Recovery phrase vs. final word vs. passphrase
A recovery phrase, its final word, and an optional BIP39 passphrase are three different concepts. Confusing them can open the wrong wallet or create a backup that cannot recover your bitcoin.
Never share or digitize either secret. Enter a recovery phrase or passphrase only directly on trusted hardware during a documented setup or recovery flow—not into a phone, computer, website, wallet coordinator, cloud form, chat, or support ticket.
Quick comparison
Item | What it is | Is it part of BIP39 phrase checksum? | What happens if it changes? |
|---|---|---|---|
Recovery phrase | Usually 12 or 24 ordered BIP39 words encoding entropy and checksum | Yes | Restores a different root secret or is checksum-invalid |
Final recovery word | Word 12 or 24 inside that phrase | Yes | Usually invalid unless its entropy and checksum bits agree |
BIP39 passphrase | Optional text combined with the complete phrase | No | Every exact value creates a valid, different wallet |
The recovery phrase
A BIP39 recovery phrase normally contains 12 or 24 words chosen from a fixed 2,048-word list. The words encode the entropy used to derive a wallet plus checksum bits that detect some errors. Word spelling and numbered order both matter.
For a wallet with no optional passphrase, the phrase is normally enough to recover the signing keys. Anyone who copies it can usually spend without the original hardware wallet or PIN. Keep it offline and separate from the device.
A phrase does not automatically describe every wallet setting. For multisig, each phrase restores only one signer; recovery also requires the policy or descriptor. Some wallets may require the original network, script type, derivation path, or account settings to locate addresses.
The final recovery word
The 12th or 24th word is still part of the recovery phrase. It is not an extra password. Because it includes checksum information, not every word from the BIP39 list is valid after a particular first 11 or 23 words.
The exact split is:
- 12 words: the final word contains 7 entropy bits and 4 checksum bits;
- 24 words: the final word contains 3 entropy bits and 8 checksum bits.
After you enter the first 11 or 23 words using Blockstream's recovery steps, Jade Plus can calculate valid choices for the final word. This calculation completes the phrase; it does not add a passphrase. See Create a recovery phrase with dice on Jade Plus.
The optional BIP39 passphrase
A BIP39 passphrase is extra text combined with the entire recovery phrase. It is sometimes called a “25th word,” but it is not literally a 25th recovery word, does not need to be one word, and is not checked by the phrase checksum.
The passphrase is case-sensitive and may include spaces, multiple words, numbers, or other supported characters. Every exact passphrase creates a valid wallet. There is no universal “wrong passphrase” warning. A one-character difference normally opens another wallet, often with no transaction history.
This property can protect a wallet if the recovery phrase is stolen while the passphrase remains separate. It also means a forgotten passphrase cannot be reset from the phrase. Record it exactly and do not rely on memory alone. Follow Use a BIP39 passphrase on Jade Plus.
Common mistakes to avoid
- Calling a passphrase “word 25” without explaining that it is separate.
- Choosing an arbitrary final recovery word; the checksum will usually be invalid.
- Assuming an empty wallet means the passphrase was rejected.
- Storing the phrase and passphrase together, defeating separation.
- Treating the device PIN as part of wallet recovery. The PIN protects the device, not the seed backup.
- Entering real words into an online checksum tool or asking support to validate them.
- Assuming a recovery phrase alone rebuilds a multisig wallet.
How to identify the intended wallet safely
Before funding, record the wallet fingerprint and one receiving address verified on the hardware screen. These are sensitive metadata but cannot sign by themselves. Then perform a hardware-only recovery test and compare both values.
If a restored wallet appears empty, stop and check passphrase capitalization and spacing, recovery-word order, network, script type, derivation settings, and account. Do not destroy an old backup or move a large balance until the recovery test proves you opened the intended wallet.
Official specifications: BIP39 and Blockstream's passphrase guide.
Updated on: 04/08/2026
Thank you!