Do you want to use 12 word seed phrase generator, Metamask seed phrase generator, Trust wallet phrase generator, or pass phrase generator? This tool will help you.
Coin
Mnemonics with less than 12 words have low entropy and may be guessed by an
attacker.
Mnemonic Seed Phrase Language
BIP39 Mnemonic Seed Phrase
Click this Button Every time you Generate New Seed Phrase.
ETH Balance
0
BNB Balance
0
Matic Balance
0
Public address and Private Key
You can also enter your own Public ETH Address in textarea for checking balances. After Enter Public Address Click on Check balance Button
Show
starting from index
(leave blank to generate from next index)
Must Use This Tool: Free Crypto Tax Calculator for all Countries
What does this Seed Phrase Generator do?
Top 6 things you can do with this tool –
1) Generate Random Seed Phase
2) Generate the Master Public address by entering your Seed phrase.
3) You can check Ethereum, Binance, and Matic Blockchain Balance.
4) You can check the balance of all 3 Blockchain by adding your public address of ETH or BNB or Matic.
5) The balance value will be shown in decimal format.
6) This Tool will help in generating the Trust wallet recovery phrase, and metamask recovery phrase.
7) You can experiment by entering your own Seed Phrase.
You can use this Tool as well Polygon Matic Faucet Mainnet
Is it secure to enter your own seed phrase?
Yes, we do not collect any type of data from users, but I recommend you never save your seed phrase with assets on the internet.
Must Read: 7 Crypto Jobs That Can Make You a Millionaire
This tool is very easy to use. The First step is to select the word 12 or 24 then click on generate button. It will generate a random bip39 seed phrase.
If you want to check the balance of a particular seed, you can click on the check balance button, which is shown below.
Currently, we do not check the balance of Bitcoin, but we will do it later. We only check the balance of Ethereum, Binance smart chain, and Matic Blockchain.
You can check the balance of all 3 Blockchain by entering your Ethereum Public address.
Generating less than 12 words is easy to guess and less secure.
You may input a present BIP39 mnemonic, or generate a brand new random one. Typing your own twelve words will possibly no longer work as you assume because the words require a particular structure (the final phrase contains a checksum).
For more info, see the BIP39 spec.
12 word seed phrase, metamask seed phrase generator, Random Trust wallet phrase generator, Blockchain
What is a seed phrase?
The seed phrase is a series of words produced by your crypto wallet that give you access to the crypto associated with that wallet. Think of a wallet like a crypto password manager, and a seed phrase like a master password. As long as you have your seed sentence, you will be able to access every crypto associated with the wallet that produced the sentence – even if you lose or delete the wallet.
How does the seed phrase work?
When you create a crypto wallet, the seed phrase is automatically generated. The seed phrase represents a long series of random numbers – and your wallet uses it to generate secret keys that allow you to send and use your crypto.
The reason the phrase given to you is in the form of words (rather than a long series of random numbers) is that people are better at remembering and interacting with word order. But you should not rely on your memory to preserve the phrases of your seed. What are the best alternatives? See the section on protecting your seed phrases below. Each seed phrase is removed from a list of 2,048 simple words.
The concept of seed seeds was widely accepted after Bitcoin Improvement Proposal 39 of 2013, which established the standard of “fixed purse” – which is the majority of the wallet now – where a single seed phrase can control all the secret keys stored in a wallet. The standard also makes great wallets work: if you want to change wallets, you just need to put your seed phrase in a new wallet and your crypto will be found there.
If you lose or remove a wallet, you can also recycle it using your seed phrase. Keeping your seed phrase safe from hackers, in the event of a crime of identity theft, or just a simple loss is crucial.
12 word seed phrase, metamask seed phrase generator, Random Trust wallet seed phrase generator
What is the difference between a secret key and a seed phrase?
Private keys permit you to ship or spend several bitcoins, Ethereum, or different crypto — they’re algorithmically derived from the long string of numbers represented by your seed word. Your seed word offers you get admission to your wallet and all the private keys inside the pockets. You can think about a crypto-wallet as being like a password manager to your crypto — so long as you have your master password (the seed word) you have access to all the related crypto.
What happens if you lost the seed phrase?
You can use this tool if you want to recover your Trust wallet recovery phrase or metamask recovery phrase. Finding a lost seed phrase is difficult, but you can use this tool to guess your 12 or 24 word phrase.
In case you by chance throw out a scrap of paper your seed word is written on, neglect which book you hid it in, otherwise, you die without passing it directly to an heir; you lose get admission to in your crypto. until someone steals your seed phrase, your cryptocurrency will continue to be safely stored on the blockchain, but you (or your heirs) received have any manner to get admission to it. So preserve your seed word secure! in case you lose your seed word you lose get right of entry to your crypto.
