Each BIP39 word adds 11 bits of entropy, making a 12-word phrase about 128 bits and a 24-word phrase about 256 bits, which makes brute-force attacks impractical.

Security hinges on the secrecy of the seed phrase; exposing even part of it dramatically lowers defense and can quickly compromise the rest.

Seed phrases can be stolen via social engineering, as shown in a January 2026 incident where a victim handed over their seed to impersonators, resulting in hundreds of millions in losses.

Beyond theft, the bigger threat is loss of access: roughly a quarter of all mined bitcoin could become permanently unreachable due to forgotten or lost seed phrases and backups, effectively removing wealth from circulation.

A checksum in the seed phrase helps catch typos during transcription, preventing silent wallet corruption when restoring from backups.

A seed phrase stands for the wallet itself and contains the private keys; there is no central recovery mechanism, so whoever holds the words controls the funds.