Why this matters
A BIP39 mnemonic seed phrase is the single point of failure for most cryptocurrency wallets. If even one word is mistyped when you write down your recovery phrase during wallet setup, restoring from that phrase will either fail or produce a different wallet entirely. The checksum built into the last word catches many single-word errors, but only if you actually verify it — and most people never do. A validator that checks each word against the official 2048-word English wordlist and then verifies the checksum gives you confidence that your backup is correct before you need it in an emergency.
The security model here is straightforward: the tool makes no network calls and processes everything on the page. Your seed phrase never leaves the device. This is the same security posture as an air-gapped machine for validation purposes, though for absolute safety you should test with a dummy mnemonic or use a dedicated offline device. Understanding why only specific word counts are valid — 12, 15, 18, 21, and 24 — requires knowing that each word encodes 11 bits and the checksum adds a fraction of a word depending on the entropy length.
BIP39 word count and entropy mapping
| Word Count | Entropy (bits) | Checksum (bits) | Total Bits |
|---|---|---|---|
| 12 | 128 | 4 | 132 |
| 15 | 160 | 5 | 165 |
| 18 | 192 | 6 | 198 |
| 21 | 224 | 7 | 231 |
| 24 | 256 | 8 | 264 |
How to use it
Type or paste your seed phrase into the input field — support covers 12, 15, 18, 21, and 24 words.
Each word is validated against the official 2048-word English BIP39 wordlist as you type, with invalid words highlighted immediately.
Once a valid word count is detected, the checksum is verified by recomputing the SHA-256 hash of the entropy portion.
A green result confirms a valid mnemonic; red indicates either an unrecognised word or a failed checksum.
Testing your result
Generate a test mnemonic using a trusted tool such as Ian Coleman's BIP39 reference implementation, then paste it into the validator. It should pass with a green result. Next, change one letter in any word and confirm the validator flags it as invalid. Then swap the last word with a different valid BIP39 word and verify that the checksum fails, demonstrating that the tool checks more than just wordlist membership. These three tests confirm that word validation, checksum verification, and word count enforcement are all functioning.
Common mistakes
Pasting a seed phrase with trailing spaces or mixed casing, which can cause valid words to be flagged incorrectly.
Assuming any 12 words from the wordlist form a valid mnemonic — the checksum must also pass.
Using a non-English wordlist; this validator supports only the English BIP39 wordlist of 2048 words.
Testing with your real seed phrase on a shared or untrusted computer, which defeats the purpose of offline validation.
Edge cases and options
The BIP39 specification defines valid mnemonic lengths based on entropy: 128, 160, 192, 224, or 256 bits, which map to 12, 15, 18, 21, and 24 words respectively. Any other word count is invalid by definition. The checksum is derived from the first few bits of the SHA-256 hash of the entropy, and these bits are encoded in the last word. This means changing the last word to any other valid BIP39 word will almost certainly fail the checksum. The validator uses the Web Crypto API for SHA-256 computation, which is the same cryptographic primitive used by wallet software.
Real-world use cases
Verifying a newly written seed phrase immediately after wallet setup to confirm no transcription errors occurred.
Checking an old recovery phrase before attempting a wallet restore, especially if it was stored handwritten for years.
Validating a seed phrase received from a legacy wallet export to confirm it follows the BIP39 standard.
Educating new cryptocurrency users about the importance of the checksum by demonstrating how a single wrong word is detected.
Frequently asked questions
Q: Is it safe to paste my real seed phrase here?
A: The seed never leaves your browser since no network calls are made. For maximum safety, test with a sample mnemonic or use an offline device. Never type your seed into a computer you do not fully trust.
Q: What is the BIP39 checksum?
A: The last word of a BIP39 mnemonic is not random. Its first few bits encode a SHA-256 checksum of the entropy, allowing wallets to detect a single mistyped word.
Q: Why are only 12/15/18/21/24 words valid?
A: BIP39 supports 128/160/192/224/256 bits of entropy, translating to those exact word counts since each word encodes 11 bits plus checksum bits.
Q: Which wordlist is used?
A: The official English BIP39 wordlist of 2048 words. Mixed-language mnemonics are invalid by specification.
Q: Can this tool recover a forgotten word?
A: Not automatically. If exactly one word is wrong and you know its position, you could brute-force the 2048 possibilities manually. The tool shows which words are unrecognised.
Q: Does this tool generate new seed phrases?
A: No, by design. Generating a seed requires cryptographic randomness and an air-gapped environment. Use a hardware wallet or an offline tool for generation.
Q: What hashing algorithm is used for the checksum?
A: SHA-256, computed via the Web Crypto API. This is the same algorithm specified in BIP39 and used by all compliant wallet software.
Start using it now
Try the BIP39 Seed Phrase Validator tool. See also Ethereum Address Validator, Bitcoin Address Validator, and Crypto Payment QR Generator.