How can you keep a seed word safe?
There’s a wide range of techniques approximately a way to exceptional comfortable seed terms, which have a tendency to vary based totally on how lots of cryptos you have got and what sort of your fee safety vs. convenience.
Also, you can check –
1) 5 Epic Metaverse Game for Play to Earn Money
A 12-word seed phrase acts as a key to unlock access to a crypto wallet and is also the ultimate recovery tool for wallets on the blockchain. The words that comprise the 12-word seed phrase are randomly picked from a published list of 2,048 words by an algorithm when a wallet is created, and given to the user at the moment of the account opening. Since it is the master key, if the seed phrase gets lost, forgotten, or mixed up, the user permanently loses access to their crypto wallet.
The seed phrase is intrinsically connected to the user’s blockchain private key and public key.
A private key is a cryptographically secure 256-bit number that «unlocks» access to a public key, and it is generated at the time of the wallet creation. The public key is an address in the blockchain that allows a user to receive crypto funds and it is derived from the private key. Since it is not easily manageable for a user to enter a 256-bit private key every time they want to perform a transaction, a 12 or 24 words seed phrase is automatically generated by the wallet and is derived from the private key so that when a user enters their seed phrase into their wallet app, it is as if they input their private key to access funds.
From the computer’s point of view, a public key is equivalent to a username or the address where the crypto lives within that wallet. The private key is equivalent to a secret password (in the traditional sense) that allows users to buy, trade, and sell items, and the seed phrase is a simplified and more humanly manageable version of the 256-bit private key. A private key can be accessed at the wallet that generates it, but also, accessed in other wallet apps.
Why 12 Random Words?
People are terrible at creating passwords. There are tales on TikTok about people trying to guess their significant others’ passwords, then finding out it’s just «password1» or their name.
That’s why websites put “strong” password requirements into place: to force people to make better passwords.
A computer algorithm in the wallet app creates the 12-word seed phrase assigned to the user. That algorithm has 2,048 possible words to choose from. In mathematical terms, that’s 2048 to the 12th power, which comes out to a mind-boggling large number: «5,444,517,870,735,015,415,413,993,718,908,291,383,296.» There aren’t words for how large that number is, other than 5.4445179e+39.
Since there are so many possible word combinations, it’s next to impossible for a hacker to crack. They could create a program to work through all the options (a brute force search approach), but the chances of getting the right combination are 1 out of the big number above.
[banner_1]
BIP39: The 12 Recovery Words Blockchain Origin Language
There are 2,048 different word options for the 12-word phrase. Those words come from the published BIP39 specification or Bitcoin Improvement Proposal 39.
One cool thing about crypto (or Bitcoin, in this case) is that the entire community strives to improve the blockchain process. One of these improvement projects (BIP39) suggested that different crypto wallets and sites use an agreed-upon category of words for mnemonic phrases (seed phrases). That’s how those 2,048 phrases were born.
When Would One Use a 12-Word Seed Phrase?
Most of the time, a 12-word seed phrase should live on a piece of paper in a safe, in a filing cabinet, and in one more secure location. That phrase can live in those locations full-time until it needs to be consulted. When would that happen?
First, a 12-word phrase is needed any time someone accesses a wallet on a new device, like if someone got a new phone or laptop. The user should only be signing into their crypto wallet on a secure network such as at their home, so this shouldn’t happen often. Broken devices, new devices, and upgrades are all reasons to use the 12-word phrase.
On a more morbid note, a user’s 12 word seed phrase should be integrated into their will or estate documents. That way, if something happens to the user, their trustees will be able to access any crypto assets. Adding this information into a will or trust prevents situations like the one with Gerald Cotten from happening again.
The Do’s and Don’ts of 12-Word Seed Phrases
Just like the Instagram recovery keys, a 12-word phrase will only be issued once. That’s the time to write it down, store it, and or memorize it for future use.
The worst thing someone could do is store this phrase key online, where hackers could access it.
Online Storage: Better than Forgetting, But Unsafe
If someone did have to store their seed phrase online, they should make sure it’s in a protected password storage app/service. These are not as safe as keeping passwords locked away in a vault, but it’s better than having them float around in easy-to-hack platforms.
Instead of listing every word out, in order, in that protected platform, try using a shorthand key.
For example, writing down only the first two letters and the last letter of a word. The word which would become wi**h. Bread would become br**d, and so on. A hacker could still quickly figure this out if they got into that password storage app, but it will present somewhat of a challenge.
