bip39 list

Everything You Need to Know About Bip39 List

The BIP39 list represents one of the most important security standards in the cryptocurrency world. This comprehensive wordlist serves as the foundation for creating secure seed phrases that protect millions of cryptocurrency wallets worldwide. Understanding BIP39 is essential for anyone serious about crypto security, wallet recovery, and digital asset protection.

What is BIP39?

BIP39, or Bitcoin Improvement Proposal 39, is a standard protocol that creates mnemonic sentences – human-readable seed phrases – which are used to derive deterministic keys for cryptocurrency wallets. These seed phrases typically consist of 12, 18, or 24 words randomly selected from a predefined list of 2048 words, collectively known as the BIP39 wordlist.

The BIP39 standard was proposed in 2013 as a way to make cryptocurrency wallet backups more user-friendly. Instead of requiring users to back up complex hexadecimal private keys, BIP39 allows them to write down a sequence of common English words that can be used to recover their wallet if needed.

At its core, BIP39 serves several critical functions:

• It provides a standardized method for generating cryptographically secure mnemonic phrases
• It ensures these phrases can be reliably converted back into the binary seed used to generate private keys
• It creates human-readable, easy-to-record backup solutions for cryptocurrency wallets
• It enables cross-wallet compatibility through a widely adopted standard

The power of BIP39 lies in its combination of security and simplicity. The 2048-word list was carefully designed to eliminate similar words that could be confused, making it more resistant to user error while maintaining a high level of entropy (randomness) necessary for cryptographic security.

History and Development of BIP39

BIP39 was formally proposed in September 2013 by a team of cryptocurrency developers led by Marek Palatinus, Pavol Rusnak, Aaron Voisine, and Sean Bowe. The proposal addressed a significant usability issue in the early Bitcoin ecosystem – the difficulty of backing up and restoring complex cryptographic keys.

Prior to BIP39, users had to manage lengthy hexadecimal strings as private keys, which were prone to transcription errors and extremely difficult to memorize. The innovation of BIP39 was to convert these binary seeds into human-readable words, dramatically improving the user experience of wallet backup and recovery.

The development process included careful word selection criteria:

• Words were chosen to minimize similarities and confusion
• The first four letters of each word are unique to prevent ambiguity
• Words are sorted alphabetically for easier lookup and verification
• Common words were preferred to aid memorization

After its introduction, BIP39 quickly gained adoption across the cryptocurrency ecosystem. It was implemented in popular wallet software like Trezor, Ledger, Electrum, and many others, eventually becoming the de facto standard for wallet seed generation in the industry.

The original English wordlist has since been expanded to include official translations in multiple languages, including French, Italian, Japanese, Korean, Spanish, Chinese (simplified and traditional), Czech, Portuguese, and others.

How BIP39 Works: Technical Breakdown

Understanding the technical mechanics behind BIP39 helps users appreciate the security and reliability of this standard. The process involves several cryptographic steps that transform random data into a memorable seed phrase and eventually into private keys.

Step 1: Initial Entropy Generation

The process begins with generating random entropy – true randomness that serves as the foundation for security. This initial entropy typically ranges from 128 to 256 bits depending on the desired security level:

• 128 bits of entropy produces a 12-word seed phrase
• 160 bits of entropy produces a 15-word seed phrase
• 192 bits of entropy produces an 18-word seed phrase
• 224 bits of entropy produces a 21-word seed phrase
• 256 bits of entropy produces a 24-word seed phrase

The more entropy used, the stronger the security, though 128 bits (12 words) is considered sufficiently secure for most applications.

Step 2: Checksum Calculation

After generating the initial entropy, a checksum is calculated by taking the SHA-256 hash of the entropy. The first few bits of this hash (1 bit for every 32 bits of entropy) are appended to the original entropy. This checksum serves as an error-detection mechanism to verify that a seed phrase has been recorded correctly.

Step 3: Word Selection from the BIP39 List

The combined entropy and checksum bits are then split into groups of 11 bits. Each 11-bit value (ranging from 0-2047) corresponds to a specific index in the 2048-word BIP39 list. These indexed words form the mnemonic seed phrase in sequence.

