digest
Short Summary
Main recommendation: Do not publicly publish your 24-word seed (mnemonic) on Facebook, Twitter, or anywhere else, even if you protect it with a strong passphrase, because the passphrase is only a second factor that cannot make a public seed safe. The video's broader advice is to use the BIP-39 standard exactly as designed, keep the seed physically secure, and avoid inventing your own encryption or splitting schemes.
Key Points
- Publishing the 24-word seed is "absolutely unsafe" according to the speaker; the passphrase only protects the keys if an attacker has both the seed and the passphrase.
- The passphrase works as a second factor, but it is not a replacement for keeping the seed secret, because the PBKDF2 key-stretching step can be brute-forced with specialized hardware (GPUs, FPGAs, ASICs).
- Brain wallets are insecure because common phrases can be precomputed and checked against bitcoin addresses, and a passphrase used alone behaves similarly unless paired with a seed.
- Cutting a seed into halves does not halve its difficulty to crack; the speaker says the complexity drops by roughly 10^30 to 10^40, so this "smart" scheme is weak.
- Custom schemes such as splitting, mixing, encrypting, and storing seed pieces online are described as likely to lose funds through forgotten schemes, mistakes, or weak complexity.
- The hardware wallet PIN only protects the physical device with an escalating time delay and is separate from the seed and the passphrase.
Details Worth Noting
- Concrete instructions:
- Write the seed down with pen or pencil on paper, and store it in a physically secure location such as a locked drawer or bank safe deposit box; the speaker also suggests etching the words on steel.
- Keep multiple copies of the seed.
- Create a passphrase of six to eight random words that are not from the BIP-39 mnemonic word list and are not phrases found on Google, in books, or in popular movies.
- Memorize the passphrase, write it down, and store that written copy in a different location from the seed.
- Leave written instructions so family members can access the funds if something happens.
- Use the standard method as designed rather than custom schemes.
- Enter the passphrase directly on the hardware wallet's screen where available (second-generation devices), rather than on a connected computer keyboard.
- The speaker estimates that a relatively complex passphrase keeps funds safe for several weeks to a month, and a very strong one for months, unless an attacker spends about a million dollars on hardware.
- On a small hardware wallet such as a Ledger or Trezor, passphrase checking takes about two to three seconds, which the speaker says is the practical limit for usability.
- Brain wallets can use about 16,000 PBKDF2 rounds by default and can be reconfigured to about 100,000, but the speaker says they still cannot match a true two-factor seed-plus-passphrase system.
Bottom Line
A public seed is never safe, and the passphrase should be a strong, memorized, separately stored second factor used with standard BIP-39 tools rather than as a substitute for physically securing the seed.
