BIP39 passphrase (25th word): how it works and recovery

The BIP39 passphrase, often called the 25th word, is a text you choose that, added to your 12 or 24 word seed, derives a completely different wallet. It is the strongest security layer a hardware wallet offers and also the most common cause of "my bitcoin is gone" among people who did everything right with the seed. This guide covers what it is, how Ledger and Trezor handle it, how to store it and what to do when it slips from memory.

Seed, PIN, password and passphrase: who does what

Four secrets coexist in a hardware wallet, and mixing up their roles is the first mistake.

The seed is the 12 or 24 words generated at setup. Every key derives from them. Whoever holds the seed holds the funds, on any compatible device or software. The post what is a seed phrase covers it on its own.

The PIN protects the physical device. Losing it loses nothing: with the seed you restore everything on another device.

The password belongs to software, such as Trezor Suite or a mobile wallet. It does not touch the keys either.

The passphrase is different from all three. It enters the key derivation itself. The BIP39 standard, checked in October 2026, specifies that the binary seed is derived from the words using the passphrase as part of the salt of the PBKDF2 function, over 2,048 rounds. The result: the same 24 words with the passphrase "house" and with "House" produce two wallets with no relationship to each other. There is no wrong passphrase; there is another wallet.

How Ledger and Trezor implement it

On Ledger, the passphrase can be up to 100 characters and "opens a separate set of accounts with brand-new addresses, and those accounts start empty", according to Ledger Academy, checked in October 2026. There are two modes: temporary, where you type the phrase on the device each time, and attached to a secondary PIN, where one PIN opens the standard accounts and another opens the hidden ones. Ledger warns that "if you forget your passphrase, access to the associated hidden wallet is permanently lost", because the company neither stores nor backs it up.

On Trezor, the limit is 50 characters, the phrase is case-sensitive and the device does not store it either. Trezor's documentation states that "passphrases cannot be changed, removed, or recovered". The post Trezor shows an empty wallet: hidden wallet and passphrase explained walks through the classic symptom.

On both, the behavior is identical: type something different, open an empty wallet. No warning appears, because to the device that wallet is as valid as any other.

What it is for, and who it is for

The passphrase solves one specific problem: physical theft of the backup. Whoever finds the paper with the 24 words sees only the standard wallet, which you can leave with a small decoy balance. The wallet that matters sits behind the phrase, which lives only in your head or in a separate backup.

It makes sense for someone whose balance justifies the added risk of one more secret to keep, and who has the discipline to back it up separately from the seed. For someone starting out, a hardware wallet with a well-stored, tested seed is already a big security step; the passphrase can come later. The model comparison is in Ledger vs Trezor: which hardware wallet.

How to store it without creating a single point of failure

Four simple rules prevent most of the cases that reach a recovery service.

1. Physical backup, separate from the seed. The phrase written by hand, in a different place from the 24-word sheet. Whoever finds both has everything; whoever finds one has nothing.
2. Restore test with the passphrase. After setup, wipe the device, restore the seed, type the passphrase and check that the receive address matches the one from before. Only then send funds.
3. Spelling on record. Capitals, spaces, accents and symbols must be in the backup exactly as typed. "House 2019" and "house2019" are different wallets.
4. Succession plan. Someone you trust needs to know the passphrase exists and where its backup is, even without knowing the content. The post crypto inheritance planning explains how to set that up.

What to do if you forgot it

First, confirm the problem is the passphrase: restore the seed, open the standard wallet and compare its address with an old address where the balance sits. If it does not match, the funds are in a hidden wallet.

Then gather three things: the complete seed, one known address of the right wallet and everything you remember about the phrase (pattern, length, likely words, rules you used in passwords). From there, recovery is a search: guesses are tested against the address until one opens the right wallet. With a clear pattern it usually closes in days; with a vague memory and a long phrase, it may never close.

The forgotten passphrase recovery page lists what to send and what not to. Vault Recovery is a service of Vault Ltda., part of the Vault Capital group, running since 2021; wallet recovery is not securities advisory and is not regulated by Brazil's CVM. The assessment is free, nothing is requested in the form or the first conversation, and the fee only exists on success.

Frequently asked questions

Is the passphrase the same thing as the 25th word?

Yes. "25th word" is the nickname, because it adds to the 24 words of the seed. But it does not have to be a word: it can be a phrase with spaces, numbers and symbols, up to 100 characters on Ledger and 50 on Trezor.

Can I change the passphrase later?

Not in the sense of editing it. A new passphrase opens a new wallet. To "change" it, you create the wallet with the new phrase and move the funds there, paying network fees.

I forgot the passphrase but have the seed. Are the funds lost?

Not necessarily. With the seed, one address of the right wallet and some memory of the phrase, the search is feasible and solves most cases. With no memory at all and a long random phrase, there is no path, and an honest service says so at triage.

Can Ledger or Trezor recover my passphrase?

No. Neither stores the phrase, and by design it cannot be extracted from the device. The only route is the search from the seed.

Let's talk

If you have the seed, know which address holds the balance and remember part of the passphrase, there is work to do. Vault Recovery's assessment is free, does not ask for the seed or the phrase at this stage, and only charges a fee on what is recovered.