BIP39 Mnemonic Generator

Generate a valid 12–24 word BIP39 test mnemonic in your browser and see the entropy and checksum behind it.

Word count
Entropy
128 bits
Checksum
4 bits
Words
12
Language
English

Other wordlist languages are planned, not yet available.

Mnemonics generated on a website are for testing and learning. For a wallet that will hold funds, use a hardware wallet or the offline tool on a disconnected device.Generate real phrases only on a trusted device with networking turned off. For significant funds, prefer a hardware wallet.

Press Generate or Load test vector to see a mnemonic.

How to use the generator

  1. Choose a word count. The boxes show how many bits of entropy and checksum that length uses.
  2. Press Generate for fresh random entropy, or Load test vector for an official, reproducible example.
  3. Read the mnemonic and its entropy. The last bits of the final word are the checksum.
  4. Copy it into your test project, or press Clear. It is erased when you leave the page.

What is a BIP39 generator?

A BIP39 generator turns random data (entropy) into a list of words from the standard 2048-word list. The words are a human-friendly way to write down that random number. Wallets then turn the words into a 512-bit seed from which keys are derived.

Generating a mnemonic is just encoding randomness: the quality of the result depends entirely on the quality of the random source and on who could see it.

12 vs 24 words

Every length is a different amount of entropy plus a checksum of one bit per 32 bits of entropy.

WordsEntropy (ENT)Checksum (CS)Total bits
121284132
151605165
181926198
212247231
242568264

12 and 24 words are by far the most common. 15, 18 and 21 are valid BIP39 but supported by fewer wallets.

Entropy and the checksum

The generator takes the SHA-256 hash of the entropy, appends its first ENT/32 bits, and splits the result into 11-bit numbers. Each number selects a word. Because the final word carries the checksum, a typo in any word is usually detected. The checksum page shows every step with real test vectors.

Where the randomness comes from

This page uses crypto.getRandomValues, which asks the operating system’s cryptographically secure random number generator. It does not use Math.random, mouse movement, or text you type. If secure randomness is unavailable, the Generate button is disabled.

Online vs offline generation

Running in the browser means the words are never sent to a server — but it does not make a website trustworthy. The code you receive could be changed, and extensions or malware on your device could read the page. That is why this generator is labelled for testing and learning.

For a real wallet, prefer a hardware wallet, or download the standalone offline file, check its SHA-256, and run it on a device with networking turned off.

Frequently asked questions

Can I use a mnemonic generated here for a real wallet?

We don’t recommend it. The generator uses your browser’s secure random number generator, but any website can be changed by whoever controls its server, and your device may have extensions or malware that read the page. For a wallet that will hold funds, let a hardware wallet generate the phrase, or use the verified offline file on a disconnected device.

Can I choose my own 12 words?

Not freely. The last word contains checksum bits calculated from the others, so most hand-picked combinations are invalid. More importantly, words chosen by a person are far less random than 128 bits of machine entropy. See how the checksum works.

Are 12 words enough, or should I use 24?

12 words encode 128 bits of entropy, which is beyond practical brute force. 24 words encode 256 bits. Both are valid BIP39; the choice is usually set by the wallet. More words make the backup longer to write and check.

Why can’t I type in my own randomness?

Text you type, dice you describe incorrectly or phrases you remember are easy to get wrong and hard to verify. This tool only uses crypto.getRandomValues, the browser’s cryptographically secure generator. If it is unavailable, generation is disabled instead of falling back to something weaker.

Does this site keep a copy of the mnemonic?

No. Generation happens in your browser; the result is not sent, logged, stored or placed in the URL, and it is cleared when you leave the page. You can confirm there are no network requests in your browser’s developer tools. See the security model.