What Is BIP39?
BIP39 (Bitcoin Improvement Proposal 39) defines a standard for creating human-readable backup phrases for cryptocurrency wallets. These phrases — called seed phrases, mnemonic phrases, or recovery phrases — consist of 12, 18, or 24 common English words that encode the entropy used to derive all of a wallet's private keys.
BIP39 was authored by Marek Palatinus, Pavol Rusnak, Aaron Voisine, and Sean Bowe in 2013. Today it's the universal standard supported by virtually every hardware wallet (Ledger, Trezor), software wallet (MetaMask, Trust Wallet, Exodus), and exchange self-custody tool.
Why Mnemonic Phrases?
Cryptocurrency private keys are 256-bit numbers — utterly unmemorizable by humans. BIP39 maps this entropy to a sequence of common words from a standardized 2048-word list, making the backup human-writable, human-readable, and robust to transcription errors.
Compare:
- Raw private key:
e9873d79c6d87dc0fb6a5778633389f4453213303da61f20bd67fc233aa33262 - BIP39 phrase:
witch collapse practice feed shame open despair creek road again ice least
Both represent the same entropy. The phrase is far more practical to write on paper, read aloud, or verify for typos.
The BIP39 Process Step by Step
1. Generate Entropy
Create a cryptographically random byte sequence:
- 12 words: 128 bits of entropy
- 18 words: 192 bits of entropy
- 24 words: 256 bits of entropy
2. Compute Checksum
Compute SHA-256 of the entropy. Take the first ENT/32 bits of the hash as a checksum.
- 128-bit entropy → 4-bit checksum → 132 total bits
- 256-bit entropy → 8-bit checksum → 264 total bits
3. Split Into 11-bit Groups
Concatenate entropy + checksum, then split into groups of 11 bits. Each group is an index (0–2047) into the BIP39 word list.
4. Map to Words
Replace each 11-bit index with the corresponding word from the 2048-word list.
128 bits entropy + 4 bits checksum = 132 bits
132 bits / 11 bits per word = 12 words
5. Derive Master Seed
The mnemonic phrase (with optional passphrase) is processed through PBKDF2-HMAC-SHA512 for 2048 iterations to produce a 512-bit master seed. From this seed, all wallet keys are derived following BIP32.
Security of BIP39 Phrases
A 12-word phrase encodes 128 bits of entropy. The total number of possible 12-word phrases is:
2^128 ≈ 3.4 × 10^38
Even if an attacker could check one trillion (10^12) phrases per second, it would take 10^19 years to exhaust all 12-word phrases — longer than the age of the universe. 24-word phrases (256 bits) are effectively impossible to brute-force even with quantum computers.
The BIP39 Word List
The English BIP39 word list contains exactly 2048 words, carefully chosen to be:
- Distinct in the first 4 characters — You can identify each word from its first 4 letters, reducing transcription ambiguity.
- Short — Most words are 3–8 characters.
- Common — Familiar English words, avoiding technical terms.
Other language word lists exist (Japanese, Spanish, Korean, French, Italian, Czech, Portuguese, Chinese) but English is the most universally supported.
Passphrase (25th Word)
BIP39 supports an optional passphrase (sometimes called the "25th word") that's combined with the mnemonic to derive the seed. This provides two layers of security:
- The physical mnemonic phrase
- The memorized passphrase
Even if someone finds your physical backup, they can't access funds without the passphrase. This is particularly useful for hardware wallets.
Warning: If you forget the passphrase, the funds are permanently lost. There's no recovery mechanism.
Storing Your Seed Phrase Safely
| Method | Security | Durability |
|---|---|---|
| Paper | Low (fire/water) | Poor |
| Metal plate (Cryptosteel) | High | Excellent |
| Digital (unencrypted) | Very low | Good |
| Password manager | Good | Good |
| Memory only | N/A | Poor (forget) |
Best practices:
- Never photograph your seed phrase — Photos back up to cloud storage you may not control.
- Never type it into any website — Including "recovery" sites (many are phishing).
- Make multiple physical copies — Store in different secure locations (home safe, safety deposit box, trusted family member).
- Use a metal backup — Paper burns and degrades; stainless steel survives house fires.
- Never share with anyone — Seed phrases are bearer instruments. Whoever has the words controls the funds.
This Tool's Safety
This BIP39 generator runs entirely in your browser using the Web Crypto API for entropy. No seed phrases, private keys, or wallet data are transmitted to any server. For generating real wallet seed phrases, verify the tool is running locally with no network access.
→ Try the BIP39 Generator