A seed phrase is a list of ordinary words that a wallet can use to regenerate your private keys. It is short enough to write down and powerful enough to move everything it controls. Understanding what it represents, and treating it accordingly, is the single highest-value security habit in self-custody.
A seed phrase is the wallet, not a password to it. Anyone who reads it can take everything it controls, and if it is lost there is no provider, identity check or support process that can restore access.
- Why the phrase is the account rather than a password.
- How backups fail in ordinary, unglamorous ways.
- What a passphrase adds, and what it risks.
- How to test a backup before trusting it with anything.
What a seed phrase represents
When you create a self-custody wallet, the software generates a random value and expresses it as words that are easier to copy accurately than a long string of characters. From that value the wallet derives your private keys, and from the keys it derives your addresses. The words are not a password to an account; they are the account.
This is why anyone holding the phrase can recreate the wallet on any compatible software, anywhere, without your permission and without notifying you. It is also why nobody can restore access if the phrase is lost. There is no provider holding a copy, no identity check that recovers it, and no support process that can help.
One phrase, many addresses
A single seed usually generates many addresses across multiple networks, following a derivation path. That is why restoring a wallet can display a familiar balance immediately, and also why restoring in different software can occasionally show an empty wallet even though the phrase is correct: the new software may use a different default path or network.
If a restore looks empty, do not conclude the funds are gone and do not enter the phrase into more websites looking for answers. Note which wallet software and which network you originally used, check that software’s documentation on derivation, and restore in the same environment first. Panic is what turns a configuration issue into a real loss.
This also explains a common false alarm. Restoring a correct phrase in different wallet software can display an empty wallet, because that software may default to a different derivation path or network. The funds have not moved. The fix is to restore in the software that created the wallet, not to enter the phrase into additional websites looking for an explanation.
Where the phrase must never go
Never type a seed phrase into a website, a search box, a chat, an email, a support form, or a note-taking app that syncs to a cloud service. Never photograph it. Never store it in a password manager unless you fully understand and accept that specific risk. Legitimate wallet software asks for it only during restore, in the app itself, and legitimate support never asks for it at all.
A useful rule: the only moments a seed phrase should be visible are when you first write it down and when you deliberately restore a wallet. Any other prompt, however official the surrounding page looks, should be treated as an attempt to steal it until proven otherwise on a source you navigated to yourself.
Places a seed phrase must never go
- A website, however closely it resembles the official one.
- A support chat, email, form or social media message.
- A photo, a cloud-synced note, or a screenshot.
- A form reached through a search advertisement or a pop-up.
- Anyone offering to validate, migrate, or fix your wallet.
How backups actually fail
Most losses are mundane. A phrase written in fading ink on a receipt. A single copy in a location affected by fire or flood. Words recorded out of order or with a transcription error that only becomes apparent years later. A backup stored somewhere a household member discarded during a clear-out. A phrase split between two places where one half was lost.
Design against these specifically. Write legibly on durable material, number the words, verify each word against the list immediately, keep more than one copy in separate physical locations, and consider metal backup products if fire or water is a realistic concern. Record which wallet software and which passphrase setting the backup corresponds to.
Passphrases, PINs, and extra layers
Some wallets support an optional passphrase added to the seed phrase. This produces an entirely different wallet, which can protect against someone who finds the written words. It also introduces a second thing to lose, and losing it is as final as losing the phrase. If you use one, back it up separately with the same care and record clearly that it exists.
A device PIN or app password protects the device, not the seed. Anyone with the phrase can bypass the device entirely by restoring elsewhere. Keep the roles distinct in your mind: the PIN resists someone holding your hardware, the seed backup resists you losing the hardware, and neither substitutes for the other.
If you use an optional passphrase, write down that it exists. Losing the passphrase is as final as losing the phrase itself, and a backup that omits any mention of it can leave someone restoring the wrong wallet and concluding the assets are gone. The existence of the extra layer is information; the passphrase itself belongs in a separate, equally protected place.
Testing a backup before you rely on it
An untested backup is an assumption. Before moving any meaningful amount into a wallet, verify that you can restore from your written words. Many hardware wallets offer a recovery check feature. Alternatively, restore into a separate device or a fresh installation and confirm that the expected addresses appear, then remove that temporary installation.
Test with a trivial amount first, and repeat the check if you ever rewrite or relocate the backup. Also confirm that the person who might need to act on your behalf could actually follow your instructions. A backup only you can interpret is a partial backup.
