What Is a Passphrase?

Custody

A passphrase is an additional secret expression added to recovery words in certain wallets to derive different keys and enhance security.

Koin Bülteni · Updated:

On this page
  1. What Is a Passphrase?
  2. Why Does a Wrong Passphrase Open an Empty Wallet?
  3. Extra Security, Extra Risk of Loss
  4. Source

What Is a Passphrase?

In the context of wallets, a passphrase is an additional secret phrase that can be added to recovery words to derive different keys. Under the BIP-39 standard, this expression can create different wallets from the same list of words. It is not the same thing as an app login password or a device PIN.

Some sources call it the “25th word”; however, this term can be misleading. A passphrase does not necessarily have to be a single word. Letters, spaces, and other characters can affect the outcome. The format and input method supported by the wallet manufacturer are important.

Why Does a Wrong Passphrase Open an Empty Wallet?

In BIP-39, a different passphrase produces a different wallet. For this reason, a typo does not always trigger a “wrong password” warning; it can open a different wallet that appears empty. Even if the recovery words are correct, entering the additional phrase incorrectly prevents access to the old balance.

For example, an expression with a space at the end and one without it can yield different results. When backing up, simply saving the words is not enough to recover a wallet that uses a passphrase. The additional expression must also be protected accurately and permanently.

Extra Security, Extra Risk of Loss

A passphrase can provide extra protection when recovery words alone are compromised. However, weak and predictable phrases can be found through trial and error. Forgetting or incorrectly recording the phrase can also lead to you losing your own access. It is not automatically a better choice for every user.

Do not move existing assets to such a wallet without understanding the setup. It is useful to first verify the address and recovery process with a small amount. Do not type your recovery words into a random website during verification; use the official secure verification method of the device or wallet. Changing a PIN is not the same process as changing a passphrase.

Source