I would say it's even worse than that: breaking the passphrase is not difficult to an attacker, and basically impossible to the legitimate owner. The only thing a passphrase can do is help you lose funds

Replies (3)

John Smith's avatar
John Smith 5 months ago
it depends on the passphrase, it's just a password at the end of it. but it should be clearer on UI from wallets that prompt you to "make a passphrase" to "add security" that they should explain WTF it actually is. For anyone new that doesn't know it's a dead trap. For someone that knows but can't invest in a better setup (3-2 wallet) it fill an option that can work for some people. If anyone uses one it has to be strong, 16 characters using letter, numbers, symbols, upper and lower case. At minimum.
This makes no sense. A proper passphrase is not hackable, it has legitimate uses, like decoy wallets; it's an useful advanced feature that should be handled carefully..
acronym's avatar
acronym 5 months ago
A passphrase adds entropy to your seed. Two things need to be broken, not just one. (seed and passphrase too)