> For the complete documentation index, see [llms.txt](https://docs.leather.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.leather.io/wallet-and-security/secure-secret-key.md).

# Secure Your Secret Key

Store your Leather Secret Key safely, fix errors when you enter it, and know how it differs from your password.

A new Leather wallet comes with a 24-word Secret Key. Other wallets call it a seed phrase, mnemonic or recovery phrase. Anyone who has the Secret Key controls the wallet and every account in it. Store it where only you can reach it.

## Secret Key and password

|                   | Secret Key                          | Password                                                      |
| ----------------- | ----------------------------------- | ------------------------------------------------------------- |
| What it does      | Restores the wallet on any device   | Unlocks Leather on one browser                                |
| Who creates it    | Leather, when you create the wallet | You                                                           |
| Can it be changed | No                                  | Yes, by signing out and restoring with the Secret Key         |
| If you lose it    | The wallet cannot be restored       | Restore the wallet with the Secret Key and set a new password |

Leather asks for the Secret Key when you set up Leather on a new browser, or after you sign out. Back it up the moment Leather shows it. You can view it again later only while you can still open the wallet. See [View Secret Key](/get-started/view-secret-key.md).

## How to store it

The [Cryptocurrency Security Standard (CCSS)](https://cryptoconsortium.org/cryptocurrency-security-standard-documentation/details/) ranks key storage from Level I to Level III. Leather recommends at least Level II:

* Back up each Secret Key separately.
* Store the backup away from where you use the wallet, for example in another room from your computer.
* Store it where other people cannot reach it, such as a safe or a lock box.
* Use a seal or another way to see whether someone opened the backup.

Leather is self-custodial. Leather does not store your Secret Key and cannot recover it. If malware or a fake website steals it, nobody can reverse what the thief does with it. Enter your Secret Key only in Leather.

## If Leather rejects your Secret Key

Leather Secret Keys use the standard BIP-39 English word list. You can check each word against [the BIP-39 list](https://github.com/bitcoin/bips/blob/master/bip-0039/english.txt). When Leather does not accept a key, check that:

* every word is in lowercase
* the words are separated by single spaces
* there are no numbers or special characters
* the words are in the right order

## Key length and passphrase

Leather accepts any valid BIP-39 Secret Key of 12, 15, 18, 21 or 24 words. The sign-in form shows 12 or 24 fields. For another length, paste the whole key from the first field.

The extension has no field for a BIP-39 passphrase, sometimes called the 25th word. A wallet created elsewhere with a passphrase does not open in the extension. Move its assets to a wallet without a passphrase first. The mobile app has a "BIP39 passphrase" option when you recover a wallet.

## Related

* [What is a Recovery Phrase?](/get-started/recovery-phrase.md)
* [Recover Secret Key with Backup Data](/get-started/recover-secret-key.md)