Mnemonic Password
An optional passphrase mixed into the derivation of a BIP 39 seed, acting like a '25th word' for extra protection.
The BIP 39 passphrase, sometimes called the "25th word," is an optional string mixed in during seed derivation. Same 12 or 24 words plus a different passphrase yields a completely different wallet. The math is straightforward: BIP 39 derives the master seed via PBKDF2(mnemonic, "mnemonic" + passphrase), so any change to the passphrase changes everything downstream.
What it buys you:
- Defense against seed theft. If someone finds your written mnemonic, they get nothing without the passphrase. The 12 words alone derive a (possibly empty) decoy wallet.
- Plausible deniability. The decoy wallet at passphrase = "" can hold a small amount; the real wallet behind a non-trivial passphrase holds the rest. Coercion targets see only the decoy.
- An extra "factor" if you treat the passphrase as something you memorize while the seed is written on metal.
What it costs you:
- Lose the passphrase, lose the wallet. There is no recovery path. The seed words alone are useless. Forget it, or lose the only place it was written down, and the balance behind it is gone for good.
- Operational complexity. The passphrase must be backed up separately from the seed (otherwise both are lost in the same fire), backed up reliably (otherwise it's lost), and recoverable to your heirs if inheritance matters (otherwise the wallet dies with you).
- Footguns: a typo in the passphrase derives a silent alternative wallet. The wallet doesn't tell you the passphrase is "wrong"; it just opens a different empty wallet.
For most users, a properly stored seed without a passphrase is more secure than a seed with a passphrase that they're at non-trivial risk of mishandling. Add the passphrase only if you've thought carefully about how it gets backed up, recovered, and inherited.
Key takeaways
- Enhances security beyond the base seed phrase
- A second factor that must be remembered or backed up securely
- If lost, the wallet becomes impossible to recover
Related chapters
Sources (3)
- BIP-39 - Mnemonic code for generating deterministic keys, From mnemonic to seed: the salt is the string mnemonic plus the passphrase; every passphrase generates a valid seed (2013)
- Bitcoin Wiki - Seed phrase: Electrum and some other wallets call the passphrase a 13th/25th word
- Trezor - What is Shamir backup? FAQ: back up your passphrase offline as well, do not rely solely on memory (accessed 2026-10-13)
Related terms (5)
Published . Revised . No corrections logged for this page.
Edit this page on GitHub