Best Practices for Your 12 Word Phrase
Everyone should have their 12-word seed phrase written down in at least two places—one as their primary source and one as a backup. The backups should also be stored in multiple locations, to keep their money safe.
As discussed above, anyone with active Crypto-assets should have their 12-word seed phrase listed in their will or trust. That counts as one storage option.
The second place should be where the user knows to look, like in the back of a journal or written on a bookmarked page in their favorite book. Never store/tape/or write passwords on or around the computer. That’s not Crypto specific. That’s cybersecurity 101.
Relying on wallet apps to reset a seed phrase if it’s lost
Unfortunately, if a 12-word seed phrase gets lost, there’s no way to «reset» it. The person who lost their phrase will have no way to access their account or their assets, even if they appeal to the platform administrators.
Keeping the recovery phrase safe is the only way to ensure consistent access to Crypto assets. It’s the ultimate test of cybersecurity.
All wallet apps rely mostly on the seed phrase for fraud prevention. This has its pros and cons. Learn more about it in the latest Mobile App Friction Report — Crypto Edition — Authentication.
Everything you need to know about your 12-word secret recovery phrase
Your secret recovery phrase is the key to your wallet and controls access to all your funds, so write it down and keep it safe!
If your device is lost or stolen, the only way to recover your funds is with your secret recovery phrase.
In this article:
- What is a secret recovery phrase?
- How is a secret recovery phrase generated?
- What is an 18- or 24-word secret recovery phrase?
- Where is my secret recovery phrase stored?
- How do I keep my secret recovery phrase safe?
- How do I use my secret recovery phrase?
- How do I back up my wallet and write down my secret recovery phrase?
- Mobile
- Desktop
- Web3 Wallet
Lee este artículo en Español | Read this article in Spanish
What is a secret recovery phrase?
Your secret recovery phrase is the key to your wallet and controls access to all your funds.
A secret recovery phrase generates all of the private keys in your wallet. Each receive address for every crypto has its own private key. The private key is used to authorize transactions and prove ownership of your funds. All private keys in Exodus are generated from and tied to your 12-word secret recovery phrase.
If anything happens to the device your wallet is on, like your phone is lost or stolen, or your computer crashes, the only way to recover your funds is with your 12-word secret recovery phrase. You can restore your wallet on another device by entering your secret recovery phrase into a new wallet.
Secret recovery phrases, also known as mnemonic phrases, or seed phrases, can be any length, but they are usually 12, 18, or 24 words.
Exodus secret recovery phrases are always 12 words.
How is a secret recovery phrase generated?
There is a set list of words that the wallet chooses from randomly. Each word is assigned to a number.
This means the secret recovery phrase can be converted to a string of numbers, which is used as the seed integer to a deterministic wallet. This seed integer generates all the key pairs (public keys, or addresses, and private keys) used in the wallet.
Exodus uses the English-language wordlist of the BIP39 standard which has 2048 words. If the phrase contained only 12 random words, the number of possible combinations would be 2048^12 = 2^132, meaning 2 to the power of 132, and the phrase would have 132 bits of security.
However, some of the data in a BIP39 phrase is not random, so the actual security of a 12-word BIP39 seed phrase is only 128 bits. This is approximately the same strength as all Bitcoin private keys, so most experts consider it to be sufficiently secure. If you want to learn more about how big 2^128 is, you can have a look here: http://bugcharmer.blogspot.com/2012/06/how-big-is-2128.html
When your secret recovery phrase is converted into a seed integer or number for your wallet, the seed integer is used with a standard derivation algorithm, or formula, to derive and generate your master private key.
From this master private key, a very large number (almost infinite for all practical purposes) of private and public keys can be derived with the standard derivation formula. Given that the same master private key is used with the derivation formula, the same private and public keys will always be generated.
Also, different blockchain assets have different starting points in the derivation formula, which prevents differing assets from generating overlapping keys.
It is important to understand that the seed integer doesn’t represent the private key, but is used to derive your private and public keys in a series of processes described in the following Bitcoin Improvement Proposals (BIPs):
- BIP32
- BIP39
- BIP44
This is a rather lengthy and technical bit of reading, but below is a basic summary.
BIP32: Describes how to use a master private key to generate (derive) child private keys. These child keys are guaranteed to be 256-bit because of the process that is used to derive them.
BIP39: Describes how a seed is generated. Although the 12-word seed is 128-bit, the derivation process described in BIP32 will ensure that the child keys are 256-bit, but the randomness (entropy) of those keys will be equal to 128-bit.
BIP44: Describes a derivation path. In basic terms, it sets the properties that are used to derive private keys as described in BIP32. These properties, for example, can indicate what type of coin this is (BTC, BCH etc.).
