Introduction
A single typo in a 24-word seed phrase sends your funds to a different wallet, and there is no support desk to call. A BIP39 seed phrase validator catches that mistake before you attempt recovery. It checks three things: the word count is valid (12, 15, 18, 21, or 24), every word exists in the 2048-word English wordlist, and the checksum matches. This validator runs entirely in your browser, so the phrase never leaves the page. Paste your mnemonic, get instant word-by-word highlighting, autocomplete suggestions as you type, and a clear valid or invalid verdict with the entropy and derived seed shown when the phrase passes. Use it before importing a phrase into a wallet, or to debug a recovery that is failing.
What this tool does
- Validates a BIP39 mnemonic phrase against the English wordlist and verifies the SHA-256 checksum per the BIP39 specification.
- Highlights each word in real time: green for valid BIP39 words, red for words not in the 2048-word wordlist.
- Provides autocomplete suggestions from the wordlist as you type, with keyboard navigation (arrow keys + Enter).
- Reports specific errors: wrong word count, invalid words, and checksum failure, so you know exactly what to fix.
- If the phrase is valid, displays the entropy in hex, the entropy bit length, and the derived 512-bit BIP39 seed via PBKDF2-HMAC-SHA512.
- Accepts an optional passphrase to derive the matching seed, so you can verify the passphrase produces the expected wallet.
How this tool works
The validator normalizes your input (trim, lowercase, collapse whitespace) and splits it into words. Each word is checked against the 2048-word English wordlist in real time, with invalid words highlighted in red immediately as you type. As you enter each word, the tool calls suggestWords on the partial prefix to show up to six matching BIP39 words in a dropdown, navigable with arrow keys and selectable with Enter.
When you click Validate, the tool checks the word count (must be 12, 15, 18, 21, or 24), confirms every word is in the wordlist, and then verifies the checksum. The checksum is computed by taking the SHA-256 hash of the entropy bytes and comparing the first ENT/32 bits of that hash to the checksum bits embedded in the mnemonic. If all three checks pass, the tool derives the 512-bit seed using PBKDF2-HMAC-SHA512 with 2048 iterations and a salt of "mnemonic" + passphrase, then displays the entropy hex, entropy bit count, security level, and seed hex. If any check fails, it lists the specific error so you can fix the phrase. Everything runs client-side. No phrase, entropy, or seed is sent to any server.
How BIP39 checksum validation works
BIP39, defined in the BIP39 specification, encodes wallet entropy as a sequence of words from a fixed 2048-word English wordlist. Each word represents 11 bits. The mnemonic is not just the entropy: the last few bits are a checksum that lets a wallet detect transcription errors before deriving keys.
The checksum mechanism works as follows. Given ENT bits of entropy (128, 160, 192, 224, or 256 bits depending on word count), the tool computes SHA-256 of the entropy bytes and takes the first ENT/32 bits of the resulting hash. Those checksum bits are appended to the entropy, producing a bit string of length ENT + ENT/32 = (words * 11). For a 12-word phrase, that is 132 bits: 128 bits of entropy plus 4 bits of checksum. For 24 words, it is 264 bits: 256 bits of entropy plus 8 bits of checksum.
To validate, the tool reverses the process. It converts each word back to its 11-bit index, concatenates the bits, splits off the checksum, reconstructs the entropy, hashes it with SHA-256, and checks whether the first ENT/32 bits of the hash match the stored checksum. A single wrong word changes the entropy or the checksum bits, causing a mismatch. This is why a typo does not silently produce a different wallet: the wallet rejects the phrase outright.
After checksum validation, the seed is derived using PBKDF2 with HMAC-SHA512 as the pseudo-random function, 2048 iterations, and a salt of the string "mnemonic" concatenated with the optional passphrase. The mnemonic and passphrase are both normalized with Unicode NFKD before derivation. The resulting 512-bit (64-byte) seed is the root input for BIP32 hierarchical deterministic key derivation, and BIP44 defines the derivation paths that map the seed to chain-specific addresses.
