密码短语：Ledger 的高级安全功能

Ledger signers keep your private keys offline and require physical confirmation for every transaction, which reduces your exposure to remote attacks. But what if someone learns about your portfolio or confronts you in person?

This is where Ledger Passphrase comes in. The passphrase is an advanced security feature that takes security on your Ledger signer to a new level. 

In essence, it adds extra security to your digital asset by adding a word of your own choosing to your already existing recovery phrase that unlocks a separate set of accounts. Let’s take a closer look at how passphrases work, what they do, and some best practices for using one.

Ledger 密码短语介绍

Your 24-word Secret Recovery Phrase is the backup to all of your crypto assets. It is necessary that you store it securely and never expose it over a smartphone, computer or other device that can connect to the internet. 

If someone manages to get a hold of your set of 24 words, they can steal your digital assets associated with that Secret Recovery Phrase. The Ledger Passphrase feature lets you covertly unlock a separate set of unconnected accounts.

This is an advanced feature that allows you to add an additional word to your recovery phrase. For this reason, it’s also commonly referred to as the 25th word. 

Unlike the regular Secret Recovery Phrase generated during initial device setup, you get to choose the 25th word. There are no limits on which password you pick. The only limitation is using a maximum of 100 characters. The passphrase is case-sensitive and can include numbers and symbols. The longer and more complex the passphrase, the more secure it is, but be extra careful in making the offline record.

Setting a passphrase does not move your existing crypto. It opens a separate set of accounts with brand-new addresses, and those accounts start empty. Your original funds stay in your standard accounts, which anyone with your 24-word Secret Recovery Phrase and primary PIN can still reach. To place assets behind your passphrase, you have to send them to the addresses associated with the newly created accounts. Even an account with the same name, such as Ethereum, has a completely different address once a passphrase is active.

使用 Ledger 密码短语：主要优势

Firstly, setting a passphrase adds an additional security layer, which means that even if someone has your 24-word Secret Recovery Phrase they would not be aware of the separate accounts protected by the 25th word.

Someone would need both your 24 words and your Ledger Passphrase, the 25th word, to reach those segregated crypto assets.. Think of it like creating a decoy account. If they only have your 24 words, they can only access your regular accounts. This is why the accounts managed with a Ledger Passphrase are often called hidden accounts.

Not only does it create another layer, it also adds more randomness to your backup. Now, the standard 24-word Secret Recovery Phrase is already extremely random and highly secure because there are 115,792,089,237,316,195,423,570,985,008,687,907,853,269,984,665,640,564,039,457,584,007,913,129,639,936 (that’s 115.79 quattuquindecillion) possible combinations; that’s more than the number of stars in the observable universe!

This number is so big that it’s nearly impossible for two people to ever have the same recovery phrase by chance.

These words are, however, from a set list known as the BIP39 word list. 

Now, with a 25th word, you push that already huge number of combinations even higher.

这种方式也为密码组合增添了人为因素。 您可以添加自行选择的随机助记词，而不必再只依赖 24 个助记词。

Although, only using a recovery phrase created by a Ledger signer is highly secure as well. Ledger signers generate your recovery phrase using a certified True Random Number Generator (TRNG) inside the Secure Element chip. A passphrase adds plausible deniability on top. Let us look at why that matters.

合理的否认

任何有价值的事物都是这样，总会有人想尽一切办法窃取它们。 虽然在加密货币世界中这种情况鲜有发生，但很遗憾看到，还是有加密货币财富的拥有者成为了抢劫、绑架和威胁的目标。

在这种情况下，Ledger 密码短语能为加密货币提供的保护有限。

Plausible deniability is the ability to convincingly deny something, even when it is not the whole truth. With a passphrase tied to your device, you keep a way to stay in control if a situation turns tense.

With a passphrase, you can make someone believe they have full access to your crypto assets.