For example, the binary value 00000000000 (0) would map to the first word in the list, \”abandon,\” while 11111111111 (2047) would map to the last word, \”zoo.\”

Step 4: Seed Generation

When recovering a wallet, the mnemonic phrase is converted back into binary, verified using the checksum, and then processed using the PBKDF2 function with HMAC-SHA512. This process stretches the mnemonic into a 512-bit seed, applying 2048 rounds of hashing with an optional passphrase for additional security.

This final seed is what cryptocurrency wallets use with hierarchical deterministic wallet standards like BIP32/BIP44 to derive all the private/public key pairs for the wallet addresses.

The Complete BIP39 Wordlist

The official BIP39 English wordlist contains exactly 2048 words. Each word has been carefully selected to minimize confusion and transcription errors. The complete list is organized alphabetically, with words ranging from \”abandon\” to \”zoo.\”

For security reasons, I\’ll share only a sample of the wordlist rather than the complete list. Users should always obtain the official BIP39 wordlist from trusted sources or wallet providers:

Sample of the BIP39 Wordlist (First 50 words):

• abandon
• ability
• able
• about
• above
• absent
• absorb
• abstract
• absurd
• abuse
• access
• accident
• account
• accuse
• achieve
• acid
• acoustic
• acquire
• across
• act
• action
• actor
• actress
• actual
• adapt
• add
• addict
• address
• adjust
• admit
• adult
• advance
• advice
• aerobic
• affair
• afford
• afraid
• again
• age
• agent
• agree
• ahead
• aim
• air
• airport
• aisle
• alarm
• album
• alcohol
• alert

Key characteristics of the BIP39 wordlist:

• All words are between 3-8 characters long
• Words are chosen to minimize confusion between similar words
• The first four letters uniquely identify each word
• No words with problematic spellings, plurals, or homophones
• Common words are preferred to aid memorization

Generating Secure Seed Phrases

Creating a secure BIP39 seed phrase requires proper entropy sources and careful handling. While most users will use wallet software to generate seed phrases automatically, understanding the process ensures you can evaluate the security of your wallet\’s implementation.

Methods for Generating BIP39 Seed Phrases

There are several approaches to generating BIP39 seed phrases, each with different security implications:

• Hardware Wallet Generation: Devices like Trezor, Ledger, and KeepKey use secure elements and true random number generators to create seed phrases. This is generally considered the most secure method.
• Software Wallet Generation: Quality software wallets use the operating system\’s cryptographic random number generator. The security depends on the wallet implementation and the device\’s entropy source.
• Offline Generators: Open-source tools that can be run in a secure, offline environment provide a reasonable security model when used correctly.
• Physical Methods: Dice rolling, coin flipping, or other physical entropy sources can be used with conversion tables to manually create seed phrases.
• Brain Wallets: Creating phrases from memorable sentences or passages (not recommended due to vulnerability to dictionary attacks).

For maximum security, seed phrase generation should follow these principles:

• Use true random number generators, not pseudo-random algorithms
• Generate phrases in an offline, secure environment
• Verify the checksum is correctly implemented
• Never use pre-generated seed phrases provided by third parties
• Consider using the maximum word count (24 words) for critical wallets

Security Considerations When Generating Seed Phrases

The security of your cryptocurrency depends heavily on how your seed phrase is generated and stored. Consider these critical factors:

• Physical Security: Ensure no cameras, keyloggers, or other surveillance devices are present during generation
• Digital Security: Generation should occur on a secure device, ideally one that will never connect to the internet
• Verification: After generation, test recovery to ensure the seed phrase works correctly
• Entropy Quality: More entropy (randomness) means better security; avoid predictable patterns
• Additional Passphrase: Consider using BIP39\’s optional passphrase feature for critical wallets

Multilingual Support in BIP39

While the English wordlist is the most widely used, BIP39 supports multiple languages to make seed phrases more accessible to global users. Each language has its own carefully curated 2048-word list that follows similar selection criteria.

