Recovery words are an ordered list of words—usually 12 or 24—that back up a cryptocurrency wallet. They allow the wallet to recreate the private keys that control its funds. If your BitBox02 is lost, damaged, or reset, you can use the recovery words to restore access to the same wallet.
Recovery words warning
Anyone with your recovery words can control your funds. Never enter them into a computer, smartphone, website, browser extension, password manager, cloud service, or AI chatbot. BitBox support will never ask for them.
What recovery words mean
Recovery words are also called a seed phrase, recovery phrase, or mnemonic. They are not a password for your BitBox02. They are the wallet backup that lets compatible wallet software or hardware recreate the same wallet.
The words must be kept in the exact numbered order. A missing word, misspelling, or different order produces a different wallet, which will usually appear empty.
Why recovery words matter
Your coins are recorded on the blockchain, not stored inside the BitBox02. The BitBox02 protects the private keys used to control those coins during daily use. Recovery words make it possible to recreate those keys if the device is no longer available.
This means that the recovery words protect against device loss, damage, or reset, but they must also be protected from theft. Someone does not need your BitBox02, device password, or permission to restore a wallet if they have the recovery words.
How recovery words work
When you create a wallet, the BitBox02 generates a secret, random starting point. The BIP39 standard represents it as a list of words that is easier to record correctly than a long number. The words are used to generate the wallet seed, from which the wallet creates its accounts, private keys, and receiving addresses.
From recovery words to addresses
Think of your wallet as a tree. Your recovery words let the wallet recreate the same tree whenever you need it.
- Trunk: The wallet seed is the starting point recreated from your recovery words.
- Branches: The wallet uses the seed to create separate accounts and supported networks.
- Twigs: Each account creates private keys that authorize spending.
-
Leaves: The private keys create the receiving addresses you use, such as Bitcoin addresses beginning with
bc1.
This process is deterministic, meaning the same recovery words always recreate the same tree. You do not need to update a correctly created backup after receiving funds, sending funds, or creating new receiving addresses.
The BIP39 word list
The BitBox02 uses a 24-word English recovery-word backup from the official BIP39 word list. The list contains 2,048 words. The first four letters of every word are unique, which helps the BitBox02 identify the intended word during recovery and helps reduce mistakes when checking a handwritten backup.
Many wallets support BIP39, but compatibility also depends on the wallet type, networks, account settings, and derivation paths. When possible, restore on a trusted hardware wallet and confirm that it supports the wallet you are restoring. Readers who want the technical specification can consult BIP39: mnemonic code for generating deterministic keys.
Recovery words with the BitBox02
During standard BitBox02 setup, the device creates a backup on the included microSD card without displaying the recovery words. You can later display and verify the words on the BitBox02 screen to create or check a handwritten backup. The words are never shown in the BitBoxApp.
If you need to make or verify a written copy, follow the steps to view and verify recovery words on the BitBox02. If you need to regain access after a reset or device replacement, follow the steps to restore your wallet using recovery words.
How to protect recovery words
Write the words clearly, number them, and keep the copy offline in a private location. Keep the backup separate from your BitBox02. Do not photograph, scan, print, email, copy, or store the words digitally. Do not alter, obscure, or split the words unless you fully understand the recovery and security consequences.
For practical storage choices and physical durability, learn how to securely store recovery words. To compare microSD, written, and steel backups, see how to choose a BitBox02 backup method.
Recovery words and an optional passphrase
An optional passphrase is a separate secret that is combined with your recovery words to create a separate wallet. It is sometimes called a “13th” or “25th word”, but that is misleading: it is not a recovery word and it is not included in the backup.
Different passphrases create different wallets. If you forget the passphrase, recovery words alone cannot restore the passphrase-protected wallet. Use this advanced feature only after you understand the risks; learn how the BitBox02 optional passphrase works.
For a deeper, non-procedural explanation of backup risks and long-term storage, see the BitBox blog posts about common Bitcoin backup mistakes and about keeping a Bitcoin backup safe.
If recovery words are exposed
Treat recovery words as compromised if anyone else has seen, photographed, copied, typed, or received them. Create a new wallet with a new backup and move all funds to it as soon as you can safely do so. Do not continue using the exposed words.
If a website, message, caller, or supposed support representative requests the words, stop immediately. Learn how to identify BitBox phishing scams and protect your wallet.
Frequently asked questions
How many recovery words does the BitBox02 use?
You can choose a 12- or 24-word recovery-word backup for a BitBox02. The normal setup creates a 24-word microSD backup. Learn about the available choice and its implications in advanced backup options for your BitBox02.
How does the number of recovery words affect security?
A 12-word BIP39 backup represents 128 bits of entropy, which is not realistically brute-forceable. A 24-word backup represents 256 bits of entropy. Both must be kept secret and offline: practical security depends far more on protecting the backup from loss and theft.
Is the order of the words important?
Yes. Each word and its position are part of the backup. The same words in a different order create a different wallet.
Can recovery words have different lengths?
Yes. Most wallets use 12 or 24 recovery words. BIP39 also defines 15-, 18-, and 21-word formats, although they are less common. To restore a wallet, you need the exact words in the exact order; you cannot shorten, extend, or convert a backup yourself.
Are recovery words the same as my device password?
No. Your device password unlocks that BitBox02 for daily use. Recovery words restore the wallet on a new or reset compatible device. A forgotten device password can be resolved by resetting the device and restoring from a valid backup; lost recovery words cannot be recreated by BitBox.
Do I need to update recovery words after a transaction?
No. A correct recovery-word backup can recreate future addresses and private keys derived from the same wallet. You only need a new backup when you deliberately create a new wallet or change to a different wallet setup.
Can I create my own recovery words?
Advanced users can generate their own entropy, but a mistake can permanently weaken or lose access to a wallet. For most people, the safer choice is to use the randomness generated by the BitBox02. If you understand the risks and want to learn more, read the BitBox blog post about generating your own Bitcoin seed with dice.