What Is a Seed Phrase? Recovery Phrases, Passkeys and How to Keep Your Wallet Safe

Last updated: 11 October 2026

A seed phrase is a list of 12 to 24 words that a crypto wallet creates when you set it up. Anyone who has those words, in the right order, can restore the wallet and move everything in it.

That makes the phrase the most important thing you'll ever write down for crypto. Below: how a few ordinary words control a whole wallet, how a seed phrase differs from a private key and a passkey, how to store it, and what to do if it's lost or someone has seen it.

What is a seed phrase?

A seed phrase is the master backup of a self-custodial wallet: 12 to 24 words, generated by the wallet, that can rebuild every key and address it holds. Whoever has the words controls the funds, which is why they're never shared.

You'll see it under several names. Recovery phrase, backup phrase and mnemonic phrase all mean the same thing, and MetaMask calls it the Secret Recovery Phrase. The idea doesn't change between apps.

Most wallets take the words from a fixed list of 2,048 English words defined in the BIP-39 standard. On screen, a phrase looks like a numbered list of short, common words in lowercase, one through 12 or one through 24. We won't print a full example here: a random set of words from that list can be a real, working phrase, and someone might send money to it.

A seed phrase only exists when you hold your own keys. With an exchange account, the company holds the keys and there's no phrase for you to keep. Our guide to the difference between custodial and non-custodial wallets covers that choice.

How a seed phrase works

Twelve words can control many accounts on several networks because everything is derived from them, step by step. The steps, from BIP-39 and the related standards:

1. The wallet generates random data, between 128 and 256 bits of it.
2. It adds a short checksum, taken from a hash of that data. For a 12-word phrase the checksum is 4 bits, which is why the last word is partly fixed by the other 11.
3. The result is cut into 11-bit pieces. Each piece is a number from 0 to 2,047, and each number points to one word on the list.
4. The words are turned into a 512-bit seed.
5. That seed produces a tree of private keys, and each key produces an address.

Nothing below the words needs a separate backup. Lose the phone, keep the words, and the whole tree can be rebuilt.

12 words or 24 words?

A 12-word phrase carries 128 bits of randomness and a 24-word phrase carries 256 bits, per the BIP-39 table. Both are far beyond anyone's ability to guess. The real risk is someone seeing your words, not guessing them.

Why your balance can look empty in another wallet

Wallets don't all take the same route from the seed to an address. That route is called a derivation path, and BIP-44 gives the first Bitcoin receiving address as m/44'/0'/0'/0/0. Restore the same phrase in an app that follows a different path, and it opens a different set of addresses.

The funds haven't moved. The app is looking in the wrong place. Many wallets let you choose the path or the account type during import.

Seed phrase vs private key

A seed phrase produces many private keys. A private key controls one address on one network. Losing either to an attacker costs you money, but a leaked phrase exposes every address in the wallet at once.

In practice, most people never see their private keys. The wallet derives them from the phrase in the background, and the phrase is the thing you back up.

Behind each private key sits a public key, and the address you share is derived from that. An address is safe to hand out. A private key or the phrase never is.

Some wallets offer an "export private key" option for moving a single account to another app. Treat an exported key like the phrase itself: anyone who copies it can spend from that address, and it doesn't become less sensitive over time.

The optional passphrase, or "25th word"

BIP-39 lets you add your own passphrase on top of the words. Some wallets call it the 25th word. It isn't a PIN for the app: it changes the seed itself.

The standard puts it plainly: "every passphrase generates a valid seed," but only the correct one opens the wallet you funded. Type it wrong and you'll see an empty wallet, with no error message. Forget it and the funds are gone, even if you still have all 24 words.

It's a tool for experienced users holding larger amounts, who can back up two secrets separately. For most people, one well-stored phrase is the safer setup.

Passkeys and seed phrases: what changes

A passkey usually doesn't replace a seed phrase. It handles daily access on your device, while a recovery method gets the wallet back on a new one, so check which your wallet uses.

A passkey, as the FIDO Alliance defines it, is a sign-in credential that opens with the same face scan, fingerprint or PIN you use on your phone. It only works on the app or site it was made for, which makes it hard to phish. The W3C Web Authentication standard describes two kinds: synced passkeys, which follow you across devices through your passkey provider, and device-bound passkeys, which stay on one device.

So the two do different jobs. A passkey protects signing in and approving actions. A recovery phrase protects getting the wallet back after a lost or broken phone. A wallet that uses a passkey still needs some way to recover, and a passkey doesn't make the recovery phrase pointless unless the wallet tells you so.

How it works in Ramp Network Wallet

Ramp Network Wallet is non-custodial, and Ramp Network says it "cannot access or recover your funds." The wallet is created when you sign up for the app, and you secure it by setting a passkey with Face ID, fingerprint or PIN. Ramp Network describes the wallet as "protected by your passkey and recovery phrase," so the passkey covers everyday access and the recovery phrase is your backup.

