What Is an HD Wallet, in One Sentence?
A hierarchical deterministic (HD) wallet generates an effectively unlimited tree of addresses from one random seed phrase, and can re-derive every address — across multiple coins and accounts — from those same 12 or 24 words. That single backup is the whole point, and it is defined by the BIP32, BIP39 and BIP44 standards.
What a Crypto Wallet Actually Is
The word "wallet" is a misleading metaphor. Your crypto does not live inside a wallet the way cash lives inside a leather one. Crypto lives on the blockchain — a public ledger that records who owns what. What a wallet actually stores is the private key that proves you own a particular balance and authorises you to move it.
Think of a wallet as a keychain, not a purse. The blockchain holds the money. The wallet holds the key to it.
The Problem With the Old Way
Before 2012, most Bitcoin wallets generated addresses one at a time, randomly. Each address had its own independent private key. If you wanted to use five addresses, your wallet managed five separate keys. If you wanted a hundred, it managed a hundred.
This created a painful backup problem. Every time you generated a new address, you had to back up your wallet file again — because the new key was not connected to any of the old ones. Forget to back up after generating a new address, receive a payment to that address, and then your hard drive fails? The funds were gone.
Hierarchical deterministic (HD) wallets solved this permanently.
The Seed Phrase: One Backup to Rule Them All
An HD wallet starts with a single random number — a large one, 128 to 256 bits of entropy. This number is encoded into a sequence of words from a fixed 2048-word dictionary (defined in BIP39), producing what is commonly called a seed phrase, recovery phrase, or mnemonic.
A typical 12-word seed phrase looks like this:
witch collapse practice feed shame open despair creek road again ice leastThis sequence of words is deterministic — given the same words in the same order, the wallet will always derive the exact same set of keys and addresses. It does not matter what device you use, what software you use, or when you do it. The math is the math.
Write down your seed phrase. Store it offline. Never photograph it. Never type it into any website. This is the only backup you will ever need — and losing it means losing everything.
Because this one phrase controls everything, the way you store it is the entire security model. See our guide to 7 crypto wallet security mistakes that lead to lost funds before you write yours down.
From Seed Phrase to Master Key
The wallet runs the seed phrase through a one-way hashing function (PBKDF2 with HMAC-SHA512) to produce a 512-bit master seed. From that seed, it derives a master private key and a master chain code. Together, these two form the root of the entire key hierarchy.
The chain code is the piece that makes the hierarchy possible — it is mixed into every child key derivation step, ensuring that each level of the tree produces unique, non-repeating results.
The Tree Structure: How One Seed Becomes Thousands of Addresses
From the master key, the wallet derives child keys. From each child key, it can derive grandchild keys. This creates a tree structure — which is why it is called hierarchical.
The path through the tree is written as:
m / purpose / coin / account / change / indexFor example, the first Bitcoin receive address under the most common standard (BIP44) is at:
m/44'/0'/0'/0/0The second is at m/44'/0'/0'/0/1, the third at m/44'/0'/0'/0/2, and so on. Each path maps to exactly one address, and every address can be re-derived from the original seed
phrase at any time. Because the index can run into the billions, "thousands of addresses" is really an understatement — one seed phrase can generate effectively unlimited addresses.
This is what deterministic means. Given the same seed, the tree is always identical.
Multiple Coins, Multiple Accounts, One Backup
The hierarchy is designed to handle multiple cryptocurrencies from a single seed. Bitcoin lives at coin type 0, Ethereum at coin type 60, and so on (defined in SLIP44). Each coin has its own subtree, completely isolated from the others.
You can also have multiple accounts within a single coin — useful for separating personal funds from a business, or keeping different projects isolated. All of them are recoverable from the same 12 or 24 words.
For merchants, this means:
- One seed phrase backs up your entire crypto setup across all currencies.
- You can separate a receiving account (used by a payment processor) from your cold storage account — same wallet, different derivation path, funds do not mix.
- Switching devices or wallet software is non-destructive — restore from seed phrase and everything is there.
Single-Key vs HD Wallets at a Glance
| Old single-key wallet | HD wallet (BIP32/39/44) | |
|---|---|---|
| Backup | Re-back-up after every new key | One seed phrase, forever |
| Addresses | Each generated independently | Unlimited, derived from one seed |
| Multi-coin | Separate wallet per coin | All coins from one phrase |
| Address reuse | Encouraged by friction | Fresh address per payment is easy |
| Watch-only sharing | Not possible cleanly | Share an xPub, keep keys private |
The xPub Connection
At each account level in the tree, the wallet can export an extended public key (xPub) — a public key plus chain code that allows anyone to derive all the child receive addresses for that account, without access to the private key.
This is the mechanism non-custodial payment processors use. You give the processor your xPub for a specific account. It generates fresh addresses for each order. Your funds land directly in your wallet. The processor never had the ability to move them. For the full breakdown, read what an xPub key is and how it generates unlimited addresses.
The xPub only covers one branch of the tree. Everything above the account level, including the master key and the seed phrase, remains entirely private.
What the Standards Actually Are
HD wallets are built on a stack of Bitcoin Improvement Proposals:
- BIP32 — defines the core hierarchical derivation algorithm
- BIP39 — defines the seed phrase wordlist and encoding standard
- BIP44 — defines the derivation path convention (
m/44'/coin'/account'/change/index) - BIP84 — same structure but for native SegWit (Bech32) addresses
Any wallet that implements these standards will produce the same addresses from the same seed phrase. This is why you can restore a Ledger backup in Trezor Suite, or a MetaMask seed phrase in any other BIP39-compatible wallet.
The One Rule
Everything in an HD wallet traces back to the seed phrase. The security model is simple: whoever has the seed phrase owns the funds. No password reset. No customer support. No recovery option. This is the practical heart of self-custody.
Write it down on paper or steel. Store it somewhere physically secure. Do not store it in a photo, a note-taking app, a cloud drive, or an email. That is it. That is the whole security model — and it is both its greatest strength and the one thing that cannot be recovered from if you get it wrong.
Want to put an HD wallet to work? A non-custodial gateway derives a fresh address per order straight from your xPub — on Shopify or WooCommerce. Create a free account to start.
Frequently Asked Questions
How many addresses can one seed phrase generate?
Effectively unlimited. Each derivation index produces a new address, and the index space runs into the billions per account — across multiple accounts and coins, all from one seed phrase.
What is the difference between a seed phrase and a private key?
The seed phrase is the master backup that derives every private key in your wallet. A private key controls a single address. Lose the seed phrase and you lose access to all of them at once.
Can I restore an HD wallet in different wallet software?
Yes, as long as both follow the same BIP standards. A BIP39 seed phrase will regenerate the same addresses in any compatible wallet, which is why you can move a Ledger backup into Trezor Suite or another app.
Is an HD wallet safe to use for accepting payments?
Yes. You can hand a non-custodial processor only your xPub, which lets it generate receive addresses without ever touching your private keys or being able to spend your funds.
What is the difference between 12-word and 24-word seed phrases?
Both are secure for practical purposes. A 12-word phrase encodes 128 bits of entropy and 24 words encode 256 bits. The extra words add security margin but are not required for everyday use.
What happens if I lose my seed phrase?
If you have no other copy and no wallet still loaded, the funds are unrecoverable. There is no reset or support line in self-custody, which is why you back the phrase up offline in more than one location.