Test the backup before you rely on it
An untested backup is an assumption. Do this while nothing is wrong and the amount at stake is trivial.
Write it down yourself
On durable material, numbered, in your own handwriting, checked word by word against the display.
Use the device’s recovery check
Many hardware wallets can verify that what you wrote matches what they hold.
Restore somewhere separate
Restore into a fresh installation or spare device and confirm the expected addresses appear.
Send a trivial test
Move a negligible amount in and confirm it arrives before anything significant follows.
Record the context
Note the wallet software, whether a passphrase applies, and where each copy is kept.
Common seed phrase scams
The dominant pattern is a fake support agent, appearing in a comment reply, a direct message, a search advertisement, or a pop-up in a compromised interface, who offers to fix a wallet issue and requests the phrase to validate or migrate it. A second pattern is a fake wallet application that generates a phrase already known to its author.
A third exploits generosity or curiosity: a message shares a seed phrase for a wallet apparently holding funds, inviting you to take them. Attempting it typically requires you to send fee assets first, which is the actual theft. Install wallet software only from the vendor’s official source, and treat every unsolicited offer of help as hostile by default.
A calm plan for storage and inheritance
Decide where each copy lives, who could physically reach it, and what would happen if you were unavailable. A sealed record with a trusted person or a legal arrangement can be appropriate; publishing hints on social media is not. Keep the plan simple enough that it survives contact with a stressful day.
Write a short access note that says which wallets exist, which software they use, whether a passphrase applies, and where the backups are, without containing the words themselves. Review it whenever you change wallets or move house. Most self-custody problems come from ordinary life events, not from sophisticated attackers.
A short access note is worth keeping with your important documents: which wallets exist, which software created them, whether a passphrase applies, and where the backups are stored, without containing the words themselves. Most self-custody problems are caused by ordinary life events rather than by attackers, and a note like this addresses exactly those.
Key terms to keep handy
- Seed phrase
- A word sequence, often twelve or twenty-four words, from which a wallet derives its keys.
- Private key
- The secret that authorizes transactions from an address.
- Derivation path
- The rule a wallet follows to generate specific addresses from one seed.
- Passphrase
- An optional extra secret that, combined with the seed phrase, produces a different set of keys.
- Word list
- The standardized vocabulary many wallets draw seed words from.
- Cold storage
- Keeping keys or backups on something that is not connected to the internet.
See where the address comes from
The KuCoin sell & withdraw guide covers selling and withdrawing, the point at which a wallet address is pasted into a platform. That is where key management stops being theoretical and a typing error becomes permanent.
Before that moment arrives, make sure your backup is written, tested and stored in more than one place. People who postpone it tend to postpone it until the first time it matters, which is exactly too late.
Sources and further reading
- Bitcoin security guidance (opens in a new tab)
- Ethereum wallet fundamentals (opens in a new tab)
- Ethereum security and scam prevention (opens in a new tab)
Frequently asked questions
Can support staff recover my seed phrase?
No. Legitimate wallet providers do not hold your phrase and cannot regenerate it. Anyone claiming they can restore or validate your wallet using the phrase is attempting to take control of it.
Is a twenty-four word phrase safer than a twelve word one?
Both provide security far beyond what an attacker could search through by brute force. The practical risk is almost always how the phrase is stored, copied, and handled, rather than the number of words.
Can I store my seed phrase in a password manager?
It concentrates two critical secrets behind one login and exposes the phrase to any compromise of that vault or its sync service. Some people accept that trade-off deliberately; an offline written or metal backup is the more conservative default.
What if I think someone has seen my phrase?
Treat it as compromised. Create a new wallet with a newly generated phrase on a device you trust and move assets to the new addresses promptly. A phrase cannot be changed; only the wallet it controls can be abandoned.
Does a seed phrase work in any wallet app?
Often, but not always identically. Compatibility depends on the standards and derivation paths the software supports. Record which application created the wallet so a future restore starts in a compatible environment.
What should I read next?
Read the guides to hot and cold wallets and to crypto scams. The first covers where keys should live, and the second covers the social techniques used to extract them.
Crypto can lose substantial value, and transfers may be irreversible. This guide is educational, not financial, legal, or tax advice. Exchange access and features depend on your location.
Independent educational writing. How we research and correct our guides.