Officially Supported Languages

BIP39 currently supports these languages with official wordlists:

• English
• Japanese
• Korean
• Spanish
• Chinese (Simplified)
• Chinese (Traditional)
• French
• Italian
• Czech
• Portuguese

When creating or recovering wallets, users can select their preferred language. The same entropy values will produce different word sequences in different languages, but the underlying cryptographic seed remains equivalent.

Cross-Language Compatibility

It\’s important to understand that seed phrases are not directly compatible between languages. A 12-word phrase in English cannot be directly translated word-for-word to Japanese and expected to recover the same wallet.

Instead, wallet recovery requires using the same language wordlist that was used to create the seed phrase. Most wallet software allows users to select the language during the recovery process.

Security Considerations

The security of BIP39 seed phrases depends not only on their generation but also on how they\’re stored and protected. Even with a properly generated seed phrase, improper storage can compromise your cryptocurrency.

Best Practices for Securing Seed Phrases

To maximize the security of your BIP39 seed phrases, follow these essential practices:

• Physical Storage: Write the seed phrase on durable materials like metal plates, ceramic, or specialized crypto storage products that resist fire, water, and physical degradation.
• Multiple Copies: Store copies in different secure locations to protect against localized disasters.
• Avoid Digital Storage: Never store seed phrases in digital form (text files, photos, emails, cloud storage) unless strongly encrypted.
• Split Storage: Consider splitting the phrase into multiple parts stored in different locations (advanced users).
• Passphrase Usage: Implement BIP39\’s optional passphrase feature for critical wallets.
• Secrecy: Never share your seed phrase with anyone, including support personnel.
• Inheritance Planning: Create secure methods for authorized heirs to access your cryptocurrency in case of death or incapacitation.

Common Threats and Vulnerabilities

Understanding the threats to your seed phrase helps develop appropriate security measures:

• Physical Theft: Direct theft of written seed phrases by individuals with physical access
• Phishing Attacks: Scammers posing as support staff or using fake websites to trick you into revealing your seed phrase
• Malware: Keyloggers, clipboard hijackers, and other malicious software that can capture seed phrases during input
• Social Engineering: Manipulative techniques to convince you to reveal your seed phrase voluntarily
• Environmental Damage: Fire, water, or other damage to physical seed phrase backups
• Poor Randomness: Insufficient entropy during generation creating predictable seed phrases
• Death or Incapacitation: Loss of access due to the sole keyholder becoming unavailable

Wallet Compatibility

BIP39 has become the industry standard for seed phrase generation, but implementation details can vary between wallets. Understanding compatibility issues helps prevent potential recovery problems.

Wallets Supporting BIP39

Most major hardware and software wallets support the BIP39 standard, including:

• Hardware Wallets: Trezor, Ledger, KeepKey, BitBox, Coldcard, and others
• Mobile Wallets: Trust Wallet, Exodus, Mycelium, MetaMask Mobile, and many others
• Desktop Wallets: Electrum, Exodus, MetaMask, Atomic Wallet, and others
• Web Wallets: MetaMask Extension, MyEtherWallet, MyCrypto, and others

However, some wallets may use different derivation paths or additional standards alongside BIP39, which can affect cross-wallet compatibility.

Derivation Path Differences

While BIP39 standardizes the seed phrase format, additional standards like BIP32, BIP44, BIP49, and BIP84 determine how private keys are derived from the seed. Wallets may implement these standards differently, causing compatibility issues.

Common derivation path differences include:

• Bitcoin legacy addresses vs. SegWit vs. native SegWit
• Ethereum standard paths vs. custom implementations
• Multi-coin wallets vs. single-currency implementations
• Custom derivation paths for specific tokens or blockchains

When moving between wallets, you may need to specify the correct derivation path to access all your funds, even with the same seed phrase.

Testing Compatibility Between Wallets

Before fully committing to a wallet, it\’s advisable to test compatibility by:

• Creating a test wallet with minimal funds
• Recording the seed phrase securely
• Attempting recovery in different wallet software
• Verifying all accounts and addresses are accessible
• Testing transactions to ensure full functionality

This testing process can prevent potential issues when you need to recover your main wallet in an emergency.

Recovery Methods Using BIP39

The primary purpose of BIP39 seed phrases is to enable wallet recovery. Understanding the recovery process ensures you can regain access to your funds even if your original device is lost, stolen, or damaged.

