Encyclopedia Bitcoin basics · Entry 191
Brainwallets versus seed phrases: why a memorable sentence is different
In this article
At a glance
Key facts
Ask how the words were selected
The BIP-39 process starts with entropy and appends a checksum before mapping groups of bits to words. Its familiar words help people transcribe a generated secret; they are not an invitation to invent a sentence.
A phrase can be long, grammatical and emotionally meaningful while still belonging to a small set an attacker might try. The security question is the uncertainty before seeing the phrase, not the number of characters on paper.
A restricted choice has a restricted search space
Consider a deliberately simple illustration: choosing one favorite phrase from a known list of 100 gives at most 100 possibilities, however many words each phrase contains. Encoding 128 random bits starts from a vastly larger possibility space. The example compares selection methods, not real people’s exact entropy.
Passing a mnemonic checksum does not prove the words came from a secure generator. A badly generated or deliberately chosen phrase can still satisfy a format rule.
Memory is an additional dependency
A person can forget even a once-familiar phrase or make a transcription error. A secure, documented backup avoids relying on memory as the only recovery path. Protection from theft and recovery after loss both matter.
If funds already depend on a potentially predictable secret, use the wallet’s supported process to move them under independently generated keys you control. Merely changing an application password does not change the old on-chain spending authority.
Direct answers
Questions people ask
Does adding more personally chosen words make a phrase equivalent to 24 random words?
No. Predictable selection can leave far less uncertainty than independently generated entropy. A longer story or quotation does not inherit the entropy claimed for a correctly generated BIP-39 mnemonic.
Is a mnemonic passphrase the same as a brainwallet?
No. In BIP-39 it is an additional input combined with the mnemonic after normalization. Its strength and recoverability still matter, but it does not replace the need for properly generated mnemonic entropy.
Inspect the evidence
The answer and key facts have stable claim links. These records retain the scope and qualification when reused.
A brainwallet commonly derives spending keys from a phrase chosen by a person. A BIP-39 mnemonic instead encodes generated randomness plus a checksum, then derives a seed. A memorable quotation or personally meaningful sentence can be much easier to guess than randomly generated recovery words. Length alone is not entropy, and BIP-39 explicitly says it is not designed to turn user-created sentences into secure wallet seeds.
Educational explanation. Product-specific behavior is scoped to the cited documentation, checked 2026-10-02.
Scope: Bitcoin · data through 2026-10-02. Verification: verified · 2026-10-02T19:29:20.637Z.
Link to this claimMnemonic purpose: Human-readable encoding of generated randomness
Scope: Bitcoin · data through 2026-10-02. Verification: verified · 2026-10-02T19:29:20.637Z.
Link to this claimBrainwallet risk: Human choice can make candidates predictable
Scope: Bitcoin · data through 2026-10-02. Verification: verified · 2026-10-02T19:29:20.637Z.
Link to this claimChecksum: Consistency check, not proof of randomness
Scope: Bitcoin · data through 2026-10-02. Verification: verified · 2026-10-02T19:29:20.637Z.
Link to this claimRevision history
- — First publication after primary-source research and separate automated verification.
Source register
Sources and references
Retrieval dates and locators are recorded individually.- Mnemonic code for generating deterministic keysBitcoin Improvement Proposals
Entropy and checksum table, intended computer-generated randomness and NFKD seed derivation.
Locator: Generating the mnemonic; From mnemonic to seed · Version / scope: Pinned BIPs revision · Retrieved: 2026-10-02T18:53:54.120ZOpen source - Securing your walletBitcoin.org
Backup scope, online exposure, offline signing, custody and software update practices.
Locator: Be careful with online services; Backup your wallet; Encrypt your wallet; Offline wallet for savings; Hardware wallets; Keep your software up to date · Retrieved: 2026-10-02T18:53:53.659ZOpen source
Research and drafting use AI assistance. A separate automated review checks claims against primary sources; no external expert or named human review is implied. Publication, substantive editing, source retrieval and verification are recorded separately. This version was independently checked by an automated reviewer on 2 October 2026.
Editorial method and correctionsDegrees of Satoshi editorial project. “Brainwallets versus seed phrases: why a memorable sentence is different.” Published 2026-10-02; updated 2026-10-02. https://degreesofsatoshi.com/encyclopedia/bitcoin-brainwallets/