What is an 18- or 24-word secret recovery phrase?
Exodus generates a 12-word secret recovery phrase to back up your wallet. However, other wallets might generate 18-word or 24-word secret recovery phrases.
For example, the Trezor Model T automatically generates a 12-word phrase, while the Trezor One creates a 24-word phrase.
Although 12-, 18-, or 24-word secret recovery phrases all provide excellent security, some platforms choose a 24-word phrase because it provides 256-bit security rather than the 128-bit offered by the 12-word phrase. If you want to dive into the math, you could start with this video about 256-bit security or this article about cryptographic algorithms.
Also, keep in mind that different wallets use different derivation paths. Exodus and Trezor both use the BIP39 standard. However, other wallets might use an older incompatible standard. So not every secret recovery phrase can be entered in every wallet successfully.
Where is my 12-word secret recovery phrase stored?
Your 12-word secret recovery phrase is encrypted and stored on the device where you install Exodus.
We do not store your secret recovery phrase on our servers, nor do we have any access to it. As the owner of the wallet, you are the only one with access to your secret recovery phrase and private keys. As Andreas Antonopoulos famously said: «Your keys, your Bitcoin. Not your keys, not your Bitcoin».
This also protects you in the unlikely event of a hack on our servers. The hacker wouldn’t find any information that gives access to your wallet and funds.
However, this means that you are solely responsible to ensure your wallet’s safety and security. If you lose your secret recovery phrase, your funds are irretrievable. We can’t help you retrieve your secret recovery phrase because we never have access to it.
How do I keep my 12-word secret recovery phrase safe?
Anything online is hackable! This is also true for your 12-word secret recovery phrase. So don’t store it on a computer or any device that is connected to the internet.
Write down your secret recovery phrase on a piece of paper or print it out using a secure network printer. It’s a good idea to have multiple copies of your secret recovery phrase, and store it in multiple locations to prevent loss from disasters like floods, earthquakes, fires, etc.
Write down your secret recovery phrase in the correct order without any spelling mistakes! The words need to be in the correct order to restore your funds. Entering the secret phrase incorrectly (wrong order or incorrect spelling) will result in you not being able to access your wallet.
Do not store your secret recovery phrase on the notepad of your computer, as a digital image, in a file-sharing service like Dropbox, MegaBox, OneDrive, Google Drive, iCloud, etc., as an e-mail draft, any kind of file on your computer or phone, including password-protected files, or on a USB drive.
Because the threats are digital and online, the best way to protect your secret recovery phrase is to store it on paper and offline.
You can use your secret recovery phrase to restore your Exodus wallet on any device: How do I restore from my 12-word secret recovery phrase?
It’s also possible to enter your secret recovery phrase into another wallet. Some airdrops require you to enter your secret recovery phrase or private keys into another wallet to claim their tokens: How do I manage airdrops in Exodus?
However, this is not recommended. Be aware that your secret recovery phrase could be compromised as soon as you expose it anywhere online. Even an internet router or WiFi password that isn’t secure can cause you to lose your funds.
How do I back up my wallet and write down my 12-word secret recovery phrase?
Mobile
- 1
-
a) Tap the
Profile icon, then b) tap
Security. -
- 2
-
Tap
Backups. -
- 3
-
Make sure no one is around to see your secret recovery phrase, then tap
View Secret Phrase. -
We recommend writing down your 12-word secret recovery phrase on more than one piece of paper, and keeping the copies in separate secure locations to prevent a single point of loss from events like fires, floods, etc.
- This secret recovery phrase is your secret master seed that generates all your wallet’s addresses and private keys. It is incredibly important for you to keep your secret recovery phrase safe. If you would like to know more about your secret phrase, please click here.
- Do not store your 12-word secret recovery phrase in any digital format. Hackers can access digital files and information, but they can’t access a piece of paper. If you would like to know more about how to keep your crypto safe, please click here.
- 4
-
To see your secret recovery phrase, a) press and hold your finger on the
Press and Hold to Reveal button. Once you have written it down, b) tap
Done. -
- 5
-
Next, to check your backup, you will receive a question about your secret recovery phrase. a) Choose the correct answer, then b) tap
Done. -
- 6
-
Now that you have your 12-word secret recovery phrase secure, it is time to add a passcode to lock your wallet. In the
Security menu, toggle on
Secure with a Passcode. -
- 7
- Once you have created your passcode, you will be asked to re-enter it to confirm it. This will enable your passcode on your mobile Exodus wallet.
-
And that’s it! You only have to go through the backup process once! As long as you have your 12-word secret recovery phrase safe, you won’t lose access to your funds.