Standard Recovery Process

The typical wallet recovery process follows these steps:

1. Access the recovery or import function in your wallet software
2. Select the option to recover from seed phrase or mnemonic
3. Choose the correct wordlist language
4. Enter your seed words in the exact original order
5. Enter your optional passphrase if you used one
6. Select the appropriate derivation path if prompted
7. Complete any additional verification steps
8. Verify received balances match expected amounts

Most wallets streamline this process with guided interfaces, often suggesting valid words as you type to minimize errors.

Partial Recovery Techniques

In some cases, you might have incomplete or partially damaged seed phrases. Several techniques can help recover funds in these scenarios:

• Missing Words: If you\’re missing one or two words from a 12-word phrase, specialized recovery tools can attempt all possible combinations from the BIP39 list, though this becomes computationally intensive with multiple missing words.
• Word Order Issues: If you have all words but are uncertain of the exact order, recovery becomes extremely difficult due to the vast number of permutations.
• Partially Legible Words: If you can read the first few letters of a damaged word, you can narrow possibilities using the BIP39 list since the first four letters uniquely identify each word.
• Checksum Verification: The BIP39 checksum can help verify if a reconstructed phrase is potentially valid before attempting wallet recovery.

These partial recovery techniques are often last-resort options and may require specialized tools or professional assistance.

Professional Recovery Services

For complex recovery scenarios or high-value wallets, professional cryptocurrency recovery services exist. These services typically:

• Use specialized hardware and software for brute-force attempts
• Employ cryptographic experts familiar with wallet implementations
• Provide confidential services with legal agreements
• Charge either flat fees or percentage-based compensation

When selecting a recovery service, extreme caution is warranted as this industry includes many scammers. Legitimate services never ask for your full seed phrase upfront and have established reputations in the cryptocurrency community.

Common Mistakes to Avoid

Many users lose access to their cryptocurrency due to preventable mistakes with their BIP39 seed phrases. Understanding these common errors can help you avoid costly losses.

Seed Phrase Handling Errors

The most frequent mistakes involve how seed phrases are recorded and stored:

• Taking Digital Photos: Creating digital images of seed phrases exposes them to malware, cloud backups, and remote hacking.
• Using Regular Paper: Standard paper is vulnerable to water damage, fire, and physical deterioration over time.
• Incorrect Word Order: Recording words in the wrong sequence makes recovery impossible without extensive brute-force attempts.
• Spelling Errors: Using incorrect spellings or similar-sounding words that aren\’t on the BIP39 list.
• Sharing with Others: Revealing your seed phrase to friends, family, or supposed \”support staff.\”
• Using Pre-Generated Phrases: Accepting seed phrases generated by third parties rather than generating them yourself.

Recovery Pitfalls

Even with correctly stored seed phrases, users encounter problems during the recovery process:

• Forgetting Passphrases: Using a BIP39 passphrase (sometimes called a \”25th word\”) but failing to record or remember it.
• Wrong Derivation Paths: Not specifying the correct derivation path when recovering in a different wallet.
• Confusion Between Standards: Mixing up BIP39 seed phrases with other backup formats like WIF private keys.
• Incomplete Recovery: Recovering only some accounts or coins when the original wallet contained multiple cryptocurrencies.
• Using Incorrect Wordlists: Attempting recovery with a different language wordlist than the one used to create the seed.

Security Compromises

Many users unknowingly compromise their seed phrase security:

• Online Searches: Entering seed words into search engines or websites to verify them.
• Unencrypted Backups: Storing seed phrases in plaintext digital formats, even if the files are hidden.
• Single Point of Failure: Keeping only one copy of the seed phrase, leaving it vulnerable to localized damage.
• Inadequate Physical Security: Storing seed phrases in easily accessible locations like desk drawers or unlocked safes.
• Poor Inheritance Planning: Failing to create secure methods for heirs to access funds in case of death.

Future Developments

The BIP39 standard continues to evolve alongside the broader cryptocurrency ecosystem. Understanding potential future developments helps users prepare for changes in seed phrase management.

