Seed Phrases, the Master Key

3.1 Twelve ordinary words

When Mint created a first self-custody wallet, the app displayed twelve ordinary English words and a warning in bold: write these down and never share them.

"That's it?" Mint said. "Twelve random words protect everything?"

"Those twelve words are everything," said Hash. "Anyone who has them owns your wallet. Not just this app. Every address, on every blockchain, that this wallet will ever create."

This chapter explains what a seed phrase is, why it's so powerful, and why guessing one is effectively impossible.

3.2 What a seed phrase is

A seed phrase (also called a recovery phrase, secret recovery phrase, or mnemonic) is a human-readable version of a very large random number. That number is the master secret from which your wallet generates all its private keys.

Computers are good at handling huge numbers. Humans are terrible at writing them down accurately. So a standard called BIP-39 converts the random number into a list of words chosen from a fixed list of 2,048 words. Words are much easier to write, read, and check than long strings of digits and letters.

Most wallets use either 12 words or 24 words. The final word includes a small checksum, a built-in error check, so if you write a word wrong, a wallet will usually tell you the phrase is invalid.

3.3 One seed, many keys

From that single master number, your wallet follows a standard recipe to generate a whole tree of private keys. Different branches of the tree are used for different blockchains and different accounts. These branches are called derivation paths.

Think of the seed phrase as the master key to a building. From it, a locksmith can cut keys for every room, on every floor, in a predictable way. Lose the room keys, and you can always cut them again from the master. But anyone with the master key can open every door.

Chapter 3 · One seed, every address

At the top, the seed phrase, highlighted: 12 or 24 words for one huge random number, acting as the master key. It branches into a Bitcoin branch and an Ethereum branch, each with its own derivation path, and an other-chains branch with one branch per network. Under each branch are accounts and addresses, such as Account 1 and Account 2 with bc1q or 0x addresses, followed by more addresses. A note says whoever has the seed has every address, on every chain.

This is why the seed phrase is so important:

If you have the seed phrase	Result
Your phone is lost, stolen, or broken	You can restore your wallet on a new device
The wallet app disappears or stops working	You can restore it in another compatible wallet
You want to access the same accounts on a second device	You can
Someone else gets a copy	They can take everything, from anywhere, at any time

Because the derivation recipe is standardised, a seed phrase created in one wallet can usually be restored in other wallets that follow the same standard. Occasionally, wallets use different paths, so a restored wallet may show different addresses at first. If that happens, it's usually a settings issue, not lost funds.

3.4 Why nobody can guess it

Node was skeptical. "Twelve words from a list. Can't a computer just try every combination?"

"Let's do the maths," said Hash.

A 12-word seed phrase represents 128 bits of randomness. That's 2 to the power of 128 possible combinations, roughly 340 undecillion, or 3.4 × 10^38.

Suppose an attacker had a computer that could check one trillion seed phrases every second.

Step	Value
Possible 12-word seed phrases	~3.4 × 10^38
Guesses per second	1 × 10^12
Seconds to try them all	~3.4 × 10^26
Years to try them all	~1 × 10^19 (ten billion billion years)
Compared to the age of the universe	Roughly 780 million times longer

Even trying half the combinations, which is the average needed to find one, would take hundreds of millions of times the age of the universe. A 24-word phrase is unimaginably stronger still.

"So nobody guesses seed phrases," said Mint.

"Nobody guesses them," said Hash. "They steal them. Every seed phrase theft you'll ever hear about happened because the phrase was copied, photographed, typed into a fake site, stored online, or shared. The maths is unbreakable. People aren't."

There's one important exception: the randomness must be genuine. Seed phrases you invent yourself, such as a favourite quote or twelve words you picked, are much easier to guess. Always let a trusted wallet generate the phrase.

3.5 Password versus seed phrase

When Mint set up the wallet, the app also asked for a password. Mint assumed this was the same thing as the seed phrase. It isn't.

	Password	Seed phrase
What it does	Unlocks the wallet app on this specific device	Recreates the wallet on any device
Where it works	Only on the device where you set it	Anywhere, in any compatible wallet
If you forget it	Restore the wallet using your seed phrase, then set a new password	Funds are usually lost forever, unless you have another backup
If someone else learns it	They also need your device	They need nothing else

Think of the password as the lock on your front door, and the seed phrase as the deed to the house.

3.6 The optional passphrase

Some wallets support an extra, optional passphrase, sometimes called the "25th word." It's combined with the seed phrase to produce a completely different set of wallets. The same 12 or 24 words with a different passphrase leads to entirely different addresses.

This adds protection: if someone finds your seed phrase but not your passphrase, they can't reach the funds protected by the passphrase. But it also adds risk: if you forget the passphrase, there's no recovery, even with the seed phrase. A passphrase is an advanced feature. Only use it once you're confident in your backup habits, and back up the passphrase separately.

3.7 The rules

Hash wrote them on a card and handed it to Mint.

1. Never share your seed phrase with anyone. No legitimate person, company, support agent, or app will ever ask for it.
2. Never type it into a website. The only time you enter it is when restoring a wallet, inside the wallet app or hardware wallet itself.
3. Never store it digitally. No screenshots, photos, notes apps, emails, password managers, or cloud storage.
4. Write it down by hand, in order, and check it.
5. Keep it somewhere safe from theft, fire, and water. Chapter 4 covers how.
6. Never use a seed phrase someone else gives you. Scammers sometimes hand out "pre-funded" seed phrases. Whatever you deposit into that wallet, they can take.

"Why not a password manager?" Node asked. "I use one for everything else."

"Password managers are good security," said Hash. "But they're online, they sync, and they've been targets of breaches. For the one secret that controls all your crypto, the safest default is offline. Some experienced users make different choices, but they understand the risks they're taking."

3.8 Try it yourself

Create a new wallet on a test device or with a testnet in mind, purely for practice. Write down the seed phrase by hand. Then delete the wallet from the app and restore it using only what you wrote. Did you get the same address back?

This exercise teaches you more than any explanation: whether your handwriting is legible, whether you wrote words in the right order, and how restoring actually feels. Do it now, with nothing at stake, rather than for the first time during an emergency.

Key takeaways from this chapter

1. A seed phrase is a human-readable form of a very large random number, usually 12 or 24 words from a standard list of 2,048.
2. All your wallet's private keys, on every blockchain, are generated from the seed phrase.
3. Anyone with the seed phrase controls everything in the wallet; anyone without it can't guess it.
4. Seed phrases are stolen, not cracked. Theft happens through copying, phishing, digital storage, and sharing.
5. A password only unlocks a wallet on one device. The seed phrase restores it anywhere.
6. An optional passphrase adds protection but must be backed up separately.
7. Never share, type into a website, or digitally store your seed phrase, and never use one someone else gives you.