For example, someone could pressure you to hand over your recovery phrase or unlock your Ledger signer. With its usual setup, that only reveals your regular accounts. If you keep a small balance on your regular accounts while most of your crypto sits on hidden accounts, this can be convincing in a difficult moment.

For extra protection, you can use multiple hidden accounts with different passphrases. This helps if an attacker knows about the Ledger Passphrase feature.

The value of passphrases was illustrated by the Coldcard vulnerability in July 2026 where a firmware bug had weakened how some devices generated seed phrases leading to significant user losses. In that scenario a strong user-generated 25th word  might have mitigated the weakness of Secret Recovery Phrases. Read analysis of how the Coldcard incident happened from Ledger CTO, Charles Guillemet.

在新一代 Ledger 设备上使用密码短语

Compared to previous gen Ledger signers, using the passphrase feature on a Ledger Nano™ Gen 5, Ledger Flex™ or Ledger Stax™ offers distinct advantages due to their larger, more user-friendly Secure Touchscreens. 

更大的显示屏让您更轻松地浏览和管理密码短语的输入，减少在输入或设置密码短语时出错的风险。

Smaller screens can sometimes make entering complex passphrases a bit more cumbersome and prone to errors. The larger screens also enhance overall usability, allowing for clearer, more intuitive interactions and a smoother experience when managing multiple accounts or passphrases. 

See this guide on How to set up a passphrase.

在您的 Ledger 设备上设置密码短语

Quite a few wallets allow for a passphrase, but some require you to enter it on your computer, which can expose it to online attacks.

如果使用 Ledger，您可以直接在 Ledger 签署设备上输入密码并启用隐藏账户， 这可以防止密码短语落到他人手中。

How to Set Up Advanced Ledger Passphrase | Official Step-by-Step Guide

Option 1: Set A Temporary Passphrase

You have two options for setting up a Passphrase with Ledger. 

One way is to enter it manually on your device every time you want to access your hidden accounts; this is called the temporary passphrase.

With this option, the passphrase only stays active while your Ledger is powered on. Once the device turns off, it’ll return to accessing your regular accounts. To use your hidden accounts again, you’ll need to re-enter the temporary passphrase.

Suppose you’re traveling or using your Ledger in a shared environment, this is a good option to manage your assets if you’re looking for extra security on a temporary basis. 

However, it’s essential to remember or securely back up your temporary passphrase because Ledger does not store it anywhere. If you lose or forget it, your hidden accounts become inaccessible.

Option 2: Set A Passphrase Connected To A Secondary PIN Code

另一种选项是将您选择的密码短语关联到辅助识别码。

When you choose this option, you first create a passphrase directly on your Ledger signer. Next, you select a secondary PIN code for your Ledger signer. After this, each time you turn on your device, you can choose between entering your normal PIN code or your secondary PIN code.

If you enter your secondary PIN code, you’ll gain access to your passphrase-protected accounts.

例如：

• 常规识别码：1653 → 普通账户
• 辅助识别码：8530 → 隐藏账户

您还可以阅读此文，详细了解如何使用 Ledger 签署设备的密码短语。

Ledger 密码短语最佳实践

A passphrase is considered an advanced feature for a few simple reasons. Firstly, you must remember your passphrase perfectly, and your secondary pin if you choose that setup. Mixing up just a single character would mean losing access to the separate set of accounts. Even changing one character from uppercase to lowercase will do this.

If you don’t remember your passphrase character for character, you cannot gain access to the crypto you managed with it. As such, it’s key that you enter it correctly the first time you set it up and remember it perfectly. And if you use a secondary pin, after three incorrect attempts your device will be reset, requiring you to recover your accounts from a backup of your Secret Recovery Phrase.

密码短语的复杂性

要记住，并非所有密码短语都同样安全。 更长、更复杂的密码短语（例如混合数字、字母和符号的字符串）能为账户提供更强的保护。

Your Ledger Passphrase can be as long as 100 characters and you can choose whether you want to use capitalized characters, numbers and/or signs. But remember, you should only keep an offline record, so noting every character of your Passphrase correctly is of the utmost importance.

