BIP-39 Explained: How Seed Phrases Work

2026-08-24

BIP-39 is a standard that defines how wallet entropy can be represented as a human-readable mnemonic phrase and then converted into a seed. It is commonly associated with 12- or 24-word recovery phrases used by cryptocurrency wallets.

What BIP-39 is

A crypto wallet is ultimately built from a large random number. Writing that number down as raw digits would be error-prone, so BIP-39, introduced in 2013, defines a way to encode it as ordinary words instead. People copy words far more reliably than long strings of hex, which is exactly why almost every modern wallet shows you a word list rather than a code. The words are just a human-friendly form of the same secret.

The 2,048-word list

BIP-39 uses a fixed list of exactly 2,048 English words, arranged alphabetically from “abandon” to “zoo.” Each word stands for an 11-bit value, so its position in the list — not the word itself — carries the information. The list is chosen so that the first four letters of each word are unique, which lets wallets auto-complete and check entries. Other languages have their own official lists, but the English one is by far the most common.

12 words vs 24 words

The number of words depends on how much randomness (entropy) the wallet starts with: 128 bits produces a 12-word phrase, and 256 bits produces a 24-word phrase. Both are far beyond any realistic chance of being guessed, so 12 words is plenty secure; 24 words simply adds margin and is the default on many hardware wallets. Importantly, the final word is not random — it includes a checksum, so a phrase with a typo will usually be rejected as invalid.

From words to keys

The words themselves are not your private keys. Your wallet feeds the phrase, plus an optional passphrase, through a slow hashing function (PBKDF2-HMAC-SHA512) to produce a 512-bit seed, and every key and address is then derived from that seed. Because the process is standardised, the same phrase recreates the same wallet in any BIP-39-compatible app — which is what makes your seed phrase both your backup and, in the wrong hands, full access.

BIP-39 Passphrase

BIP-39 also supports an optional passphrase. The same mnemonic combined with a different passphrase produces a different seed, which can lead to a completely different wallet.

12 words and 24 words compared

Twelve-word and twenty-four-word BIP-39 phrases compared on starting entropy, how far they sit beyond guessing, and the checksum in the final word.

The bottom line

BIP-39 is why your backup is a list of words instead of a wall of numbers: it encodes your wallet's secret as a checked, human-readable phrase. Anyone with the phrase can rebuild the wallet, so store it offline and never type it into a website. Twelve words are already secure; the checksum guards against typos; and the standard is what lets you recover your funds in almost any wallet. To keep learning the fundamentals, follow more from Bitbase Academy.

Frequently asked questions

Is BIP-39 the same as a seed phrase?

Not quite. BIP-39 is the standard that defines how a wallet's random starting number is encoded as ordinary words and then converted into a seed; the seed phrase is what that standard produces. The words are simply a human-friendly form of the same secret.

Why do wallets use 12 or 24 words?

The word count follows how much randomness the wallet starts with: 128 bits produces a 12-word phrase and 256 bits produces a 24-word phrase. Both sit far beyond any realistic chance of being guessed, so 12 words is plenty secure and 24 simply adds margin.

What is a BIP-39 passphrase?

A BIP-39 passphrase is an optional extra secret that the standard supports alongside the words. The same mnemonic combined with a different passphrase produces a different seed, which can lead to a completely different wallet.

What is the difference between BIP-39, BIP-32 and BIP-44?

BIP-39, BIP-32 and BIP-44 cover different steps of the same chain. BIP-39 turns the wallet's randomness into words and then into a seed, BIP-32 defines how a whole tree of keys is derived from that seed, and BIP-44 sets the account and coin path convention wallets follow inside that tree.