Seed Phrase Entropy Calculator
A seed phrase encodes a wallet's random secret as words drawn from a fixed wordlist. Its guessing resistance is the entropy it carries, measured in bits. Each word contributes the base-2 logarithm of the wordlist size, so the standard BIP-39 list of 2,048 words gives exactly 11 bits per word. This calculator multiplies your word count by the per-word entropy to give total bits, the number of possible phrases, and the BIP-39 true-entropy figure after the checksum. Enter a non-standard wordlist size if you are not using the canonical 2,048-word list.
Seed phrase entropy formula
Bits per word = log2(wordlist size)
Total entropy bits = word count * bits per word
BIP-39 true entropy = total bits * 32 / 33
Possible phrases (log10) = total bits * log10(2)
BIP-39 dedicates one checksum bit for every 32 bits of entropy, so true entropy is 32/33 of the total word bits. The log10 figure tells you the order of magnitude of distinct phrases.
BIP-39 seed phrase context
- The canonical BIP-39 wordlist holds 2,048 words, giving exactly 11 bits per word.
- A 12-word phrase carries 128 bits of true entropy plus a 4-bit checksum.
- A 24-word phrase carries 256 bits of true entropy plus an 8-bit checksum.
- An optional passphrase (the BIP-39 "25th word") adds further entropy outside this calculation.
- Only generate phrases from a properly seeded random source; never pick words by hand.
Seed phrase entropy: frequently asked questions
What is a seed phrase?
A seed phrase, or mnemonic, is a human-readable backup of a cryptographic wallet seed. The BIP-39 standard encodes random entropy as a sequence of words drawn from a fixed 2,048-word list. Each word represents 11 bits because 2 to the power 11 equals 2,048. The phrase plus an optional passphrase reconstructs the wallet's master key.
How is seed phrase entropy calculated?
Entropy in bits equals the word count multiplied by the base-2 logarithm of the wordlist size. For a BIP-39 12-word phrase from a 2,048-word list, that is 12 times log2(2,048), which is 12 times 11, equals 132 bits. BIP-39 reserves part of those bits as a checksum, so a 12-word phrase carries 128 bits of true entropy plus a 4-bit checksum.
How many words give 256-bit security?
A 24-word BIP-39 phrase carries 256 bits of entropy plus an 8-bit checksum, for 264 total bits across the words. This is why hardware wallets default to 24 words for maximum security. A 12-word phrase carries 128 bits, which is still considered strong.
Does this calculator include the checksum?
It reports total bits across the words, which is word count times log2 of the wordlist. BIP-39 then dedicates a fraction of those bits to a checksum: roughly one checksum bit per 32 bits of entropy. Use the total bits figure for raw guessing resistance and subtract the checksum for true entropy if you are following BIP-39 exactly.
Why does wordlist size matter?
Each word's contribution is log2 of the list size, so a larger list packs more bits per word. The standard BIP-39 list is 2,048 words for exactly 11 bits each, which keeps the math clean and the phrase short. If you use a non-standard list, enter its size to get the correct per-word entropy.
Official sources
- Bitcoin Improvement Proposals: BIP-39 Mnemonic code.
- NIST: Computer Security Resource Center: entropy glossary.
Reviewed by the CalculatorHub team, edited by James Graham, 17 June 2026. See our methodology.