If you would like to set up Face ID on an iOS device, or Touch ID on an Android device, you can visit: How do I secure my wallet with Face ID or Touch ID?
Desktop
- 1
-
Click on the
Settings icon in the top right corner of your Exodus wallet. -
- 2
-
a) Click the
Backup tab. b) Create a strong, secret and
unique password, enter it in the box, and c) click
Next. -
Make sure your Exodus wallet password is not the same or similar to any other password you have ever used! We recommend using a password manager to create your password, as they can generate highly random and strong passwords for you as well as store them.
If you forget or lose your password, no one can recover or reset it for you. You can only reset your password with your secret recovery phrase.
- 3
-
a) Re-enter the password and b) click
Next. -
- 4
-
Click
View secret phrase. -
- 5
-
Write down your
12-word secret recovery phrase. Mouse over the words and write them down in the correct order. Double-check that they are spelled correctly. When you are finished writing down the secret recovery phrase, put it in a secure place that only you can access and click
Done.
-
We recommend writing down your 12-word secret recovery phrase on more than one piece of paper, and keeping the copies in separate secure locations to prevent a single point of loss from events like fires, floods, etc.
- The secret recovery phrase is your secret master seed that generates all your wallet’s addresses and private keys. It is incredibly important for you to keep your secret recovery phrase safe. If you would like to know more about your secret recovery phrase, please click here.
- Do not store your 12-word secret recovery phrase in any digital format. Hackers can access digital files and information, but they can’t access a piece of paper. If you would like to know more about how to keep your crypto safe, please click here.
- 6
-
Next, a) read the verification question carefully, b) select the correct answer, and c) click
Done. -
- And that’s it! You only have to go through this process once.
-
Web3 Wallet
- 1
-
a) Click the
Profile icon, then b) click
Security. -
- 2
-
Click
Back Up. -
- 3
-
To confirm you want to view your 12-word secret recovery phrase, a) enter your password and b) click
Next. Make sure no one can see your screen, because anyone with your secret recovery phrase can steal your funds. -
- 4
-
You can now view your
secret recovery phrase by clicking
Reveal phrase. Write down your secret recovery phrase and store it in a secure place to you always have access to your funds. Be sure to double-check that the words have been written down in the correct order and that no words are misspelled. -
We recommend writing down your 12-word secret recovery phrase on more than one piece of paper, and keeping the copies in separate secure locations to prevent a single point of loss from events like fires, floods, etc.
- The secret recovery phrase generates all your wallet’s addresses and private keys. It is incredibly important for you to keep your secret recovery phrase safe. If you would like to know more about your secret recovery phrase, please click here.
- Do not store your 12-word secret recovery phrase in any digital format. Hackers can access digital files and information, but they can’t access a piece of paper. If you would like to know more about how to keep your crypto safe, please click here.
-
- 5
-
After you have written down your secret recovery phrase, and checked that all the words are spelled correctly and are in the correct order, you can click
Next. -
- 6
-
Next, to check your backup, you will receive a question regarding the secret recovery phrase you have written down. a) Choose the word that is in your secret recovery phrase, b) then tap
Done. -
Exodus is not affiliated with any third-party platforms, external links, or any other third-party resources mentioned in this article. As such, Exodus cannot guarantee the performance of third-party products or services, or that the steps shown and the information provided will always be accurate.
This is the complete list of English BIP-39 words used for seed recovery. If you use a wallet for your crypto, you most likely have 12 or 24 of these words written somewhere. Hopefully, they aren’t stored digitally. If you examine the words closely, you will notice that no word has the same first four letters. If you know the first four letters of your seed phrase words, you can easily figure out the full word. Some wallets only require that you enter the first four letters. Each word when alphabetical also corresponds with a number.
Abandon is 0001.
Ability is 0002.
Able is 0003 etc. etc.
The best way to store you seed recover phrase is with a Billfodl which you can purchase by clicking on the picture below.
If you would prefer to store numbers instead of letters, you can save the 4 numbers that correspond with each word from 0001 to 2048. In case you ever need to see what your number stands for or what your four letters are really representing, here is a complete list for your access. If you need help, you should never send your words or numbers to a 3rd party. You would be best to figure it out yourself or work with a trusted friend. We are also happy to help if you ever run into a problem.
Monero uses a 25 word seed phrase, but it can be converted back and forth to a 24 word phrase. This allows you to use a hardware wallet like a ledger with Monero.
