12 vs 24 Word Seed Phrase: Does It Really Matter?
Is a 24-word seed phrase safer than 12 words? What the difference actually is, why both are secure, and what it means for backups and recovery.
"Should I use 12 or 24 words?" is one of the most common self-custody questions — and the honest answer is that both are secure, but they differ in a few ways worth understanding.
The only real difference: entropy
The word count reflects how much randomness ("entropy") your wallet started with:
- 12 words = 128 bits of entropy + a 4-bit checksum.
- 24 words = 256 bits of entropy + an 8-bit checksum.
That's it. More words means more entropy and a larger safety margin. But here's the catch most people miss: 128 bits is already unbreakable. Brute-forcing a 128-bit secret is beyond the reach of all the computing power on Earth, running for the age of the universe. So 24 words isn't "twice as safe" in any way you'll ever feel — both sit comfortably on the impossible side of the line.
So why does 24 exist?
- Margin for the paranoid. 256 bits leaves headroom against theoretical future attacks (including speculative quantum scenarios, though those threaten the underlying elliptic-curve keys, not the phrase length, first).
- Hardware-wallet defaults. Ledger and Trezor generate 24 words by default as a highest-tier standard.
- Standardization. Some multisig and enterprise setups standardize on 24.
Meanwhile, 12 words is popular in software wallets (MetaMask, Trust Wallet, Phantom) because it's easier to write down and verify — with zero practical loss of security.
What it means for backups
More words means more to record correctly, and more chances for a transcription error. A 24-word metal backup has twice the surface area for a mistake. That's not a reason to avoid 24 — it's a reason to back up carefully and, ideally, to verify your backup by test-restoring.
What it means for recovery
If you lose a word, both are recoverable — the checksum does the heavy lifting:
- A single missing word in a 12-word phrase has 128 valid candidates.
- A single missing word in a 24-word phrase has only 8 valid last words (or a similarly small set elsewhere).
With a known receive address, our recovery tool pins down the exact phrase in either case. See missing a word for the walkthrough.
The bottom line
Pick whichever your wallet gives you and back it up well. If you're choosing: 12 is plenty and easier to handle; 24 is the cautious default. Neither will ever be the weak link — that's almost always a lost or sloppy backup, which is exactly what a recovery tool is for.
Lost part of a phrase, 12 or 24? Open the recovery tool →