What is a seed phrase?

A seed phrase—often called a recovery phrase or mnemonic phrase—is an ordered sequence of words that some wallets use as an input for reconstructing wallet root material. That root material can then be used by a deterministic derivation scheme to reproduce a family of keys.

The phrase is sensitive recovery information, not an address, account name or readable form of one private key. “Seed phrase” is also a wallet-industry umbrella term: the exact word list, seed conversion and derivation process depend on the standard and implementation. BIP-39 is widely implemented, but not every wallet or account uses BIP-39—or any user-visible phrase.

How BIP-39 creates the words

BIP-39 defines two separate stages: generating a mnemonic sentence and converting that sentence into a binary seed. During generation, software starts with 128 to 256 bits of computer-generated entropy in 32-bit increments. It appends a checksum derived from the entropy’s SHA-256 hash, divides the result into 11-bit groups, and uses each group as an index into a 2,048-word list. The permitted entropy sizes produce 12, 15, 18, 21 or 24 words. BIP-39: Mnemonic code for generating deterministic keys

The checksum detects some entry errors; it is not an authenticity proof, a recovery guarantee or an error-correction system. BIP-39 itself notes that the checksum is short and can miss random errors. A phrase passing a checksum test may still belong to the wrong wallet, be paired with the wrong passphrase, or be restored with incompatible derivation settings.

BIP-39 is intended to transcribe computer-generated randomness in a form people can record. It is not designed to convert a sentence invented by a user into a wallet seed. Familiar words do not make a personally chosen sentence unpredictable.

From mnemonic words to a seed

In the second stage, BIP-39 normalizes the mnemonic and optional passphrase using UTF-8 NFKD. PBKDF2 with HMAC-SHA512 then processes the mnemonic as the password and the string mnemonic plus the passphrase as the salt, using 2,048 iterations, to produce a 512-bit seed. If no passphrase is supplied, the empty string is used.

Every passphrase produces a seed. Software therefore cannot determine from this calculation alone whether the user supplied the intended passphrase. Restoring the same words with a different passphrase can open an entirely different deterministic wallet rather than return an “incorrect password” message.

The BIP-39 seed is not yet a list of account private keys. BIP-39 ends with the seed; it does not define an account structure or derivation paths. A separate scheme such as BIP-32 can use that seed to create a master extended private key and chain code, then derive a tree of child keys. BIP-32: Hierarchical Deterministic Wallets

Why the same phrase may show different accounts

Reproducing the BIP-39 seed is only one part of wallet recovery. Software also needs compatible decisions about matters such as:

• the deterministic derivation scheme;
• derivation paths and account indexes;
• network and address or script formats;
• whether particular branches are hardened; and
• imported keys or contract-controlled accounts that were never derived from the seed.

Consequently, a wallet can accept a valid phrase yet initially display different addresses or no expected balance. That does not necessarily mean the seed calculation failed; the wallet may be looking at another branch or address format. The Bitcoin Developer Guide also cautions that HD wallet compatibility depends on using compatible wallet settings. Bitcoin Developer Guide: wallets

This boundary also explains why a phrase is not always a complete backup of everything shown in a wallet application. Labels, contacts, transaction notes, imported standalone keys, multisignature configuration and smart-account recovery data may require separate backups.

Seed phrase, seed, private key and password

• Seed phrase: ordered words used as an input under a particular mnemonic scheme.
• Seed: binary output that a deterministic wallet can use as root material.
• Private key: secret signing material for one key pair, possibly one of many keys derived from the seed.
• BIP-39 passphrase: optional additional input used with the mnemonic to calculate the seed.
• App password or PIN: usually protects local access or encrypted storage; it is not automatically the mnemonic passphrase or seed.

Changing an app password normally does not create a new BIP-39 seed. Changing the BIP-39 passphrase does. A seed phrase is therefore neither “the wallet password” nor “a private key written as words.”

Language, order and exact transcription

BIP-39 uses defined word lists and exact ordered input. Translating mnemonic words into another language does not preserve the underlying entropy or seed; it creates different text and therefore a different seed. BIP-39 specifically discourages generating new mnemonics from non-English word lists because most compatible wallets only support the English list, even though standardized localized lists exist.

Normalization also matters for characters and accents. A human-readable phrase should not be treated as ordinary prose that can be translated, reordered, autocorrected or reformatted without consequence. Recovery should follow the instructions and supported formats of the wallet that created the material.

Recovery limits and exposure

Anyone who obtains the necessary phrase, passphrase and compatible derivation information may be able to reproduce the corresponding signing keys. Conversely, losing necessary recovery inputs can prevent reconstruction. Neither outcome is reversed by changing an unrelated app login password.

Not every wallet exposes a phrase. A wallet may store a standalone key, use a device-backed key that is not exportable, rely on a custody provider, distribute authorization across multiple parties, or use smart-contract recovery rules. Asking “where is my seed phrase?” therefore assumes an architecture that may not apply.

Restoring a wallet reconstructs access material; it does not reverse transactions, return the blockchain to an earlier date or guarantee that every piece of application metadata returns.

FAQ

Can a valid BIP-39 phrase still restore the wrong wallet?

Yes. A checksum-valid phrase can be paired with the wrong passphrase or used with different derivation paths, address formats or networks. “Valid mnemonic” and “the intended wallet” are different checks.

Is a longer seed phrase always used by every wallet?

No. BIP-39 supports several entropy and word lengths, but wallet implementations choose what they support. Other wallet designs may use different backup and recovery mechanisms entirely.

Related concepts

For a longer introduction, read What is a seed phrase?.

Explore private keys, public keys, crypto wallets and non-custodial wallets, or return to the Crypto Glossary.

Sources

• BIP-39 — entropy and checksum encoding, word lists, mnemonic-to-seed processing, passphrases and documented shortcomings.
• BIP-32 — deterministic key trees, master keys, chain codes and hardened derivation.
• Bitcoin Developer Guide: wallets — root seeds, wallet settings and HD recovery compatibility.
• NIST SP 800-57 Part 1 Rev. 5 — general keying-material protection, backup and recovery concepts.