Wallet security center
Understand the essentials before taking a recovery step. Keep control of your keys, your device, and your decisions.
What is a 12-word recovery phrase?
A recovery phrase is a human-readable backup used to derive the keys for a compatible wallet. It is a master secret, not an ordinary login password. Anyone who obtains it may be able to spend the funds. Keep it offline and private.
How BIP-39 works
BIP-39 maps random entropy and checksum bits into words from a fixed list. A 12-word phrase encodes 128 bits of entropy plus a 4-bit checksum using the 2,048-word list. A seed is then derived from the phrase and an optional passphrase; wallet software derives keys and addresses from that seed.
Address, private key, and recovery phrase
A public address is a destination you can share to receive funds and inspect public activity. A private key controls spending for its corresponding key. A recovery phrase is a backup from which many wallet keys may be derived. A public address cannot be reversed into your recovery phrase.
A checksum does not prove ownership
The checksum checks mathematical consistency, not identity. Many phrases are valid, and a different valid phrase typically opens a different wallet. For random 12-word sequences from the word list, roughly one in sixteen passes the checksum. Validation alone does not prove funds or ownership.
How to recognize a recovery scam
Be wary of unsolicited direct messages, look-alike wallet sites, remote-access requests, “AI unlock” claims, upfront verification deposits, and anyone asking for your recovery phrase. Do not sign unfamiliar transactions or approve token spending because someone calls it recovery.
Never pay for guaranteed recovery
There is no guaranteed way to reconstruct a missing random secret. A service promising certainty is misleading you. Never pay someone who guarantees recovery or asks for secrets to “validate” ownership. Use official support for app guidance and protect your existing backups.
Use the safest recovery environment
Prefer official wallet software or a hardware wallet for high-value secrets. A local website tool does not protect against malicious extensions, screen recording, compromised browser code, or a compromised device. Disconnecting the internet reduces exposure but does not fix device malware.
Read the privacy & safety notice