Bitcoin VerityOpen comparator

Level 6 · Use and security

Backups, passphrases and recovery tests

How to design a backup against loss and theft, what a BIP 39 passphrase changes and why recovery should be tested safely.

Article
56
Reading time
13 minutes
Reviewed
8 September 2026

In a nutshell

A good backup must remain readable after a device fails while staying secret from unauthorised people. A passphrase can create a separate wallet, but becomes another indispensable secret. A recovery test verifies that the data is complete and compatible—without exposing the main seed to an untrusted device.

01

A backup has two opposing jobs

A backup protects availability: device failure, a lost phone, fire or human error should not destroy the only route to the keys. It must also protect confidentiality: whoever finds a complete seed can often spend all related bitcoin. More copies reduce the risk of loss but increase the number of places someone can find.

Paper can be damaged by water, fire and time; metal can improve physical resilience, not secrecy. A photograph, phone note or ordinary cloud storage creates an easily copied digital trail. No medium by itself solves location choice, other people's access or inheritance planning.

02

What must be recoverable

A BIP 39 wallet requires the exact words in order and every passphrase that was used. Other wallets may require a file, descriptor or extra metadata. Backing up a single displayed address is not enough to recover an entire deterministic wallet.

The plan should include clear instructions explaining what the backup is and which compatible procedure restores it. Those instructions should not weaken protection by combining every secret in one place. Consider whether an authorised person could still carry out the procedure many years later.

  • completeness: every necessary secret and item of information
  • resilience: more than one appropriately separated point of failure
  • confidentiality: no simple online or photographic copy
03

A passphrase is not a device PIN

An optional BIP 39 passphrase enters the seed calculation together with the words. Every different passphrase creates another technically valid wallet, so software may not say that one character was wrong. It may simply open a different empty—or different existing—wallet.

A passphrase can separate the risk of a discovered seed backup, but it creates a new point of irreversible loss. It must be strong enough, exactly reproducible and backed up with sensible separation. Relying only on memory after many years is not a robust plan.

04

Test recovery without unnecessary exposure

An unverified record can contain a mistaken word, a missing passphrase or incomplete format details. A recovery test should confirm that a compatible wallet derives the expected receiving addresses. The safest method depends on the device; some hardware wallets provide a backup check inside their trusted environment.

The main seed should not be tested on a random website or an ordinary connected computer. A beginner can first rehearse the full process with a new test wallet and a small amount. After any significant change—such as adding a passphrase or migrating formats—verify what recovery now requires.

Level 6 · Use and security

Terms to know

Backup
A separate set of data needed to restore access after the original wallet is lost or damaged.
BIP 39 passphrase
Optional text that creates a different seed together with the mnemonic words; it is not the device PIN.
Recovery test
A controlled test that a backup produces the expected keys or addresses in a compatible procedure.

Common misconception

Once I have written down the seed, the backup is automatically safe and complete.

A more accurate explanation

The record can be wrong, damaged, easy to steal or incomplete without a passphrase and format details. Trust a backup only after safely checking recovery and storage risks.

A more accurate explanation

Are more copies always safer?

No. They improve resilience if one copy is destroyed but create more opportunities for theft. The number, locations and any division of secrets should match real threats, not a universal number.

56

Key takeaways

  1. 01A backup must address loss, physical damage and unauthorised access at the same time.
  2. 02A passphrase creates another wallet and cannot be derived from the seed words if lost.
  3. 03The medium improves resilience but does not itself solve secrecy or inheritance.
  4. 04Test recovery with a compatible trusted procedure, ideally first with a small amount.

A child-friendly recap

In very simple terms

A backup must survive a lost device while staying secret. A passphrase creates another wallet, so losing it can be as serious as losing the words. A safe recovery test shows whether the backup is really complete.

Reviewed: 8 September 2026

Sources and further reading

Sources support particular facts and definitions; listing one does not mean the editors endorse every view of its author.

01
Bitcoin.org: backup and recoveryBitcoin.org
bitcoin.org
02
BIP 39: passphrase and seed generationBitcoin Improvement Proposals
bips.dev
03
Bitcoin Core: secure wallet backupBitcoin Core
bitcoincore.org

Educational material, not an investment recommendation.