- Home
- / BIP39 Checksum Checker
BIP39 Checksum Checker
Paste a seed phrase to see whether its BIP39 checksum is valid, which words are not in the wordlist and what they were probably meant to be. The check runs in your browser.
What the checker tells you
- Words that are not in the list, each with up to three likely corrections: words with the same first four letters, or words one or two letters away. In the English list the first four letters identify every word, so "abso" can only be "absorb".
- Whether the length is valid. BIP39 phrases have 12, 15, 18, 21 or 24 words. 20 or 33 words point to a SLIP-39 share, 25 words to a Monero phrase.
- Whether the checksum matches, once every word is known and the length is right.
- Whether the words are an Electrum seed. Electrum has its own format, in which an HMAC-SHA512 of the phrase starts with a version number; current Electrum versions make such phrases fail the BIP39 check on purpose.
How the BIP39 checksum works
A BIP39 phrase encodes a random number, the entropy, plus a few check bits. The wallet hashes the entropy with SHA-256 and appends the first ENT/32 bits of the hash, where ENT is the entropy length. The combined bits are cut into groups of 11, and each group picks one of the 2048 words, so the checksum always sits in the last word.
| Words | Entropy | Checksum | Random combinations that pass |
|---|---|---|---|
| 12 | 128 bits | 4 bits | 1 in 16 |
| 15 | 160 bits | 5 bits | 1 in 32 |
| 18 | 192 bits | 6 bits | 1 in 64 |
| 21 | 224 bits | 7 bits | 1 in 128 |
| 24 | 256 bits | 8 bits | 1 in 256 |
To check a phrase, the tool turns the words back into numbers, splits off the last ENT/32 bits, hashes the rest and compares. The same check runs when you restore a wallet, which is why a typo usually produces an "invalid mnemonic" error instead of an empty wallet. The method is defined in the BIP39 specification; this page uses the same @scure/bip39 library as the site's other tools.
When a phrase fails
Most failures come from writing the phrase down, not from the wallet. In order of likelihood:
- A misspelled word. The checker flags it and suggests corrections; the full BIP39 word list lets you compare letter by letter.
- A word misread as another valid word, such as wave and wage. Both are in the list, so only the checksum notices.
- Two swapped words, often in a phrase copied in columns.
- A phrase that is not BIP39: Electrum seeds, SLIP-39 shares, Monero phrases, or TON's 24-word format, which uses BIP39 words but its own check.
Our guide on how to fix seed phrase errors walks through each case, including how many combinations a missing word leaves.
Related tools
Building a phrase from dice or coin flips? The BIP39 last word calculator lists every word that completes it. To see the keys and addresses a test phrase produces, use the seed phrase to private key converter, and to create a random phrase, the BIP39 generator.
BIP39 Checksum Checker — Frequently Asked Questions
Should I check the seed phrase of my real wallet here?
No. The check runs in your browser, but a phrase typed into any web page is exposed to extensions, other scripts and malware on the computer. Use the checker to learn and to test software with public test phrases. To check a phrase that guards real funds, restore it in the wallet itself, or run an offline copy of a BIP39 tool on a computer that never goes online.
What does a valid checksum prove?
Only that the words fit together: the last bits of the phrase match the SHA-256 hash of the rest. It catches most typos, but it is not proof that the phrase is the one your wallet uses. About 1 in 16 random 12-word combinations, and 1 in 256 random 24-word combinations, also pass.
All my words are in the list but the checksum fails. What now?
Look for a word that was misread as another valid word (wave and wage, for example), two swapped words, or a missing word replaced by a guess. If the phrase came from Electrum, it is probably not a BIP39 phrase at all: current Electrum versions create seeds that deliberately fail the BIP39 check. Restore it in Electrum.
Which wordlists does the checker support?
All ten official BIP39 lists: English, Japanese, Korean, Spanish, Chinese (Simplified and Traditional), French, Italian, Czech and Portuguese. It picks the list that contains your words; most wallets use only English.
Does capitalisation matter?
Not for the words: the checker reads them in lower case, as most wallets do. It does matter for a BIP39 passphrase, which is a separate field in the wallet and is not checked here.
Guides
- How to Fix Seed Phrase Errors
Fixing seed phrase errors starts with understanding the BIP39 checksum; this guide covers step-by-step methods and tools to recover a mistyped word.
- What Is a Seed Phrase? How It Works and How to Restore One
A seed phrase is 12 to 24 BIP39 words that encode your wallet's random secret. See how the words become your keys and how to restore a wallet.
- Why You Should Never Create Your Own Seed Phrase
Manually creating your own seed phrase undermines security since human-picked words lack true randomness; use proper BIP39 generation instead.