PIN, passphrase and recovery phrase: three different roles

These three secrets are often discussed as if they were interchangeable passwords. They are not. Confusing them can lead someone to protect the device carefully while leaving the backup exposed, or to preserve the backup while losing the extra secret needed for the wallet they actually use.

The PIN protects local device access

A hardware-wallet PIN normally controls access to that physical device. Attempt limits and other protections vary by model. The PIN is not normally a component of the wallet’s recovery phrase, and a replacement device can generally be set up with a new PIN after the correct recovery procedure.

Someone who obtains a usable recovery phrase may not need your original device or its PIN. That is why a strong device PIN does not make it safe to photograph the backup or send it to support. Conversely, forgetting a PIN does not necessarily mean losing the wallet if the complete recovery material remains available.

The recovery phrase backs up wallet key material

The phrase is a human-readable backup used to reconstruct wallet secrets under a defined format. BIP-39 is one common standard; SLIP-39 is another. The words are not a website login, and the hardware-wallet company does not hold a spare copy that can be emailed to you after an identity check.

Treat the complete backup as spending-sensitive material. A person who obtains it may be able to recover the wallet, subject to any separate passphrase or signing policy. The wallet’s assets are recorded on their networks, not stored as coins inside the device. Recovery restores the ability to derive keys and access those accounts.

The passphrase changes which wallet you reach

For BIP-39, the optional passphrase participates in seed derivation. Different passphrases produce different wallets. An empty passphrase also produces a wallet. A mistyped passphrase can therefore open an empty-looking wallet rather than trigger a “wrong password” message. Exact spelling, case and spaces matter; do not rely on a rough memory of the wording.

Trezor’s passphrase guidance stresses that losing the passphrase can mean losing access to that wallet. Changing what you type does not update a password on the existing wallet; it selects a different wallet. The term “extra word” is misleading because a passphrase need not be a single word from the recovery word list.

Plan for recovery, not just everyday unlocking

Use a non-destructive backup check to test the backup, and the storage checklist to review physical protection. Neither substitutes for passphrase access. If a device is unavailable, follow the exact maker’s official recovery instructions; lost or broken wallet options explain why replacement and recovery are different from starting a new wallet.