Skip to main content
Share Your Experience: Take the 2024 Developer Survey
18 votes
Accepted

Is there a reason to why Bitcoin Core does not implement BIP39?

BIP 39 is not in Bitcoin Core largely for implementation reasons and because BIP 39 is not as secure as it could be. The structure of Bitcoin Core's wallet doesn't really allow for BIP 39 to be ...
Ava Chow's user avatar
  • 70.8k
15 votes

Practical way to split a bip39 seed into a 2 out of 3 factor auth?

One Time Pad or XOR is an elegant and information-theoretic secure [1] way to split a BIP39 seed. It's a method simple to describe (apt for a will), easy to verify (trust only yourself) and the ...
answerevaded's user avatar
14 votes
Accepted

Does BIP39 mnemonic construction avoid repeating words?

There is nothing stopping a word to be repeated more than once. In a 24 word mnemonic, with 2048 possible words in the dictionary (BIP 39), there is a probability of at least one duplicate around 12.7%...
meshcollider's user avatar
  • 11.8k
13 votes

Lost my Bitcoin wallet and have only 11 out of 12 mnemonic seed phrase words. How can I get my Bitcoins?

If you are missing the first word and you know the rest of the 11 words, there are 2048 possible mnemonics but only ~128 of them are valid. Using Python and this library you can print all the valid ...
Mike D's user avatar
  • 3,569
10 votes
Accepted

Is the Electrum seed compatible with other wallets?

There are different "backup-standards". Some use BIP39 (mnemonic) which lacks a flexible wordlist and versioning. It's used by KeepKey, Ledger, Trezor, Bitpay/Copay, etc. Electrum uses a ...
Jonas Schnelli's user avatar
10 votes

What's the relationship between SLIP39 and BIP39?

BIP39 (Bitcoin Improvement Proposal) describes the implementation of a mnemonic sentence (set of easy to remember words from a predefined wordlist of 2048 words) that can be mapped to a binary seed ...
thalisk's user avatar
  • 483
10 votes
Accepted

How much entropy is lost alphabetising your mnemonics?

TL;DR: you get around a factor 500 million attack speedup for 12 words, bringing it not quite in the realm of feasible attacks, but it's getting close. For 24 words, the speedup is around a factor ...
Pieter Wuille's user avatar
9 votes
Accepted

Will Electrum mnemonic seeds be forward compatible with all future versions of Electrum?

In fact, the reason Electrum 2.x changed to a 13-word seed* and is incompatible with BIP39 is because they added a version number to the end of the seed. This has the purpose of allowing future ...
ajwest's user avatar
  • 118
8 votes

Does BIP39 mnemonic construction avoid repeating words?

I went to https://iancoleman.github.io/bip39/ and after generating a dozen or so mnemonics I got audit again guess butter minute predict grid image fresh kit west will before noodle supply magic ...
Nate Eldredge's user avatar
8 votes
Accepted

How does BIP 39 mnemonic work?

Mnemonics are the private key separated in 12 words which joined together in the very same order produces the private key That is incorrect. A mnemonic represents an entropy that is passed to a ...
Ugam Kamat's user avatar
  • 7,407
7 votes
Accepted

Practical way to split a bip39 seed into a 2 out of 3 factor auth?

One can use Shamir's Secret Sharing Scheme, but the input ASCII string must be under 128 ASCII characters in length. Fortunately, the 2048 English BIP 39 words are guaranteed to be unique from their ...
skaht's user avatar
  • 3,067
7 votes

How many combinations are there from the BIP32 mnemonic list?

BIP 32 is not a mnemonic specification, so it has 0 possible combinations. I assume you are talking about BIP 39. In that case there are are 2048^12 combinations for 12 word mnemonics, 2048^18 for 18 ...
Ava Chow's user avatar
  • 70.8k
7 votes
Accepted

Bruteforce bitcoin address - I know the words + public address but not the order

Doing this requires three things: Permutations of the seed words The address you're trying to locate The derivation path for that address. In this specific case, the address is the one this puzzle ...
Raghav Sood's user avatar
  • 17.1k
7 votes

Why was giving someone else my 12 word backup a bad idea?

someone on blockchain support ask me to tell him my back up fund 12 word in order to reverse my bitcoin which was unconfirmed in my transaction Sorry to say, you were definitely scammed. You cannot ...
chytrik's user avatar
  • 18.3k
7 votes
Accepted

Can I "duplicate" a wallet using a backup phrase (12 words)?

