How to Set Up a Decoy Wallet for Plausible Deniability

A decoy wallet is a second, hidden wallet created from the same seed phrase using an extra passphrase (sometimes called a "25th word"), designed so that a person forced to hand over their crypto under threat can reveal a wallet holding a small, believable balance instead of their real funds.

This technique addresses a specific and well-documented risk in the crypto world often nicknamed the "$5 wrench attack" — the idea that no amount of cryptography can stop someone from being physically coerced into handing over their keys. A decoy wallet doesn't prevent the threat, but it gives a victim something to hand over that isn't everything they own.

How the hidden wallet mechanism works

Most modern hardware wallets and software wallets that follow the BIP39 standard support an optional passphrase in addition to your standard 12- or 24-word seed phrase. Technically, this passphrase isn't stored anywhere — it's combined mathematically with your seed words every time you enter it, generating an entirely different set of addresses.

• No passphrase entered → your "standard" wallet, with whatever you choose to keep there.
• Passphrase A entered → a completely different, hidden wallet with its own addresses and balances.
• Passphrase B entered → yet another wallet, and so on.

Because the passphrase isn't stored on the device, there is no way for an attacker to prove that a hidden wallet exists just by inspecting the hardware wallet or the seed phrase itself. If you enter the wrong passphrase (or none), the device simply derives a different — but perfectly valid-looking — wallet with no obvious sign that anything is missing.

Setting up a basic decoy structure

1. Set up your device normally and generate your standard seed phrase. Keep this recorded securely, as always.
2. Fund the standard wallet with a modest, plausible amount — enough that handing it over under duress looks believable, not suspiciously empty.
3. Enable the passphrase feature in your wallet's advanced or hidden-wallet settings.
4. Choose a passphrase you can memorize or store separately from your seed phrase (writing it on the same sheet of paper defeats the purpose).
5. Move your real holdings into the passphrase-protected hidden wallet.
6. Test the setup by powering off the device, restoring access with just the passphrase, and confirming the hidden wallet's balance shows up correctly.

Decoy wallet vs. other privacy setups

Approach	Protects against	Weakness
Standard wallet only	Nothing extra	Full balance exposed if coerced
Hidden passphrase wallet	Physical coercion, theft of unlocked device	Passphrase must be remembered/stored separately and securely
Multisig	Single point of failure, one-person coercion	More complex setup, coordination needed
Cold storage split across locations	Large-scale theft	Doesn't help in an immediate face-to-face threat

A hidden wallet is not a replacement for good self-custody hygiene — it's a layer on top of it. It works best alongside the practices covered in our guide to wallet security.

Important limitations to understand

A decoy wallet only works if your attacker doesn't already know the technique exists. Passphrase wallets are increasingly well known, so a sophisticated attacker may specifically demand "is there a passphrase?" Under genuine physical threat, personal safety should always come before protecting funds — no setup is worth risking harm over.

There's also a real risk of self-inflicted loss. If you forget your passphrase, or write it down somewhere that gets lost or destroyed, that hidden wallet's funds are unrecoverable — your seed phrase alone is not enough. Passphrases are case-sensitive and character-exact; a single typo derives a totally different wallet with no funds and no warning that anything went wrong.

Consider also that hidden wallets complicate estate planning. If you pass away or become incapacitated, your heirs may only find your seed phrase and never learn a passphrase exists. Anyone using this setup should document a recovery plan for trusted parties in advance, without compromising security in the meantime.

Combining decoy wallets with broader security

For most holders, a decoy wallet makes the most sense as one part of a layered defense. Pair it with:

• A multisig arrangement for larger holdings, so no single device or person can move funds alone.
• Geographic separation of backup materials.
• Minimal public disclosure of your holdings — the best defense against a coercion attempt is never becoming a visible target in the first place.

You can review the fundamentals of key management and custody models on our wallet data page, and read more about foundational concepts like seed phrases in our glossary.

Bottom line

A decoy wallet, created through a hidden BIP39 passphrase, gives crypto holders something plausible to hand over under coercion instead of everything they own. It's a genuinely useful layer of defense, but it depends on flawless setup, secure passphrase storage separate from your seed phrase, and a clear-eyed understanding that no technical measure replaces prioritizing your physical safety in a real threat.