Why do Trezor Safe 3, 5, and 7 use a 20-word seed phrase?

Why do Trezor Safe 3, 5, and 7 use 20-word Seed Phrases? This standard, championed by SatoshiLab, is called "SLIP39," an evolution of the previous standard SatoshiLab used in the world's first hardware wallet, "BIP39." BIP39, which we are all familiar with, is like a bible. It's the standard that transformed complex private keys into human-readable "12 or 24-word Seed Phrases," serving as the foundation of self-custody for many years.

However, as the value of Bitcoin increased, so did the nature of the risks. A question that many Bitcoiners started to worry about was, "Are we entrusting our life's wealth to a single piece of paper?" (Single Point of Failure). If that paper is lost, burned, or stolen, everything is gone.

That's the origin of SLIP39, a new standard designed to fix this vulnerability. Today, we will explore it in depth, from its history to its practical applications.

What is SLIP39? And where did it come from?

To understand SLIP39, we need to take a brief look back at its history.

1. The Same Creator as the Current Standard

You might not know that the BIP39 (Bitcoin Improvement Proposal 39) standard, used by all wallets worldwide, was proposed by SatoshiLabs, the creators of the Trezor hardware wallet.

However, after BIP39 was adopted globally, the SatoshiLabs team recognized a significant limitation: BIP39 was not designed for secure distributed backup. Dividing a 12 or 24-word Seed Phrase into parts using simple methods (like cutting the paper in half) was "dangerous and mathematically insecure."

2. The Birth of SLIP39

To address this problem, SatoshiLabs developed a new standard and named it SLIP39 (short for SatoshiLabs Improvement Proposal number 39).

SLIP39 is not just a simple software update; it applies a legendary mathematical theory called Shamir’s Secret Sharing (SSS), invented by Professor Adi Shamir (one of the creators of the RSA encryption used across the internet) in 1979, to cryptocurrency in a systematic way.

3. The Core Concept: From "Single Key" to "Secret Shares"

The definition of SLIP39 is a standard that allows us to create a Master Secret and then "split" it into multiple smaller pieces (called Shares), while setting a condition that specifies "how many pieces must be combined to reveal that secret."

• Old BIP39: It's like having one safe key. If a thief gets it, or you lose it = you're done.
• New SLIP39: It's like a Horcrux in Harry Potter (but in a good way). You split the key into 5 parts and specify, "You only need any 3 parts to open the safe." (Threshold 3-of-5)

This innovation means we no longer have to choose between "security" and "risk of loss." SLIP39 allows us to have both simultaneously.

How does SLIP39 work?

Differences from BIP39 (Regular Seed Phrase)

• BIP39 (Standard)

Creates a single Master Secret and converts it into 12 or 24 words (from a 2,048-word list).

• SLIP39 (Shamir)

Creates a Master Secret, but it is "never shown to us" as a single entity. Instead, the secret is put into a mathematical equation (Polynomial Interpolation) to be split into "Shares" (sets of words).

Structure of the Shares

SLIP39 uses a different word list from BIP39 (it uses a curated list of 1,024 words chosen for ease of writing and reading to minimize errors).

Each set of words (Share) has its own internal data structure:

• Identifier: Indicates which "group" this set of words belongs to (to prevent mixing Shares from Wallet A with Wallet B).
• Iteration Exponent: Data for encryption.
• Group Index & Threshold: Indicates how many sets are needed for recovery (e.g., "2 of 3").
• Share Value: The actual key data.
• Checksum: Verifies integrity.

This means you cannot guess missing words, and a single set of words does not contain enough information to trace back to the Master Secret, even with a supercomputer.

Why use it? In-depth Use Case Analysis

Why do we need to make things more complicated? The answer is "Redundancy without Compromise."

A. Solving "Geographic Risk"

Suppose you use BIP39 (12/24 words) normally:

• Stored at home -> House burns down = money lost.
• Stored at a bank -> Government seizes assets/bank fails = inaccessible.
• Carried on your person -> Robbed = game over.

With SLIP39 (assuming a 2-of-3 scheme):

• Share 1: Stored at home (in a fireproof safe).
• Share 2: Stored at parents' house in another province.
• Share 3: Stored in a bank safety deposit box.
• Scenario: House burns down (Share 1 lost) -> You drive to your parents' house (get Share 2) + go to the bank (get Share 3) = you can recover 100% of your assets.

B. Security against Physical Attack

If a thief points a gun at your head at home and forces you to open your safe, finding only one Share... the thief can't do anything. The thief would have to drag you to your parents or to the bank to get another part, which increases the risk for the thief and gives you more time to find a way out.

Comparing SLIP39 vs Multisig vs Passphrase

As Bitcoiners, we need to distinguish these three, as they solve different problems.

• SLIP39 is suitable for individuals who want to diversify the risk of losing their Seed Phrase.
• Multisig is suitable for organizations or individuals who require maximum security without trusting a single hardware brand or person.
• Passphrase is suitable for hiding funds and managing wallets.

Precautions to know before using SLIP39

Before you reset your Trezor and reconfigure it, read this carefully.

• You must create a new wallet only (Wipe & New).

You cannot convert your existing 24-word seed to SLIP39. You must reset the device > select Shamir Backup > get a new address > transfer Bitcoin from the old wallet to the new wallet (incurring fees and mindful of Privacy/UTXO Management).

• Vendor Lock-in (Device Risk)

Currently, wallets supporting SLIP39 recovery are limited (primarily Trezor Model T, Safe 3, Safe 5, Safe 7).

• Scenario: If Trezor fails and the company goes out of business, how will you recover your funds?
• Solution: You would need to use a compatible software wallet (such as Sparrow Wallet or newer versions of Electrum) for recovery. Typing a seed phrase into a computer carries risks (Hot Wallet), but it can be done in an emergency.
• Complexity in Setup

Writing down 20 words across 3 sets (totaling 60 words) takes considerable time and patience. Do not make a single mistake.

• Word List is Different

Do not mistakenly use a BIP39 seed phrase list (with numbers 1-2048) to check words, as SLIP39 uses a different set of vocabulary.

Conclusion

SLIP39 is an excellent innovation for "Solo Custodians" (individuals who store their own funds) who want to elevate their security beyond a single piece of paper, without the headache of setting up Multisig.

Recommendations

• If you hold a small amount of Bitcoin or are just starting out, the BIP39 standard (12/24 words) + Passphrase is more than secure enough.
• If the value of your portfolio starts to reach a point where "losing it would be devastating" and you have at least 2-3 separate locations to store your Seed Phrase, the SLIP39 standard (2-of-3 setup) is the best sweet spot.

Finally, always remember that "Complexity is the enemy of security." Don't use a system that you yourself can't even explain, because one day you might be the one to lock yourself out of your own funds.