# 12 versus 24 seed words: entropy, checksums and compatibility In BIP-39, a correctly generated 12-word mnemonic encodes 128 entropy bits plus a 4-bit checksum; 24 words encode 256 entropy bits plus an 8-bit checksum. More words increase that generated entropy, but they do not fix exposed backups or a compromised signer. Word count also does not identify the wallet format: Electrum’s native mnemonic system is different from BIP-39. Evidence: [Mnemonic code for generating deterministic keys](https://raw.githubusercontent.com/bitcoin/bips/927b6de9915c9262615a6399de51b200f81e5aa4/bip-0039.mediawiki); [Seed Version System](https://electrum.readthedocs.io/en/latest/seedphrase.html); [Securing your wallet](https://bitcoin.org/en/secure-your-wallet) Canonical: https://degreesofsatoshi.com/encyclopedia/bitcoin-12-vs-24-word-seed/ Published: 2026-10-02 Substantively modified: 2026-10-02 Independently verified by an automated reviewer: 2026-10-02T19:29:20.637Z Data current through: 2026-10-02 AI-assisted research and drafting with a separate automated source-verification pass; no external expert or named human review is implied. ## Key facts - **12 words:** 128 entropy bits + 4 checksum bits ([Mnemonic code for generating deterministic keys](https://raw.githubusercontent.com/bitcoin/bips/927b6de9915c9262615a6399de51b200f81e5aa4/bip-0039.mediawiki)) - **24 words:** 256 entropy bits + 8 checksum bits ([Mnemonic code for generating deterministic keys](https://raw.githubusercontent.com/bitcoin/bips/927b6de9915c9262615a6399de51b200f81e5aa4/bip-0039.mediawiki)) - **Compatibility:** Check the mnemonic system, not only length ([Seed Version System](https://electrum.readthedocs.io/en/latest/seedphrase.html)) ## Each BIP-39 word represents eleven encoded bits The wordlist contains 2,048 entries, so each word represents an 11-bit index. For 12 words, 12 × 11 = 132 encoded bits; 128 are entropy and four are checksum. For 24 words, 24 × 11 = 264, split into 256 entropy and eight checksum bits. The checksum is derived from the entropy. It helps detect some errors but does not add independent secret randomness and does not catch every invalid transcription. Evidence: [Mnemonic code for generating deterministic keys](https://raw.githubusercontent.com/bitcoin/bips/927b6de9915c9262615a6399de51b200f81e5aa4/bip-0039.mediawiki) ## A similar-looking phrase can use another system Electrum documents a native seed-version system that signals derivation information. A BIP-39 phrase has its own rules and may still need the correct passphrase, paths and script conventions to locate the intended accounts. Do not add or remove words to convert between formats. Those changes do not extend the original wallet; they alter or invalidate its recovery input. Use a supported migration transaction when changing wallet arrangements. Evidence: [Seed Version System](https://electrum.readthedocs.io/en/latest/seedphrase.html); [Mnemonic code for generating deterministic keys](https://raw.githubusercontent.com/bitcoin/bips/927b6de9915c9262615a6399de51b200f81e5aa4/bip-0039.mediawiki); [Multi-Account Hierarchy for Deterministic Wallets](https://raw.githubusercontent.com/bitcoin/bips/927b6de9915c9262615a6399de51b200f81e5aa4/bip-0044.mediawiki) ## Protect the complete recovery arrangement An attacker who obtains the necessary full recovery secret does not need to guess whether it originally had 128 or 256 bits of entropy. Storage, device authenticity and informed signing remain material risks for both lengths. Use the format generated and supported by the chosen wallet, preserve any required passphrase and test recovery through its documented process. Neither phrase length makes a public address capable of recovering the missing words. Evidence: [Securing your wallet](https://bitcoin.org/en/secure-your-wallet); [Mnemonic code for generating deterministic keys](https://raw.githubusercontent.com/bitcoin/bips/927b6de9915c9262615a6399de51b200f81e5aa4/bip-0039.mediawiki) ## Questions ### Can I turn a 12-word wallet into the same wallet with 24 words? Not by appending words. BIP-39 maps different valid mnemonic inputs through seed derivation; a longer newly generated phrase generally represents a different wallet. A transfer is needed to move funds between independent keys. Evidence: [Mnemonic code for generating deterministic keys](https://raw.githubusercontent.com/bitcoin/bips/927b6de9915c9262615a6399de51b200f81e5aa4/bip-0039.mediawiki) ### Does a valid checksum mean I restored the intended wallet? No. It checks the mnemonic encoding. The wrong valid mnemonic, a different normalized passphrase or incompatible derivation settings can still produce a different wallet or an incomplete view. Evidence: [Mnemonic code for generating deterministic keys](https://raw.githubusercontent.com/bitcoin/bips/927b6de9915c9262615a6399de51b200f81e5aa4/bip-0039.mediawiki); [Multi-Account Hierarchy for Deterministic Wallets](https://raw.githubusercontent.com/bitcoin/bips/927b6de9915c9262615a6399de51b200f81e5aa4/bip-0044.mediawiki) ## Claims and scope ### bitcoin-12-vs-24-word-seed-quick-answer In BIP-39, a correctly generated 12-word mnemonic encodes 128 entropy bits plus a 4-bit checksum; 24 words encode 256 entropy bits plus an 8-bit checksum. More words increase that generated entropy, but they do not fix exposed backups or a compromised signer. Word count also does not identify the wallet format: Electrum’s native mnemonic system is different from BIP-39. Educational explanation. Product-specific behavior is scoped to the cited documentation, checked 2026-10-02. Scope: {"collection":"bitcoin","dataAsOf":"2026-10-02","blockHeight":null} ### bitcoin-12-vs-24-word-seed-fact-12-words 12 words: 128 entropy bits + 4 checksum bits Scope: {"collection":"bitcoin","dataAsOf":"2026-10-02","blockHeight":null} ### bitcoin-12-vs-24-word-seed-fact-24-words 24 words: 256 entropy bits + 8 checksum bits Scope: {"collection":"bitcoin","dataAsOf":"2026-10-02","blockHeight":null} ### bitcoin-12-vs-24-word-seed-fact-compatibility Compatibility: Check the mnemonic system, not only length Scope: {"collection":"bitcoin","dataAsOf":"2026-10-02","blockHeight":null} ## Sources - [Mnemonic code for generating deterministic keys](https://raw.githubusercontent.com/bitcoin/bips/927b6de9915c9262615a6399de51b200f81e5aa4/bip-0039.mediawiki) — Bitcoin Improvement Proposals. Entropy and checksum table, intended computer-generated randomness and NFKD seed derivation. Locator: Generating the mnemonic; From mnemonic to seed. Retrieved: 2026-10-02T18:53:54.120Z. - [Seed Version System](https://electrum.readthedocs.io/en/latest/seedphrase.html) — Electrum. Electrum mnemonic format differs from BIP-39 and encodes a version indication. Locator: Electrum Seed Version System; Description; Motivation; Security implications. Retrieved: 2026-10-02T18:53:56.665Z. - [Securing your wallet](https://bitcoin.org/en/secure-your-wallet) — Bitcoin.org. Backup scope, online exposure, offline signing, custody and software update practices. Locator: Be careful with online services; Backup your wallet; Encrypt your wallet; Offline wallet for savings; Hardware wallets; Keep your software up to date. Retrieved: 2026-10-02T18:53:53.659Z. - [Multi-Account Hierarchy for Deterministic Wallets](https://raw.githubusercontent.com/bitcoin/bips/927b6de9915c9262615a6399de51b200f81e5aa4/bip-0044.mediawiki) — Bitcoin Improvement Proposals. Hardened account paths and external-chain discovery gap rule. Locator: Path levels; Account discovery; Address gap limit. Retrieved: 2026-10-02T18:53:54.097Z. ## Revision history - 2026-10-02: First publication after primary-source research and separate automated verification. ## Cite this entry Degrees of Satoshi editorial project. “12 versus 24 seed words: entropy, checksums and compatibility.” Published 2026-10-02; updated 2026-10-02. https://degreesofsatoshi.com/encyclopedia/bitcoin-12-vs-24-word-seed/