Crypto Gloss

BIP-39

BIP-39 is a Bitcoin Improvement Proposal that turns computer-generated random entropy into a human-readable mnemonic phrase and then derives a binary seed from that phrase. Wallet software can use that seed with a separate key-derivation standard such as BIP-32. The mnemonic is a backup format; it is not itself a private key, an account, or the cryptocurrency recorded on a blockchain.

How BIP-39 Generates a Mnemonic

A wallet begins with randomly generated entropy. BIP-39 adds a short checksum taken from the entropy’s SHA-256 hash, splits the combined bits into 11-bit values, and maps those values to words in a 2,048-word list. The specification allows entropy lengths from 128 to 256 bits:

  • 128 bits produces 12 words
  • 160 bits produces 15 words
  • 192 bits produces 18 words
  • 224 bits produces 21 words
  • 256 bits produces 24 words

The checksum helps a wallet detect some typing errors, but it is short and does not correct them. A phrase with a valid checksum is not proof that it is the phrase for a particular wallet; another valid phrase can lead to a different set of keys.

From Mnemonic to Wallet Keys

BIP-39’s second step uses PBKDF2 with HMAC-SHA512 and 2,048 iterations to derive a 512-bit seed from the mnemonic and an optional passphrase. BIP-39 defines this conversion, not the full account and address structure. BIP-32 describes hierarchical deterministic key derivation, while BIP-44 describes one widely used way to organize accounts and addresses under that hierarchy. Wallets can use other derivation standards, paths, or backup formats, so a BIP-39 phrase does not guarantee that every wallet will show the same accounts automatically.

The assets themselves remain recorded on their respective blockchains. In a self-custody wallet, the recovery phrase can restore keys that authorize transactions; a custodial service may control keys on a customer’s behalf and may not expose a BIP-39 phrase to that customer.

Wordlists and Compatibility

BIP-39 includes wordlists in several languages, but its specification notes that most compatible wallets support the English list and discourages generating phrases with other lists when broad compatibility matters. A phrase should be restored with the same words and compatible wallet format used to create it. Translating the words into another list changes the derived seed; it is not a safe way to localize or rewrite a backup.

The Optional Passphrase

BIP-39 permits an optional passphrase in addition to the mnemonic. “25th word” is an informal nickname: the passphrase can be a string, not only one word from the list, and it is processed as part of seed derivation. Every different passphrase, including a typo, produces a different valid seed. A wrong passphrase may therefore open a different, often empty wallet rather than display an error. The wallet cannot be recovered with the mnemonic alone if its passphrase is lost, so this feature adds a backup burden as well as a security option.

Security and Recovery Limits

BIP-39 does not prescribe where a wallet stores a phrase or whether a service is custodial. Treat a self-custody recovery phrase as highly sensitive: anyone who obtains it may be able to derive keys and move assets, depending on the wallet’s format and configuration. Never enter a real phrase into a website, online generator, or message to “support.” Keep a backup private and protected from damage, and confirm the wallet’s exact recovery format and derivation settings before relying on a restore plan.

Social Media Sentiment

A recent r/Bitcoin discussion asking whether users add a passphrase shows why the option is debated: some commenters value the extra separation, while others stress that the exact passphrase must be backed up and remembered. The thread also contains disagreement about decoy-wallet practices. It is an anecdotal discussion, not security advice or a representative survey; the BIP specification and a user’s wallet documentation should guide implementation details.

Last updated: 2026-10

Related Terms

See Also

Sources