What Is a Wallet Passphrase? (The 25th Word Explained)

Beyond your normal 12-to-24-word seed phrase, most hardware wallets offer an optional extra: a passphrase, sometimes called the '25th word'. Used well, it adds a powerful hidden layer of protection that even a thief holding your written backup can't get past. Used carelessly, it's one of the fastest ways to permanently lose your crypto. Here's how it actually works, and how to decide whether you need one.

What a passphrase actually does

Your seed phrase alone unlocks one set of wallets. Add a passphrase — any word, sentence, or string of characters you choose — and the wallet uses it to derive a completely different set of accounts. The two are combined mathematically, so the seed and the passphrase together point to a wallet that neither could reach on its own.

The detail that trips people up is how sensitive this is. There's no 'correct' passphrase the device checks against — every possible passphrase opens *some* valid wallet, just an empty one if no funds were ever sent there. Type 'sunflower' and you get one wallet; type 'Sunflower' with a capital S, or 'sunflower ' with a trailing space, and you get an entirely different, separate wallet. The device won't warn you, because as far as it's concerned you simply asked for a different account.

The big upside: because the passphrase is never stored on the device or written into the seed phrase, someone who finds your written-down seed words still can't reach your passphrase-protected funds. All they'd see is the 'decoy' accounts the bare seed unlocks — which you can leave empty or holding a small amount.

Why people use one

A passphrase exists to defend against a specific, scary scenario: what happens if someone physically gets hold of your seed-phrase backup? On its own, that backup is the keys to the kingdom. A passphrase changes the maths so that it isn't.

• Defence in depth — even a stolen or photographed seed-phrase backup doesn't expose your real holdings, because the thief is missing the one piece you kept only in your head.
• Plausible deniability — the bare seed can hold a small 'decoy' amount, while the bulk of your funds sit safely behind the passphrase, invisible to anyone who doesn't know it exists.
• Protection against physical coercion — if you're ever forced to unlock a wallet under duress (the so-called '£5 wrench attack'), you can hand over the decoy without revealing the rest.

The serious risks

Everything that makes a passphrase strong also makes it dangerous. There is no safety net behind it whatsoever — and that catches a lot of well-meaning people out.

• A single typo, capital letter or extra space sends you to a *different* empty wallet — which feels exactly like 'my funds disappeared', triggering panic when nothing is actually lost except the right input.
• Backing up the passphrase in the same place as your seed phrase quietly defeats the entire point — now a single discovery exposes everything.
• It adds real complexity that's easy to get wrong under stress, and beginners genuinely don't need it. Most people are far more likely to lose funds to their own passphrase than to a seed-phrase thief.

Should you use one?

Honestly, for most people the answer is 'not yet'. A passphrase is a tool for those who already have the basics nailed: a proper hardware wallet, a securely stored offline seed-phrase backup, and a clear understanding of self-custody. If any of that isn't solid yet, you'll get far more safety from shoring those up than from adding a layer you might lock yourself out of.

There's no shame in skipping it. A hardware wallet plus a well-protected seed phrase already puts you ahead of the vast majority of crypto holders. The passphrase is the advanced option you graduate to once you're confident, not a box every beginner needs to tick.

Frequently asked questions