Duress Wallet

What Is a Duress Wallet?

A duress wallet (also called a decoy wallet or hidden wallet) is a secondary cryptocurrency wallet designed to be surrendered when the owner is physically threatened or coerced. The concept addresses a fundamental limitation of cryptographic security: no amount of encryption protects against someone who forces you to hand over your credentials at gunpoint.

The mechanism relies on BIP-39's optional passphrase, sometimes called the "25th word." A single seed phrase can generate an unlimited number of completely independent wallets, each accessed by a different passphrase. Users keep a small, believable balance in the default wallet (no passphrase) and store their primary holdings behind a secret passphrase. If forced to reveal their seed phrase, they show the decoy wallet and surrender its contents.

The term gained prominence alongside the rise of physical attacks targeting cryptocurrency holders. Documented wrench attacks have surged in recent years, with over 260 incidents recorded since 2014 according to Jameson Lopp's physical-bitcoin-attacks tracker. The duress wallet is one layer in a broader self-custody security strategy.

How It Works

Duress wallets are built on the key derivation process defined in the BIP-39 specification. Understanding this process reveals why the technique provides plausible deniability.

BIP-39 Passphrase Derivation

When generating a wallet from a mnemonic, BIP-39 uses the PBKDF2-HMAC-SHA512 key derivation function:

Seed = PBKDF2(
  password: mnemonic_sentence,
  salt:     "mnemonic" + passphrase,
  iterations: 2048,
  output:   512-bit seed
)

The passphrase is concatenated directly into the salt. When no passphrase is provided, the salt is simply the string "mnemonic", producing the default wallet. Any other string produces a completely different 512-bit seed, which in turn generates a different derivation path tree, different private keys, and different addresses.

Two critical properties make this suitable for duress scenarios:

• Every passphrase is valid. There is no checksum or validation mechanism. The wallet software cannot distinguish a "correct" passphrase from an "incorrect" one: each simply produces a different wallet.
• Derivation is one-way. Given a seed phrase and one passphrase, there is no mathematical method to determine whether other passphrases are in use or what they might be.

Setting Up a Duress Wallet

The typical setup involves three tiers:

1. Generate or use an existing seed phrase (12 or 24 words)
2. The default wallet (empty passphrase) becomes the decoy: fund it with a small but believable balance and maintain occasional transaction activity
3. Create one or more passphrase-protected wallets for primary holdings: use a strong, unique passphrase that you store separately from the seed phrase
4. Optionally, create an intermediate wallet with a moderate balance behind a weaker passphrase, providing a second layer of deniability

The passphrase is never stored on the device. Users must enter it each time they access the hidden wallet, which means the passphrase must be memorized or backed up independently from the seed phrase.

Hardware Wallet Support

Major hardware wallets support BIP-39 passphrases, though implementations vary significantly in their anti-coercion features.

Trezor

Trezor implements the BIP-39 passphrase as a "Hidden Wallet" feature. After PIN unlock, Trezor Suite prompts for an optional passphrase. The passphrase is never stored on the device and must be re-entered each session. Passphrases can be up to 50 characters, are case-sensitive, and treat spaces as characters.

Ledger

Ledger offers two passphrase modes. In temporary mode, the passphrase works like Trezor's: entered manually each session and never stored. Ledger also provides a convenience feature where a passphrase can be attached to a secondary PIN code stored in the device's secure element. The primary PIN opens the default wallet; the secondary PIN opens the passphrase-protected wallet. This is more convenient but means the passphrase is stored (encrypted) on the device.

Coldcard

Coldcard offers the most extensive anti-coercion features of any hardware wallet through its "Trick PIN" system. Beyond standard BIP-39 passphrase support, Coldcard implements several specialized modes:

• Duress PIN: opens a separate wallet derived via BIP-85 deterministic entropy. The duress wallet is deterministically derived from the master seed, so it needs no separate backup.
• Brick Me PIN: permanently destroys the dual secure element, rendering the device inoperable. This is irreversible.
• Delta Mode PIN: shows the real extended public key and UTXOs, but produces corrupted signatures. Transactions appear to sign successfully but will be rejected by the network.
• Countdown to Brick PIN: combines a mandatory time delay with device destruction, mimicking legitimate vault time-lock behavior while covertly wiping the seed.

Coldcard also auto-bricks after 13 consecutive incorrect PIN attempts, providing a fallback even without explicit Trick PIN configuration.

Use Cases

Protection During Physical Attacks

The primary use case is defense against wrench attacks: physical coercion scenarios where an attacker forces a victim to hand over cryptocurrency. The attacker demands the seed phrase, the victim provides it, and the attacker sees a wallet with a small balance. Because there is no way to prove that additional wallets exist behind other passphrases, the attacker may accept the decoy and leave.