Complete List of BIP-39 Seed Recovery Phrase Words for wallets like Trust Wallet.
abandon ability able about above absent absorb abstract absurd abuse access accident account accuse achieve acid acoustic acquire across act action actor actress actual adapt add addict address adjust admit adult advance advice aerobic affair afford afraid again age agent agree ahead aim air airport aisle alarm album alcohol alert alien all alley allow almost alone alpha already also alter always amateur amazing among amount amused analyst anchor ancient anger angle angry animal ankle announce annual another answer antenna antique anxiety any apart apology appear apple approve april arch arctic area arena argue arm armed armor army around arrange arrest arrive arrow art artefact artist artwork ask aspect assault asset assist assume asthma athlete atom attack attend attitude attract auction audit august aunt author auto autumn average avocado avoid awake aware away awesome awful awkward axis baby bachelor bacon badge bag balance balcony ball bamboo banana banner bar barely bargain barrel base basic basket battle beach bean beauty because become beef before begin behave behind believe below belt bench benefit best betray better between beyond bicycle bid bike bind biology bird birth bitter black blade blame blanket blast bleak bless blind blood blossom blouse blue blur blush board boat body boil bomb bone bonus book boost border boring borrow boss bottom bounce box boy bracket brain brand brass brave bread breeze brick bridge brief bright bring brisk broccoli broken bronze broom brother brown brush bubble buddy budget buffalo build bulb bulk bullet bundle bunker burden burger burst bus business busy butter buyer buzz cabbage cabin cable cactus cage cake call calm camera camp can canal cancel candy cannon canoe canvas canyon capable capital captain car carbon card cargo carpet carry cart case cash casino castle casual cat catalog catch category cattle caught cause caution cave ceiling celery cement census century cereal certain chair chalk champion change chaos chapter charge chase chat cheap check cheese chef cherry chest chicken chief child chimney choice choose chronic chuckle chunk churn cigar cinnamon circle citizen city civil claim clap clarify claw clay clean clerk clever click client cliff climb clinic clip clock clog close cloth cloud clown club clump cluster clutch coach coast coconut code coffee coil coin collect color column combine come comfort comic common company concert conduct confirm congress connect consider control convince cook cool copper copy coral core corn correct cost cotton couch country couple course cousin cover coyote crack cradle craft cram crane crash crater crawl crazy cream credit creek crew cricket crime crisp critic crop cross crouch crowd crucial cruel cruise crumble crunch crush cry crystal cube culture cup cupboard curious current curtain curve cushion custom cute cycle dad damage damp dance danger daring dash daughter dawn day deal debate debris decade december decide decline decorate decrease deer defense define defy degree delay deliver demand demise denial dentist deny depart depend deposit depth deputy derive describe desert design desk despair destroy detail detect develop device devote diagram dial diamond diary dice diesel diet differ digital dignity dilemma dinner dinosaur direct dirt disagree discover disease dish dismiss disorder display distance divert divide divorce dizzy doctor document dog doll dolphin domain donate donkey donor door dose double dove draft dragon drama drastic draw dream dress drift drill drink drip drive drop drum dry duck dumb dune during dust dutch duty dwarf dynamic eager eagle early earn earth easily east easy echo ecology economy edge edit educate effort egg eight either elbow elder electric elegant element elephant elevator elite else embark embody embrace emerge emotion employ empower empty enable enact end endless endorse enemy energy enforce engage engine enhance enjoy enlist enough enrich enroll ensure enter entire entry envelope episode equal equip era erase erode erosion error erupt escape essay essence estate eternal ethics evidence evil evoke evolve exact example excess exchange excite exclude excuse execute exercise exhaust exhibit exile exist exit exotic expand expect expire explain expose express extend extra eye eyebrow fabric face faculty fade faint faith fall false fame family famous fan fancy fantasy farm fashion fat fatal father fatigue fault favorite feature february federal fee feed feel female fence festival fetch fever few fiber fiction field figure file film filter final find fine finger finish fire firm first fiscal fish fit fitness fix flag flame flash flat flavor flee flight flip float flock floor flower fluid flush fly foam focus fog foil fold follow food foot force forest forget fork fortune forum forward fossil foster found fox fragile frame frequent fresh friend fringe frog front frost frown frozen fruit fuel fun funny furnace fury future gadget gain galaxy gallery game gap garage garbage garden garlic garment gas gasp gate gather gauge gaze general genius genre gentle genuine gesture ghost giant gift giggle ginger giraffe girl give glad glance glare glass glide glimpse globe gloom glory glove glow glue goat goddess gold good goose gorilla gospel gossip govern gown grab grace grain grant grape grass gravity great green grid grief grit grocery