All 2048 official mnemonic words, instantly searchable. Type any prefix — the list filters as you type. Click a word to copy.
BIP39 (Bitcoin Improvement Proposal 39) defines a list of 2048 carefully chosen English words used to encode a wallet's master seed as a human-readable mnemonic phrase. The same list is used by virtually every modern hardware and software wallet — Ledger, Trezor, MetaMask, Phantom, Coinbase Wallet, and thousands more.
2048 = 2¹¹. Each word encodes 11 bits of entropy. A 12-word phrase therefore carries 132 bits (128 bits of entropy + 4 checksum bits); a 24-word phrase carries 264 bits (256 + 8). The word count maps cleanly onto cryptographic block sizes.
Yes. The list was designed so that every word can be unambiguously identified by its first 4 letters alone. This means metal seed-phrase backups only need to engrave the first 4 characters of each word, and software wallets can offer fast prefix-based autocomplete without ambiguity.
Each word's cryptographic index is 0–2047 (we display them as 1–2048 here for readability — subtract 1 to get the spec index). That index converted to an 11-bit binary number is the bit-string the word represents. Words are concatenated (12 × 11 = 132 bits or 24 × 11 = 264 bits) and the trailing bits are a SHA-256 checksum of the entropy.
Yes — this is a read-only reference. There is no input field that asks for your seed phrase. Nothing is sent to a server. The 2048 words are baked into the page and the search runs entirely in your browser. Never type your real seed phrase into any website.
The official source is bitcoin/bips on GitHub: bip-0039/english.txt. The SHA-256 of the canonical English file is 2f5eed53a4727b4bf8880d8f3077f... — the words on this page match it byte-for-byte.
Yes. The entire word list is embedded in this single HTML page — once it's loaded, you can disconnect from the internet (or save the page) and it will keep working. Use the Download .txt button to grab the raw 2048-line text file.
Both are far beyond brute-forceable. 12 words = 128 bits of entropy ≈ 3.4×10³⁸ possibilities; 24 words = 256 bits ≈ 1.16×10⁷⁷. 24 words is more conservative against future cryptanalytic advances, but 12 words is already secure against any classical attack. Most users are fine with 12.