The 25th word: how wallet passphrases work

A passphrase is an extra secret, sometimes called the 25th word, that combines with your seed phrase to derive a completely different wallet. Change one character and you get a different wallet again, with its own addresses and its own empty balance. It is the strongest upgrade available to a self-custody setup and the least forgiving, because nothing anywhere records what you typed.

How does a passphrase change the wallet?

The recovery standard used by mainstream wallets turns your word list into a binary seed, and it allows an optional passphrase to be mixed into that calculation. The output is a different seed, and therefore a different tree of private keys and addresses. The wallet does not store the passphrase; it recomputes the keys from scratch each time you enter it.

This has an unusual consequence: there is no such thing as an incorrect passphrase. Any string you type produces a mathematically valid wallet. Type your passphrase with a capital letter you did not intend and the device will cheerfully show you an empty account, with no indication that anything is wrong.

What does it actually protect against?

Consider the threat you are defending against. A seed phrase written on paper in a drawer is one discovery away from a total loss — a burglary, a curious visitor, a removals company. A twelve-word phrase offers no protection at that point, because it is complete on its own.

A passphrase separates the two secrets. Someone who finds the paper finds a wallet, but not your wallet. Combined with a small decoy balance on the seedphrase-only wallet, it also gives you something to hand over under pressure — the reason the arrangement is sometimes called a hidden or plausible-deniability wallet.

• Protects against: physical discovery of the seed backup, an untrusted person in the house, a compromised safe deposit arrangement, coercion where a decoy is useful.
• Does not protect against: malware on the device where you type it, a compromised hardware wallet, or you forgetting it.
• Not a replacement for: a hardware wallet, geographic separation of backups, or basic scam awareness.

How do you choose and store one?

Treat it as a second seed, not a password. The strength comes from length and unpredictability, and the durability comes from how you record it.

• Long and unusual beats short and clever. A memorable sentence with deliberate structure is far stronger than one substituted word.
• Avoid characters your future self may render differently: smart quotes, non-breaking spaces, emoji, and anything an autocorrect might touch.
• Write it down. Memory is not a backup, and passphrases that only exist in someone's head have been lost to illness and to time.
• Store it in a different place from the seed phrase — otherwise you have added complexity without adding separation.
• Note the exact formatting, including capitals and spaces, in a way you will still parse in ten years.

How should you test it?

Set up the passphrase, send a small amount to an address from that wallet, then wipe the device and restore it from the seed phrase and passphrase alone. If the balance reappears, the arrangement works and your backups are sufficient. If it does not, you have found out at a cost of a few dollars rather than everything. Only fund it properly after a successful restore — and repeat the test if you ever change devices or move the backups.

How do decoy wallets work, and when do they help?

Because the seed phrase alone opens a real wallet, you can keep a modest balance there deliberately. Anyone who finds the written phrase — or compels you to produce it — finds a funded wallet, and nothing about it suggests another one exists behind a passphrase.

Two cautions. The decoy has to be plausible: an empty wallet invites the question of where everything else is, and one that has never transacted looks staged. And the arrangement is a security measure, not a legal strategy — in jurisdictions with disclosure obligations, denying that other wallets exist may create problems entirely separate from crypto.

Where does the passphrase sit in a wider setup?

It is the last layer, not the first. In order of impact: get the seed phrase off any internet-connected device, back it up on something durable in two locations, move meaningful balances to a hardware wallet, and only then consider a passphrase. Each of those steps removes a common failure. A passphrase added before them mostly increases the number of ways to lock yourself out. In practice that means the ground covered in our guides to seed phrase recovery and hot versus cold wallets comes first.