What Is a Seed Phrase? BIP39 Recovery Phrases Explained
A plain-English explanation of seed phrases (BIP39 recovery phrases): what they are, how 12 or 24 words can control your crypto, and why the checksum matters.
If you own crypto in a self-custody wallet, your seed phrase is the wallet. Understanding what those 12 or 24 words actually are makes everything about backups and recovery click into place.
A seed phrase in one sentence
A seed phrase — also called a recovery phrase or mnemonic — is a list of 12 to 24 common words that encodes the master secret of your wallet. Feed the same words into any compatible wallet and you get the same accounts, addresses, and funds back. Lose the words with no backup and no one — not even the wallet maker — can restore them.
Where the words come from: BIP39
The standard behind almost every modern wallet is BIP39. It defines:
- A fixed 2048-word list (each word maps to an 11-bit number).
- How to turn secure randomness (entropy) into a phrase, and back into a seed.
- A checksum appended to the end so typos and bad phrases can be detected.
Because it's an open standard, a phrase created in one wallet usually restores in another — that portability is a feature of self-custody.
How words become a wallet
- The wallet generates random entropy: 128 bits for a 12-word phrase, 256 bits for a 24-word phrase.
- It appends a short checksum (4 bits for 12 words, 8 for 24).
- It slices the result into 11-bit chunks and maps each to a word — giving you the phrase.
- The phrase is stretched into a 512-bit seed, and from that seed the wallet derives a tree of private keys and addresses (this part is BIP32).
That last step is why one phrase controls many addresses — and many coins. A Bitcoin address, an Ethereum address, and dozens of accounts can all come from the same words via different derivation paths.
The checksum: your built-in safety net
The checksum is the unsung hero of recovery. Because the final bits are computed from all the others, a wallet can instantly tell whether a phrase is internally consistent. That's why:
- A misspelled or swapped word makes a phrase fail validation.
- A missing word has only a handful of valid possibilities, not 2048.
- Recovery is possible at all — the checksum shrinks an impossible search into a tiny one.
12 vs 24 words
Both are secure. Twelve words (128 bits) is already far beyond brute-force range; twenty-four (256 bits) adds margin that matters mostly to the deeply cautious. More words also means more to back up correctly — which is, ironically, why recovery tools exist.
Keeping it safe
- Write it down offline. Paper or metal, never a screenshot or cloud note.
- Never share it. No legitimate person or service needs your phrase, ever.
- Optionally add a passphrase (a "25th word") for an extra secret — see BIP39 passphrase explained.
If you've lost part of a phrase, the same structure that secures it also makes it recoverable. Start with the recovery guide or open the free, offline tool.