Seed phrases and private keys: why nobody gets your twelve words

What it actually is

When you create a self-custody wallet, the software generates a large random number. That number is the private key. It is too long to remember, so it gets encoded as twelve or twenty-four common English words — the seed phrase.

From those words you can derive the private key, and from the key every address you own. So those twelve words are everything. Not one factor among several — everything.

It also explains something people find confusing: change phone, change wallet app, enter the same phrase and the funds "come back". They never went anywhere. What changed was who is holding the key.

Password versus seed phrase

The last row is the whole thing. A seed phrase has no second line of defence, and that is what makes it fundamentally unlike every account system you are used to.

How they are taken in practice

Ordered by how often it happens, not by sophistication.

1. You typed it into a pageA fake wallet site, a fake "sync / verify / migrate" flow, a fake airdrop claim. Any interface asking for your seed phrase, however it is dressed up, is there to take it. A real wallet only asks once — when you are restoring a wallet you initiated.
2. You saved it somewhere that syncs to a cloudPhoto library, notes app, a message to yourself, cloud documents. One credential-stuffed account and the phrase goes with it.
3. You sent it to "support" or a "technician"Who offered to fix a problem. No legitimate process needs it.
4. You installed a fake wallet appYou believe you are creating a new wallet; the words were generated by someone else in advance. Whatever you send in, they can take out.
5. The paper was seenWriting it down is right, but leaving it on a desk, photographing it "for safety", or letting a visitor see it is the same as leaking it.

Note that none of those is "the cryptography was broken". Real losses come almost entirely from these very ordinary routes.

How to store it properly

Two principles: offline and redundant.

• Offline — written on paper or stamped into metal. It never enters a connected device. No photographs, no typing, no transmission through any messaging tool.
• Redundant — at least two copies in two physically separate places. Besides theft there is fire, water and simply moving house, all of which lose you everything just as effectively.

A common arrangement: one copy hidden at home, one somewhere else that is genuinely reliable (a safe, a trusted relative). Number the words as you write them — the order matters as much as the words.

Backup formats and what each costs you

Start simple: two paper copies in two separate places. When the holdings justify it, upgrade to metal. A simple scheme you actually completed beats a sophisticated one you never finished.

Details when writing it down

• Number them — 1 to 12 (or 24). Wrong order does not open anything either.
• Write legibly — watch the confusable characters: l and 1, O and 0, rn and m. Block capitals.
• Note which wallet it belongs to — but do not write "wallet", "crypto" or "seed phrase" on it. A mark only you understand is enough.
• Do not write the amount — an amount on the paper advertises its value.
• Tell one trusted person where it is — not what it says. If something happens to you, your family needs to be able to find it. Almost nobody plans for this.

About passphrases

Some wallets support an extra user-defined passphrase on top of the seed phrase. With one set, the same phrase plus different passphrases produce entirely different wallets.

It genuinely improves security — someone finding your paper still cannot open it. It also doubles the risk, because forgetting the passphrase has the same consequence as losing the phrase, and people rarely back the passphrase up.

My view: if you are still reading an article like this, leave it alone for now. Come back to it once the whole process is familiar and you have decided how the passphrase itself gets backed up.

Sentences that mean somebody is taking your key

You do not need to memorise them. If anything asks you to enter or say those words, the answer is no.

If you think it has already leaked

Do not hesitate, and do not start by investigating how. The order is:

1. Create a new wallet immediatelyOn a device you are confident is clean, generate a fresh phrase, write it down offline.
2. Move the assetsHighest value first. If there is not enough native coin to pay network fees, send some in — speed matters here, because they are watching too.
3. Abandon the old wallet completelyNever send anything to it again, not even a small amount. That address is not yours any more.
4. Check the deviceIf the device might be the source, switch devices and repeat, or the new wallet will not survive either.

One case worth naming: some malware watches the clipboard and swaps an address you copied for the attacker's. So after pasting, always check the first and last few characters. That applies whether or not a phrase leaked.

Other ways a wallet loses money

Protecting the phrase solves half the problem. Self-custody has several loss modes that have nothing to do with it.

One: signed approvals

As covered earlier — a malicious contract requests an unlimited allowance, you confirm once, and it can drain that asset whenever it likes. This is the usual answer to "I never told anyone my phrase, so where did it go". Read what permission is being requested before signing, and revoke approvals you no longer need.

Two: clipboard swapping

Malware watches for an address on the clipboard and substitutes its own. Because addresses are long strings nobody proofreads, the hit rate is high. One countermeasure, and it is easy: after pasting, check the first and last six characters.

Three: fake wallet apps

You think you are creating a wallet; the words were generated in advance by someone else. Install only from the system store and check the developer name.

Four: address poisoning

An attacker sends you a tiny transfer from an address whose first and last characters match one you use often. Next time you copy an address out of your transaction history, it is easy to copy theirs. The fix: take addresses from your own address book, not from history.

Those four plus the phrase rules make a complete picture. The seed phrase is the most severe case, not the only one.

Exchange accounts have no seed phrase — good or bad?

If you only use an exchange you never encounter a seed phrase at all; it is username, password and two-factor, all recoverable.

For a beginner that is an advantage. As established, the defining weakness of a seed phrase is having no second line of defence, and an exchange has several. The cost is that custody sits elsewhere. The full comparison is in exchange, wallet, chain.

My recommendation does not change: start on an exchange with two-factor and a withdrawal whitelist configured (see the three things to set up on day one). When you genuinely need self-custody, create an empty wallet, rehearse with a few dollars, and only then put real money in.