Passphrase (25th word) — Use cases, risks, and recovery

Try Tangem secure wallet →

Table of contents


What is the passphrase (the “25th word”)?

The passphrase — often called the “25th word” on many hardware wallets — is an optional extra secret you add on top of your 12- or 24-word seed phrase (recovery phrase). Think of the seed phrase as the master key. The passphrase is a second, independent lock on the same safe. I use that analogy a lot.

Short and practical: the seed phrase alone produces one set of private keys. Add a passphrase and the same seed phrase produces a different set of private keys (a different wallet). This lets a single seed manage multiple wallets depending on the passphrase used.

(Yes — the passphrase is case-sensitive and space-sensitive. Treat it like an exact password.)

See also: Seed phrase management and Hidden wallets.

How the passphrase works (plain language)

Under the hood, BIP-39 (the standard behind 12/24 seed phrases) accepts an optional passphrase that changes the derived master seed. You don’t have to memorize the algorithm. What matters is this: the passphrase is not stored on the device. Only you keep it. Lose it, and the alternative wallet created by that passphrase cannot be restored from the seed phrase alone.

Why does this matter? Because the passphrase gives you plausible deniability and the ability to segregate funds — but it also adds a single point of failure.

Common use cases (when people enable it)

Concrete example: I use a passphrase for a small, private allocation that I check rarely. My main seed phrase is backed up in metal. The passphrase is recorded separately in a secure place (more on that below). And yes — that setup means two independent vaults from one seed.

Risks and trade-offs (what can go wrong)

But should you avoid passphrases because of the risks? Not necessarily. It depends on goals and operational discipline.

Step-by-step: recovering a passphrase-protected wallet

How to restore if your device breaks but you remembered the passphrase:

  1. Obtain a compatible wallet that supports BIP-39 plus passphrases (hardware or software). Check compatibility first. (Yes, check.)
  2. Choose the option to restore from a 12/24-word seed phrase. Enter the seed phrase exactly.
  3. When prompted, enter the passphrase exactly as it was recorded (case and spaces count). If the wallet asks to enable "passphrase" mode, enable it first.
  4. Verify the derived addresses match what you expect (look at the first few receiving addresses).
  5. Move a small test amount first, to be sure everything is right.

If you cannot remember the passphrase: you can attempt controlled reconstruction (notes, partial clues, known patterns). But brute-forcing complex passphrases is impractical. Consider professional help only if funds justify the cost.

Related pages: Restore & recovery guide and Recover if broken.

Passphrase best practices

And do a periodic review of your backups (every 12 months is reasonable).

Passphrase vs seed phrase (quick comparison)

Feature Seed phrase (12/24 words) Passphrase (25th word)
Primary role Master recovery of private keys Optional extra secret that creates alternate wallets
Recoverable if lost Not without a backup Not (even with seed)
Stored on device? No No
Use cases Standard recovery across wallets Hidden wallets, segregation, plausible deniability
Recommended backup Durable metal backup for seed phrase Separate backup (different location)

(Short table. Read the sections above for nuance.)

Passphrase vs multi-signature (which to choose?)

A passphrase is single-device, single-secret security. Multi-signature spreads trust across multiple keys (multiple people or devices). Which is better? It depends on what you want.

In my experience, long-term self-custody for large amounts benefits from multi-signature setups. But that requires more operational complexity (key distribution, signing policy). See multisig setup compatibility and cold storage strategies.

Common mistakes, inheritance, and final thoughts

Common mistakes I see in my testing and community work:

Who should use a passphrase?

Who should avoid it?

Final thoughts: a passphrase is a powerful tool when used carefully. It gives extra control but shifts responsibility squarely to you. I believe that for serious self-custody users, the passphrase can be part of a layered security strategy — alongside durable seed backups, tested restores, and (for large holdings) multi-signature setups.

FAQ

Q: Can I recover my crypto if the device breaks?

A: Yes, if you have the seed phrase and the passphrase (if one was used). Restore on a compatible device and enter both exactly. If you lost the passphrase, recovery is effectively impossible.

Q: What happens if the company behind my hardware wallet goes bankrupt?

A: Your seed phrase and passphrase are independent of the company. As long as you have both and compatible tooling exists, you can restore. See company bankrupt for planning tips.

Q: Is Bluetooth safe for entering a passphrase?

A: Bluetooth adds potential attack surfaces. If you regularly enter passphrases on a phone via Bluetooth, keep firmware current and avoid untrusted environments. For the highest security, use a fully air-gapped workflow.


Final thoughts: use the passphrase intentionally, test restores, and separate backups. If you want setup walkthroughs and step-by-step recovery examples, see first-time setup, passphrase usage, and how to update firmware steps.

Call to action: review your current backup plan today. Test a restore with a small amount, and update your inheritance plan so heirs can find both seed phrase and passphrase if needed.

Try Tangem secure wallet →