Overview
BIP39 establishes a standard method for converting random entropy into a sequence of common English words (or words in other languages) that can be written down, memorized, or stored as a backup. This mnemonic phrase serves as the root from which all wallet keys are deterministically generated using BIP32.
How It Works
Step 1: Generate random entropy (128 or 256 bits)
Step 2: Add checksum (first N bits of SHA-256 hash)
128 bits + 4 checksum bits = 132 bits → 12 words
256 bits + 8 checksum bits = 264 bits → 24 words
Step 3: Split into 11-bit segments (each maps to a word)
2^11 = 2048 possible words in the wordlist
Step 4: Look up each segment in the BIP39 wordlist
Step 5: Apply PBKDF2 with optional passphrase to derive master seed
Mnemonic + "mnemonic" + passphrase → 512-bit seed
Wordlist Properties
The BIP39 English wordlist contains exactly 2,048 words chosen so that:
- The first four characters uniquely identify each word
- No two words are too similar to each other
- Words are common and easy to spell
- Wordlists exist for multiple languages (English, Spanish, Japanese, Chinese, etc.)
Optional Passphrase
BIP39 supports an optional passphrase (sometimes called the "25th word") that is mixed into the seed derivation process. Using a passphrase creates an entirely different set of keys from the same mnemonic, providing plausible deniability and an additional layer of security.
Security Considerations
- Never store digitally: Mnemonic phrases should be written on paper or stamped into metal, never stored in plain text on a computer or in cloud storage.
- Never share: Anyone with your mnemonic phrase has full access to your funds.
- Verify backups: Test that your backup phrase correctly restores your wallet before depositing significant funds.
Common Misconceptions
Some users confuse the mnemonic phrase with the seed itself. The mnemonic is a human-readable encoding of the entropy; the actual seed is derived from the mnemonic through PBKDF2 with 2,048 rounds of HMAC-SHA512 stretching.