A passphrase is an additional secret that works together with your recovery words to determine which wallet is opened. It is one of the most effective ways to add protection to a wallet: the same recovery words can lead to a different, separate wallet depending on the passphrase you use.
Used well, a passphrase can make self-custody much more robust, especially when the recovery words and passphrase are stored separately. It also requires more care. To restore a wallet that uses a passphrase, you need both the exact recovery words and the exact passphrase.
Passphrase recovery warning
A forgotten or mistyped passphrase cannot be recovered by BitBox or any wallet provider. If your wallet was created with a passphrase, the recovery words alone are not enough. Use this feature intentionally, and only after you know how you will store and find the passphrase over the long term.
What a passphrase is
BIP39 is a widely used standard for recovery words. It describes, among other things, how a wallet can be derived from those words. A passphrase can be used as an additional input. Together, the recovery words and passphrase determine which accounts, private keys, and receiving addresses your wallet creates.
The important part is that the passphrase is separate from the recovery words. It is not included in the recovery-word backup, and it is not an additional recovery word. Terms such as “13th word” or “25th word” are common, but misleading because they make the passphrase sound like part of the recovery-word list.
When no passphrase is entered, the standard wallet is derived from the recovery words alone. Entering a specific passphrase opens a separate wallet that can only be reached again with that exact combination.
How a passphrase creates separate wallets
Each distinct passphrase produces a different wallet from the same recovery words. This may feel unusual at first, but it is exactly what makes the feature useful. The process is deterministic: entering the same recovery words and the exact same passphrase again recreates the same wallet.
- No passphrase: opens the standard wallet derived from the recovery words alone.
- One specific passphrase: opens one separate wallet.
- A different passphrase: opens another separate wallet.
A wallet cannot know whether a passphrase was meant to be “wrong.” If you enter even one character differently, the wallet usually opens a different, empty wallet rather than showing an error. Your funds remain in the original wallet, but you can only access them again with the passphrase you originally used.
Passphrase, recovery words, and device password
| Secret or credential | Purpose | Needed to recover a wallet that uses a passphrase? | Can it be reset? |
|---|---|---|---|
| Recovery words | Back up the wallet and recreate its keys. | Yes. | No. |
| Passphrase | Creates a separate wallet when combined with recovery words. | Yes, exactly as originally used. | No. |
| BitBox02 device password | Unlocks the physical BitBox02 for daily use. | No. | Yes. |
The BitBox02 device password is not part of the wallet backup. Resetting a device password does not reset recovery words or a passphrase.
For the technical definition, see the BIP39 technical specification. It describes how recovery words and an optional passphrase are used together to derive a wallet.
What a passphrase does and does not protect
A passphrase can keep a wallet inaccessible to someone who obtains only your recovery words. That is its major security benefit: one backup becomes a setup protected by two separate parts.
For that benefit to matter, the recovery words and passphrase need to be stored separately on purpose. If someone obtains both secrets, they can restore the wallet. A passphrase also cannot protect a wallet after you reveal the passphrase itself, approve a malicious transaction, or lose control of a device that already has access to the wallet.
A passphrase does not replace good backup storage; it builds on it. Your recovery words still need to be stored offline and securely. Once that foundation is in place, a passphrase can be a strong additional layer of security.
For a practical discussion of these trade-offs, read the BitBox blog post Benefits and risks of using an optional passphrase.
Why a passphrase can be useful
A passphrase is one of the most effective ways to add protection to a wallet. It means that your recovery words alone are not enough to access the wallet that uses the passphrase. That is why it is worth understanding this feature and intentionally building it into your security plan.
You do not need an unusual reason to benefit from a passphrase. The more important question is whether you can handle the added responsibility: the recovery words and passphrase should be protected separately, while still remaining reliably available when needed. If you keep that plan simple and testable, a passphrase can be a very useful next step for better wallet security.
A passphrase can permanently block access
A passphrase improves security when you store it reliably. At the same time, it increases the risk of recovery mistakes. Before moving meaningful funds into a wallet that uses a passphrase, make sure you have recorded the exact passphrase and can reopen the intended wallet.
Create a safe passphrase recovery plan
Plan recovery so that, even after a long time, you still know what you need and where to find it. For a wallet that uses a passphrase, there are two separate secrets: your recovery words and the passphrase. Record the passphrase exactly as you use it, including capitalization, spaces, punctuation, and any other characters.
Store the passphrase offline too. Treat it with the same care as your recovery words, but not as part of the same copy. If the recovery words and passphrase are stored separately, a single discovered backup is not enough to restore the wallet.
The plan should still stay simple. Do not rely only on memory, because a small detail can matter with a passphrase. At the same time, too many copies or an overly complex storage plan can create problems of its own. A good plan is one you can still understand and follow years from now.
Before transferring meaningful funds, test access with a small amount and then confirm that you can reopen the same wallet. This helps you catch mistakes early and verify that you recorded the passphrase correctly. Never enter recovery words into a computer, smartphone, website, browser extension, password manager, cloud service, or AI chatbot.
For the underlying backup practices, learn how to securely store recovery words and how recovery words restore access to a wallet.
Use a passphrase with a BitBox02
The BitBox02 supports passphrases as an optional advanced feature. The concept and recovery responsibility are not specific to BitBox: any compatible wallet used for recovery must use the same recovery words, the same passphrase, and the relevant wallet settings to find the intended accounts.
After you understand the concept and have a recovery plan, follow the steps to set up an optional passphrase with a BitBox02. If you already use one, learn how to use and manage the BitBox02 optional passphrase.
For more detail, see the difference between a BitBox device password and an optional passphrase.
Frequently asked questions
Does a passphrase replace recovery words?
No. A passphrase complements recovery words; it does not replace them. You need the exact recovery words and the exact passphrase to restore a wallet that uses a passphrase.
What happens if I enter the wrong passphrase?
A different passphrase creates a different wallet, which will usually be empty. Your original wallet is still available, but only when you enter the exact passphrase you originally used. Do not send meaningful funds to a wallet until you have confirmed that you can reopen it reliably.
Can I change or reset a passphrase?
No. Changing the passphrase creates a different wallet; it does not update the existing one. To use a new passphrase, first open the existing wallet, then move the funds to a new wallet created with the new passphrase.
Can BitBox support recover my passphrase?
No. BitBox support cannot recover a passphrase and will never ask you to provide it. Anyone who obtains both your recovery words and your passphrase can control the funds in that wallet.
Should I use a passphrase?
Yes, if you understand the feature and have a simple, tested recovery plan. A securely stored offline recovery-word backup remains the essential protection for every wallet. A passphrase can significantly extend that protection because the recovery words alone are no longer enough. At the same time, you must store the passphrase reliably for the long term, or access to that wallet can be lost.