What is a seed phrase?
Exchanges hold your keys for you, which is convenient and is also the reason you can lose everything when they fail. Self-custody hands the keys to you, and the keys turn out to be twelve words on a piece of paper. Most of crypto's security advice reduces to a single sentence about those words, and most of crypto's theft comes from people who did not follow it.
What does the seed phrase actually control?
Everything. A modern wallet does not store a bag of separate keys; it stores one secret and derives all the keys from it in a fixed, repeatable way. The seed phrase is that secret, written in words from a standard list of 2,048 so that humans can copy it without errors. Twelve words from that list encode 128 bits of randomness; twenty-four words encode 256. Either is far beyond guessing: 2,04812 is about 5 × 1039 possibilities, and the wallet software will produce the same addresses from the same words on any device, forever.
| Item | What it is | If someone else gets it |
|---|---|---|
| Seed phrase | The master secret; 12 or 24 words | They own every coin in the wallet, on every chain |
| Private key | One key derived from the seed, for one address | They own the coins at that address |
| Public address | Where people send you coins | Nothing — it is meant to be shared |
| Wallet password / PIN | Unlocks the app on one device | Nothing, without the device |
Where should it live — and where must it never live?
Offline, on something that cannot be photographed by a compromised phone or read by a compromised computer. The threat is not a burglar; it is malware, cloud sync and your own convenience.
| Storage | Risk | Verdict |
|---|---|---|
| Written on paper, kept in two places | Fire, water, loss | Acceptable minimum |
| Stamped on metal plate | Physical theft only | Best for larger amounts |
| Photo on your phone | Any app with photo access; cloud backup | Never |
| Notes app, email, cloud drive | Account compromise reaches it instantly | Never |
| Password manager | Better than cloud notes; still a single online point of failure | Only for small amounts, if at all |
| Typed into any website | It is gone | Never, without exception |
Test the backup once: restore the wallet from the written words onto a spare device before you send it anything worth losing. A backup you have not tested is a hope.
How is a seed phrase different from a private key or a password?
The password protects the app on one device; change it, lose it, it does not matter to the coins. The private key controls one address. The seed phrase controls every address the wallet will ever make, on every chain it supports. A thief with your password and no seed has a locked app; a thief with your seed and no password has your money. That asymmetry is why "I have a strong password" is not a security plan.
How do scams get the seed phrase?
They ask for it, wrapped in a reason. "Support" in a chat reply asks you to "validate" or "sync" your wallet. An airdrop site asks you to "connect" by pasting the phrase. A fake wallet app looks identical to the real one and stores what you type. A "recovery service" promises to unlock funds if you share the words. All of these have one tell: a legitimate wallet, exchange or developer never needs your seed phrase for anything, ever. The moment the words are requested, the conversation is a theft in progress, whatever the logo says.
FAQ
Is a seed phrase the same as a private key? No. The seed phrase is the master secret from which every private key in the wallet is derived. One seed phrase can regenerate thousands of private keys and addresses.
Can I change my seed phrase? Not for an existing wallet. To rotate, create a new wallet with a new phrase and move the coins to it.
Is it safe to store a seed phrase in a password manager? It is better than a notes app or a photo, but it puts the master secret behind one online login. For anything more than small amounts, keep it offline.
What if I lose my seed phrase but still have the wallet app? You can still use the wallet on that device, but if the device is lost, wiped or fails, the coins are gone. Move them to a new wallet whose phrase you have backed up.
Set up your accounts so a stolen phrase is not the end
Two-factor, withdrawal whitelists, anti-phishing codes and the order to do them in.
Every key term, one roadmap
The whole slide course — ten free PDF parts, 328 pages.
The seed phrase is what self-custody actually means in practice. Withdrawing crypto safely covers the move from exchange to wallet step by step, and choosing a trustworthy exchange explains what the exchange is holding for you in the meantime.