group grow grunt guard guess guide guilt guitar gun gym habit hair half hammer hamster hand happy harbor hard harsh harvest hat have hawk hazard head health heart heavy hedgehog height hello helmet help hen hero hidden high hill hint hip hire history hobby hockey hold hole holiday hollow home honey hood hope horn horror horse hospital host hotel hour hover hub huge human humble humor hundred hungry hunt hurdle hurry hurt husband hybrid ice icon idea identify idle ignore ill illegal illness image imitate immense immune impact impose improve impulse inch include income increase index indicate indoor industry infant inflict inform inhale inherit initial inject injury inmate inner innocent input inquiry insane insect inside inspire install intact interest into invest invite involve iron island isolate issue item ivory jacket jaguar jar jazz jealous jeans jelly jewel job join joke journey joy judge juice jump jungle junior junk just kangaroo keen keep ketchup key kick kid kidney kind kingdom kiss kit kitchen kite kitten kiwi knee knife knock know lab label labor ladder lady lake lamp language laptop large later latin laugh laundry lava law lawn lawsuit layer lazy leader leaf learn leave lecture left leg legal legend leisure lemon lend length lens leopard lesson letter level liar liberty library license life lift light like limb limit link lion liquid list little live lizard load loan lobster local lock logic lonely long loop lottery loud lounge love loyal lucky luggage lumber lunar lunch luxury lyrics machine mad magic magnet maid mail main major make mammal man manage mandate mango mansion manual maple marble march margin marine market marriage mask mass master match material math matrix matter maximum maze meadow mean measure meat mechanic medal media melody melt member memory mention menu mercy merge merit merry mesh message metal method middle midnight milk million mimic mind minimum minor minute miracle mirror misery miss mistake mix mixed mixture mobile model modify mom moment monitor monkey monster month moon moral more morning mosquito mother motion motor mountain mouse move movie much muffin mule multiply muscle museum mushroom music must mutual myself mystery myth naive name napkin narrow nasty nation nature near neck need negative neglect neither nephew nerve nest net network neutral never news next nice night noble noise nominee noodle normal north nose notable note nothing notice novel now nuclear number nurse nut oak obey object oblige obscure observe obtain obvious occur ocean october odor off offer office often oil okay old olive olympic omit once one onion online only open opera opinion oppose option orange orbit orchard order ordinary organ orient original orphan ostrich other outdoor outer output outside oval oven over own owner oxygen oyster ozone pact paddle page pair palace palm panda panel panic panther paper parade parent park parrot party pass patch path patient patrol pattern pause pave payment peace peanut pear peasant pelican pen penalty pencil people pepper perfect permit person pet phone photo phrase physical piano picnic picture piece pig pigeon pill pilot pink pioneer pipe pistol pitch pizza place planet plastic plate play please pledge pluck plug plunge poem poet point polar pole police pond pony pool popular portion position possible post potato pottery poverty powder power practice praise predict prefer prepare present pretty prevent price pride primary print priority prison private prize problem process produce profit program project promote proof property prosper protect proud provide public pudding pull pulp pulse pumpkin punch pupil puppy purchase purity purpose purse push put puzzle pyramid quality quantum quarter question quick quit quiz quote rabbit raccoon race rack radar radio rail rain raise rally ramp ranch random range rapid rare rate rather raven raw razor ready real reason rebel rebuild recall receive recipe record recycle reduce reflect reform refuse region regret regular reject relax release relief rely remain remember remind remove render renew rent reopen repair repeat replace report require rescue resemble resist resource response result retire retreat return reunion reveal review reward rhythm rib ribbon rice rich ride ridge rifle right rigid ring riot ripple risk ritual rival river road roast robot robust rocket romance roof rookie room rose rotate rough round route royal rubber rude rug rule run runway rural sad saddle sadness safe sail salad salmon salon salt salute same sample sand satisfy satoshi sauce sausage save say scale scan scare scatter scene scheme school science scissors scorpion scout scrap screen script scrub sea search season seat second secret section security seed seek segment select sell seminar senior sense sentence series service session settle setup seven shadow shaft shallow share shed shell sheriff shield shift shine ship shiver shock shoe shoot shop short shoulder shove shrimp shrug shuffle shy sibling sick side siege sight sign silent silk silly silver similar simple since sing siren sister situate six size skate sketch ski skill skin skirt skull slab slam sleep slender slice slide slight slim slogan slot slow slush small smart smile smoke smooth snack snake snap sniff snow soap soccer social sock soda soft solar soldier solid solution solve someone song soon sorry sort soul sound soup source south space spare spatial spawn speak special speed spell