Day 214Part 6: Security & Self-Custody

The Passphrase

Most Bitcoin wallets offer an optional feature called a passphrase — sometimes called the 25th word, though it can be any word, phrase, or string of characters.

Here’s how it works. Your standard 12 or 24 word seed phrase generates one wallet. Add a passphrase to that seed phrase and it generates a completely different wallet — different addresses, different balance, entirely separate. The passphrase is combined with the seed phrase during the derivation process.

This creates a powerful security upgrade: even if someone finds your seed phrase, they cannot access your Bitcoin without also knowing the passphrase. The seed phrase alone opens an empty or minimally funded wallet. The seed phrase plus passphrase opens the real wallet.

Many security-conscious holders keep a small amount of Bitcoin in the wallet accessible with just the seed phrase — sometimes called a decoy wallet. If threatened or coerced into revealing a seed phrase, they can do so honestly. The attacker finds a small amount of real Bitcoin. The main holdings, protected by the passphrase, are untouched.

The tradeoff is complexity. A passphrase must be remembered or stored separately from the seed phrase — and stored securely, since losing it means losing access to the wallet it protects. It cannot be recovered. If forgotten, the Bitcoin in that passphrase wallet is inaccessible permanently.

For most people holding moderate amounts: a hardware wallet with a properly stored seed phrase is adequate security. The passphrase adds meaningful protection for larger holdings or higher-risk situations — but adds meaningful complexity too.

Understand it. Decide whether you need it. Don’t add complexity without understanding it fully.

Tomorrow: Bitcoin inheritance — the conversation most holders never have.

— The Daily Bit

Part of The Daily Bit — 365 days to understanding Bitcoin.