Seed phrase (мнемоническая фраза восстановления)

Введение

Seed phrase (мнемоническая фраза восстановления, recovery phrase, backup phrase) — human-readable encoding entropy used to derive all private keys in hierarchical deterministic (HD) cryptocurrency wallet. Standard BIP-39 defines wordlists (2048 words per language), checksum embedded in last word bits, mapping to binary seed via PBKDF2. Typical lengths: 12 words (128 bit entropy) or 24 words (256 bit) — latter preferred for high-value storage.

Seed phrase IS the wallet — anyone possessing phrase controls all derived addresses past and future within derivation path. Loss of seed with loss of devices = irrecoverable funds. Leak of seed = instant theft without victim online.

BIP-39 и HD wallets (BIP-32/44)

From seed, BIP-32 master private key generated; BIP-44 paths like m/44'/0'/0'/0/0 (Bitcoin first address) derive child keys deterministically. One backup covers unlimited addresses — revolution vs independent random keys per transaction era.

Passphrase (13th/25th word extension) — optional BIP-39 passphrase creates separate wallet; plausibly deniable second vault if attacker coerces main seed.

Правила безопасного handling

Generation: only on trusted wallet during setup — never accept pre-printed seed from seller. Verify firmware authenticity.

Storage: never digital plaintext — no photos, cloud notes, email drafts, password managers synced online for main seed. Metal backup for fire/water; split storage (Shamir or geographic separation) for redundancy without single theft point.

Verification: restore test on spare device confirms backup legibility и correctness before depositing significant funds.

Never share: support, «airdrop», «sync wallet» scams request seed — 100% fraud.

Seed vs private key vs keystore

Single private key — one address. Keystore JSON encrypted with password — still hot file. Seed — root of tree; compromise worse than single key leak.

Hardware wallet seed backup once at init — device stores keys internally но recovery requires same seed if device lost.

Social recovery и inheritance

Multisig social recovery (friends hold key shares) vs plain seed in envelope — trade-offs complexity. Legal: seed in safe deposit with executor instructions — estate planning gap many crypto holders ignore until too late.

Threat scenarios

Phishing: fake wallet sites capture seed during «import». Malware: clipboard logger on compromised PC during setup. Shoulder surfing: public place writing seed. Supply chain: device ships with known seed sticker — always initialize fresh.

Optional passphrase: if forgotten, seed alone accesses only default wallet — funds in passphrased wallet lost forever.

SLIP-39 и Shamir backup

SLIP-39 (SatoshiLabs) splits seed into Shamir shares — например 3-of-5 где loss two shares не fatal, theft one share useless. Alternative single mnemonic на metal. SLIP-39 complexity higher; document share assignment (who holds share 2) для inheritance.

Wordlist языки и совместимость

BIP-39 wordlists для множества языков — entropy language-independent но words must match wallet language setting при restore. Mixed-language mnemonic invalid. Russian wordlist exists; English most common in cross-wallet compatibility testing.

Entropy sources quality

Wallet must use CSPRNG — /dev/urandom, hardware RNG. Never type «random» words yourself — human pattern predictable. Dice-based entropy generation possible for paranoia with proper procedure и software conversion to mnemonic.

Migration между кошельками

Import seed в new wallet software — test small balance first. Derivation path mismatch (Ledger legacy vs BIP84 native segwit) may show «empty» wallet though seed correct — specify path or use wallet supporting account discovery scan.

Corporate и team seeds

Shared team seed без multisig — worst practice (insider theft). Prefer multisig with individual seeds. If shared operational wallet unavoidable — strict access logging и limited balance.

Связанные термины

Cold wallet — where seed backup lives. Multisig — multiple independent seeds not one shared. PGP — different key hierarchy, don’t mix metaphors in backup storage.

Checksum verification при восстановлении

BIP-39 last word encodes checksum bits — wallet rejects invalid mnemonic with typo. При ручном вводе с metal plate double-check каждое слово against official wordlist index. One letter wrong = wrong checksum = panic «wallet empty» until typo found.

При estate planning рассмотрите time-locked instructions: sealed envelope opened only upon event, containing derivation path notes и hardware location но not seed duplicate if already in vault. Lawyer should know existence of crypto assets without necessarily knowing seed — balance legal disclosure и security.

Никогда не фотографируйте seed для «backup в Google Photos» — cloud sync automatic и irreversible. Screen capture malware during wallet setup exfiltrates display — use hardware wallet with offline generation где seed never appears on general-purpose computer screen.

Label metal backup plates только внутренним кодом без слова «bitcoin» или суммы — reduces targeting при physical burglary if plate discovered.

Заключение

Seed phrase — single most critical secret in self-custody cryptocurrency. BIP-39 standardization enabled interoperable backups across wallet vendors, но usability burden shifted entirely to user: no bank reset button. Treat seed with physical security paranoia exceeding banking passwords — because possession equals ownership, and blockchain transactions don’t revert. Master generation, metal backup, optional passphrase strategy, и tested recovery — non-negotiable baseline for anyone holding crypto beyond trivial amounts.