Border Crossing and Travel Security

Travelers carrying hardware wallets through jurisdictions with aggressive customs enforcement can use duress wallets to reduce risk. If forced to unlock a device at a border checkpoint, the default wallet shows a minimal balance. The primary holdings behind the passphrase remain inaccessible without the passphrase, which can be stored separately or memorized.

Operational Security for High-Value Holders

High-net-worth individuals use duress wallets as one layer in a multi-tier security model. Combined with cold storage, multisig, and geographic distribution of key material, duress wallets add a sacrificial buffer that can satisfy an attacker without exposing the bulk of holdings.

Political and Protest Contexts

In regions where governments have frozen or seized citizen assets, duress wallets provide a layer of financial privacy. Users can comply with device searches by revealing the decoy wallet while maintaining access to funds behind a memorized passphrase.

Risks and Considerations

Sophisticated Attackers Know About This Feature

The most significant limitation is that BIP-39 passphrases are publicly documented and widely discussed in the cryptocurrency community. An attacker who has done basic research will know that hardware wallets support hidden wallets and can demand "the real passphrase" or "all your passphrases." The plausible deniability only works against attackers who are unaware of or unwilling to pursue this possibility.

Decoy Balance Must Be Believable

An empty decoy wallet is worse than no duress wallet at all: it signals that the user is hiding funds elsewhere. The decoy must contain a plausible amount with realistic transaction history. Maintaining this requires ongoing effort: periodic transactions, a balance that matches the user's apparent wealth, and recent activity. A wallet with no transactions in months may raise suspicion.

Guaranteed Partial Loss

Using a duress wallet means accepting that the decoy balance will be taken. There is also no guarantee that the attacker will be satisfied with what they find. Casa, a collaborative custody provider, has documented cases where victims surrendered significant amounts yet were still subjected to prolonged violence as attackers demanded more.

Passphrase Management Risks

The passphrase protecting the primary wallet becomes a single point of failure. If forgotten, the funds are permanently lost: there is no recovery mechanism. Unlike a seed phrase, which has a standardized backup format, passphrases vary in length and complexity, making backup more error-prone. Even small differences (capitalization, trailing spaces) produce entirely different wallets with no warning.

Storing the passphrase digitally creates its own risks. Storing it alongside the seed phrase defeats the purpose. The passphrase must be backed up separately, ideally using a method like Shamir's Secret Sharing or a geographically distributed backup strategy.

Brute-Force Vulnerability for Weak Passphrases

If an attacker obtains the seed phrase, they can attempt to brute-force the passphrase. The PBKDF2 derivation with 2,048 iterations of HMAC-SHA512 provides moderate resistance, but short or dictionary-based passphrases remain vulnerable. A strong passphrase should be long, random, and not derived from personal information.

On-Chain Analysis

If funds were ever transferred between the decoy wallet and the hidden wallet, blockchain analysis tools may establish a connection between the two. Co-spending heuristics, timing analysis, and behavioral patterns can link seemingly unrelated wallets. Users must treat the decoy and hidden wallets as completely independent entities, funding them from separate sources.

Legal and Ethical Implications

Plausible deniability is a security property, not a legal defense. In litigation or bankruptcy proceedings, courts can compel disclosure of private keys and seed phrases. Claiming that no additional wallets exist when they do may constitute perjury or contempt of court. Tax reporting obligations apply regardless of how funds are stored: hidden wallets do not eliminate the legal requirement to report cryptocurrency holdings.

Duress Wallets vs. Alternative Defenses

Security researchers generally recommend duress wallets as one layer in a defense-in-depth strategy rather than a standalone solution:

For a deeper analysis of hardware wallet security models, see the research article on Bitcoin hardware wallet attack vectors.

Why It Matters

As cryptocurrency adoption grows, so does the incentive for physical attacks against holders. Documented wrench attacks reached record levels in 2025 and 2026, with attackers increasingly targeting family members as leverage. The duress wallet represents the cryptocurrency ecosystem's response to a threat model that pure cryptography cannot solve: the human element.

For users practicing self-custody, understanding duress wallets is part of a broader security education that includes cold storage practices, key management, and operational security. Layer 2 solutions like Spark can complement these strategies by enabling users to keep only small amounts in hot wallets for daily use while maintaining the bulk of their holdings in more secure, multi-layered custody arrangements.

This glossary entry is for informational purposes only and does not constitute financial or investment advice. Always do your own research before using any protocol or technology.