What's the difference between 12 word seed and 24 word seed?

Question

Why was the format switched to 24 words for some newer wallets?

score 6 · Accepted Answer · answered Mar 06 '18 at 12:41

6

The English-language wordlist for the BIP39 standard has 2048 words, so if the phrase contained only 12 random words, the number of possible combinations would be 2048^12 = 2^132, and the phrase would have 132 bits of security. However, some of the data in a BIP39 phrase is not random, so the actual security of a 12-word BIP39 mnemonic phrase is only 128 bits. This is approximately the same strength as all Bitcoin private keys, so most experts consider it to be sufficiently secure.

answered Mar 06 '18 at 12:41

Adam

3,639
1
12
36

1

How does this answer the question of why some wallets use 24 word mnemonic? – Sergei Tikhomirov Jan 22 '19 at 15:59
24-word is much secure but 12-word is enough – Adam Jan 22 '19 at 19:34
Do developers of the wallets which use 24 words not understand this? Why don't they go for 48 words to be even _more_ secure?.. – Sergei Tikhomirov Jan 23 '19 at 16:03
@SergeiTikhomirov 12-word seed is really enough and secure – Adam Jan 27 '19 at 00:44
In Bitcoin, a private key is a 256-bit number ... – Laurent Debricon Mar 09 '21 at 20:01
1

It sounds like the real answer is risk/reward as perceived by the manufactures. Some feel the risk of using 12 words is worth the reward of more customers because they feel that 1) 12 is secure enough and 2) they can get more customers because they would rather deal with half the words. – Love to Code Nov 14 '22 at 18:05

score 0 · Answer 2 · answered Mar 17 '19 at 21:53

0

A bitcoin private key is 256 bits. So you would need about 24 words (bip39 draws from 2048 words) to equal that. (2048^24= about 3x10^79 2^256= about 1x10^77)

answered Mar 17 '19 at 21:53

Newb on Linux Fedora

23
3

score 0 · Answer 3 · answered Mar 18 '19 at 03:11

Notice in the actual unsafe working examples below that:

12 words utilizes 128 (4x32) bits of entropy
18 words utilizes 192 (4x48) bits of entropy
24 words utilized 256 (4x64) bits of entropy

Note the results below can be easily extended to 15 and 21 BIP 39 seed words.

% echo -n "This is a VERY pooor low entropy brain wallet" | bx base16-encode | bx sha256 | cut -c 1-32 | bx mnemonic-new

health boil host ostrich fire spike body solar collect harvest catalog crystal

% echo -n "This is a VERY pooor low entropy brain wallet" | bx base16-encode | bx sha256 | cut -c 1-48 | bx mnemonic-new

health boil host ostrich fire spike body solar collect harvest catalog cup mix tattoo market festival sudden please

% echo -n "This is a VERY pooor low entropy brain wallet" | bx base16-encode | bx sha256 | cut -c 1-64 | bx mnemonic-new

health boil host ostrich fire spike body solar collect harvest catalog cup mix tattoo market festival sudden pony notable beach wide health original inform

Also note the repetition of the BIP 39 words above.

score -2 · Answer 4 · answered Mar 06 '18 at 12:37

-2

Well for starters that should exponentially increase the security of the password if anything else

answered Mar 06 '18 at 12:37

a1nb0

1
2

What's the difference between 12 word seed and 24 word seed?

4 Answers4