By What Is a Bitcoin Seed Phrase, and How Does It Work?
A seed phrase looks like 12 or 24 ordinary words, deliberately unremarkable-sounding, chosen from a standard list. Under the hood, it's a complete backup of every private key your wallet will ever generate, encoded in a form a human can actually copy down and re-enter without a computer. Here's how that actually works.
It starts as randomness, not words
Your wallet doesn't pick words first. It generates a large random number, typically 128 or 256 bits of entropy, exactly the kind of raw randomness a private key is built from. That number, plus a small checksum derived from it, is then sliced into 11-bit chunks. Each chunk maps to one word from a fixed list of 2,048 words defined by a standard called BIP39. 128 bits of entropy produces 12 words; 256 bits produces 24.
Why these specific 2,048 words
The BIP39 wordlist was deliberately designed, not chosen at random. Every word is unique in its first four letters, so a wallet only needs the first four characters to identify it unambiguously, useful for autocomplete and error correction. The words avoid look-alikes and sound-alikes that are easy to transcribe incorrectly, and the list has been translated into multiple languages so the same underlying entropy can be represented in a person's native language.
One phrase, unlimited addresses
The seed phrase itself isn't used directly as a private key. It runs through a key derivation function (specifically PBKDF2 with HMAC-SHA512) to produce a master seed, which then generates a tree of private keys following a standard called BIP32, and typically a specific structure called BIP44 that organizes keys by account and address index. This is why a single 12-word phrase can back up potentially billions of individual addresses: every one of them is mathematically derivable from that one starting point, in the same deterministic order, every time.
The optional 25th word
BIP39 supports an additional user-chosen passphrase on top of the standard word list, sometimes called a "25th word." Adding one produces an entirely different set of keys from the same 12 or 24 words, meaning someone who finds your written-down phrase without also knowing the passphrase can't access the wallet. It also means losing the passphrase, even with the seed phrase intact, makes the wallet just as unrecoverable as losing the phrase itself.
The private key for every Bitcoin wallet on Earth is on this website, even Satoshi's. But even if you try for a million years, you'll never find a funded one.
Try the key collider nowWhy this makes it so dangerous to expose
Because one phrase can regenerate every key in a wallet, exposing it is strictly worse than exposing a single private key: it hands over everything the wallet will ever hold, past and future addresses alike. That's exactly why it belongs offline, physically backed up, and never typed into anything. For the practical side of that, see how to actually store a seed phrase safely, and for what happens when the person who wrote it down dies before telling anyone where it is, see Bitcoin's real inheritance problem.