What Does a BIP39 Passphrase Actually Do to Your Wallet Keys?

21 October 2026

A BIP39 passphrase does not add a 25th word to your recovery phrase. It generates an entirely separate set of wallet keys from the same 24-word seed. The passphrase acts as a second factor that changes the master seed from which all your cryptocurrency addresses and private keys are derived. Without the correct passphrase, the wallet it controls cannot be accessed, even if someone has your 24-word recovery phrase.

How the passphrase changes your keys

The BIP39 standard defines how a recovery phrase (usually 24 words) becomes a seed. That seed is then used to generate a master key, which in turn creates all your wallet addresses and private keys. When you add a passphrase, the process changes at the seed stage.

The standard seed generation without passphrase: - 24-word phrase → seed → master key → wallet keys

With passphrase: - 24-word phrase + passphrase → different seed → different master key → different wallet keys

The passphrase is concatenated with the recovery phrase before the seed is computed. This means the same 24 words with a different passphrase produce a completely different set of addresses and private keys. The passphrase itself is not stored on the device or in the recovery phrase. It is known only to you.

What the passphrase does not do

• It does not encrypt your existing wallet. It creates a new one.
• It does not replace your PIN. The PIN still controls access to the device.
• It does not protect your recovery phrase if someone watches you type it. The passphrase is entered directly on the device.
• It does not make your wallet recoverable without the passphrase. If you lose both the recovery phrase and the passphrase, the wallet is gone permanently.

How to Set a Passphrase on a Ledger

1. Connect and unlock your ledger-guide/ledger-genuine-check-how-it-works/">Ledger device.
2. Open the Ledger Live app on your computer or phone.
3. Go to Settings → Advanced → Passphrase.
4. Choose Set temporary passphrase (attached to the current session) or Set permanent passphrase (attached to a secondary PIN). Temporary passphrases reset when you disconnect the device. Permanent passphrases let you access the passphrase wallet by entering a second PIN.
5. Enter your passphrase directly on the device using the buttons. Passphrases are case-sensitive and can be any length up to 100 characters.
6. Confirm the passphrase. The device will then show the new wallet associated with that passphrase.

Practical Consequences

• You can have multiple passphrase wallets. Each unique passphrase creates its own wallet. Some people use different passphrases for different purposes (savings, daily spending, testing).
• The passphrase wallet is empty by default. You must send funds to its addresses. Your existing balances remain in the wallet associated with your recovery phrase alone.
• You can switch between wallets. With a permanent passphrase, entering the secondary PIN opens the passphrase wallet. Entering your main PIN opens the standard wallet. The device holds both, but only one is active at a time.

Common mistakes and risks

Using a short or guessable passphrase. A passphrase like "password123" or your pet's name adds almost no security. An attacker who has your recovery phrase can try common passphrases. Use a long, random string of characters, or a sentence that is easy for you to remember but hard to guess.

Forgetting the passphrase. If you forget the passphrase, the wallet is permanently inaccessible. There is no recovery option. The passphrase is not stored anywhere on the device or in Ledger Live. Write it down separately from your recovery phrase and store it securely.

Mixing up wallets. If you send funds to a passphrase wallet address, then remove the passphrase or switch to a different one, those funds are not visible. You must use the exact same passphrase to access them again.

Testing Your Setup

Before relying on a passphrase wallet for significant funds, test it:

1. Set the passphrase on your device.
2. Note one receiving address from the passphrase wallet.
3. Send a small test transaction (like $1 worth of a token) to that address.
4. Remove the passphrase and reconnect the device without it.
5. Check that the test funds do not appear in your standard wallet.
6. Re-enter the passphrase and confirm the test funds appear.

This confirms you can reproduce the wallet. Repeat the test after resetting the device or using a different Ledger with the same recovery phrase to verify the passphrase works across devices.

When a passphrase makes sense

A passphrase adds protection if someone gains physical access to your recovery phrase. Without the passphrase, they cannot access the funds in the passphrase wallet. It also lets you create a plausible deniability wallet - a separate wallet with small balances that you can reveal under duress, while your main funds remain hidden behind a passphrase you do not disclose.

For most users, a properly secured recovery phrase stored in multiple secure locations is sufficient. The passphrase adds complexity and a single point of failure (your memory or your written passphrase). Only use one if you understand the risks and have tested your recovery process.

Back to ledger