spend sphere spice spider spike spin spirit split spoil sponsor spoon sport spot spray spread spring spy square squeeze squirrel stable stadium staff stage stairs stamp stand start state stay steak steel stem step stereo stick still sting stock stomach stone stool story stove strategy street strike strong struggle student stuff stumble style subject submit subway success such sudden suffer sugar suggest suit summer sun sunny sunset super supply supreme sure surface surge surprise surround survey suspect sustain swallow swamp swap swarm swear sweet swift swim swing switch sword symbol symptom syrup system table tackle tag tail talent talk tank tape target task taste tattoo taxi teach team tell ten tenant tennis tent term test text thank that theme then theory there they thing this thought three thrive throw thumb thunder ticket tide tiger tilt timber time tiny tip tired tissue title toast tobacco today toddler toe together toilet token tomato tomorrow tone tongue tonight tool tooth top topic topple torch tornado tortoise toss total tourist toward tower town toy track trade traffic tragic train transfer trap trash travel tray treat tree trend trial tribe trick trigger trim trip trophy trouble truck true truly trumpet trust truth try tube tuition tumble tuna tunnel turkey turn turtle twelve twenty twice twin twist two type typical ugly umbrella unable unaware uncle uncover under undo unfair unfold unhappy uniform unique unit universe unknown unlock until unusual unveil update upgrade uphold upon upper upset urban urge usage use used useful useless usual utility vacant vacuum vague valid valley valve van vanish vapor various vast vault vehicle velvet vendor venture venue verb verify version very vessel veteran viable vibrant vicious victory video view village vintage violin virtual virus visa visit visual vital vivid vocal voice void volcano volume vote voyage wage wagon wait walk wall walnut want warfare warm warrior wash wasp waste water wave way wealth weapon wear weasel weather web wedding weekend weird welcome west wet whale what wheat wheel when where whip whisper wide width wife wild will win window wine wing wink winner winter wire wisdom wise wish witness wolf woman wonder wood wool word work world worry worth wrap wreck wrestle wrist write wrong yard year yellow you young youth zebra zero zone zoo
There is one very good use of this list. If you have lost your recovery key, and you think you might have it on your computer or in an email somewhere, you can search your computer for these words. If you are able to find any of them, it is worth exploring the document and seeing if you might have used it to write down the other 11. These are the words that we suggest you backup with one of our seed cassette devices. This 12 word phrase or sometimes 24/25 is worth the entire value of your wallet. With a seed phrase, you can setup a new wallet and move millions of dollars in less than a minute.
Back to Bitcoin Safety Blog
The security in bits of a 12-word mnemonic that has a valid checksum as per BIP39 is not 132 bits, but rather 128 bits, as the last 4 bits are determined based on the first 128 bits — the initial «entropy».
- Even though the range of 2^132 of all possible mnemonics is 16 times
larger than 2^128 (where(2^128)*16 = 2^132), the checksum cannot
be predicted unless an attacker can break SHA256, as the checksum is
computed based on the hash digest of the leading 128 bits formatted
as a byte array.
So the idea with the checksum was to slow an attacker from searching through all possible 12-word mnemonics of which there are 2^132 of them, even though the number of valid ones is 2^128 in terms of a valid checksum (as if reducing the strength from 12 words to 11.6363636364 words, since the checksum completes part of the last word), as an attacker would have to run the SHA256 algorithm each time which will slow their brute-force search.
- Therefore, while 2048^12 = 2^132, the checksum means that the range
of checksum-valid mnemonics is 2048^11.6363636364 == 2^128.
In summary, I think a mnemonic with a valid checksum would be more safe than one without a checksum, on the basis that it’s probably less likely for SHA256 to be cracked anytime soon which would otherwise speed a potential brute-force search of all mnemonics.
- This means an attacker still needs to search in the range of 2^132
in order to find one of the 2^128 valid ones (i.e. there is no way
to only search the range of valid ones, unless SHA256 is broken).
Note: If you wanted to square your security (i.e. raise it to the power of 2), a 24-word mnemonic which represents 264 bits (minus an 8-bit checksum) would be the square of two 12-word mnemonics in terms of bit security as 2^128*2^128 == 2^256.
Such a huge leap in security could help protect a user later from Grover’s algorithm running on a fast-enough quantum computer which could perform such an n-time brute-force search in the «square of n-time», compared classical computers requiring n-time.
From: https://en.wikipedia.org/wiki/Grover%27s_algorithm:
Grover’s algorithm could brute-force a 128-bit symmetric cryptographic key in roughly 2^64 iterations or a 256-bit key in roughly 2^128 iterations.`
In other words, a 12-word mnemonic would have its security reduced to 64 bits (considered unsafe) in terms of classical computer security, while a 24-word mnemonic would only reduce to 128 bits in the same scenario.