Recovery Phrase: 12 Words That Get You Back In

Your sigil. recovery phrase is 12 words, drawn at random from the 2,048-word BIP-39 list. It is the backup key to your vault: if you forget your sign, the phrase is how you get back in. We do not keep a copy, so without the sign or the phrase, your photos cannot be recovered — by you, by us, or by anyone. Write it down on paper and store it somewhere safe and offline.

Why there is a recovery phrase at all

sigil. has no account and no server. Your photos are encrypted with a key derived from the sign you draw (see pattern encryption), and that sign is never stored. That design is what keeps your photos private — and it means there is no "Forgot password?" link. There is nobody to email a reset to.

People do forget signs, especially ones they use rarely. The recovery phrase is the answer to that, without reintroducing a server or a company that holds your keys.

Why words, and why the BIP-39 list

The BIP-39 word list was created for cryptocurrency wallets, and it has properties that make it a good fit anywhere a human must write down a key:

• 2,048 common English words, chosen so that none is too similar to another.
• The first four letters identify each word, so handwriting mistakes are easier to correct.
• Widely published and audited, so there is nothing proprietary about it.

sigil. uses the list for those properties only. Your 12 words are not a crypto wallet seed and will not work in a wallet app. Our general explainer, what is a recovery phrase, goes into the background.

How strong are 12 words

Each word is chosen at random from 2,048 options, which is 11 bits of randomness per word. Twelve words give about 128 bits (132, minus a 4-bit checksum). For comparison, a random 6-digit PIN has about 20 bits, and a typical hand-drawn sign has far less than 128. The phrase is not the weak point; where you keep it is.

How to store it

Do:

• Write it on paper with the words numbered in order.
• Store it where you keep important documents — a locked drawer, a safe, a sealed envelope with your passport.
• Consider a second copy in another location you trust, such as with a family member, if losing access would be serious.
• Check it once after writing it down, before you rely on it.

Avoid:

• Screenshots — they land in your photo library and may sync to iCloud.
• Notes apps, email, messaging, cloud drives — anything that syncs or can be accessed with your passwords.
• Keeping it with the phone, for example in the phone case. If the phone is stolen, the phrase goes with it.

The same principles apply to crypto seed phrases; our guide on storing a seed phrase safely covers additional options such as metal backups.

What the phrase protects — and what it does not

• Protects against forgetting your sign. This is its job.
• Does not bring back erased vaults. If self-destruct erased them, or you deleted the app or its data, the encrypted data is gone and there is nothing left to unlock.
• Does not replace a backup. sigil. is local-first and has no cloud backup yet. If your phone is lost or destroyed, the phrase cannot restore data that existed only on that phone. See lost or stolen phone.
• Is as powerful as your sign. Anyone who has your phrase and access to your phone can get in. Treat it with the same care as the sign itself.

Common mistakes

• Writing it down "later." Do it when the phrase is shown. Later rarely comes, and the day you need it, it is too late.
• Saving a photo of it "just for now." A screenshot in Photos may sync to iCloud and show up in search, since iOS can read text in images.
• Storing it in the same vault. A phrase locked inside the vault it protects cannot help you.
• Changing word order or spelling. Copy it exactly, numbered, in the order shown.

A quick routine

1. When sigil. shows your phrase, write all 12 words on paper, in order.
2. Read them back and compare, word by word.
3. Store the paper offline, away from the phone.
4. Never photograph it, type it into another app, or send it to anyone.
5. If you think someone has seen it, treat your vault as exposed and set up fresh protection for your most sensitive photos.