Cate Army Buy $CATE
$CATE $0.04216 24h -1.01% Market Cap $40.66M Holders 143.8K 24h Volume $889.6K Full dashboard →

What Is a Seed Phrase? The Twelve Words That Are Your Money

Tabby cat in a hoodie writing on a single card before a vault door

A seed phrase, also called a recovery phrase, is a list of 12 to 24 ordinary words your crypto wallet shows you once, at setup. Those words are the wallet. Anyone who has them owns everything inside it.

Not a way to log in to the wallet. The wallet itself.

If you have never bought crypto before, this is the one idea worth getting straight before you do anything else. It works differently from every account you have ever made, and the difference is the part that costs people money.

You will meet it about ninety seconds into setting up a wallet. The app shows you a list of words, tells you to write them down, and makes you confirm you have. It feels like the sort of screen you click past, in the way you click past terms and conditions, and a great many people do exactly that.

It is not that kind of screen. It is the only copy you will ever be given of something nobody can issue you again. So it is worth five minutes now rather than a bad afternoon later.

Updated 16 October 2026: the Phantom security guide and the BIP-39 standard are now linked where they are quoted, the recovery-fee warning is credited to the Phantom article it comes from, the common questions open one at a time, and every Phantom quote was checked again on the day. The 15 October update added the opening definition, the four common questions and the private key link.

It is not a password

Everyone reaches for the password comparison, because it is the closest thing most of us have used. It is also wrong in the four ways that matter.

A passwordA seed phrase
If you forget itYou click “forgot password” and a company emails you a linkNothing happens. There is no company, and there is no reset.
If somebody else learns itThey get into one account. You change the password and lock them out.They can take everything, straight away, and you cannot lock them out.
Who else holds a copyThe service you signed up withNobody at all. Only you.
How much it opensUsually one accountEvery account those words have ever created

Phantom, one of the wallets Solana newcomers use, states this about itself in its own security guide: it “cannot move your money, freeze your account, or recover your funds if something goes wrong.”

That sentence reads like a company protecting itself. It is closer to a description of the physics. There is genuinely no lever for anyone to pull, which is the trade you are making. You get an account nobody can freeze, close, or take from you. You also get one nobody can rescue. That trade is what people mean by a non-custodial wallet, one where only you hold the key.

Why words, and why twelve

Underneath, your wallet is a very large random number. A number that size is miserable to copy by hand, and one wrong digit loses everything, so wallets translate it into words instead. People copy words far more reliably than digits.

Nearly every wallet does this the same way, following a shared standard called BIP-39. The words come from a fixed list of 2,048 common English words. The list was built so that the first four letters of any word identify it uniquely, which quietly forgives a lot of bad handwriting.

You do not choose these words, and that is deliberate. A phrase you invented would carry your habits in it, and habits are guessable. The wallet picks them at random from the list, which is why they arrive in an order that means nothing.

Do not try to fix that. People sometimes rearrange the words into something memorable, or swap one for a similar word, and destroy the wallet in the process. The nonsense is the feature.

The standard allows a few lengths. Phantom generates twelve.

The seed phrase lengths allowed by the BIP-39 standard and how much randomness each one holds, from 12 words at 128 bits to 24 words at 256 bitsHOW MUCH RANDOMNESS EACH LENGTH HOLDS12 words128 bits15 words160 bits18 words192 bits21 words224 bits24 words256 bits
A bit is one coin flip of randomness, and each extra bit doubles the number of phrases that could have been generated instead of yours. Twelve words, in gold, is what Phantom hands out. It is already far past the point where guessing is worth anyone’s time.Lengths and bit values from the BIP-39 specification. Wallet default confirmed against Phantom’s security guide, re-checked 16 October 2026.

Order matters as much as the words themselves do. The standard builds a small check into the phrase, so most reshuffled versions are rejected as invalid the moment you try to use them. The ones that slip past the check are worse, because they open a real wallet that is not yours and has nothing in it. Write the words down numbered.

Your wallet app is a window, not a safe

This is the idea that makes the rest click, and almost nobody explains it first.

Your coins are not stored inside the Phantom app. They are recorded on the Solana network, a shared record kept by many independent computers, and the app is a viewer that knows how to look at them and how to sign for them. Delete the app tomorrow and nothing moves. Nothing is lost.

Type your twelve words into a fresh install, or into a different wallet app entirely, and everything reappears. That is not a recovery service doing you a favour. The words mathematically regenerate the same accounts, in the same order, every time, on any wallet that follows the standard.

There is a quiet piece of good news buried in that. You are not locked into whichever app you happened to download first. If a wallet app annoys you, gets worse, or shuts down entirely, your phrase moves to another one and your holdings come with it. Nobody can hold your account hostage, because nobody is holding your account.

It also explains something newcomers find alarming. A single phrase can produce a long series of separate accounts, and some wallets show you several at once. They are not copies and they are not a bug. They are all children of the same twelve words.

A long dark corridor lined with many identical heavy locked doors, a tabby cat in a suit and gold medallion looking back over its shoulder
One phrase does not open one door. It opens every door it ever made.

On Solana, each of those accounts also has its own private key, a single long code that opens that one account and nothing else. The phrase opens all of them at once. If your wallet has ever shown you both, we set out how a private key differs from a seed phrase on its own page.

Now read that in the other direction, because it is the same fact. Your twelve words typed into somebody else’s app give them the same complete access they give you. There is nothing further to break into. That is the whole burglary.

