user1231: In security terms, what is the difference between 15- and 24-word seed?
Therefore, which option is recommended (from a security point of view)?

user4023: BIP39 wordlist contains 2048 words. If you use a 24-word phrase, you'll get 2048²⁴ possible combinations, or 2^264. This is an insultingly huge number.
For hackers, trying to brute force to determine even your 15-word seed phrase, 2^165 possible combinations is also a huge number. Have you ever seen at least 2^160 ? This is a number of possible bitcoin addresses.
1,461,501,637,330,902,918,203,684,832,716,283,019,655,932,542,976

I'm sure a 15-word recovery phrase is enough for today. The 24-word seed phrase is invented with the future in mind (don't forget about quantum equipment).
Read my Medium story for details.
P.S.
For Shelley-era Daedalus wallet you must use 24-word seed, for Yoroi – 15-word seed.
For Byron-era Daedalus legacy wallet you must use 12-word seed, for Yoroi – 15-word seed.
For Cardano-cli Shelley-era wallet you can use 15, 18, 21 or 24-word seed.
The latest version of Yoroi has an ability to recover 24-word-based Daedalus wallet.

user28: Following the BIP39 standard, 15 word seeds are proving about 160 bits (20 bytes) of entropy, where 24 word seeds are providing around 254 bits (32 bytes) of entropy.
As long as you do everything to protect your word seed, 160 bits of entropy is plenty. In the past, people used 24 words to split it into two parts, but today they are better ways to split your seed, such as Shamir backup.
Little bit off topic, but I urge people to use hardware wallets, they are not that expensive and provide a huge increase in security over plain wallets - that is my security recommendation.

1231: <p>In security terms, what is the difference between 15- and 24-word seed?</p>
<p>Therefore, which option is recommended (from a security point of view)?</p>
 4023: <p>BIP39 wordlist contains 2048 words. If you use a 24-word phrase, you'll get 2048²⁴ possible combinations, or 2^264. This is an insultingly huge number.</p>
<p>For hackers, trying to brute force to determine even your 15-word seed phrase, 2^165 possible combinations is also a huge number. Have you ever seen at least 2^160 ? This is a number of possible bitcoin addresses.</p>
<pre><code>1,461,501,637,330,902,918,203,684,832,716,283,019,655,932,542,976
</code></pre>
<p>I'm sure a 15-word recovery phrase is enough for today. The 24-word seed phrase is invented with the future in mind (don't forget about quantum equipment).</p>
<p>Read my <em><strong><a href="https://medium.com/geekculture/cryptocurrency-911-how-does-12-word-seed-phrase-work-9d892de9732" rel="nofollow noreferrer">Medium story</a></strong></em> for details.</p>
<p><strong>P.S.</strong></p>
<p>For Shelley-era Daedalus wallet you must use 24-word seed, for Yoroi – 15-word seed.</p>
<p>For Byron-era Daedalus legacy wallet you must use 12-word seed, for Yoroi – 15-word seed.</p>
<p>For Cardano-cli Shelley-era wallet you can use 15, 18, 21 or 24-word seed.</p>
<p>The latest version of Yoroi has an ability to recover 24-word-based Daedalus wallet.</p>
 28: <p>Following the <a href="https://github.com/bitcoin/bips/blob/master/bip-0044.mediawiki" rel="noreferrer">BIP39</a> standard, 15 word seeds are proving about 160 bits (20 bytes) of entropy, where 24 word seeds are providing around 254 bits (32 bytes) of entropy.</p>
<p>As long as you do everything to protect your word seed, 160 bits of entropy is plenty. In the past, people used 24 words to split it into two parts, but today they are better ways to split your seed, such as <a href="https://trezor.io/shamir/" rel="noreferrer">Shamir backup</a>.</p>
<p>Little bit off topic, but I urge people to use hardware wallets, they are not that expensive and provide a huge increase in security over plain wallets - that is my security recommendation.</p>
