Overview
A recovery phrase is the human-readable representation of the master secret that controls an entire HD wallet. By encoding the wallet's entropy as a sequence of common English words (from a standardized 2,048-word list defined in BIP39), recovery phrases make it possible to back up and restore a wallet without dealing with raw hexadecimal data. The recovery phrase is the single most important piece of information for any Bitcoin self-custody setup.
How Recovery Phrases Work
Recovery Phrase Generation:
┌────────────────┐
│ Random Entropy │ 128 bits (12 words) or
│ (from CSPRNG) │ 256 bits (24 words)
└───────┬────────┘
│
▼
┌────────────────┐
│ Add Checksum │ SHA-256 hash of entropy,
│ │ first 4 or 8 bits appended
└───────┬────────┘
│
▼
┌────────────────────────────────────────┐
│ Split into 11-bit groups │
│ Each group maps to a word (0-2047) │
│ │
│ 128 + 4 = 132 bits ÷ 11 = 12 words │
│ 256 + 8 = 264 bits ÷ 11 = 24 words │
└───────┬────────────────────────────────┘
│
▼
"abandon ability able about above absent
absorb abstract absurd abuse access accident"
Security of Recovery Phrases
A 12-word recovery phrase encodes 128 bits of entropy, meaning there are 2^128 (approximately 3.4 x 10^38) possible combinations. A 24-word phrase provides 256 bits of entropy. Both are far beyond the reach of brute-force attacks with any foreseeable technology.
Storage Best Practices
- Write it on paper or metal — Never store recovery phrases digitally (no photos, no cloud storage, no text files)
- Store in multiple secure locations — A single copy in one location creates a single point of failure
- Consider metal backups — Steel or titanium plates protect against fire and water damage
- Optional passphrase — Adding a BIP39 passphrase creates a hidden wallet, providing plausible deniability and protection if the phrase is discovered
Relationship to Other Terms
The terms "recovery phrase," "seed phrase," and "mnemonic phrase" are often used interchangeably in practice. They all refer to the same BIP39 word sequence. "Recovery phrase" emphasizes the backup and restore function, "seed phrase" emphasizes that it is the seed from which all keys grow, and "mnemonic" emphasizes that it is a memory aid compared to raw binary data.
Common Misconception
The word order matters. "abandon ability able" and "able ability abandon" produce completely different wallets. Each word encodes a specific 11-bit value, and rearranging the words changes the underlying entropy and invalidates the checksum. Always record the words in exact order.