最佳方法是将其视为密码，尽可能复杂一些，而不要直接使用单词。

例如：

• Passphrase 1: password → Very insecure due to short length, no random characters or caps.
• Passphrase 2: IReallyLikeMyBitcoins → A bit more secure: longer and uses caps, but still uses common English words and no numbers or signs. 
• Passphrase 3: H05!xp4e2i6dAnV?esRjfap953nxZprsi495nAASF5n,!f01.?d → Even more secure: lengthy, wide mix of caps, numbers and signs and does not use actual words. 

虽然密码短语 3 最为安全，但它也很难让人记住。 最佳实践建议使用既复杂又便于您自己记忆的密码短语。

You could make it a form of cryptographic puzzle. For example: Iret3LSDtUBgm! concerns the first letters and special characters/numbers of the sentence “I really enjoy the 3 Ledger Stax Devices that Uncle Bob gave me!”.

Your Passphrase is sensitive information. As such, we recommend treating it with the same kind of care as you would treat your Recovery Phrase:

• 切勿告诉任何人您的密码短语，Ledger 绝不会向您索要它
• 切勿在计算机、智能手机或其他联网设备中输入您的密码短语
• Take extreme care when writing it down, using clear non-cursive characters

您可以点此详细了解这些最佳实践。

关于密码短语的常见问题解答

密码和密码短语有什么区别？

密码较短，通常用于单个账户；而密码短语更长、更复杂，由于其长度以及字符、数字和符号组合多样性，安全性也更高。

如果忘记了 Ledger 密码短语会怎样？

If you forget your passphrase, access to the associated hidden wallet is permanently lost, as Ledger does not store or back up passphrases. Store your passphrase securely and make sure you can recall it accurately.

我可以在现有 Ledger 设备上添加密码短语吗？

Yes, you can add a passphrase to an already set-up Ledger signer. This will create a new set of accounts linked to the passphrase, separate from your original accounts. Store the new passphrase securely, as it cannot be recovered if lost.

我的密码短语会被猜到或被破解吗？

A passphrase is much harder to crack than a regular password because of its length and complexity.

转变：从硬件钱包到签署设备

加密货币可能最初是一个大胆的实验，但随着技术和用户体验的迅速发展，其采用率不断提高；然而，用来描述它的语言仍然停留在初期阶段。

我们曾称我们的设备为“硬件钱包”，错误地标示了安全硬件的角色，并模糊了软件（Ledger Wallet）的角色。 在此过程中，用户被落下了。

人们曾认为：

• 该价值被存储在设备上（实际上并不是）。
• 如果您丢失了设备，就失去了自己的资产（实际上您并没有失去资产）。
• 设备本身就是终点（其实并不是）。
• 认为那 24 个助记词曾经是只有技术精通的用户才能应付的负担（现在不再是这样了）。

这些不仅仅是误解。 更是采用的阻碍因素。 因此，在 Ledger，我们相信清晰化概念对于下一阶段的采用至关重要。

我们正在改变阐述产品的方式。 借由这种方式，改变人们对数字所有权本身的理解。

硬件钱包 → 签署设备

Ledger 设备并不存储任何价值。 而是签署交易。 批准意图。 核实身份。 设备并不是保险库，而是您身份与在线活动之间的安全桥梁。 设备不仅仅持有密钥。 更能帮助您信任自己。

我们现在称其为签署设备，因为这才是它实质的用途。

在人工智能日益发展强大的世界中，人类存在的证明比以往任何时候都更为重要。签署设备不仅仅是一个安全设备，更是您个人的加密学证明。 它为您拥有、授权和保护自己的数字生活提供了安全的基础，无需依赖任何其他人。 从发送交易到签署合约或验证凭据，签署设备可确保只有您本人才能提供数字同意——这就是身份证明。签署设备和 Ledger Wallet 共同重新定义了数字所有权，清晰、安全且不妥协。