You can read how passkeys and a recovery phrase protect Ramp Network Wallet on the wallet page.

How to store your seed phrase safely

Store it offline, in at least two places, and never in a digital copy. The basics:

• Write it on paper or stamp it on metal, by hand.
• Check every word, and the number next to it, against the screen before you close it.
• Keep two copies in separate, safe places, such as home and a trusted second location.
• Never photograph it, email it, or paste it into a notes app, cloud drive, password manager or chat.
• Test your backup: restore it with a small amount before you rely on it.

Many wallets ask you to confirm a few of the words, say the third and the seventh, before they finish setup. Take that step seriously. It's the last chance to catch a misspelled word while the full list is still on screen.

Don't label your copy as a crypto backup. A plain sheet in a sealed envelope draws less attention than one marked "wallet words". And look at your copies once a year, because paper fades and gets thrown out by mistake.

The same rules apply to the backup card that comes with a hardware wallet. It's a written copy like any other.

What happens if someone finds your seed phrase? They can empty the wallet from any device, without your phone or passkey. Move your funds to a new wallet straight away, using the steps further down.

Seed phrase scams to know

Seed phrase scams share one goal: getting you to type, paste or read out your words. The patterns repeat:

• Fake support. An account messages you first, offering help with a problem you posted about, and asks for your phrase to "fix" it.
• "Validate your wallet" sites. A page asks you to validate, sync or rectify your wallet by entering the phrase.
• Fake airdrops and claim pages. A free-token offer leads to a page that asks for the phrase, or to a transaction that hands control of your tokens to someone else.
• Fake extensions and apps. Copies of real wallets in browser stores and app stores, built to capture the words you type.
• Pre-filled devices. A hardware wallet arrives with a phrase already written on a card. A genuine device creates a new phrase on setup.
• "Recovery services". Firms that promise to get stolen funds back for an upfront fee. The CFTC calls these recovery frauds and says they target people already harmed by other scams.

No genuine wallet, exchange or support team will ever ask for your seed phrase. That includes Ramp Network. Our guide to more common crypto scams covers the wider picture.

Lost your seed phrase, or think someone saw it?

If the phrase may have been seen, treat the wallet as compromised. If it's lost but you can still open the wallet, you have a window to fix it. Either way:

1. Don't wait. If you can still open the wallet, act now, before anyone else does.
2. Create a new wallet with a brand-new phrase. Don't reuse the old one.
3. Send a small test transaction to the new wallet, then move all the funds.
4. Revoke token approvals on the old wallet if you've used it with apps, so they can't move tokens later.
5. Store the new phrase properly, offline and in two places.
6. Never pay a "recovery" service.

If you've lost both the phrase and access to the wallet, nobody can restore a self-custodial wallet for you. The FTC warns that if you lose access to your wallet or it's compromised, "you're likely to find that no one can step in to help you recover your funds." It also notes that "cryptocurrency payments typically are not reversible."

The words are the wallet. Keep them offline, keep two copies, and never type them anywhere a stranger asked you to.

See how passkey security works in Ramp Network Wallet
Daily access with your face, fingerprint or PIN, and a recovery phrase as your backup. Explore the wallet

Frequently asked questions

Does Coinbase use a seed phrase?

A Coinbase exchange account doesn't give you a seed phrase to keep, because it's custodial: Coinbase's help center says your crypto "is stored on the platform." Coinbase's separate self-custody app, called Coinbase Wallet on its help pages, stores private keys on your own device. Check which app you're using before you look for a phrase.

What are the seed words for Bitcoin?

Most Bitcoin wallets use the same BIP-39 list of 2,048 English words that wallets on other networks use. The list itself is public, and anyone can read it. What protects you is the specific set of words your wallet gave you and their order, so the secret is your phrase, not the list.

Can someone guess my seed phrase?

Not in practice. A 12-word phrase holds 128 bits of randomness, far more than any computer can work through. Phrases are stolen, not guessed: through photos and screenshots, cloud backups, fake websites, fake support accounts and malicious apps. Protecting the words from being seen matters far more than choosing 24 words over 12.

Should I memorize my seed phrase?

Memory alone is a poor backup. One forgotten word, or two swapped words, can lock you out for good, and nobody can reset it. Keep a written or metal copy stored offline in two places. Memorizing the phrase as well is optional, and it doesn't replace the physical backup.

Do I still need a seed phrase if my wallet uses a passkey?

It depends on the wallet. A passkey usually covers daily access on your device, but the wallet still needs a way to recover on a new phone, whether that's a recovery phrase or another method. Find out what that method is before you add funds, and back it up the same day.

Can I use the same seed phrase in another wallet?

Often, yes, if both wallets follow BIP-39. But wallets can use different derivation paths, so your funds may look missing until you choose the right path or account type. Only ever enter your phrase into a wallet you downloaded from its official source, and never into a website.

---

Ramp Swaps (Ireland) Limited trading as Ramp Network is regulated by the Central Bank of Ireland.

Using self-custodial wallet including send feature: