BIP39 Wallets: Which Wallets Support BIP39 Seed Phrases (Compared)

Most popular wallets support BIP39 seed phrases: hardware wallets such as Trezor, Ledger, Coldcard, Keystone and BitBox02, Bitcoin apps such as Sparrow and BlueWallet, and multichain wallets such as MetaMask, Trust Wallet, Phantom and Exodus all create or restore the standard phrases of 12 to 24 words. Support still varies. Wallets differ in the phrase lengths and word lists they accept, in whether they take a BIP39 passphrase or SLIP-39 shares, and in the derivation path they use by default, and a few well-known wallets have no BIP39 phrase at all. The tables below compare 37 wallets in 39 rows, since Trezor models differ. Every cell was checked in October 2026 against the maker’s own help pages, documentation or source code, listed under each table.

BIP39 Wallets at a Glance

• Phrase lengths. 12 and 24 words work almost everywhere. Exodus, Atomic Wallet and Coinbase Wallet document 12 words only. 18-word phrases restore on Trezor, Ledger, Coldcard, Keystone, KeepKey and Tangem, but not on BitBox02 (removed in firmware 9.24.0), Jade or Passport, which take 12 or 24.
• BIP39 passphrase. Trezor, Ledger, Coldcard, Keystone, BitBox02, Jade, Passport, OneKey, KeepKey and SeedSigner support it, Tangem on import and SafePal on the S1, and so do Electrum, Sparrow, Wasabi, BlueWallet, the Blockstream app, Nunchuk, Cake Wallet, Unstoppable and Rabby. MetaMask, Rainbow and Brave Wallet always derive the seed with an empty passphrase.
• SLIP-39 shares. Trezor (except the Model One), Keystone 3 Pro, OneKey Pro and Wasabi create them; Electrum, Sparrow, BlueWallet and Rabby restore them.
• Word lists. Every wallet whose word lists we could confirm reads only the English list, except BlueWallet and Unstoppable, which accept all ten official BIP39 lists, and Phoenix, which has four. MetaMask states that imported phrases must be English.
• No BIP39 phrase. Bitcoin Core, Muun, Zengo and Bitkey never show one. Tangem and Coinbase Wallet create wallets without a phrase by default.
• Formats of their own. Electrum creates Electrum seeds, Keeper’s TON wallets use the 24-word TON phrase, and Cake Wallet’s Monero wallets use a 16-word Polyseed by default.

How to Read the Tables

• Open source. Yes: the official code is public under an open-source licence, named in the sources; for hardware wallets this means the firmware. Partly: some components are open, others closed. Source-available: the code is published, but its licence restricts use.
• Creates / Restores. The BIP39 lengths a wallet generates for a new wallet and the lengths it accepts when you restore one; 12–24 means all five lengths (12, 15, 18, 21, 24). SLIP-39 20, 33 means shares of 20 or 33 words.
• Passphrase. Support for the optional BIP39 passphrase, the “25th word” that opens a separate wallet; a number is the maximum length in characters.
• SLIP-39. Shamir shares, which are not BIP39 phrases; see SLIP-39 vs BIP39.
• Default path. The derivation path for the first account; n is the account number. For Bitcoin, BIP84 stands for Native SegWit (m/84’/0’/n’), BIP49 for nested SegWit, BIP44 for legacy and BIP86 for Taproot. The same words give different addresses on different paths.
• Restore steps. A link to the wallet’s section in our guide to restoring a wallet from a seed phrase, where it covers that wallet.
• — means the maker’s documentation and code did not confirm the fact; n/a means it does not apply because the wallet has no BIP39 phrase.

Hardware Wallets

Most hardware wallets generate the words on the device itself and take them there when you restore; Tangem’s optional phrase is generated by its phone app. For screens, chips and connections model by model, see our hardware wallet comparison.

Sources:

• Trezor: backup formats by model, passphrase limits, firmware word counts for the Safe and Model T and the Model One, the firmware’s only BIP39 word list, Trezor Suite paths for Bitcoin and Ethereum. The Safe 3 has made a 20-word SLIP-39 backup by default since June 2024; earlier units defaulted to 12 BIP39 words. The firmware licence is GPLv3, LGPLv3 and MIT; Trezor Suite uses Trezor’s own T-RSL licence.
• Ledger: restore guide (devices generate only 24 words; 12 and 18 exist for phrases from other wallets), Native SegWit by default, Ledger Wallet’s default derivation scheme, passphrase (up to 100 characters), what is open source: Ledger Wallet is MIT-licensed, while the low-level secure element code cannot be published under Ledger’s agreement with the chip maker.
• Coldcard: creating and importing seeds (import “BIP-39 (English only)”), passphrase (up to 100 ASCII characters), derivation paths, Seed XOR, licence (MIT with the Commons Clause).
• Keystone: first setup (24 words), 12 or 24 words or Shamir, Shamir backup, passphrase, firmware word counts on import and word list, licence (MIT).
• BitBox: recovery words (12 or 24, English), firmware changelog (v9.24.0 removed 18-word restore), optional passphrase, Native SegWit account by default, firmware repository (Apache-2.0).
• Blockstream Jade: setup with passphrase and length options, firmware mnemonic code (12 or 24 words, English only), repository (MIT).
• Foundation Passport: Passport Core setup, firmware restore flow and passphrase flow (GPL-3.0-or-later). Passport Prime backs up with a 2-of-3 Magic Backup by default, according to Foundation’s FAQ.
• Tangem: setup without a seed phrase (keys generated in the chip, backed up to other cards), setup with a seed phrase, import and passphrase, app licence (“not an open source license”).
• SafePal: 12- or 24-word phrases on the S1, S1 Pro and X1, S1 features and open-source scope.
• OneKey (Pro, Classic 1S, Mini, Touch): OneKey Pro specs, SLIP-39 on the Pro since 4.15.0, passphrase, import in the OneKey App (12 to 24 words). The firmware is GPLv3, LGPLv3 and MIT; the app uses OneKey’s own source licence.
• KeepKey: 12 words by default, 12, 18 or 24 on recovery, passphrase, firmware (LGPL-3.0).
• SeedSigner: features (MIT; new phrases from dice rolls, camera images or chosen words; passphrase; script types), 12- and 24-word flows, settings (only the English list enabled).
• Bitkey: how Bitkey works without a seed phrase (keys on your phone, the device and Bitkey’s server, any two of them sign), licence (MIT).

Desktop Wallets

Sources:

• Electrum: seed documentation, BIP39 checksum code (12 to 24 words, English list), import wizard (p2wpkh by default), release notes (SLIP-39 since 4.1.5), repository (MIT). The difference between the formats is covered in Electrum seed vs BIP39.
• Sparrow: word count menu, default script type, English word list, SLIP-39 since 2.0.0, repository (Apache-2.0).
• Wasabi: wallet generation (12 words or SLIP-39 shares), FAQ (passphrase, BIP84 and BIP86), recovery screen code, SLIP-39 in 2.6.0, repository (MIT).
• Bitcoin Core: managing wallets (file backups, descriptor paths), default address type, repository (MIT). The source code contains no BIP39 support; our Bitcoin Core backup guide explains what to back up instead.
• Exodus: the 12-word secret key (always 12 words, English list), restoring, derivation paths, open-source scope.
• Atomic Wallet: restoring from the 12-word phrase, why parts of the code are closed.

Mobile Wallets

Sources:

• BlueWallet: new-wallet code (16 bytes, or 16 or 32 bytes of your entropy), HD SegWit path, import code (BIP39, Electrum, SLIP-39, passphrase), word lists accepted, import guide, repository (MIT).
• Blockstream app: recovery phrase (12 or 24 BIP39 words; Multisig Shield funds do not appear in a singlesig restore), restoring, BIP39 passphrase, singlesig paths, app page, Android source (GPL-3.0).
• Nunchuk: creating a software key (24 words, optional passphrase), Android source (GPL-3.0).
• Muun: why Muun uses no mnemonic, source (MIT).
• Phoenix: FAQ (a 12-word seed), mnemonic languages, source (Apache-2.0).
• Cake Wallet: Bitcoin (12-word BIP39 by default, 24 or Electrum as options, m/84’/0’/0’), Monero, Ethereum, creating a wallet (optional passphrase under Advanced Settings), source (MIT).
• Trust Wallet: restoring (12-word phrase), importing (“a 12 or 24-word backup”), default paths in Wallet Core, the open-source library the app is built on (Apache-2.0).
• Coinbase Wallet: wallet types (smart wallets with passkeys, email and social sign-in wallets, and mnemonic wallets imported with a 12-word phrase).
• Zengo: security model (two key shares, one on the phone and one on Zengo’s server), recovery (email, cloud recovery file, 3D FaceLock).
• Keeper: Keeper, formerly Tonkeeper, help on the recovery phrase, importing and TON vs multichain wallets, phrase types in the code, source for iOS and Android (GPL-3.0). See the TON seed phrase format.
• Unstoppable Wallet: word counts on creation, restore screen (passphrase, language choice), supported languages, source (MIT).

Browser Extension and Web Wallets

Sources:

• MetaMask: using an existing wallet (“Imported SRPs must be in English”), creating a wallet (12 words or social login), derivation path, import screen code (12 to 24 words; the help center mentions 12 or 24), HD keyring (seed derived with no passphrase), Bitcoin accounts, licence (ConsenSys copyright with a limited licence).
• Rabby: phrase generation, import inputs (12 to 24 words, SLIP-39, passphrase, English list), default HD path, licence (MIT).
• Phantom: creating a wallet (12 words; 24-word BIP39 phrases import), derivation paths.
• Rainbow: phrase generation, import validation, seed without passphrase, default path, repository (GPL-3.0).
• Brave Wallet: BIP39 code (sizes, validation), seed with an empty passphrase, paths for Ethereum, Solana and Bitcoin, repository (MPL-2.0).
• Keplr: importing a wallet (12 or 24 words, path under Advanced).
• Solflare: mobile setup (12 words), FAQ (12 or 24 words, derivation paths under Advanced options).

