The Problem
Fiat Currency How the System Works Bonds & Interest Rates
Bitcoin
Bitcoin for Beginners Why Bitcoin How to Buy Bitcoin Dollar-Cost Averaging Price History Bitcoin Taxes (US) How It Works
Guides
🎯 Take the Quiz Bitcoin vs Savings Account How Bitcoin Mining Works Student Loan Strategy Glossary
Strategy
Sovereignty Stack Bitcoin vs CBDCs Exit Strategy Inheritance Planning
Personal Finance
Money Order of Operations The Wealth Gap
Deep Dives
Life Stages (6 guides) Tax Strategy Account Deep-Dives Estate Planning Insurance Portfolio Theory Bitcoin Technical Bitcoin Economics
More
Bitcoin vs Altcoins Non-Americans Common Objections Resources Blog Final Word
5 MIN READ

Seed phrase
rules.

Your 12 or 24-word seed phrase is the master key to your Bitcoin. Anyone who sees it controls the funds. Anyone who loses it loses the funds. Here are the rules for handling the single most valuable sequence of words you will ever own.

READING TIME: ~7 MIN

THE SHORT VERSION

A seed phrase is a list of 12 or 24 common English words that deterministically recreates every private key in your wallet. Write it on paper, then copy it to steel. Never type it into a phone, computer, or cloud app. Never photograph it. Store copies in at least two physical locations. Test the recovery before you trust it with real money. For stacks large enough to matter, add a 25th-word passphrase kept separately from the words themselves.

What a seed phrase is

BIP39 is the Bitcoin Improvement Proposal that standardized mnemonic seeds in 2013. Your wallet generates a pool of 128 or 256 bits of entropy, then maps it to 12 or 24 words from a fixed dictionary of 2,048 English words. Those words, fed through a standardized function, regenerate the same master private key every time.

That master key is not a single key. It is the root of a deterministic tree (BIP32 / BIP44) that derives every receive address and change address in your wallet. This is why a single seed can back up tens of thousands of addresses. Lose the device, plug the seed into a new wallet, every coin is there.

KEY FACT

The seed phrase IS the wallet. The hardware device is just a convenient way to sign transactions with that seed. Anyone who has the 12 or 24 words can load them into any BIP39-compatible wallet and spend every coin. Anyone who loses them without a backup has lost the coins permanently.

The 8 non-negotiable rules

1
Write on paper first, steel second
Paper is fine for the initial write and test. Steel is for the permanent copy that survives fire, water, and time. Never skip the steel step for serious amounts.
2
Never type it into anything digital
Not a notes app. Not a password manager. Not an encrypted text file. Not an email draft. Not a cloud-synced document. Every digital surface is a potential leak.
3
Never photograph it
A photo is instantly copied to iCloud or Google Photos, then indexed by their OCR. Your seed is now searchable on a remote server. Same logic for scanners and phone camera apps.
4
Never share it with anyone
No exchange will ever ask for it. No wallet support team will ever ask. Your spouse does not need to hold the plaintext today; see inheritance planning. Anyone asking is attacking you.
5
Keep at least two copies
One copy is a single point of failure. House fire, flood, or a lost move-day box ends your Bitcoin. Two independent copies cut that risk sharply.
6
Store copies in separate locations
Home safe, parents' house, safe deposit box, office, bank vault. Not the same building. One event should not destroy both copies.
7
Test the recovery
Before you rely on the backup with a serious balance, wipe the hardware wallet and restore from the written seed. Verify that the same addresses and any test funds appear. A backup you have never tested is a guess.
8
Never type it into a browser, ever
The most common single way seeds get stolen is a fake wallet site that asks you to "verify" or "import" your seed. Legitimate wallets never need you to type your seed into a web form. If you see one, close the tab.

Metal backups

Metal seed storage products punch, stamp, or engrave your words into stainless steel or titanium. They survive house fires (above 1,500 F), saltwater, flooding, and rot. Jameson Lopp stress-tests them yearly and publishes failure modes.

STAMP-BASED
Cryptosteel Capsule, Blockplate, SeedPlate
Insert pre-cut letter tiles into a steel case, or hand-stamp letters into a plate. [VERIFY current pricing] typically ~$40-120. Robust, fiddly to assemble.
PUNCH-BASED
SeedOR, Stamp Seed Kit
Use a center punch or stamp kit to mark letters into a single plate. [VERIFY current pricing] typically ~$40-150. Fast, low-cost, permanent.
DIY
Washer + hardware-store stamps
A steel washer, a set of 1/8 inch letter stamps, and a hammer cost about $25 total. Proven to survive the Lopp fire test. Ugly but it works.

Avoid cheap anodized aluminum. Avoid glue-based tile systems. Store the plate out of sight, not in plain view.

What to do if you lose the seed

Case one: you still have the working hardware wallet and PIN. Nothing urgent. Restore a new seed to a new device as soon as you can, and migrate funds. The old seed is a ticking clock of weaker security.

Case two: you lost the hardware wallet too. The coins are gone. No service, company, or developer can recover them. Bitcoin has no support desk for lost keys. This is the tradeoff for self-custody, and the reason the 8 rules exist.

The 25th word (BIP39 passphrase)

A BIP39 passphrase is an optional extra string that mixes with your 12 or 24 words to derive a completely different wallet. Without the passphrase, the 24 words alone open an empty or decoy wallet. With the passphrase, they open the real one.

Useful for stacks large enough to attract targeted attack. Store the passphrase in a different location from the seed words. Memorize it if possible. Lose the passphrase and the funds are gone, even if you still have the 24 words. Treat it with the same care as the seed itself.

!Extra security, extra failure mode.
A passphrase you forget is a bricked wallet

Most people should skip the passphrase until they can articulate a specific threat it defeats. For multisig users, the passphrase is often redundant with the quorum. For a solo-custody user holding six figures, it is worth considering.

SLIP-39 and Shamir-style splitting

SLIP-39 splits a seed into multiple shares where a subset (say 3 of 5) reconstructs the original. On paper it sounds like multisig. In practice it is fragile. The shares must be coordinated, formatted identically, and recombined in the right software. Incompatibilities between Trezor SLIP-39 and other implementations have cost people money.

For most users who want "split the keys across locations," native Bitcoin multisig is the better tool. Multisig works at the protocol level, is supported by every modern wallet, and is testable. SLIP-39 belongs to a small set of advanced users who understand the coordination cost.

Sources & Citations
  1. BIP39 Mnemonic code for generating deterministic keys - BIP-0039
  2. BIP32 Hierarchical Deterministic Wallets - BIP-0032
  3. SLIP-0039 Shamir's Secret-Sharing for mnemonic codes - SatoshiLabs SLIP-0039
  4. Jameson Lopp metal Bitcoin storage stress tests - jlopp.github.io/metal-bitcoin-storage-reviews
  5. Trezor documentation on passphrase (hidden wallet) - trezor.io/learn

Last updated 2026-04-14. Not financial advice. Do your own research.

SHARE THIS PAGE