Seedphrase Generation
When you want to create a new cryptocurrency wallet, you require a seedphrase β a series of words that represents the secret key to your wallet. Seedphrases can be generated either
- Offline (preferred) β Air-gapped or hardware-based methods keep the phrase isolated from networks or malware.
- Online β Convenient but riskier due to potential data leaks or keyloggers.
Security during generation matters more than the cryptographic strength itself.
What Is Happening During Generation?
Behind the scenes, seedphrase generation involves cryptographic randomness and follows a widely adopted standard called BIP-39. Here’s what happens step by step:
Entropy Is Generated – The wallet software (or your dice rolls) creates a string of random bits known as entropy. This forms the raw foundation for your seedphrase.
Checksum Is Added – A checksum is calculated from the entropy and added to it. This helps detect simple errors, like incorrect or swapped words.
Words Are Derived – The resulting bit sequence is divided into equal parts, each pointing to a word in the BIP-39 word list. These become your final seedphrase.
12 vs. 24 Words
Words | Entropy | Checksum | Security Level |
---|---|---|---|
12 | 128 bits | 4 bits | High |
24 | 256 bits | 8 bits | Very High |
Longer seedphrases provide more entropy and are harder to brute-force. However, 12 words are considered sufficient for most use cases.
Best Ways to Generate a Seedphrase
Security | Convenience | |
---|---|---|
Hardware Wallet | β β β β β | β β β β β |
Dice-Based Method | β β β β β | β β βββ |
True RNG with Dice Entry | β β β β β | β β β ββ |
Offline Computer | β β β ββ | β β β ββ |
Hardware Wallet
Most hardware wallets (e.g. Ledger, Trezor, Coldcard) generate seedphrases using secure, built-in hardware randomness. These are widely trusted and user-friendly.
Dice-Based Method (Manual Entropy)
Roll a six-sided die multiple times to create your own entropy:
- For 128 bits: roll 6-sided dice 50 times
- For 256 bits: roll 6-sided dice 99 times
This raw entropy can be converted into a BIP-39 seedphrase using offline tools or calculators. Itβs slow but provably random and independent of any device.
Some hardware wallets allow you to input your dice rolls directly into the device to generate your seedphrase.
True RNG with Dice Entry
Some hardware wallets allow you to combine internal randomness with dice rolls, offering a blend of physical and digital entropy. This is considered one of the most secure generation methods.
Offline Computer or Air-Gapped Device
Set up a clean, never-connected system (e.g., booted from a live Linux USB). Use trusted open-source tools like:
Only in air-gapped environments this method provides secure seedphrase generation. Entropy is still generated by the device and therefore not completely independent of the device.