← All articles

Security

Understanding Seed Phrases: Your Master Key to Crypto Recovery

By MVaults Editorial ·

Understand what recovery words protect, how they differ from a device PIN, and why backup storage and recovery planning are part of owning a wallet.

Blank recovery phrase sheet beside a hardware wallet and secure storage box

A recovery phrase is a human-readable backup used to reconstruct a wallet's keys. It is not a customer-service password. In a conventional seed-based wallet, possession of the necessary recovery material can allow another person to control the associated assets without holding your original device.

What the words represent

The BIP-39 specification describes how random input is encoded as a mnemonic with a checksum and used to derive a seed. Wallet software then uses keys derived from that seed to manage accounts. The phrase is therefore sensitive cryptographic material, even though it looks like ordinary words.

Ledger's recovery-phrase explanation describes its standard 24-word backup. Other wallets may use different supported phrase lengths or backup systems; never assume every wallet follows the same recovery process.

PIN, recovery phrase, and passphrase are different

ItemWhat it doesWhat to remember
Device PINRestricts access to the physical deviceChanging it does not replace an exposed recovery phrase
Recovery phraseReconstructs the wallet's seed under the supported recovery processWord order matters; keep it secret
Optional BIP-39 passphraseChanges the seed derived from the mnemonicThe exact additional text is needed to recover that wallet

A BIP-39 passphrase is sometimes informally called a 25th word, but it need not be a single dictionary word. It is an advanced feature: an incorrect entry can produce a different wallet instead of a helpful error. Do not add one until you understand and have tested the complete backup plan.

Design a backup you can maintain

Begin with a realistic inventory of threats: unauthorised access, water or fire damage, relocation, and the possibility that you become unable to manage the wallet yourself. Choose storage that addresses those risks without creating an elaborate process you cannot reliably repeat.

For a conventional offline backup, avoid photographs, shared printers, cloud documents, and messaging applications. A second copy can reduce loss risk while also creating another place an attacker could find it. Decide deliberately where each copy belongs and who, if anyone, can access it.

Maintain a separate, non-secret note explaining which device and account types you use and where an authorised person should find your recovery instructions. Do not put the recovery words into that note. Recovery planning should help the intended person identify the process without broadcasting the secret.

Recover through the documented path

Use a supported, genuine device and the manufacturer's current recovery instructions. For a Ledger recovery-sheet restoration, enter the words on the hardware device itself, not into a website. Compatibility can also depend on account type, derivation paths, networks, and an optional passphrase.

If the phrase has been exposed, treat it as compromised. Recovering the same wallet on another device does not revoke someone else's copy of the phrase. Establish a new wallet and backup through a trusted setup when addressing that exposure.

The most useful backup is one whose secrecy, physical storage, and recovery process you can explain and maintain over time.