Bitcoin BIP39 passphrase guide 2026: the "25th word" explained. Setup on Coldcard, Ledger, Trezor. Best practices, common mistakes, and passphrase backup strategies.
The BIP39 passphrase — often called the "25th word" — is one of the most powerful security tools available to Bitcoin holders. When configured correctly, it creates a completely separate wallet hidden behind your seed phrase, invisible to anyone who finds your backup. Yet it's also one of the most misunderstood features, and mistakes can lead to permanent fund loss. This guide covers everything you need to know.
A BIP39 passphrase is an optional extra word (or phrase) added to your standard 12 or 24 word seed phrase. It's not part of the seed phrase itself — it's a separate input that modifies the derived keys.
The technical process: your seed phrase generates a master seed, and the passphrase acts as an additional input (technically a "salt") in the PBKDF2 key derivation function. The result is a completely different master seed — and thus a completely different wallet.
Key insight: Every possible passphrase — including an empty one — generates a valid wallet. There is no "wrong" passphrase. If you enter an incorrect passphrase, you don't see an error; you see a different (empty) wallet.
Without a passphrase, your 24-word seed phrase is your Bitcoin. Anyone who finds it — a burglar, a family member snooping, a hotel housekeeper — can steal everything.
With a passphrase:
You can maintain a small balance on the "empty passphrase" wallet — the one derived from your seed without any additional word. If forced to reveal your seed, you show this wallet with a small balance. Your real funds are on the passphrase-protected wallet, and the attacker has no way to know it exists.
This is the "$5 wrench attack" defense. Even under duress, you can truthfully show a wallet with some funds while your main holdings remain hidden.
If your hardware wallet was tampered with before delivery and the device manufacturer's seed generation was compromised, a passphrase adds an independent layer of security that the attacker couldn't have anticipated.
Each time you re-enter the passphrase, verify the fingerprint matches before using the wallet.
SeedSigner always uses passphrase as part of the signing flow — the passphrase is entered at signing time and never stored on the device.
A passphrase is only as strong as its entropy:
bitcoin, hodl, your name, common words123456 or birth datescorrect-horse-battery-staple-mountain-riverKf7$mN2p!xR4qLThe passphrase can be any length and any characters. Longer is stronger. However, you must be able to enter it accurately on your hardware wallet's limited input interface.
This is where people get burned. If you forget or lose your passphrase:
You must have a reliable backup system for your passphrase. Options:
Never store your passphrase in the same location as your seed phrase.
Password and password and PASSWORD are three completely different passphrases producing three different wallets. Passphrase input is case-sensitive. Write down your passphrase with exact capitalization.
Spaces, special characters, and invisible characters matter. hello world (with a space) is different from helloworld. If you copy-paste your passphrase from a text document, trailing spaces can cause a mismatch.
Always verify your passphrase works before funding the wallet. Generate a receive address, note the first few characters, and verify that re-entering the passphrase produces the exact same address.
If you die, how will your heirs access your Bitcoin? They need both your seed phrase AND your passphrase. Your estate plan must account for both. See the Bitcoin Inheritance Planning guide for a comprehensive approach.
These are separate security features:
You need both. A strong PIN protects the device; a passphrase protects the Bitcoin even if someone has your seed backup.
Seed phrases are typically backed up on steel (Cryptosteel, Billfodl, etc.) because paper can burn. Should your passphrase also be on metal?
If both are compromised simultaneously, the passphrase protection is defeated.
Most hardware wallets display a short fingerprint (wallet ID) for each passphrase-wallet combination. This is derived from the master public key and is unique to your specific seed + passphrase combination.
Best practice: Note your wallet fingerprint and add it to your estate planning documents. Your heirs can use it to verify they've entered the correct passphrase without you needing to reveal the passphrase itself in the document.
Use a passphrase if:
Skip it for now if:
The passphrase is powerful protection — but only if you maintain access to it. Many more bitcoins have been lost to forgotten passphrases than to theft.
Get our free Beginners Guide to Buying Bitcoin plus weekly insights for long-term holders.
Hardware wallets store private keys on dedicated offline devices. Software wallets store keys in apps. This guide explains when each makes sense, which specific products to use in 2026, and how serious bitcoiners use both — hardware for savings, software for spending.
Your seed phrase is your Bitcoin — lose it, lose everything. This complete guide covers BIP39 standards, 12 vs 24 words, passphrases, metal backup options, safe storage, and what to never do.
Bitcoin multisig requires multiple keys to spend — 2-of-3 is the gold standard. This step-by-step guide covers hardware wallet setup, Sparrow Wallet configuration, PSBT signing, and key distribution.