18
votes
Accepted
Is there a reason to why Bitcoin Core does not implement BIP39?
BIP 39 is not in Bitcoin Core largely for implementation reasons and because BIP 39 is not as secure as it could be.
The structure of Bitcoin Core's wallet doesn't really allow for BIP 39 to be ...
- 68.5k
15
votes
Practical way to split a bip39 seed into a 2 out of 3 factor auth?
One Time Pad or XOR is an elegant and information-theoretic secure [1] way to split a BIP39 seed. It's a method simple to describe (apt for a will), easy to verify (trust only yourself) and the ...
- 151
14
votes
Accepted
Does BIP39 mnemonic construction avoid repeating words?
There is nothing stopping a word to be repeated more than once. In a 24 word mnemonic, with 2048 possible words in the dictionary (BIP 39), there is a probability of at least one duplicate around 12.7%...
- 11.8k
13
votes
Lost my Bitcoin wallet and have only 11 out of 12 mnemonic seed phrase words. How can I get my Bitcoins?
If you are missing the first word and you know the rest of the 11 words, there are 2048 possible mnemonics but only ~128 of them are valid.
Using Python and this library you can print all the valid ...
- 3,529
10
votes
Accepted
Is the Electrum seed compatible with other wallets?
There are different "backup-standards".
Some use BIP39 (mnemonic) which lacks a flexible wordlist and versioning. It's used by KeepKey, Ledger, Trezor, Bitpay/Copay, etc.
Electrum uses a ...
- 6,002
10
votes
What's the relationship between SLIP39 and BIP39?
BIP39 (Bitcoin Improvement Proposal) describes the implementation of a mnemonic sentence (set of easy to remember words from a predefined wordlist of 2048 words) that can be mapped to a binary seed ...
- 453
10
votes
Accepted
How much entropy is lost alphabetising your mnemonics?
TL;DR: you get around a factor 500 million attack speedup for 12 words, bringing it not quite in the realm of feasible attacks, but it's getting close. For 24 words, the speedup is around a factor ...
- 102k
9
votes
Accepted
Will Electrum mnemonic seeds be forward compatible with all future versions of Electrum?
In fact, the reason Electrum 2.x changed to a 13-word seed* and is incompatible with BIP39 is because they added a version number to the end of the seed. This has the purpose of allowing future ...
- 118
8
votes
Does BIP39 mnemonic construction avoid repeating words?
I went to https://iancoleman.github.io/bip39/
and after generating a dozen or so mnemonics I got
audit again guess butter minute predict grid image fresh kit west will before noodle supply magic ...
- 23k
8
votes
Accepted
How does BIP 39 mnemonic work?
Mnemonics are the private key separated in 12 words which joined together in the very same order produces the private key
That is incorrect. A mnemonic represents an entropy that is passed to a ...
- 7,348
7
votes
Accepted
Practical way to split a bip39 seed into a 2 out of 3 factor auth?
One can use Shamir's Secret Sharing Scheme, but the input ASCII string must be under 128 ASCII characters in length. Fortunately, the 2048 English BIP 39 words are guaranteed to be unique from their ...
- 3,047
7
votes
How many combinations are there from the BIP32 mnemonic list?
BIP 32 is not a mnemonic specification, so it has 0 possible combinations.
I assume you are talking about BIP 39. In that case there are are 2048^12 combinations for 12 word mnemonics, 2048^18 for 18 ...
- 68.5k
7
votes
Accepted
Bruteforce bitcoin address - I know the words + public address but not the order
Doing this requires three things:
Permutations of the seed words
The address you're trying to locate
The derivation path for that address.
In this specific case, the address is the one this puzzle ...
- 16.9k
7
votes
Why was giving someone else my 12 word backup a bad idea?
someone on blockchain support ask me to tell him my back up fund 12 word in order to reverse my bitcoin which was unconfirmed in my transaction
Sorry to say, you were definitely scammed.
You cannot ...
- 18k
7
votes
How (un)safe is it to use non-random seed words?
There is a lot to unwrap here. I'll go over the points that need addressing, most important first:
Don't try to invent your own cryptographic scheme
If you read the manual to your wallet, it most ...
