Passphrases (25th Word) Explained

A BIP39 passphrase — often called the "25th word" — is an optional secret you add to your 12- or 24-word recovery phrase. The wallet combines the two to generate your keys, so the same recovery phrase with a different passphrase opens an entirely different wallet. Someone who finds your recovery phrase alone can't reach funds protected by the passphrase.

That makes it a powerful defense against stolen or discovered backups. It also creates a new way to lose everything: forget the passphrase, and there's no reset. This guide explains how passphrases work, when they make sense and how to back them up.

How a BIP39 Passphrase Works

BIP39 is the widely used standard that turns random data into the familiar list of recovery words. It also defines an optional passphrase.

When you restore a wallet, the software runs the recovery words and the passphrase through a key-derivation function to produce a "seed" — the master secret from which all your addresses and private keys come. If no passphrase is used, an empty string is used instead.

Because the passphrase is part of that calculation:

1. 1No passphrase → wallet A (the "standard" wallet).
2. 2Passphrase "blue river 7" → wallet B.
3. 3Passphrase "Blue river 7" → wallet C, completely unrelated to B.

None of these is "invalid". The wallet can't tell which one you meant, which is why there's no error message for a mistyped passphrase. For background on the recovery phrase itself, see what a seed phrase is.

Why the "25th Word" Name Is Misleading

The nickname suggests a single extra word from the same word list. In reality the passphrase can be any text: a long sentence, numbers, symbols. Some wallets limit the length or characters you can enter on the device, so check before choosing one.

A longer, unpredictable passphrase is much harder to guess. A short, common word gives much weaker protection if a thief has your recovery phrase and tries likely candidates.

What a Passphrase Protects Against

A passphrase is a defense for your backup. It doesn't protect you if you type your secrets into a fake app, a phishing site or a "support agent". Our article on seed phrase scams covers those threats.

Should You Use One?

A passphrase may make sense if:

• You hold an amount that would seriously hurt to lose.
• Your recovery phrase is stored somewhere others could access (a shared home, a safe deposit box).
• You're comfortable managing two separate backups and testing them.

It may not be worth it if:

• You're new to self-custody and still learning backup basics.
• You can't think of two secure, separate storage locations.
• Your heirs would struggle to find and use both pieces. See inheritance planning for crypto.

How to Set Up a Passphrase Safely

1. 1Use a hardware wallet that supports passphrases, and enter it on the device itself where possible. Our guide to setting up a hardware wallet covers the basics.
2. 2Choose a strong passphrase. Several random words or a long, unusual phrase work better than a single word or a date.
3. 3Write it down exactly, including capital letters and spaces. Note any spaces explicitly if there's a risk of confusion.
4. 4Record the first receiving address of the passphrase wallet. When you restore later, matching this address confirms you typed the passphrase correctly.
5. 5Test recovery before sending significant funds: wipe or use a spare device, restore with seed + passphrase, and confirm the first address matches.
6. 6Store the passphrase backup separately from the recovery phrase — a different location, ideally one a thief wouldn't link to the first.

Common Mistakes

• Storing the passphrase next to the seed phrase. That cancels the protection.
• Relying on memory alone. Memories fade, especially over years. Keep a physical backup.
• Typos and keyboard layouts. Entering a passphrase on a device with a different keyboard layout can change characters. Test on the device you'll actually use.
• Leaving funds in the wrong wallet. People sometimes deposit into the standard wallet thinking they're in the passphrase wallet. Check the address every time.
• Assuming the wallet will warn you. It won't. A zero balance after restore usually means a passphrase mismatch.

Decoy Wallets

Because the standard wallet (no passphrase) still exists, some people keep a small amount in it as a decoy and hold most funds behind the passphrase. Under pressure, they can reveal the standard wallet. This offers some protection, but an attacker who knows about passphrases may not be fooled, so don't rely on it alone.

Bottom line

A BIP39 passphrase turns your recovery phrase from a single point of failure into two separate secrets, protecting you if someone finds your seed backup. The cost is responsibility: there's no error for a typo and no recovery for a forgotten passphrase. If you use one, choose it carefully, write it down exactly, record a reference address, test recovery and store it apart from your seed. More wallet security guides are in our wallets category.