{"id":2214,"date":"2026-10-07T06:57:09","date_gmt":"2026-10-07T06:57:09","guid":{"rendered":"https:\/\/neverlosebitcoin.com\/?p=2214"},"modified":"2026-10-07T06:57:11","modified_gmt":"2026-10-07T06:57:11","slug":"create-decoy-wallet-with-passphrase","status":"publish","type":"post","link":"https:\/\/neverlosebitcoin.com\/de\/create-decoy-wallet-with-passphrase\/","title":{"rendered":"How to Create a Decoy Wallet with a Passphrase"},"content":{"rendered":"

How to Create a Decoy Wallet with a Passphrase<\/h1>\n

You can create a decoy wallet with a passphrase by adding a second, weaker passphrase to the same seed phrase, moving a small amount of bitcoin into it, and keeping your real savings behind a stronger secret passphrase. If someone forces you to unlock your wallet, you hand over the decoy passphrase and they see a wallet with a little bitcoin in it, never knowing a second, hidden wallet exists. This is one of the most practical defenses against physical coercion attacks, and it costs you nothing but a few minutes of setup.<\/p>\n

This guide explains exactly how a decoy wallet works, how to set one up on your own hardware wallet, what to put in the decoy so it looks convincing, and the mistakes that turn a decoy into a liability. If you are new to the concept, start with what is a passphrase (25th word) and should you use one<\/a>, then come back here for the decoy setup.<\/p>\n

What a decoy wallet with a passphrase actually is<\/h2>\n

A BIP39 passphrase extends your seed phrase: your seed phrase plus passphrase A generates one wallet, and your seed phrase plus passphrase B generates a completely different wallet. There is no error message for a “wrong” passphrase. Every passphrase you type opens a valid wallet, and most of them are empty. That property is what makes a decoy possible.<\/p>\n

A decoy wallet is a second passphrase on your seed that you plan to reveal under pressure. The attacker sees a real wallet with a real balance and real transaction history, concludes you have given up everything, and stops looking. Your actual savings sit behind a different passphrase that the attacker never learns exists. Plausible deniability is the whole trick: nobody can prove how many passphrases you used.<\/p>\n

Why a decoy beats a single passphrase wallet<\/h2>\n

A single passphrase wallet is strong protection against theft of the seed phrase, but it is weak against coercion. If a burglar has your metal backup and demands the passphrase, “I never used one” is not convincing when your wallet obviously requires one to open. A decoy gives you something real to surrender, which ends the confrontation sooner and with less violence.<\/p>\n

The decoy also protects you against the weaker but more common threat: someone who finds your backup and guesses. A finder who restores the seed without a passphrase lands on an empty or decoy wallet and assumes there is nothing worth stealing. See best hiding spots for a seed phrase that burglars miss<\/a> for how backups get found in the first place, and the broader coverage at Never Lose Bitcoin guides<\/a>.<\/p>\n

How to create a decoy wallet with a passphrase, step by step<\/h2>\n

First, verify your existing backup. Before adding anything new, make sure your seed phrase backup restores correctly, following how to test your seed phrase backup without risking funds<\/a>. A decoy built on a broken backup protects nothing.<\/p>\n

Second, create your real passphrase. Pick a long, random, memorable phrase you will never reuse anywhere else. Write it down and store it separately from the seed phrase, ideally in a different location, because a forgotten passphrase loses the wallet permanently.<\/p>\n

Third, move your savings into the real-passphrase wallet. Send your bitcoin to an address from the seed plus real passphrase, and confirm the balance on a second device or wallet software before doing anything else.<\/p>\n

Fourth, create the decoy passphrase. Pick something plausible but different, for example a short phrase you could have plausibly chosen years ago. Open the seed plus decoy passphrase wallet, note its first receive address, and send a believable decoy balance to it. Enough to look like a real person’s main wallet, not enough to hurt if lost.<\/p>\n

Fifth, rehearse the reveal. Practice opening the decoy wallet on your device the way you would under stress: seed restored, decoy passphrase entered, balance shown. Under pressure you will be shaking, so the motion needs to be automatic. Then store the decoy passphrase somewhere you can reach it even while panicking, separate from the real one.<\/p>\n

What to put in the decoy so it looks real<\/h2>\n

A convincing decoy wallet has three things: a believable balance, believable history, and believable context. A wallet created yesterday with one deposit looks staged. Give the decoy a few transactions spread over time, even small ones, so the history looks lived in. Use the decoy wallet occasionally for real small spends if you want the story to hold under inspection.<\/p>\n

The balance matters more than anything. Too little and the attacker assumes you are hiding more. Too much and you are funding their robbery. A reasonable decoy looks like what an average person in your position would plausibly hold: a fraction of your real stack, plausibly your whole position if you are not obviously wealthy. Do not overthink the exact number; consistency of the story beats precision.<\/p>\n

Label nothing on the device that hints at a second wallet. Some wallets let you name accounts or tag addresses; keep decoy labels boring and do not create an account named “real savings” next to one named “decoy.” The attacker’s confidence comes from seeing exactly one plausible setup.<\/p>\n

The mistakes that kill a decoy wallet<\/h2>\n

The most common mistake is storing the real passphrase with the seed phrase. If the attacker finds both together, your decoy is a speed bump. The real passphrase must live somewhere the seed phrase does not, and the decoy passphrase must live somewhere you can produce quickly under pressure.<\/p>\n

The second mistake is making the decoy passphrase too weak or too famous. A passphrase like “password123” signals that you are handing over a sacrificial wallet, which invites more pressure, not less. It should look like an honest passphrase you would have chosen: plausible length, plausible words, plausible to you.<\/p>\n

The third mistake is never testing the real wallet. If you cannot restore seed plus real passphrase from your backups on a fresh device, you do not have a decoy strategy, you have a locked box. Test both wallets once, then leave them alone.<\/p>\n

The fourth mistake is telling anyone. A decoy only works if exactly one person knows it exists: you. Not your friends, not your partner, not a forum post. This is also where inheritance gets tricky: your heirs need the real passphrase, not the decoy, and what happens to your bitcoin if you die without sharing the seed phrase<\/a> explains why that distinction must be written down for the right people, separately.<\/p>\n

Schnelle Antworten<\/h2>\n

Can someone prove I have more than one passphrase?<\/strong> No. Passphrases are not stored anywhere on the seed or the device; each one just derives a different wallet. There is no counter, no list, and no way to audit how many wallets a seed has generated. That is the source of plausible deniability.<\/p>\n

Should the decoy passphrase be on the same seed as my real wallet?<\/strong> Yes, that is the standard setup. Same seed, two passphrases, two wallets. The alternative, a second seed phrase entirely, doubles your backup burden and offers no extra deniability.<\/p>\n

What if the attacker demands the seed phrase itself?<\/strong> Hand over the seed phrase and the decoy passphrase together. The seed alone restores the same empty wallet the decoy restores with its passphrase, so giving both is consistent and ends the search. Never reveal that a second passphrase exists.<\/p>\n

Do I need a hardware wallet for a decoy?<\/strong> Any wallet software that supports BIP39 passphrases can do this, including most hardware wallets and desktop wallets like Sparrow. A hardware wallet is still the safer place to type passphrases, since malware on a computer can watch what you type.<\/p>\n

Weiterlesen<\/h2>\n