BIP39 Mnemonic Generator
Generated entirely in your browser using cryptographically secure randomness. Never share a real recovery phrase with anyone or type it into any website — this tool is for generating test phrases or understanding the standard, not for securing real funds without independent verification.
How to use this BIP39 generator
- Choose how many words you want (24 is the most common for wallets).
- Click "Generate" for a fresh, valid mnemonic phrase.
- Each phrase includes a built-in checksum word for error detection.
What is BIP39?
BIP39 is a standard for representing a large random number as a sequence of common words, used by most cryptocurrency wallets to back up and restore the keys that control funds. The words come from a fixed list of 2048 English words, and the last word encodes a checksum of the rest.
Is it safe to generate a real wallet phrase in a browser?
The math here is correct and uses secure randomness, but for real funds, generating a seed phrase offline on a dedicated hardware wallet is the safer, industry-standard practice — any internet-connected device carries some risk.
Why does word count vary from 12 to 24?
More words mean more entropy (randomness) and a stronger key — 12 words already provides 128 bits of entropy, considered extremely secure, while 24 words gives 256 bits for maximum security margin.
How a mnemonic phrase actually encodes a key
A BIP39 phrase isn't a list of arbitrary words — it's a human-readable encoding of a specific random number. The process starts with a block of pure entropy (128 bits for a 12-word phrase, up to 256 bits for 24 words), then appends a short checksum derived from a SHA-256 hash of that entropy, and finally splits the combined bits into 11-bit chunks, each mapped to one word from the standard 2048-word list (2^11 = 2048, which is exactly why the list has that specific size). This is why word count and entropy are directly linked — each additional group of 3 words adds exactly 33 bits combined of entropy plus checksum, and why a 24-word phrase is meaningfully more secure than a 12-word one, not just longer.
Why the checksum word catches typos, not theft
The final word (or the last few bits of it) in every BIP39 phrase encodes a checksum of the preceding entropy, which lets wallet software detect most transcription errors — a single mistyped or misremembered word will very likely produce an invalid checksum, causing the wallet to reject the phrase rather than silently generating a different, wrong wallet. This is a meaningful safety feature against accidental mistakes, but it's not a security feature against theft: a checksum only validates that a phrase is internally well-formed, it does nothing to protect the phrase itself once it exists — anyone who has your correct 12 or 24 words has everything needed to access the funds, checksum or not.
Why the specific word list matters, not just the word count
The standard English BIP39 word list wasn't chosen arbitrarily — each word is unique within its first four letters, so a wallet's autocomplete or partial-input verification can identify the intended word from just the first few characters, and words were also selected to minimize confusion between similar-sounding or similar-looking entries across supported languages. BIP39 defines separate word lists for multiple languages, and a phrase generated in one language's list isn't interchangeable with another — most wallets default to expecting the English list specifically, so a phrase needs to be restored using the same language list it was generated with, not just the same words in a different order or a mixed set.
The optional passphrase — sometimes called the "25th word"
BIP39 supports an optional user-chosen passphrase added on top of the mnemonic phrase itself, which combines with the word list to derive a completely different wallet than the words alone would produce — informally called the "25th word" even though it's a separate, freely chosen string rather than one more word from the standard list. This is a genuinely useful extra security layer (someone who finds your 24 words without also knowing the passphrase still can't access the funds), but it's also a well-known source of permanently lost funds: forgetting the exact passphrase, or a single character difference in how it was typed, silently derives a different, empty wallet with no error or warning, since there's no way for the software to know a passphrase is "wrong" versus simply describing a different wallet.
Limitations of this tool
This generator produces a mathematically valid BIP39 mnemonic with a correct checksum, but a mnemonic phrase by itself isn't a wallet — turning it into an actual set of cryptocurrency addresses and private keys requires a further derivation process (BIP32 for hierarchical keys, BIP44 or similar for coin-specific derivation paths), which this tool doesn't perform. As the disclaimer above states, this tool is meant for testing, learning how the standard works, and generating throwaway phrases for experimentation — for a mnemonic that will actually secure real funds, use a dedicated hardware wallet or well-audited, offline-capable wallet software, and verify any critical security tool independently rather than trusting a single browser-based generator.