Can I “duplicate” a wallet using a backup phrase (12 words)? Yes Where is my balance stored? Both wallets will scan the relevant parts of the public transaction-journal ("blockchain") to ...
RedGrittyBrick's user avatar
7 votes

How (un)safe is it to use non-random seed words?

There is a lot to unwrap here. I'll go over the points that need addressing, most important first: Don't try to invent your own cryptographic scheme If you read the manual to your wallet, it most ...
Vojtěch Strnad's user avatar
6 votes
Accepted

What is a mnemonic frequency analysis and why do I only need 4 letters of my seed words?

There are multiple questions being asked here. Firstly, some background info. BIP39 is a standard that includes word lists. The English one can be found at https://github.com/bitcoin/bips/blob/...
David Meister's user avatar
6 votes
Accepted

How to generate recovery phrase from private key

A short working example is worth a 1000 words. % echo -n "This is a VERY pooor low entropy brain wallet" | bx base16-encode | bx sha256 | cut -c 1-32 | bx mnemonic-new health boil host ostrich fire ...
skaht's user avatar
  • 3,067
6 votes
Accepted

BIP39 Manual Phrase Calculations - How are Multiple checksums valid?

You aren't actually encoding the same entropy with different checksums. The last word does not encode just the checksum, it also encodes some portion of the original entropy. For a 12 word mnemonic, ...
Ava Chow's user avatar
  • 70.8k
6 votes

How to generate public and private key pairs from the 12 seed words in python

Please try the following demo, and the result is same with https://iancoleman.io/bip39/. $ python3.6 test.py {'addr': '1A9vZ4oPLb29szfRWVFe1VoEe7a2qEMjvJ', 'coin': 'BTC', 'mnemonic_words': 'aware ...
debug's user avatar
  • 161
6 votes
Accepted

Should the BIP 39 mnemonic sentence checksum be eliminated from the standard? Does it do more harm than good?

No, I don't think the checksum should be removed or made optional. It doesn't do more harm that good. Bip39 is a simple way to copy computer-generated randomness from the computer onto, eg a piece of ...
Kalle Rosenbaum's user avatar
6 votes
Accepted

Is the 12-word phrase app-specific?

No your funds would still be at risk. There are only a few popular wallets that use seed phrases. Most wallets use BIP39(https://en.bitcoin.it/wiki/Seed_phrase) but there are some that use different ...
m1xolyd1an's user avatar
  • 5,656
6 votes

How much entropy is lost alphabetising your mnemonics?

The number of possible 12 word phrases (disregarding the checksum) is 2048 ^ 12 = 5444517870735015415413993718908291383296 The number of alphabetically ordered 12 word phrases is = ...
Mike D's user avatar
  • 3,569
6 votes

Can someone explain *simply*, but precisely, how the mnemonic seed phrase is used to produce the bip39 seed

These pictures are from Mastering bitcoin and were so insightful for me. How the mnemonic words are generated: How they are used to generates master seed of your wallet:
Amir reza Riahi's user avatar
5 votes

Does BIP39 mnemonic construction avoid repeating words?

No, the BIP39 construction does not avoid repeating words. It is possible for a word to show up multiple times, but since there are 2048 words it is fairly unlikely for repeats to show up in randomly ...
G. Maxwell's user avatar
  • 7,727
5 votes

How to generate recovery phrase from private key

Firstly, it is highly recommended not to use a brainwallet, your coins will be stolen. But in general, if you have a private key, there is no way to obtain the 12 word recovery phrase from it. That ...
meshcollider's user avatar
  • 11.8k
5 votes
Accepted

BIP39 12 words combination list

From where I can get bip39 ( 2048 words ) 12 words length possible combinations . There is no such list, because it is simply too large. From the 2048 words, 12 word mnemonics are 11 words + 1 ...
Raghav Sood's user avatar
  • 17.1k
5 votes

Why seed from BIP39 mnemonic phrase is much longer than entropy?

This is specified in BIP 39 itself: To create a binary seed from the mnemonic, we use the PBKDF2 function with a mnemonic sentence (in UTF-8 NFKD) used as the password and the string "mnemonic" + ...
Nate Eldredge's user avatar
5 votes

Can a BIP39 12-word mnemonic be used to restore a wallet through bitcoin-cli?

Bitcoin Core does not currently support BIP 39 mnemonics nor the size of the BIP 32 seed produced by a BIP 39 mnemonic. BIP 39 produces 512 bit seeds, but Bitcoin Core currently only supports ...
Ava Chow's user avatar
  • 70.8k

Only top scored, non community-wiki answers of a minimum length are eligible