Skip to main content

What are Passphrase and Hidden Wallets? How to use and restore safely?

U
Written by UKey Wallet

Seed Phrase, Passphrase & Recovery

Passphrase It is an additional secret that participates in wallet derivation together with the mnemonic phrase. Using the same set of mnemonics with different Passphrase will usually result in different private keys, addresses and accounts; these accounts are often called "hidden wallets".

The most important recovery conditions:Restoring the original Passphrase wallet requires using both the correct mnemonic phrase and the exact same Passphrase, with compatible network, address type, and derivation settings. Customer service cannot query, reset or reissue Passphrase.

What is the relationship between Passphrase and hidden wallets?

Passphrase is not the login password for an existing wallet, but part of the wallet's derived input:

Mnemonic phrase + empty Passphrase → Default wallet
The same mnemonic + Passphrase A → Wallet A
The same mnemonic + Passphrase B → Wallet B

Creating a Passphrase wallet does not delete the default wallet. Assets are also not stored in Passphrase or hardware devices, but are recorded on the blockchain; The mnemonic and Passphrase together determine the addresses that can be derived and controlled. "Hidden wallet" is just a common name and does not mean that the relevant addresses and transactions are not visible on the chain.

Passphrase is also not a second login password verified by the platform. The wallet does not need to first confirm with the server whether it is "correct" or not, but directly uses the input content to calculate the derived result; therefore, The user must ensure that the records and inputs are completely consistent.

How is it different from mnemonic phrases, PINs, and app passwords?

Credentials

Main function

Is it required when restoring Passphrase wallet?

Mnemonic phrase

Basic secrets of wallet recovery and derivation

need

Passphrase

Together with the mnemonic word, another set of addresses is derived

Required and must be consistent with the original

Device PIN

Control local access to the current device

Usually not required and cannot replace recovery data

App password or biometrics

Protect access to apps currently on your phone or computer

No need

Device PINs are not wallet recovery data that can be used across devices. The specific input method and support range may vary depending on the device, firmware or wallet version, and the official instructions of the current product should prevail. Device PIN responsibilities seeHow does the UKey hardware wallet PIN protect assets?.

Why doesn't an incorrect Passphrase usually trigger an error, and how do I restore the wallet?

Within the input range supported by the wallet, different Passphrase can participate in the derivation. The system usually cannot tell whether the user entered the original Passphrase or another valid input. Changes in capitalization, spaces, or symbols may open another set of valid addresses instead of displaying "Wrong password."

enter

possible results

Original mnemonic + original Passphrase

Recover expected wallet and address

Original mnemonic + different Passphrase

Open another set of addresses, a common manifestation is that the balance is zero

Original mnemonic + empty Passphrase

Open default wallet

When you find that the address is different or the balance is zero, do not immediately judge that the assets are lost, and do not repeatedly enter recovery information on untrustworthy web pages. Stop the transfer first, Check whether the mnemonic, Passphrase, capitalization, spaces, network, account index, address type and derivation path are consistent with the original.

What information is needed for recovery?

The goal of recovery is not to retrieve the local account name, but to re-derive the same address in a compatible environment. Even if the mnemonic and passphrase are correct, There are inconsistencies in the network, account index, address format, or derivation paths, and the expected assets may not be visible temporarily.

  • The original mnemonic phrase is complete and in the correct order;

  • Passphrase exactly as it was created;

  • Wallets or hardware devices that support corresponding standards and input methods;

  • The same network, account index, address format and derivation path as the original wallet.

PINs, app passwords, and account names are generally not substitutes for this information, and customer service cannot derive a passphrase from device serial number, address, or identity information. For the basic functions of mnemonics, seeWhat is a Seed Phrase?.

What does a Passphrase protect and what does it not protect?

Risks that can be reduced

  • The mnemonic backup was leaked separately:If the Passphrase is difficult to guess and remains secret, the person who obtains the mnemonic phrase may not have direct access to its derived wallet.

  • Account purposes are mixed together:Different Passphrase can derive different address groups to facilitate separate management of different uses.

unresolved risks

  • The weak Passphrase is guessed offline, or the mnemonic phrase and Passphrase are leaked at the same time;

  • Typing in an environment monitored by malware, remote control, or keyloggers;

  • User confirms malicious transactions, incorrect authorization or wrong address;

  • The passphrase was forgotten or misrecorded, preventing the original address from being re-derived.

How to use Passphrase more safely?

  1. First make sure you really need:When the recovery mechanism is not understood, it should not be enabled just because it is "more secure".

  2. Use content that is hard to guess and not reused:Avoid names, birthdays, common words, or passwords that are in use by other accounts.

  3. Follow the official input process for your current device:Do not fill it out on web pages, chat windows, or remote assistance tools.

  4. Keep accurate records and keep them separate:Clarify case, spaces, and symbols while preventing the mnemonic or passphrase from being permanently lost.

  5. Verify the address first:Follow the official instructions to re-enter or restore the wallet and confirm that you get the same address; do not rashly reset the only available device just for testing.

FAQ

After forgetting Passphrase, can customer service reset it?

No. Any wallet "customer service" that claims to require users to submit a mnemonic phrase or Passphrase for recovery should not be trusted.

Can I directly modify the Passphrase of an existing wallet?

It cannot be changed directly like a login password. Different Passphrase will derive another set of addresses; if you need to switch to a new Passphrase, you should first confirm the recovery data and target address. And strictly follow the official process of the current product. This page does not provide general asset migration steps.

Are "hidden wallets" invisible on the blockchain?

No. What is hidden are local entries and derivation relationships, not on-chain records. Addresses, balances and transactions are still recorded according to the public rules of the corresponding blockchain; once the address is associated with a real identity, related activities may still be analyzed.

Did this answer your question?