Device and BIP 39 Security Question

I am trying to get some security information that I am unsure about. Say I have my 24 words and an extra secret passphrase for my wallet that I access with a hardware wallet. If I ever lose my device or someone gets the 24 words and uses them in another recovery service, would the secret passphrase need to be used, or is that only a personal device thing?

I imagine just googling "BIP 39 recovery" would lead to a bunch of scams. So, I will need to do some research on what would be best if I lose or break my device.

I don't want to experiment with this due to OPSEC reasons, so I hope someone can understand this chicken scratch and explain it to me as if I got four boosters.