reason.
I'm an Italian creator who builds apps, games and websites. I run Crypto Radar Daily with the help of AI tools: every article starts from the sources linked above, and I check what goes out. I'm not a doctor, a lawyer or a financial adviser. Spotted a mistake or have an idea? Write to me.
Instagram @spartaco_94_My websiteWrite to meAbout this blog