BIP39 passphrases, and when not to use one
A passphrase is not a password on your wallet. It is a switch that selects a different wallet entirely — which is why a single wrong character shows you an empty balance and no error message.
Almost everything written about passphrases describes them as an extra password protecting your wallet. That description is wrong in a way that costs people their bitcoin, so it is worth replacing before anything else.
A passphrase does not protect a wallet. It selects one. Your recovery words plus no passphrase lead to one wallet. Your recovery words plus the word garden lead to a completely different wallet. Plus Garden, a third. Plus garden with a trailing space, a fourth. All of them are real, valid, and permanently reachable by anyone who supplies that exact input.
There is no correct passphrase and no incorrect one. There is only which of the near-infinite wallets you land in.
A single key on a plain surface beside a row of identical closed doors receding into shadow — the same key, many doors.
Image to come
1The failure that has no error message
Type your banking password wrong and you get told. Type your passphrase wrong and your wallet opens successfully, shows a balance of zero, and reports no problem at all — because you have correctly opened a different, empty wallet.
This is the single most important thing to understand. Every wrong passphrase looks exactly like a wallet that has been emptied by a thief. People have concluded they were robbed when they had mistyped one character, and people have concluded their backup failed when the words were perfect and the passphrase was capitalised differently.
- There is no reset, no hint, no recovery flow, and no support desk. The passphrase is not stored anywhere — not on your device, not by the manufacturer, not in your backup unless you put it there.
- Case matters. Spaces matter, including trailing ones. Non-ASCII characters can be handled differently by different wallets, so a passphrase with accents or emoji may not restore identically everywhere.
2What it genuinely protects against
Used well, a passphrase solves one specific problem: it makes a discovered seed backup insufficient on its own.
If someone finds your metal plate in a drawer, or the safe deposit box is opened, or a relative goes through your papers, the words alone give them a wallet — just not yours. That is a genuine and meaningful improvement to the physical security of your backup.
Someone finds the written seed. This is exactly what a passphrase is designed for.
The hardware wallet is stolen. The PIN was already doing most of that job.
Malware is on the computer. Device-screen verification protects against that.
You are physically coerced. It may delay the attacker, not stop them.
You forget or mistype it. The passphrase becomes the cause of loss.
Your heirs must recover. It makes their job materially harder.
3The decoy wallet idea deserves scrutiny
A popular argument runs: keep a small balance in the passphrase-free wallet, so if you are ever forced to hand something over you can surrender that one and keep the real wallet hidden.
It sounds clever, and it rests on an assumption worth stating out loud: that the person coercing you believes you and stops.
Anyone sophisticated enough to force you to open a wallet knows passphrases exist. The decoy does not end the encounter; at best it buys time, and at worst it prolongs a situation you wanted over quickly. An empty or obviously-token decoy is transparently a decoy. A convincing one has to hold enough money that losing it hurts.
None of that means the technique is worthless. It means it is a delay rather than a shield, and it should not be the reason you adopt a passphrase.
4Choosing one you can actually reproduce
The requirement is not that it be clever. It is that you can reproduce it exactly, from memory or from a record, in ten years, under stress, possibly on a device with an awkward keyboard.
- Stick to plain ASCII. Letters, digits, simple punctuation. Accented characters and emoji are handled inconsistently between wallets and can fail to restore elsewhere.
- Avoid ambiguity you will have to guess about later. Was it capitalised? Was there a space or a hyphen? If you have to wonder, choose differently.
- Length beats complexity. Several unrelated words are stronger than a short string of symbols and far easier to record correctly.
- Do not use something derivable from you. A pet's name and a birth year is guessable by exactly the person most likely to find your backup.
- Never trust it to memory alone. People are extremely confident about strings they later cannot reproduce.
5Storing it
The passphrase needs the same durability as the seed and the opposite storage location. Together they open the wallet; separately neither does. That is the entire arrangement, and it only works if the separation is real.
- Record it physically, durably, and away from the seed backup — a different building, ideally.
- Write down the fact that a passphrase exists at all. This is the step people skip, and it is why heirs restore the words, see an empty wallet, and conclude the bitcoin is gone.
- Note the exact form: whether it has spaces, capitals, or punctuation, without writing the passphrase itself in that same note.
- If your setup uses one passphrase per wallet, record which is which.
Your heirs will not guess it
A seed backup with no note about a passphrase is, from the outside, indistinguishable from a wallet that was emptied years ago. Whoever handles your estate will find the words, restore them, see nothing, and stop looking. Write it down.
6Test it before it holds anything
Everything above is theory until you have restored the passphrase wallet at least once, deliberately.
- Restore the words plus the passphrase onto a wiped or spare device and confirm the expected wallet appears.
- Check the master fingerprint or first receive address against what you noted beforehand.
- Restore the words without the passphrase too, so you know exactly what that empty wallet looks like and will not mistake it for a disaster later.
- Repeat after any change to the passphrase — which produces an entirely new wallet, requiring a fresh backup and a fresh test.
The full procedure is in test your recovery, and the passphrase case is the one where skipping it is most expensive.
Should you use one at all?
For most people holding a moderate amount, the honest answer is no — not yet.
A passphrase converts a physical-security problem into a memory-and-records problem, and people are considerably worse at the second than they expect. The population of bitcoiners who have lost funds to a forgotten or mistyped passphrase is meaningfully larger than the population who were saved by one.
- Reasonable: your seed backup is somewhere you cannot fully control, such as shared premises or a location others can access.
- Reasonable: you already run a tested setup, understand the recovery precisely, and have somewhere durable to record the passphrase separately.
- Not a good reason: a guide told you it was more secure.
- Not a good reason: defending against coercion, for the reasons above.
- Not a good reason: adding it during a first setup, before you have restored anything even once.
The alternative worth considering first
If the problem you are solving is a single discovered backup should not be enough to take my bitcoin, then multisig solves it more robustly and without a memorised secret. Someone finding one key backup has one key, and one key is not enough — no recall required, and no silent empty wallet if you get a character wrong.
Multisig is more work to set up and brings its own obligations, particularly around backing up the wallet configuration. But it fails safely where a passphrase fails silently, and for the specific threat both address, that is the more important property.
If you take one thing from this page
A passphrase is a second secret you must never lose, protecting against a threat you should be able to describe. If you cannot describe the threat, you are adding a way to lose your bitcoin in exchange for nothing.