What “BIP39-Compatible” Means and What Can Still Differ

BIP39 covers only the first step: how random entropy becomes words and how the words, with an optional passphrase, become a 512-bit seed. Two wallets that both support BIP39 agree on that seed. Everything after it, from the keys to the addresses you see, depends on other standards and on each wallet’s choices.

Derivation Path and Address Type

The seed feeds a key tree, and each wallet picks a branch. Trezor Suite numbers Ethereum accounts at the end of the path, m/44’/60’/0’/0/n, while Ledger Wallet puts the number in the account level, m/44’/60’/n’/0/0: the first account matches, the second does not. On Solana, Phantom uses m/44’/501’/n’/0’, while Trust Wallet’s Wallet Core defaults to m/44’/501’/0’. Bitcoin wallets mostly start on Native SegWit (BIP84), but Wasabi, for example, also keeps a Taproot (BIP86) account, and its coins appear only in wallets that support Taproot: Electrum’s BIP39 import offers legacy, nested and native SegWit only. Derivation paths explained shows how the numbers work, and xpub, ypub and zpub explains how the address type shows up in an extended public key.

Passphrase

A wallet without a passphrase field opens only the wallet with an empty passphrase. If you set a passphrase in Trezor, Ledger or Coldcard, MetaMask, Rainbow or Brave Wallet will open the wallet without it instead, with no error.

Account Discovery and the Gap Limit

BIP44 tells wallets to scan accounts in order and stop at the first one without transactions, and to stop scanning addresses after 20 unused ones in a row. Funds in a third account after an empty second one, or beyond 20 unused addresses, need a wallet that lets you add accounts or raise the gap limit. Our restore guide covers what to check when the balance is zero.

Phrase Length and Word List

A wallet checks the checksum by looking each word up in its list, so a wallet without your phrase’s language rejects it. Most hardware wallets in the tables have only the English list. 15- and 21-word phrases are valid BIP39, but few wallets create them, and several accept only 12 and 24.

Formats That Only Look Like BIP39

• Electrum seeds use words from the same English list but their own version check; BIP39 wallets usually reject them: see Electrum seed vs BIP39.
• SLIP-39 shares have 20 or 33 words from a separate 1,024-word list.
• Classic TON phrases have 24 BIP39 words but their own check and key derivation: see the TON seed phrase format.
• Monero seeds have 25 words (16 with Polyseed). Cake Wallet notes that Monero does not use BIP39 natively and converts a BIP39 phrase into a regular Monero wallet: see the Monero seed phrase guide.
• Seedless wallets such as Zengo, Muun and Bitkey have no phrase to move: you recover them with their own tools.

How to Check Compatibility Before You Restore

1. Count the words. 12, 15, 18, 21 or 24 words can be BIP39; 20 or 33 point to SLIP-39, 25 to Monero, and 13 to an old Electrum seed. If a wallet rejects the words, a failed checksum is the usual reason; the BIP39 checksum checker shows how the checksum works on test phrases.
2. Note where the phrase came from. The app or device that created it tells you its format, its word list and the likely derivation path; old addresses starting with 1, 3, bc1q or bc1p show the Bitcoin address type.
3. Check the target wallet’s row. It has to accept your length and word list, take your passphrase if you set one, and support the networks you hold.
4. Match the path. If the default path differs, pick a wallet that lets you choose: Electrum lets you set the script type and edit the path, and BlueWallet can search more paths or take a custom one.
5. Compare the first address. Restore, then check that the first receiving address matches your records before you rely on the new wallet.

More guides are in the wallets hub and the seed phrases hub.

Frequently Asked Questions

Is MetaMask a BIP39 wallet?

Yes. MetaMask creates a 12-word BIP39 phrase, imports 12- to 24-word English phrases and derives Ethereum accounts on m/44’/60’/0’/0/n. It has no BIP39 passphrase, so a phrase used with a passphrase elsewhere opens only its no-passphrase wallet in MetaMask.

Can I restore a Ledger phrase in Trezor or another wallet?

Yes: a Ledger phrase is a standard 24-word BIP39 phrase, and any wallet that takes 24 words can restore it. Expect Native SegWit Bitcoin accounts and the first Ethereum account to match. Further Ethereum accounts sit on a different path in Ledger Wallet, and a Ledger passphrase has to be entered again in the new wallet.

Which wallets do not use a seed phrase?

Bitcoin Core relies on a backup of its wallet file, Muun uses a Recovery Code with an Emergency Kit, Zengo replaces the private key with two secret shares, one on your phone and one on its server, and Bitkey uses 2-of-3 keys on your phone, the device and Bitkey’s server. Tangem creates keys on its cards without a phrase unless you choose one, and Coinbase Wallet creates passkey or sign-in wallets and imports 12-word phrases.

Does Electrum support BIP39?

It restores BIP39 phrases but creates only its own Electrum seeds. To import a BIP39 phrase, choose the BIP39 seed type under Options in the restore wizard.

Which wallets accept a BIP39 phrase in another language?

BlueWallet accepts all ten official lists on import, and Unstoppable Wallet lets you pick the language when restoring; Phoenix has English, Spanish, French and Czech. MetaMask, Coldcard, BitBox02, Jade and SeedSigner state or show in their code that they use the English list only.