Your recovery phrase, and why it is the only thing that matters
Twelve words are not a password to your wallet. They are your wallet — the seed every key in it is derived from. Anyone holding them holds your bitcoin, from anywhere, with no further step.
What the words actually are
A wallet starts with a large random number. That number is useless to a human — nobody copies 256 bits of hex onto paper correctly — so BIP39, a Bitcoin standard from 2013, encodes it as words drawn from a fixed list of 2,048. Twelve of those words carry 128 bits of entropy plus a short checksum.
Two consequences follow, and both surprise people. First, the words come from a fixed dictionary, so “pizza” can be in a phrase and “pizzas” cannot; a wallet rejecting a word you are certain you wrote is usually telling you the truth. Second, the checksum means most random twelve-word combinations are invalid — which is why a wallet can often catch a single mistyped word instead of silently opening an empty wallet.
From that seed, the wallet derives every key and address you will ever use, by a defined path. That is what makes the phrase portable: any wallet implementing the same standards walks the same path and finds the same coins.
Order matters, and so does the last word
The phrase is a sequence, not a set. Words two and three swapped produce a different seed and therefore a different, empty wallet. Number them when you write them down.
There is no thirteenth secret word by default. Some wallets support an optional BIP39 passphrase — sometimes marketed as a “25th word” — which produces an entirely separate wallet from the same twelve words. It is a genuine security feature and a genuine footgun: forget the passphrase and the twelve words alone will not recover anything. BitHedge does not use one, so your twelve words are complete.
How phrases are actually lost and stolen
Not by cryptography. Guessing a twelve-word phrase is not a thing that happens. Every real case comes down to one of these:
- Typed into something. A fake support agent, a “wallet validation” page, a browser extension, a Telegram helper. No legitimate wallet, company or person ever needs your phrase — including us. Anyone asking is stealing.
- Photographed. A screenshot lands in your photo library, then iCloud Photos, then every app you have granted photo access. BitHedge warns you the moment you screenshot the backup screen precisely because this is so common.
- Synced. Typed into notes, a document, an email draft, a password manager on the same phone. All of these convert a hardware-protected secret into something guarded by an account password.
- Written down wrong, then never tested. Not theft, but the same outcome. A word misspelled or a line skipped is discovered years later, when the phone is already gone.
What to do instead
Write the words on paper by hand, numbered, and store the paper somewhere a burglar would not look and a fire would not reach. Two copies in two places beats one copy in a brilliant place — most losses are accidents, not adversaries. For meaningful amounts, people stamp the words into steel, because paper and water are not friends.
Then test the backup while it costs nothing.
Common questions
What is a Bitcoin recovery phrase?
A sequence of twelve (sometimes twenty-four) words from a fixed 2,048-word list that encodes the random seed your wallet derives every private key from. It is defined by the BIP39 standard, which is why the same phrase restores in different wallet apps.
Can someone steal my bitcoin with just the recovery phrase?
Yes, completely and instantly, from anywhere in the world. They do not need your phone, your PIN, your Face ID, or your permission. This is why the phrase must never be typed into anything, photographed, or shared with anyone claiming to be support.
Is a 24-word phrase safer than a 12-word phrase?
In theory it carries 256 bits of entropy rather than 128. In practice both are far beyond brute force — no one is guessing either. Twelve words are shorter to write down and to check, which reduces the failure mode that actually happens.
What if I lose one word of my recovery phrase?
Recovery is sometimes possible because the word list is fixed and the phrase carries a checksum, so the candidates for a single missing word are limited. It is fiddly, and any online tool offering to do it for you is a trap. Treat it as a lesson about second copies rather than a plan.
Does BitHedge know my recovery phrase?
No. It is generated on your iPhone and never transmitted. It is encrypted with a key held in the Secure Enclave and stored in a Keychain class Apple excludes from iCloud and iTunes backups. There is no server for it to be sent to.
BitHedge is a Bitcoin-only self-custody wallet for iPhone. Keys are generated on your device and never transmitted — no account, no KYC, no tracking. See how it works.
Keep reading
- Backing up a Bitcoin wallet, properly — Why the phone backup is not the wallet backup, and how to test yours.
- Custodial vs non-custodial, without the slogan — What custody changes about your risk — and when a custodian is right.
- Bitcoin address types, and which one to use — What bc1p, bc1q, 3… and 1… mean, and which to use.
- All guides