What is BIP-39?
BIP-39 (Bitcoin Improvement Proposal 39) is the standard that turned unreadable cryptographic keys into the famous 12-24 word seed phrase. Before it, backing up a wallet meant writing down a 64-character hexadecimal private key — error-prone and hopeless for humans. BIP-39 replaced that with common English words.
Adopted in 2013, it is now used far beyond Bitcoin: MetaMask, Ledger, Trezor, Phantom, Trust Wallet, and virtually every non-custodial wallet generate seed phrases according to BIP-39.
The Three Things BIP-39 Defines
- The wordlists — exactly 2,048 common words per language (English, Japanese, Chinese, Spanish, and others). Sorted alphabetically, so every wallet agrees on each word’s index:
abandon= 0,zoo= 2047. See the complete BIP-39 wordlist. - The mnemonic generation rule — how random entropy bits become words: chop the bits into 11-bit chunks, read each chunk as an index into the wordlist.
- The checksum — the last word of a phrase isn’t random; it encodes a checksum of the entropy. A mistyped word usually makes the wallet reject the whole phrase instead of silently deriving a different, empty wallet.
12 vs 24 Words
| Phrase length | Entropy | Checksum bits | Total |
|---|---|---|---|
| 12 words | 128 bits | 4 bits | 132 bits |
| 24 words | 256 bits | 8 bits | 264 bits |
128 bits of entropy is already beyond any realistic brute-force attack. 24-word phrases add theoretical margin, not practical protection — the attacks that actually steal funds (phishing, fake support, malware) work equally well against both.
A Design Detail Worth Knowing
Every word’s first four letters are unique across the list. Wallets can store just 4 letters per word, and a human checking a sloppy handwritten backup only needs the first four letters to identify the word.
Security Notes
- The wordlist being public is not a weakness — the secret is which words were randomly chosen (2,048¹² ≈ 5.4 × 10³⁹ combinations for 12 words).
- BIP-39 supports an optional passphrase (“25th word”) that adds a secret only you know. It creates a completely different wallet — and if you forget it, the phrase alone cannot recover your funds.
- Sites that ask you to “validate” a BIP-39 phrase are harvesting it. The checksum makes external validators unnecessary; your own wallet does the check offline.