KeyStone
← All articles

Phrase · The extra password

The «25th word» (passphrase): the detail that sinks many recoveries

There is a case where someone has their twenty-four words perfectly written down, types them correctly, and the wallet shows zero. There is no error, no theft and nothing broken: there is an extra password they enabled once and have forgotten. It is, by a wide margin, the number one cause of unrecoverable cases that reach me.

September 22, 2026 · 6-minute read

What it actually is

Some wallets, especially hardware ones, let you add a password that combines with your words. The result is not «your wallet, password-protected»: it is an entirely different wallet. Every password you type generates a different wallet, all of them valid, all of them empty except yours.

That is why there is no «wrong password» message. The device cannot know you made a mistake: it obediently opens a new, empty wallet, and you stare at the screen thinking you have been robbed.

Why it doesn’t self-correct

Your words carry an internal check: get one wrong and the phrase fails validation and the wallet warns you. The extra password has none of that. It is free text — it can have capitals, spaces, accents and symbols — and there is no way to know whether it is right except by checking whether the resulting wallet holds your money.

How to tell whether you had it enabled

  • You remember the device asking for something besides the PIN when you plugged it in.
  • You had «two wallets» on the same device and switched between them.
  • You once read about a «hidden wallet» or «plausible deniability» and thought it was a good idea.
  • Someone knowledgeable set it up for you and said it was «an extra layer of security».

When there is still a way out

If you remember anything about that password, there is a case, and sometimes a very good one. The difference from the words is that here you can search outward from what you remember, exactly as with any ordinary password.

What you remember of the passphraseOutlook
Two or three concrete candidatesAlmost always solved
The style or pattern you usedA good starting point
Only that it «was short» or «was a word»Sometimes
Absolutely nothingNo way out
It was random, from a lost managerNo way out
A detail that rescues cases: the extra password is case-sensitive and counts spaces and accents. If you think you remember it and it doesn’t work, the problem may be a trailing space, an initial capital or an accent. Try variants before writing the case off; it is surprisingly common.
If you have an active, working passphrase, write it down separately from the words and in a different physical place. Storing both together defeats its purpose; not storing the second one is the fast route to losing everything with the phrase right in front of you.

Keep reading