Mnemonic phrase — also called a recovery phrase or seed phrase — is the human-readable form of the entropy from which your wallet derives every private key it will ever generate. Behind the friendly twelve or twenty-four words sits the BIP-39 specification, ratified in 2013 and now the dominant standard across Ledger, Trezor, Coldcard, Keystone, MetaMask, Rabby, and almost every consumer wallet shipped after 2017.
What the words actually encode
The wallet first generates 128 or 256 bits of entropy from your device's random-number source. It appends a few checksum bits and slices the result into eleven-bit chunks. Each chunk indexes into a fixed 2,048-word English wordlist. The output is the twelve or twenty-four words you see on screen.
Those words are then run through PBKDF2 with 2,048 iterations to produce a 512-bit seed, from which the BIP-32 hierarchical derivation tree generates your private keys, public keys, and addresses.
What is and is not on chain
The mnemonic itself is never on chain. It exists only on your device — or on whatever backup you create. There is no "lookup" possible: lose the mnemonic and lose the assets. This is not an exaggeration; the Wall Street Journal estimated in 2024 that roughly 20% of all Bitcoin ever mined is held at addresses whose private keys are likely lost.
The dangerous part
Because the words are human-readable, they are easy to type, easy to photograph, and easy to dictate to a fake "support agent" on the phone. Every realistic threat model for crypto custody comes back to one rule: the mnemonic enters a device only when generating, restoring, or rehearsing — never in any other context. Not in iCloud notes, not in a Gmail draft, not in a screenshot, not over a Telegram DM.
Backups that survive ten years
Paper is the floor. A US-resident holder with a five-figure or larger stack should keep at least one steel backup — Cryptosteel Capsule, Billfodl, or a punched steel plate — stored in a fireproof safe or a bank safe-deposit box. For larger stacks, split the words using SLIP-39 Shamir Backup across two or three locations (Trezor Safe 3 supports this natively).
Further reading: Private keys and mnemonic, Five ways to store a seed phrase, BIP-39, Shamir Backup.