The "passphrase" is an optional extra secret that you add to a standard 12- or 24-word seed phrase (BIP-39). On some hardware wallet models it's commonly called the "25th word" because it effectively acts as an additional word appended to your recovery phrase. Add different passphrases and you create different wallets from the same seed phrase — often called hidden wallets because they are not visible unless the correct passphrase is entered.
Why does this matter? Because the passphrase separates knowledge (something you know) from possession (the device and seed phrase). In my experience this can be a powerful privacy and safety tool — but it also increases recovery complexity.
(If you need a primer on seed phrases first, see Seed phrase basics.)
Technically, BIP-39 allows an optional passphrase that is salted together with the seed phrase to produce a different master private key. That means: same 24-word seed + different passphrase = different accounts and private keys. The secure element on a hardware wallet still holds the private keys and signs transactions, but the passphrase itself is not stored on the device or on any server. It must be supplied each time (or cached in volatile memory while the device is unlocked).
This design gives you an additional authentication factor that is fully user-controlled. But it also means no one can help you recover funds if the passphrase is lost (not even the device manufacturer). So understand that the passphrase is a double-edged sword.
I used a passphrase in testing to separate long-term holdings from daily funds and found the separation helpful for operational security — but it required disciplined backup practices.
Using a passphrase increases the attack surface of human error. Here are the main downsides:
But wait — is it strictly more secure than multisig? Not always. Multisig distributes signing responsibility and reduces single-point failure, while passphrase is a single additional secret. Consider both options for high-value holdings (see multisig-setup-ledger).
This is a conceptual, step-by-step guide. Follow device-specific prompts in your device manual or app, and update firmware before you begin (firmware-update-verify).
Test with tiny amounts first. Trust but verify.
Hidden wallets created by the passphrase are useful for plausible deniability, but they are not a panacea. They can complicate audits, estate planning, and third-party recovery. If you use multisig, understand that adding a passphrase to one key in a multisig setup can make recovery or co-signing more complex. Test compatibility with the wallets and tools you expect to use (see wallet-compatibility-matrix).
Also consider how emergency procedures will work. Who has access? How will you prove ownership? These are operational questions, not theoretical ones.
| Benefit | Risk / Trade-off |
|---|---|
| Extra layer of security beyond seed phrase | If lost, passphrase cannot be recovered — funds may be gone forever |
| Hidden wallets for privacy or deniability | Higher operational complexity and chance of human error |
| Separation of funds (cold vs daily spending) | Compatibility issues with some wallets and recovery tools |
| Can protect against a stolen seed phrase | Bad backups (co-located) negate benefits |
Q: Can I recover my crypto if the device breaks?
A: Yes — if you have both your seed phrase (recovery phrase) and the exact passphrase. The seed phrase alone will not restore wallets created with a passphrase. For device failure recovery steps, see restore-recover-failure.
Q: What happens if the company that made my hardware wallet goes bankrupt?
A: Your funds are not stored by the company; they are on the blockchain. As long as you control your seed phrase and passphrase, you can recover on compatible wallets or third-party tools. However, compatibility and tooling may change, so keep a tested recovery plan (see company-bankruptcy-and-business-risk).
Q: Is Bluetooth safe for entering a passphrase?
A: Bluetooth introduces more attack vectors than a purely USB, on-device input method. If possible, enter the passphrase on the device itself (air-gapped). For a deeper look at connection methods, see connections-usb-bluetooth-nfc.
Q: If I forget my passphrase, can someone help me recover it?
A: No. There is typically no backdoor. If you forget the passphrase and do not have a backup, the funds are effectively irrecoverable.
A passphrase (the so-called 25th word) is a powerful but exacting tool. It raises security and privacy when used correctly, and it destroys recoverability if used carelessly. In my testing, disciplined backup and frequent dry-runs of recovery are the difference between a useful security layer and a potential disaster.
If you plan to use a passphrase, start small: update firmware, test with tiny transfers, practice recovery, and separate backups physically. For more setup guidance, see setup-overview and passphrase-usage-risks. Ready for a deeper walkthrough? Check the step-by-step device walkthroughs at walkthrough-nanos-step-by-step or review multisig alternatives at multisig-setup-ledger.
And remember — security is a trade-off between protection and recoverability. Choose the balance that you can reliably maintain.