In the previous chapter the seed became the center of everything: whoever has the words has the bitcoin. The passphrase changes that rule. With it, the seed alone no longer opens your main wallet. In this chapter I explain how it works, where the danger is, and how to use a passphrase to protect yourself against theft of your backup and even against physical coercion.
What the passphrase is
The passphrase is extra text, chosen by you, that is added to the seed. It is part of the same BIP39 standard, and many people call it the "25th word". The name is a little misleading: it does not have to be a word from the list. It can be any text, with letters, numbers, spaces and symbols.
Do not confuse it with the PIN. The PIN unlocks the device and lives only on it. If you forget your PIN, you reset the device and restore from the seed. The passphrase goes into the calculation of your keys. It is part of your backup, not of the device.
How it works
The wallet takes the seed and the passphrase together and runs them through a mathematical function (in BIP39, PBKDF2 with 2048 rounds). The result is the binary seed that generates all your keys.
The practical consequences:
- Every different passphrase generates a completely different wallet, with other addresses and another balance.
- The seed without a passphrase is also a valid wallet. It still exists.
- There is no "wrong" passphrase. If you type "Bitcoin2011" instead of "bitcoin2011", the wallet opens normally, just empty. No error message appears.
That last point is both the strength and the risk. The strength: a thief holding your seed has no way of knowing whether a passphrase exists or what it is. The risk: you get no warning when you make a mistake either.
The risk of forgetting
Be very clear with yourself: if you lose the passphrase, you lose the bitcoin. There is no support, no recovery, no "forgot my password". The seed without the correct passphrase opens a different, empty wallet.
So:
- Write the passphrase down on paper or metal. Do not rely on memory alone. Memory fails over time, under stress, after an accident.
- Write it exactly as it is: uppercase and lowercase, spaces, accents. Every detail changes the wallet. I prefer to avoid accents and special characters that are hard to type on the device, precisely to reduce errors.
- Write down the wallet fingerprint. Many wallets and software like Sparrow show a short 8-character code that identifies the resulting wallet. If you type the passphrase and the fingerprint matches what you wrote down, the passphrase is right. This code cannot spend anything, but it reveals that a passphrase wallet exists and helps a thief test guesses. So keep the fingerprint with the passphrase, never with the seed.
- Run the full recovery test, as in the previous chapter, now with seed plus passphrase: restore, check the first address, and only then deposit larger amounts.
- When you connect the wallet to the computer software, do it with the passphrase already applied on the device. Without it, the software imports the xpub of the no-passphrase wallet and shows a different wallet, empty or the decoy.
Passphrase strength
If someone finds your seed, the passphrase is the last barrier. A short, predictable passphrase (your child's name, a birthday, "password123") can be found by trial and error. Use something long that has nothing to do with you, for example a sequence of several random words. Long and written down beats short and "memorized".
Store it separately
The passphrase only protects you if it is not in the same place as the seed. Seed and passphrase together in the same drawer are worth the same as a seed with no passphrase.
The rule is simple:
- Seed in one place, passphrase in another.
- Whoever finds only the seed opens the wallet without a passphrase, which may be empty or hold very little.
- Whoever finds only the passphrase has meaningless text that opens nothing.
Example setup: seed on metal in a discreet spot at home. Passphrase written in a sealed envelope at a trusted relative's house, or in a safe at another address. Neither paper says what it is.
Think about your heirs right now, too. They will need both parts and clear instructions. That is the subject of the chapter Bitcoin Inheritance: How Your Family Gets Access, but the decision to use a passphrase has to take it into account.
Decoy wallet
This is where protection against coercion comes in. Coercion is when someone uses violence or threats to force you to hand over your bitcoin. This kind of crime has happened in many countries, and it usually targets people who became known for holding crypto.
The passphrase lets you set up a decoy wallet:
- The seed without a passphrase opens a wallet with a small but believable amount.
- The seed with the passphrase opens the main wallet.
- Under threat, you can open the wallet without the passphrase. It is real, it has history, it has a balance.
For the decoy to be convincing, it has to look used: actually receive into it, and leave an amount that makes sense for someone in your situation.
Some devices let you set up a second PIN that opens a different wallet or triggers a different behavior. It is the same idea, applied at the unlock screen. Check your device's official documentation to see if it offers this.
Your life is worth more than any amount of bitcoin. A decoy wallet is a layer of protection, not a plan to fight a criminal. Under a real threat, prioritize getting out alive and go to the police afterwards.
Be honest about the limit: an informed criminal knows passphrases exist and may not believe you. That is why the decoy works best combined with the other layers below. For larger holdings, the multisig in the next chapter also makes coercion harder, because you cannot move everything alone, from a single place.
And an important legal limit: the hidden wallet is protection against criminals, not against the tax authorities or the courts. Self-custody is legal, and all your bitcoin, including what sits in the passphrase wallet, must be reported for taxes according to the rules of your country. In Brazil, that means the Bens e Direitos section of the income tax return, in the crypto assets group. If you are unsure how to report it, check with an accountant.
Discretion: the best defense
The cheapest way to avoid coercion is for nobody to know you have bitcoin. Nobody kidnaps someone who does not look like a target.
- Do not say how much you have. Not on social media, not at a barbecue, not in the family group chat.
- Do not post screenshots of balances, wallets, devices or profits.
- Do not leave your hardware wallet visible at home or in photos.
- Be careful with your shipping address. Customer databases of companies in this industry have already leaked, with names and addresses. If you can, receive packages somewhere other than your home, within the law.
- Be suspicious of people who approach you asking too many questions about crypto.
- Use a separate email for bitcoin matters, to reduce the damage if a customer database leaks.
I teach self-custody in public, so I know the weight of this. Talking about the subject is one thing. Exposing your wealth is another. Privacy here is personal security for you and your family.
Checklist
- I understand that the passphrase is different from the PIN and is part of the backup
- I chose a long passphrase unrelated to me and wrote it down exactly as it is
- I wrote down the fingerprint of the passphrase wallet to check it later
- I ran the recovery test with seed plus passphrase
- Seed and passphrase are stored in different places
- I set up a believable decoy wallet, if it makes sense for me
- I do not expose my holdings in public, and I have a plan for my heirs to access both parts