- 6,648
6
votes
Accepted
What is a mnemonic frequency analysis and why do I only need 4 letters of my seed words?
There are multiple questions being asked here.
Firstly, some background info. BIP39 is a standard that includes word lists.
The English one can be found at https://github.com/bitcoin/bips/blob/...
- 176
6
votes
Recovering a HD wallet from a partial seed phrase
(The language used in this post is Python)
Breadwallet uses BIP39 to generate the 128-bit master seed from the 12-word mnemonic. The master seed is then used to generate a set of wallets/accounts ...
6
votes
Accepted
How to generate recovery phrase from private key
A short working example is worth a 1000 words.
% echo -n "This is a VERY pooor low entropy brain wallet" | bx base16-encode | bx sha256 | cut -c 1-32 | bx mnemonic-new
health boil host ostrich fire ...
- 3,047
6
votes
Accepted
BIP39 Manual Phrase Calculations - How are Multiple checksums valid?
You aren't actually encoding the same entropy with different checksums. The last word does not encode just the checksum, it also encodes some portion of the original entropy. For a 12 word mnemonic, ...
- 68.5k
6
votes
How to generate public and private key pairs from the 12 seed words in python
Please try the following demo, and the result is same with https://iancoleman.io/bip39/.
$ python3.6 test.py
{'addr': '1A9vZ4oPLb29szfRWVFe1VoEe7a2qEMjvJ',
'coin': 'BTC',
'mnemonic_words': 'aware ...
- 161
6
votes
Accepted
Can I "duplicate" a wallet using a backup phrase (12 words)?
Can I “duplicate” a wallet using a backup phrase (12 words)?
Yes
Where is my balance stored?
Both wallets will scan the relevant parts of the public transaction-journal ("blockchain") to ...
- 25.2k
6
votes
Accepted
Should the BIP 39 mnemonic sentence checksum be eliminated from the standard? Does it do more harm than good?
No, I don't think the checksum should be removed or made optional. It doesn't do more harm that good.
Bip39 is a simple way to copy computer-generated randomness from the computer onto, eg a piece of ...
- 424
6
votes
Accepted
Is the 12-word phrase app-specific?
No your funds would still be at risk. There are only a few popular wallets that use seed phrases.
Most wallets use BIP39(https://en.bitcoin.it/wiki/Seed_phrase) but there are some that use different ...
- 5,596
6
votes
How much entropy is lost alphabetising your mnemonics?
The number of possible 12 word phrases (disregarding the checksum) is 2048 ^ 12 = 5444517870735015415413993718908291383296
The number of alphabetically ordered 12 word phrases is
= ...
- 3,529
6
votes
Can someone explain *simply*, but precisely, how the mnemonic seed phrase is used to produce the bip39 seed
These pictures are from Mastering bitcoin and were so insightful for me.
How the mnemonic words are generated:
How they are used to generates master seed of your wallet:
- 1,225
5
votes
How to generate recovery phrase from private key
Firstly, it is highly recommended not to use a brainwallet, your coins will be stolen.
But in general, if you have a private key, there is no way to obtain the 12 word recovery phrase from it. That ...
- 11.8k
5
votes
Accepted
BIP39 12 words combination list
From where I can get bip39 ( 2048 words ) 12 words length possible combinations .
There is no such list, because it is simply too large.
From the 2048 words, 12 word mnemonics are 11 words + 1 ...
- 16.9k
5
votes
Why seed from BIP39 mnemonic phrase is much longer than entropy?
This is specified in BIP 39 itself:
To create a binary seed from the mnemonic, we use the PBKDF2 function with a mnemonic sentence (in UTF-8 NFKD) used as the password and the string "mnemonic" + ...
- 23k
5
votes
Can a BIP39 12-word mnemonic be used to restore a wallet through bitcoin-cli?
Bitcoin Core does not currently support BIP 39 mnemonics nor the size of the BIP 32 seed produced by a BIP 39 mnemonic. BIP 39 produces 512 bit seeds, but Bitcoin Core currently only supports ...
- 68.5k
Only top scored, non community-wiki answers of a minimum length are eligible