Introduction
A recovery phrase (also called a seed phrase) is the master key to any non-custodial hardware wallet. Lose it and you lose access to your private keys. Keep it safe and you preserve long-term self-custody. Simple, right? But there are meaningful differences between a 12-word seed and a 24-word seed. This guide explains BIP-39 seed phrases, compares 12 vs 24 words, walks through metal backups (including metal backup plates), and gives step-by-step instructions you can use today.
What I've found in hands-on testing: many people overcomplicate the choices. You can make a secure plan that fits your threat model without resorting to extreme measures. And testing your recovery is non-negotiable.
What is a BIP-39 seed phrase?
BIP-39 is a commonly used standard that turns binary entropy into a list of human-readable words — your seed phrase. That phrase encodes the data needed to recreate private keys in hierarchical deterministic (HD) wallets. In plain terms: the BIP-39 seed phrase is the invention that lets one backup (your words) restore all the accounts on a hardware wallet.
A few practical notes:
- The phrase generation should happen on the hardware wallet itself (air-gapped when possible). Never type your seed into a phone or cloud service.
- BIP-39 uses a checksum so single-word transcription errors are sometimes detectable. (Still, don’t rely on that.)
- Wallets can differ in derivation paths and passphrase handling, so confirm compatibility if you restore on a different wallet app or model. See wallet integrations for details: wallet-integrations.
Seed phrase 12 vs 24 words — technical differences and practical trade-offs
Which should you choose: seed phrase 12 vs 24 words? Here’s the technical split and how it matters day-to-day.
- 12 words: 128 bits of entropy (plus checksum). Easier to write and verify. Faster to transcribe under stress. Still very strong against brute-force with today’s computing power.
- 24 words: 256 bits of entropy (plus checksum). Higher theoretical entropy and thus a larger brute-force margin. Longer to write; more opportunities to make transcription errors.
Table: quick comparison
| Feature |
12 words |
24 words |
| Entropy |
128-bit |
256-bit |
| Ease of transcription |
Easier |
Harder |
| Recovery time under stress |
Faster |
Slower |
| Recommended when |
Everyday users who value speed |
High-value/very long-term holdings |
Who should use which? If you store a moderate amount and prioritize usability, 12 words plus a strong passphrase or a metal backup is a sensible choice. If you’re securing large holdings or planning for centuries, 24 words or multi-signature setups make more sense. But remember: human error often defeats theoretical strength, so pick the option you will reliably use.
Backup options: paper, metal, and metal backup plates
Paper is cheap and familiar, but it rots, burns, and photographs easily. A seed phrase metal backup removes those single points of failure.
Practical metal backup tips:
- Choose corrosion-resistant metal (stainless or titanium if available).
- Use a stamping, engraving, or punching method rather than ink.
- If using metal backup plates, map each word clearly (templates help).
- Store copies in geographically separated secure locations (safe deposit box + home safe, for example).
And don't take shortcuts like photographing the phrase or storing it in cloud-synced notes. But if carrying multiple plates sounds excessive, consider splitting the backup (SLIP-39) or using multi-signature instead.
For a deep dive into metal backup hardware and techniques, see: shamir-metal-backups.
SLIP-39 (Shamir) and multi-signature alternatives
Shamir’s Secret Sharing (SLIP-39) splits your seed into multiple shares. A threshold (for example, 2-of-3) is required to reconstruct the phrase. SLIP-39 helps reduce single-point failures: one lost share doesn’t mean total loss.
Multi-signature setups distribute control across multiple hardware wallets or signers. Instead of one seed, the funds require signatures from multiple keys. That approach provides strong protection against theft and single-device failures, but it adds complexity for daily use.
Which to pick? Use SLIP-39 if you want redundancy of the seed itself. Use multi-signature if you want operational security that limits the value any single key can move. Both approaches can be combined with metal backups and geographic distribution. See multisig-guide for a practical walkthrough.
How to create and test a backup (How to / Step-by-step)
- Prepare: read the device setup guide and verify firmware first (firmware-updates-guide).
- Generate the seed on the hardware wallet (do not use a phone or PC input). Keep the device air-gapped during generation when possible.
- Write the words clearly on your backup medium (paper first, then transfer to metal if you plan to). Use block letters and a word-index template.
- Verify: most devices will ask you to confirm a few words. Do that on-device — never confirm using an online prompt.
- Create your metal backup plate(s). Store them in different secure locations.
- Optional: set up SLIP-39 shares or multi-signature signers.
- Test recovery: perform a full restore on a spare device or emulator using the backup. Use a low-value test transfer to confirm addresses match.
What I've found: people skip step 7 and regret it. Test recovery (yes, it takes time) and your future self will thank you.
Common mistakes to avoid
- Buying a wallet from an unofficial seller (tampering risk). See buying-safely.
- Photographing or saving your seed phrase digitally.
- Entering your seed into desktop/mobile apps except when restoring on a trusted hardware wallet.
- Keeping all backups in one physical location.
- Using a passphrase without documenting how heirs should recover (see passphrase-guide).
But one more thing: don’t assume a long seed is a cure-all. If you write a 24-word phrase poorly, it can fail just like a 12-word phrase.
FAQ: real user questions
Q: Can I recover my crypto if the device breaks?
A: Yes — if you have the seed phrase or valid shares. Restore onto another hardware wallet that supports the same standards or use a compatible software wallet in an air-gapped setup. See recovery-and-restore.
Q: What if the wallet company goes bankrupt?
A: Your seed phrase represents the keys; company insolvency doesn't affect your private keys if you hold the seed or have distributed keys in a multisig.
Q: Is Bluetooth safe for a hardware wallet?
A: Bluetooth adds convenience but widens the attack surface compared with USB or air-gapped methods. If you prioritize maximal isolation, prefer air-gapped flows or USB-only operations. See connectivity-security.
Q: Should I use a passphrase (25th word)?
A: A passphrase adds an extra secret layer, but it also becomes your responsibility to remember and document it securely. If lost, the passphrase cannot be recovered.
Conclusion and next steps
Choosing between a 12-word or 24-word seed phrase is a balance of human factors and threat model. Use the BIP-39 standard correctly, back up on metal if possible, test your restores, and consider SLIP-39 or multisig for high-value holdings. I believe practical, tested backups keep you in control without unnecessary complexity.
Ready to take the next step? Follow a device-specific setup and recovery guide next: safe-3-setup or safe-5-setup. For more on passphrases, multi-signature setups, and durable backups see passphrase-guide, multisig-guide, and shamir-metal-backups.
If you only remember one thing: practice your recovery (Step-by-step) before you need it.
