What Is a Seed Phrase and How to Store It Safely
A seed phrase (recovery phrase) is a 12 or 24-word backup that a self-custody wallet uses to generate your private keys. Anyone who has it can move your funds. Keep it offline on paper or metal, in more than one secure location, never typed into a website or sent to anyone claiming to be support.
A seed phrase, sometimes called a recovery phrase, is the human-readable backup — usually 12 or 24 words — that a self-custody crypto wallet uses to generate your private keys. Whoever has those words can reconstruct the keys and move whatever funds sit behind them, no password or device required. That single fact explains almost every rule in this article, and most of the scams built around stealing it.
I’ve set up and recovered wallets more times than I’d like to admit, usually while testing new exchanges or trying out a hardware device. The mechanics are simple once you’ve done it. The part people get wrong isn’t the setup, it’s treating the phrase casually afterward, because nothing bad happens until the one day it does.
What is a seed phrase recovery phrase, exactly?
When a self-custody wallet is created, it generates a random seed and encodes it as a sequence of plain English words drawn from a standard list (the BIP39 word list explained in the Bitcoin improvement proposal that most modern wallets follow). That word list is deterministic: the same 12 or 24 words will always regenerate the same private keys, on any compatible wallet software, on any device. That’s the entire point, it’s a human-friendly way to back up something that would otherwise be an unreadable string of cryptographic data.
This only applies to self-custody wallets (hardware wallets, MetaMask, Trust Wallet, and similar). Exchange accounts work differently, see the FAQ on BYDFi below.
Seed phrase vs private key: what’s the actual difference?
People use these terms interchangeably, which causes confusion. A seed phrase is the master backup; a private key is what gets derived from it for a specific address. One seed phrase can generate many private keys across many coins and accounts, depending on the wallet’s design. Lose the seed phrase and you potentially lose access to everything it ever generated, not just one wallet address.
| Term | What it is | What happens if exposed |
|---|---|---|
| Seed phrase | 12 or 24-word master backup | Attacker can derive every key and move all funds |
| Private key | Single cryptographic key for one address | Attacker can move funds in that one address only |
| Password | Login credential, often for custodial accounts | Resettable by provider; combined with 2FA for account access |
| Passphrase (‘25th word’) | Optional extra word added to a seed phrase on some wallets | Creates a hidden wallet; forgetting it means permanent loss of that specific wallet |
How do you actually store a seed phrase safely?
The consistent advice across wallet makers and security researchers boils down to: keep it offline, keep it duplicated, and test it before you need it.
- Write it on paper, or better, stamp or engrave it onto a metal seed phrase backup plate designed to survive fire and water damage.
- Keep it in more than one secure physical location, a safe at home and a safety deposit box, for example, so one disaster doesn’t wipe out your only copy.
- Never photograph it, screenshot it, type it into a cloud notes app, or email it to yourself. Anything connected to the internet is a target.
- Test recovery once, deliberately, using a small amount of funds in a fresh wallet install, before you trust the backup with anything significant.
- If you’re deciding between a software wallet and a hardware device for long-term storage, our breakdown of hot wallet vs cold wallet security covers the trade-offs in more detail.
A hardware wallet doesn’t eliminate the need for a paper or metal backup, it just keeps the keys off an internet-connected device day to day. You still generate and must back up the same seed phrase when you set one up, hardware or not, so “best hardware wallet for seed phrase storage” is really a question about which device has the cleanest setup flow and the most trusted reputation, not which one skips the backup step.
What about the passphrase, or ‘25th word’?
Some wallets let you add an extra custom word (or passphrase) on top of the standard 12 or 24. This creates a separate hidden wallet, and knowing the base phrase alone won’t unlock it. It’s a genuine layer of extra protection against someone finding your physical backup. The catch: if you forget that extra word, there is no recovery path at all, not from the wallet maker, not from anyone. It’s an advanced feature, worth understanding but not something to bolt on casually.
How do seed phrase phishing scams actually work in 2026?
The scams haven’t changed much in substance, just presentation. Common patterns:
- A pop-up claiming your wallet app “needs an update” or has “detected an error,” prompting you to re-enter your recovery phrase to continue.