Emerging Standards and Improvements

Several innovations are being developed to enhance or complement BIP39:

• Social Recovery: Systems that allow trusted contacts to collectively help recover access without revealing the full seed phrase to any individual.
• Shamir\’s Secret Sharing: Advanced implementations that split seed phrases into multiple shares, requiring a threshold number for recovery.
• Multisignature Integration: Combining BIP39 with multisig technology for improved security models.
• Enhanced Metadata: Additional information embedded in seed derivation to improve cross-wallet compatibility.
• Post-Quantum Resistance: Modifications to ensure seed phrases remain secure against quantum computing attacks.

Compatibility Considerations

As wallets evolve, users should consider:

• Maintaining awareness of changing standards in wallet software
• Testing recovery processes regularly with updated wallet versions
• Understanding how new derivation paths might affect access to funds
• Following best practices for long-term seed phrase storage as standards change
• Monitoring security announcements related to cryptographic standards

Frequently Asked Questions

Users commonly have questions about BIP39 seed phrases and their implementation. Here are answers to the most frequently asked questions:

General BIP39 Questions

Q: What happens if I lose my BIP39 seed phrase?
A: If you lose your seed phrase and don\’t have access to your wallet, your cryptocurrency is likely permanently lost. There is no \”forgot password\” feature or central authority that can restore access.

Q: Can I create my own custom seed phrase?
A: While technically possible, creating your own phrase introduces serious security vulnerabilities. Human-chosen phrases lack sufficient randomness and are vulnerable to attacks. Always use properly generated random seed phrases.

Q: How many possible BIP39 seed phrases exist?
A: For a 12-word seed phrase, there are approximately 2^128 (340,282,366,920,938,463,463,374,607,431,768,211,456) possible combinations. For a 24-word phrase, there are approximately 2^256 possible combinations, a truly astronomical number.

Security and Privacy Questions

Q: Can someone guess my seed phrase?
A: Random guessing is practically impossible due to the astronomical number of possible combinations. A properly generated 12-word seed phrase has 128 bits of entropy, making brute force attacks infeasible with current technology.

Q: What is a BIP39 passphrase and should I use one?
A: A BIP39 passphrase (sometimes called a \”25th word\”) is an additional password that modifies how the seed is generated from the mnemonic phrase. It adds security by creating a completely different wallet even with the same seed words. Consider using one for high-value wallets, but remember that losing this passphrase means losing access to your funds.

Technical Implementation Questions

Q: Can I use the same seed phrase across different cryptocurrencies?
A: Yes, many multi-cryptocurrency wallets use a single seed phrase to generate addresses for Bitcoin, Ethereum, and many other cryptocurrencies using different derivation paths.

Q: Why do some wallets use 12 words while others use 24?
A: Both provide strong security, but 24-word phrases offer 256 bits of entropy compared to 128 bits for 12-word phrases. While 128 bits is considered secure against brute-force attacks, some users prefer the additional security margin of 24 words.

Q: Can I convert between 12-word and 24-word seed phrases?
A: No, you cannot convert or extend a 12-word phrase into a valid 24-word phrase or vice versa. They represent different random values and generate different wallets.

Conclusion

The BIP39 wordlist represents a remarkable convergence of security and usability in cryptocurrency technology. By transforming complex cryptographic seeds into human-readable phrases, it has made secure cryptocurrency storage accessible to millions of users worldwide.

Understanding the BIP39 standard, its wordlist, and proper security practices is essential for anyone serious about protecting their digital assets. From properly generating seed phrases to ensuring secure storage and reliable recovery, the knowledge in this guide provides a foundation for responsible cryptocurrency management.

As the cryptocurrency ecosystem continues to evolve, the BIP39 standard remains a critical component of wallet security. By following best practices and staying informed about developments in this space, users can confidently navigate the world of cryptocurrency with their assets properly secured.

Remember that your seed phrase is the master key to your digital wealth. Treat it with appropriate caution, implement multiple layers of protection, and ensure you have reliable recovery options. With proper management of your BIP39 seed phrase, you can enjoy the benefits of cryptocurrency ownership with confidence in your security setup.