The short version: four different things guard your bitcoin, they are not interchangeable, and losing them has wildly different consequences — from a mild inconvenience to total, permanent loss. Most beginner panic comes from not knowing which one is which.
Tuga has four things that identify her. A collar with a tag. A microchip under the skin. A name she responds to, when it suits her. And a face I'd recognise anywhere.
They feel like the same thing and they absolutely are not. Lose the collar and nothing happens; it's a convenience. Lose the microchip registration and she becomes an unidentifiable stray if she's ever found far from home. The name only works on people who already know her. My recognition doesn't scale past me.
Four identifiers, four completely different failure modes, and the one that matters most is the one you can't see.
Bitcoin does this to people constantly. Someone writes in a panic: I lost my PIN, are my coins gone? And the answer depends entirely on which of the four things they actually lost.
1. The PIN — access to a device
What it is: the code that unlocks your hardware wallet.
What it protects: the device, and only the device. It stops someone who physically holds your hardware wallet from using it.
What happens if you lose it: nothing serious. Enough wrong attempts and the device wipes itself — which is a feature, not a disaster. You buy or reset a device and restore from your seed. Your coins never moved; they were never on the device in the first place.
The thing people get wrong: believing the coins live on the hardware wallet. They don't. Coins exist on the chain; the device holds keys. A hardware wallet is a signing tool, and a replaceable one.
2. The seed — everything
What it is: twelve or twenty-four words, generated once, usually written on paper or metal.
What it protects: nothing. It is the thing. The seed is the wallet.
What happens if you lose it: if your device still works, you have an emergency — move the funds to a new wallet whose seed you've recorded properly, today, not at the weekend. If the device is also gone, the coins are unrecoverable by anyone, forever. No service, company or authority can help.
What happens if someone else sees it: they can take everything, immediately, from anywhere, with no further information — unless you've used a passphrase, which is the next item.
The thing people get wrong: photographing it "temporarily", typing it into anything, or storing it in a password manager, email draft or cloud note. The seed exists on paper or metal. The moment it touches a connected device it should be considered compromised and the funds moved.
3. The passphrase — a separate wallet entirely
What it is: an optional extra string that combines with the seed to produce a different wallet.
What it protects: against someone finding your written seed. Seed alone opens an empty or decoy wallet; seed plus passphrase opens the real one.
What happens if you lose it: the coins are gone, permanently, even though you still have the complete and correct seed. There is no error message, no recovery, no "wrong passphrase" warning — just a valid, empty wallet. This is the single most common way people lose bitcoin they technically still hold.
The thing people get wrong: treating it like a password. It is a second seed and needs the same backup discipline. I wrote a whole piece arguing most people shouldn't use one at all, and I stand by it.
4. The exchange password and 2FA — an account, not coins
What it is: your login to a company.
What it protects: your relationship with that company. Not coins.
What happens if you lose it: customer support, identity documents, some waiting, and probably a resolution. Annoying, rarely fatal.
What happens if someone else gets it: they can empty the account, and whether you're made whole depends on the company's policies and solvency. That's a very different situation from self-custody, in both directions.
The thing people get wrong: thinking this is the same category as the others. It's an account credential. If your coins are behind a password that can be reset by emailing support, you don't have bitcoin — you have a claim on a company that has bitcoin. That may be a perfectly reasonable choice. It's just a different thing, and the distinction is the whole of "not your keys".
5. The matrix, in one place
LostStolenPINInconvenience — restore from seedDevice is useless without itSeedTotal loss (if device also gone)Total loss, immediatelyPassphraseTotal loss, even with the seedNeeds seed too — useless aloneAccount passwordSupport can usually helpAccount drained; depends on the company
Read that table once a year. It's the whole subject.
6. The uncomfortable half
The categories blur in real products, and the marketing doesn't help. Some wallets call the passphrase a "password". Some apps call a PIN a "passcode" and a seed a "backup". Exchange apps say "wallet" for an account. The vocabulary is a mess and that mess is responsible for a great deal of real loss — people apply the mental model from the thing they know (website passwords, which are recoverable) to the thing they don't (seeds, which are not).
My neat table also flatters the situation. Real losses are rarely one clean failure. They're a device that died and a seed written down with one wrong word and a passphrase remembered approximately. Each individually survivable, together fatal. Testing each separately, which is what people do, won't catch that.
And the honest ranking is uncomfortable for the hardware-wallet industry. Three of these four secrets are about the device and the account. Only the seed actually matters, and the seed is a piece of paper that costs nothing and gets the least attention. People spend money on devices and spend no time on the writing-down, which is backwards — the device is replaceable and the paper is not.
The collar can fall off in a hedge and it doesn't matter. Know which of your four things is the microchip, and treat the other three accordingly. 🐾⚡
Not financial advice. Verify your seed backup by restoring it with a trivial amount before trusting it with meaningful funds.