- A fake “validate your wallet” or “verify eligibility for airdrop” website that looks like a legitimate wallet interface and asks for the phrase to “check” your balance.
- Someone in a Telegram or Discord server impersonating official support, offering to “help” after you post about a transaction issue, then asking you to DM your seed phrase so they can “look into it.”
- Browser extensions or “recovery tools” advertised as able to restore lost wallets, which are really just phrase-harvesting traps dressed up as a seed phrase generator or scanner.
The single rule that defeats all of these: no legitimate wallet app and no legitimate exchange support agent will ever ask you to type or send your recovery phrase. If something is asking, stop and close it.
Seed phrase vs exchange account security
This is where a lot of newer traders get confused, so it’s worth separating clearly. A self-custody wallet uses a seed phrase because you, not a company, hold the keys. An exchange account, including BYDFi, and every other centralized exchange, is custodial: the exchange holds the keys on your behalf, and you access your account with a password plus two-factor authentication instead. Neither BYDFi’s platform, as described on its official site, nor any other reputable exchange will ever ask for a wallet seed phrase to operate your trading account, because there isn’t one to ask for. If you’re comparing custodial platforms before depositing, our guide on checking exchange security before depositing is a reasonable next read, and the exchange rankings page is a decent starting point for side-by-side comparisons.
For general education on wallet mechanics and self-custody best practices beyond what fits here, independent publishers like Leverage.Trading cover the topic in more depth.
Final thought
None of this is complicated once it’s internalized: the seed phrase is the whole wallet, in word form, and anyone who sees it owns what’s behind it. Offline, duplicated, tested, never typed into anything connected to the internet. That’s the entire playbook. This article is general information, not financial, legal, or tax advice, for anything specific to your situation, consult a qualified professional.
Disclosure: this site may earn a commission from some exchanges listed, including BYDFi, through referral partnerships.
Frequently asked questions
Is it safe to store a seed phrase digitally or in the cloud?
No. Cloud notes, email drafts, password manager text fields, and photos on a phone are all searchable or hackable once that account or device is compromised. The standard practice is offline storage only — paper or metal — kept away from the internet entirely.
How much does a metal seed phrase backup plate cost in 2026?
Prices vary by brand and material, and change over time, so check the current listing on the manufacturer's own site or a reputable retailer rather than relying on a number here. Compare stainless steel vs titanium options and whether the plate is fire and water resistant before buying.
How do I recover a crypto wallet using a 12 or 24-word phrase?
You install the same wallet app (or a compatible one), choose the 'restore' or 'import wallet' option instead of 'create new wallet', and enter the words in the exact order shown on your backup. The wallet software recalculates your private keys and your balances reappear once it syncs with the blockchain.
What is the difference between a seed phrase and a password?
A password is typically used with a custodial account (like an exchange login) and can usually be reset by the provider if you lose it. A seed phrase has no reset mechanism — whoever controls self-custody wallet funds does so entirely through those words, and no company can restore them for you.
Are seed phrase recovery tools legal to use in all countries?
Using your own seed phrase to restore your own wallet is a normal, legal function built into wallet software everywhere. Problems arise with third-party 'recovery services' or browser extensions that ask you to paste your phrase in — those are almost always scams rather than a legal grey area, and should be avoided regardless of jurisdiction.
Does BYDFi or other exchanges store your seed phrase for you?
Exchange trading accounts, including BYDFi, are custodial and rely on a password plus two-factor authentication, not a seed phrase. If a support agent on any platform ever asks for a recovery phrase, that is not a legitimate request and should be reported, not answered.
What happens if you lose your seed phrase without a backup?
If the wallet is still installed and logged in on a device, funds are usually still accessible — the risk only materializes if the device is lost, reset, or the app is reinstalled. Once both the phrase and the active device are gone, the funds are generally unrecoverable, which is why a tested offline backup matters before that happens.
What's the real difference between a seed phrase and a private key?
A seed phrase is a human-readable master backup that a wallet uses to mathematically derive one or many private keys underneath it. A private key is the raw cryptographic value tied to a single address; losing the seed phrase can mean losing access to every key it generated, not just one.