Tuga has a bed. It's in the corner of the living room, it cost actual money, and everyone in the house knows it's hers.

She doesn't sleep in it.

She sleeps wedged between two cushions on the hanging chair in the garden, in a gap you'd never notice unless you walked right up and looked down into it. If you came to the house looking for the cat, you'd find the bed. You'd be standing a metre from the cat and you'd leave convinced she was out.

That gap between the cushions is the best explanation of a BIP39 passphrase I know. And like Tuga's gap, it's brilliant right up until the moment someone forgets it exists.

1. What a passphrase actually is

Your recovery seed is twelve or twenty-four words. Most people stop there, and most people should.

A passphrase — sometimes called the "25th word", though it isn't a word and isn't from the list — is an extra string you type in alongside the seed. Any characters you like. The wallet mixes it with the seed and derives a completely different wallet from it.

Three things follow from that, and all three matter:

Every passphrase produces a valid wallet. There is no "wrong passphrase" error, ever. Type your seed with passphrase garden and you get one wallet. Type the same seed with Garden and you get a different, equally valid, completely empty one. The software cannot tell you that you made a mistake, because from its point of view you didn't.

The passphrase is not stored anywhere. Not on the device, not in the backup, not in the cloud. It exists in your head, or on a piece of paper you wrote it on, and nowhere else in the universe.

Your seed alone is no longer enough. Someone who finds your twenty-four words finds an empty wallet, or a decoy one. This is the whole point.

2. The real problem it solves

The honest case for a passphrase is narrow, and it's this: a seed backup is a physical object that lives somewhere.

A metal plate in a drawer. A card in a safe. An envelope at your parents' house. Those are good places. They are not perfect places. Burglars exist, relatives exist, house fires with people sifting the wreckage exist. The thing about a seed backup is that it's a bearer instrument with no password on it — whoever physically holds it holds the coins.

A passphrase splits that. The plate in the drawer becomes useless on its own. Someone would need the plate and the thing in your head.

That's genuinely valuable, and it's the only reason to use one. If your answer to "why am I doing this" is "because it sounds more secure", put it down.

3. The decoy wallet, and why it's oversold

The second argument you'll hear: your seed with no passphrase opens a wallet with a modest amount in it. Your seed plus the passphrase opens the real one. If someone forces you to open your wallet, you open the decoy.

The mechanism works. The scenario deserves more scepticism than it usually gets.

Someone who has gone to the trouble of coercing you is not going to politely accept the first balance they see and leave. They know passphrases exist — the technique is publicly documented, which means it's documented for them too. A decoy's job is to be believable, and a believable decoy needs enough money in it that walking away feels like a win. Most people set up a decoy with pocket change and have, in effect, built nothing.

If this is your threat model, the answer is almost certainly not a clever wallet configuration. It's geography, quiet, and multisig with a key you physically cannot produce on demand.

4. The ways this goes wrong, in order of frequency

This is the part that matters, because the failure modes here are not exotic. They are extremely boring and they happen constantly.

You forget it. Not the whole thing — a character. Was it BlueFence2019 or bluefence2019? Was there a space? The wallet gives you an empty wallet either way and no hint which. Months of "it must be here somewhere" follow.

You wrote it down next to the seed. Enormously common. A plate with twenty-four words and a slip of paper with the passphrase, in the same box. You now have all the fragility of a passphrase and none of the protection. If they're in the same place, you don't have a passphrase; you have a longer seed and a worse night's sleep.

Your typing isn't what you think it is. A trailing space. A non-breaking space pasted from a document. An accented character your phone keyboard renders differently from your laptop's. Autocorrect capitalising the first letter. Each of these produces a silent, valid, empty wallet.

Nobody else knows it exists. You die. Your family finds the metal plate, follows your careful instructions, restores the wallet, and sees zero. They conclude you spent it, or that it was a phase. The coins are still there and will stay there forever. This is not a rare outcome — it may be the single most common way passphrase-protected bitcoin is permanently lost.

You only tested it once. On the day you set it up, while the phrase was still fresh in your mind. The real test is six months later, from the written record alone, with the device wiped.

5. If you're going to do it, do it like this

Treat it as a second seed, not a password. It needs its own backup, in its own location, with its own durability. Written, not remembered. Memory is not a storage medium — it's a cache with no guarantees.

Separate storage, not separate secrecy. Seed at home, passphrase at your parents', or vice versa. The protection comes from the two not being in the same place. Keep it simple enough that a stressed, grieving person can follow it.

Keep it typeable. Plain letters and digits. No exotic characters, no emoji, no leading or trailing spaces. The cleverness you add here buys almost nothing and costs a great deal.

Write down that it exists. Your inheritance letter should say: there is a passphrase; it is not optional; without it the wallet appears empty; it is located here. If you've read my piece on the inheritance letter, this is the paragraph most people leave out.

Restore from cold, twice. Once now, once in six months, both times from your written materials only, on a wiped device, with no one prompting you.

6. The uncomfortable half

I've described a real tool with a real use. Now the part the hardware wallet marketing leaves out.

For most people this makes their bitcoin less safe, not more. The threat you're protecting against — someone finding your physical backup — is rarer than the threat you're introducing, which is you or your family losing access to a working wallet. I have watched far more people lose coins to forgotten passphrases than to burgled drawers. If you're honest about relative probabilities, the plain seed in a good hiding place wins for the overwhelming majority of holders.

It is often cargo-culted security. People enable it because it's the advanced-looking option, not because they've named the attacker it stops. A security measure you can't justify in one sentence is usually decoration — and this particular decoration can take everything you own with it.

And it solves the wrong half of the problem for most households. The realistic risks for a normal person holding bitcoin are: phishing, a bad download, a fake support call, and dying without documentation. A passphrase helps with none of those. It helps with exactly one scenario — physical discovery of your backup — and it makes the dying-without-documentation problem strictly worse.

So: if you can state the specific attack it prevents, and you're willing to back it up as carefully as the seed itself, use one. If you can't, the twelve words in a good place are not a compromise. They're the right answer.

Tuga's gap in the cushions is perfect protection from visitors, and would be a disaster if she ever needed someone to find her. Hiding something well is only half a plan; the other half is making sure the right person can still find it. 🐾⚡