How to Protect a Bitcoin Recovery Phrase

A recovery phrase is the critical backup for a self-custody wallet. This is a plain-English, accurate guide to what it is, how key derivation works, and how to store it safely — without the common myths.

Category: Security and Scam Prevention · Published 2026-07-01

Security reviewed and sourced on 2026-07-02

What does this mean?

Editorial review covers clarity and neutrality. Technical, security, and source reviews indicate whether an article's material claims were checked against relevant authoritative material. A source link being available does not by itself mean every claim has been verified. A reviewed status means the article's material claims were examined; it does not mean the article is exhaustive or that future protocol, market, or software changes cannot make it outdated.

What a recovery phrase actually is

When you set up a self-custody wallet it usually shows a list of ordinary words drawn from a fixed dictionary. The most common standard is BIP-39, which allows 12, 15, 18, 21, or 24 words — 12 and 24 are the most common, but they are not the only valid lengths, and not every wallet uses BIP-39 at all.¹ This is your recovery phrase (also called a seed phrase or mnemonic). Under BIP-39 the words, plus an optional passphrase, are converted into a seed¹; the wallet then derives its private keys from that seed using hierarchical deterministic derivation (BIP-32).² It is not literally “the money” and not literally the keys themselves — it is the backup that can regenerate them. Some wallets use different backup systems entirely, so treat your own wallet’s official instructions as authoritative.

Why it must be protected

Anyone who obtains your recovery phrase can usually recreate your wallet in compatible software and spend the funds — without your device, PIN, or permission. Bitcoin transactions are extremely difficult, and usually impossible, to reverse once confirmed. The opposite risk is loss: if you lose the phrase and lose access to the device, the funds can become permanently unreachable, because self-custody has no “forgot password” reset. Good storage balances both dangers: hard for others to reach, and durable enough that you never lose it.

How to store it safely

The guiding rule is to keep the phrase offline, where no internet-connected device can read it.

Offline only: never in a photo, phone, computer, email, notes app, cloud drive, or chat.
Durable medium: archival paper at minimum; stamped or engraved metal resists fire and water.
Redundant locations: keep more than one copy in separate secure places so a single accident cannot erase it.
Private: stored where visitors, cameras, and cloud backups will not capture it.

Never photograph it, never type it into a website, and never send it to “support.” A hardware wallet stores the keys on the device; the recovery phrase is its critical backup, so restore a hardware wallet only by following the manufacturer’s official instructions.

Passphrases, derivation paths, and wallet compatibility

A recovery phrase is not always enough on its own to reproduce the exact same wallet. An optional passphrase (sometimes called a “25th word”) creates a different wallet from the same words.¹ Wallets also use derivation paths² and address standards; restoring your phrase in a different wallet may require it to support the same standards, or your balance may not appear even though the phrase is correct. This is a compatibility issue, not lost coins. When restoring, prefer the same wallet software, or check its documentation for supported paths.

Legitimate restore vs. a scam

Restoring a wallet can legitimately involve entering your recovery phrase — for example, into the official application of a software wallet during setup, or onto a hardware device following the vendor’s official guide. So it is false to claim a phrase is only ever entered on hardware. What matters is where and how: only during a restore you initiated, only in software you verified came from the official source, and never because someone asked for it.

No legitimate person, company, wallet maker, exchange, or pool will ever ask you to reveal your recovery phrase to “verify,” “fix,” “migrate,” or “claim” anything. Receiving coins needs only your public address. If someone asks for your phrase, that request itself is the warning sign.

FAQ

Is a recovery phrase literally my money?

No. It is a human-readable backup from which the wallet's keys are derived. It is powerful — anyone with it can usually recreate the wallet and spend the funds — but it is the backup, not the coins or the keys themselves.

Do all wallets use 12 or 24 words?

Many follow the BIP-39 standard and use 12 or 24 words, but not all. Some wallets use different backup systems, and options like an extra passphrase or different derivation paths change how a wallet is reproduced. Follow your own wallet's official documentation.

Is it ever normal to type my recovery phrase into software?

Yes, during a restore you initiated — for example into the official app of a software wallet, or onto a hardware device per the vendor's guide. Verify the software is genuine and from the official source first. It is a scam only when someone else asks for it or a page requests it unprompted.

Can I store the phrase in a password manager or encrypted file?

It is strongly discouraged. Anything digital can be exposed through malware, a cloud breach, or a bad sync. Keeping the phrase offline on paper or metal removes the most common path to theft.

Support asked for my recovery phrase to fix an issue — what should I do?

Do not share it. No legitimate service needs your recovery phrase; the request itself is the scam. Real support can help using only your public address or a transaction ID.

Key takeaways

A recovery phrase is a backup from which keys are derived — BIP-39 is common but not universal.
Anyone with the phrase (and any passphrase) can usually recreate spending authority; treat exposure as compromise.
Store it offline, redundantly, and privately; back up the passphrase separately.
Restoring into official software can be legitimate; being asked for it by anyone is not.
Hardware and metal backups reduce some risks but are not automatically safe.

Sources

BIP-39: mnemonic code for generating deterministic keys — Bitcoin Improvement Proposals
BIP-32: hierarchical deterministic wallets — Bitcoin Improvement Proposals