Where to keep it

Phantom’s guidance is four lines long, and it is worth following exactly as written: write it on paper and store it somewhere safe offline, never keep it in a notes app, photo, email or cloud storage, never type it into any website, and never share it with anyone.

The photo rule is the one that gets waved off, so it is worth spelling out why it is on the list.

A photo of your phrase does not stay on your phone. Modern phones upload pictures to a cloud account automatically, usually the same account you can get back into by clicking “forgot password” and answering an email. You have now taken the thing whose entire point is that it cannot be reset, and stored it behind something that can. The same goes for a notes app that syncs, and for emailing it to yourself.

A blank index card lit on a dark stone plinth while a smartphone hovers above photographing it, with dozens of faint watching eyes catching the light in the darkness beyond
The photo is not on your phone. It is wherever your phone sends photos.

There is a second problem stacked on the first. Anything sitting in cloud storage or an inbox is text that software can read, and phrases follow a recognisable shape: twelve short words from a known list, in a row. That is exactly the kind of pattern a program can go looking for across thousands of compromised accounts at once, without a human ever reading your files.

Paper in a drawer sounds unsophisticated next to that. It is also not searchable by anyone who gets into one of your online accounts, which is the actual threat.

The trap that catches careful people

There is one scam that reverses the direction, and it works on people who have already learned not to give their phrase away.

Somebody offers you a phrase. The story varies. They are locked out and need help withdrawing, or they are new and confused, or they have found a wallet with money sitting in it and want to split it. They send you twelve words and ask you to load them into your wallet.

Phantom addresses this directly: “If someone gives you a recovery phrase and asks you to import it, do not. Wallets set up this way are controlled by the person who gave you the phrase.”

You will see a balance. It is usually real. What you cannot see is that they still hold those same words, they are watching that wallet, and anything you send in to cover fees leaves within seconds. You were never given a wallet. You were given a hole.

An open, empty gold-lined strongbox on a dark stone floor, a tabby cat in a gold medallion looking at it unimpressed while a gloved hand in the shadows holds up a blank paper card
Whoever holds a copy of the words holds the same wallet you do.

Frequently asked questions about seed phrases

Four questions come up again and again once people understand what the words are. Here are straight answers, checked against Phantom’s own help centre on 16 October 2026.

They can type it into a wallet app on their own phone and see everything you hold. They can also move it, exactly as you can. Nobody can undo that afterwards. Phantom’s help centre says it “cannot reverse blockchain transactions, freeze assets, or recover stolen funds.”

If you think someone has seen yours, treat it as found. Phantom’s guidance for a compromised wallet is direct: “do not keep using the old wallet.” Create a new wallet, which comes with a brand new phrase, and move what you want to keep into it. Leave behind any token you do not recognise. Phantom warns that some scam tokens are built to cause harm when you try to send or swap them.

If the wallet is still open on one of your devices, the phrase is inside it. In the Phantom app, tap your profile picture in the top left, then Settings, then Security & Privacy, then Show Recovery Phrase. The browser extension uses the same path. Write the words on paper, numbered, then close the screen.

Signing up with a Google or Apple account does not get you out of this. Phantom’s help centre says: “Even if your wallet was created with a Google or Apple account, it still has a recovery phrase.”

It is the shortest length the standard allows, and the one Phantom gives you. Phantom describes it as “a unique set of 12 words in a specific order.” Each word comes from the fixed list of 2,048, and twelve of them hold 128 bits of randomness, as the chart above shows. Twelve words is not a lesser version of twenty-four. Both are far beyond guessing.

It depends on one thing: whether the wallet is still open on any device you own.

If it is, nothing is lost yet. Phantom’s help article on lost recovery phrases says: “Export it while you have access.” That means opening the phrase with the steps above and writing it down today.

If you are logged out everywhere and kept no copy, the same article is blunt: “If you are logged out on all your devices and do not have a backup, there is no way to restore access.” Nobody can reset it, because nobody else ever held it.

That is also the moment recovery scams arrive. Phantom’s help article for people who were scammed warns: “Be cautious of anyone who claims they can recover your crypto for a fee or asks for access to your wallet.” Anyone offering to find a lost phrase for you is asking for the one thing this page says never to hand over.

If you remember one thing

Nobody legitimate will ever ask you for these words. Not a support agent, not a moderator, not an admin who messages you first, not a website that wants to “verify” or “sync” your wallet. Phantom puts it about as plainly as a company can: “Phantom Support will never ask for your Secret Recovery Phrase. Ever. If anyone asks for it they are attempting to steal your funds.”

There is no situation where the correct answer is to type them somewhere. Not one. That single rule, held absolutely, prevents most of what goes wrong for newcomers.

If you want to see how the losses actually happen, and they are frequently not stolen phrases at all but permissions people approved without reading, we took that apart in detail in how wallets actually get drained. It goes deeper than this page does, and it is worth your time before you hold anything you would miss.

This site is community run and does not speak for the project. Wallet guidance above was first read from Phantom’s own published security guide on 11 August 2026 and re-checked, with its help centre articles on viewing, losing and compromised recovery phrases, on 15 and 16 October 2026. The phrase lengths come from the BIP-39 standard. Nothing here is financial advice.

Official contract address · Solana

Ai66LHZG9MCzg1WKdawwqduVAXpNDUuV8M3uyq5ppump