The passphrase, or 25th word, is the strongest lock you can add — and the least forgiving

A recovery phrase alone has a hard limit: whoever finds the words wins. The passphrase, an optional secret defined by the BIP-39 standard and often called the twenty-fifth word, closes that gap by adding something an attacker cannot find inside your written backup.

How the twenty-fifth word works

Per Trezor's knowledge base, the passphrase creates a completely new wallet linked to your existing backup. The device does not store it; you enter it by hand each time you open that wallet. It is case-sensitive and can run up to 50 ASCII characters, and every passphrase you type opens a different wallet, even a typo, which simply opens a new and most likely empty one.

Ledger frames it the same way. Per Ledger's guidance, mixing up a single character gives access to a completely different set of accounts, and a well-chosen passphrase is far harder to brute-force than an ordinary password because of its length. The upshot is that a thief holding your 24 words still faces a second lock whose very shape is hidden from them.

That invisibility has a defensive use. Ledger notes the passphrase supports plausible deniability: under coercion you can open the standard, no-passphrase wallet, holding a modest balance, while the bulk of your holdings stays in a hidden wallet the standard words never reveal.

The catch that ends careless use

• The passphrase is never stored on the device or by the vendor; if you forget it, per Trezor you lose access to that wallet and its funds, permanently.
• Back the passphrase up separately from the recovery phrase, so finding one does not hand over both.
• Record it exactly; case and every character matter, and there is no "incorrect passphrase" prompt to warn you of a slip.
• Test recovery with a small balance before committing real funds to a hidden wallet.
• Treat the passphrase as a second seed to protect, not a password you can reset.

Used well, the passphrase is the closest thing self-custody offers to a lock that survives the loss of your backup. Used carelessly, it is a second way to lose everything. The feature rewards people who already keep disciplined, tested records, and quietly punishes those who do not.

— Sources: [Trezor](https://trezor.io/guides/backups-recovery/advanced-wallets/what-is-a-passphrase) · [Ledger](https://www.ledger.com/academy/passphrase-an-advanced-security-feature)