How to use this tool
- Paste or type your mnemonic phrase into the textarea. Words can be separated by spaces or newlines; the tool normalizes whitespace.
- As you type, autocomplete suggestions appear for partial words. Use the up and down arrow keys to move through the list and Enter to select.
- Watch the word chips below the input: green words are valid BIP39 words, red words are not in the wordlist. Fix any red words before validating.
- Optionally enter a BIP39 passphrase if you want to derive the seed with a specific passphrase salt.
- Click 'Validate Phrase'. If valid, the tool shows the entropy hex, entropy bit count, security level, and derived seed. If invalid, it lists the specific errors to fix.
Real-world examples
Catching a typo before wallet recovery
A user wrote down a 24-word phrase two years ago and is now restoring it into a new hardware wallet. The wallet keeps rejecting the import with a generic "invalid phrase" error. They paste the phrase into this validator. The tool flags word 17 as "not in the BIP39 English wordlist" and highlights it in red. The user had written "abandan" instead of "abandon." They correct the word, re-validate, and the checksum passes. They import the corrected phrase into the hardware wallet and recover access. Without the validator, they might have assumed the wallet was broken and given up.
Verifying a passphrase produces the expected wallet
A user set up a wallet with a passphrase two years ago and cannot remember if it was "correct horse" or "correcthorse." They enter the 24-word phrase and try the first passphrase. The validator derives the seed and shows the first few hex characters. They compare those against the seed prefix their wallet software reports. It does not match. They try the second passphrase, the seed prefix matches, and they confirm the wallet is correct. The passphrase is never stored anywhere, so this trial-and-error is the only way to recover it.
Debugging a BIP39 library implementation
A developer is writing a custom BIP39 library in Rust and wants to verify their checksum logic. They generate a known-valid 12-word phrase using the mnemonic phrase generator, then feed it into their Rust code. Their code produces a different entropy hex than this validator. They inspect the difference: their SHA-256 implementation was returning bytes in the wrong endianness. They fix the byte order, re-run, and the entropy matches. The validator served as a reference implementation for the checksum and entropy extraction steps.
Comparison with similar methods
| Method | Complexity | Typical use |
|---|---|---|
| BIP39 checksum validation | SHA-256 hash + bit comparison | Detecting typos in mnemonic phrases before wallet recovery |
| Wordlist lookup only | Array index check | Quick spelling check; does not catch word-order or checksum errors |
| Full seed derivation + address match | PBKDF2-HMAC-SHA512 + BIP32 + BIP44 | Confirming a phrase produces a specific known wallet address |
| Hardware wallet recovery test | Device-side validation | Final verification on secure hardware before trusting a phrase |
Limitations or considerations
This validator confirms that a phrase is a well-formed BIP39 mnemonic with a correct checksum. It does not confirm that the phrase is the right one for your wallet. Two different valid phrases produce two different wallets. If you have the wrong phrase (for example, a phrase from a different wallet), the validator will mark it valid but recovery will still fail. To confirm a phrase matches a specific wallet, derive the seed and check that the first few addresses match what your wallet software reports. The tool also only supports the English wordlist. BIP39 defines wordlists for other languages (Japanese, Spanish, etc.), but the English list is the most widely used. The passphrase field is processed locally, but if you type it on a device with a keylogger, it is compromised. For final verification of high-value wallets, use a hardware wallet's built-in validation.
Frequently asked questions
My phrase is marked valid but my wallet still will not accept it. Why?
The validator confirms the phrase is a well-formed BIP39 mnemonic with a correct checksum. It does not confirm the phrase belongs to your wallet. You may have the wrong phrase, or you may need a passphrase that you are not providing. Derive the seed here and compare the first few address characters against what your wallet expects. If they differ, try different passphrases or check whether you have the correct phrase.
What does 'checksum failure' mean?
The checksum is the first ENT/32 bits of the SHA-256 hash of the entropy, embedded in the mnemonic. If the checksum does not match when the tool reconstructs the entropy, it means one or more words are wrong, or the word order is wrong. A single incorrect word causes checksum failure. Check the word chips for red (invalid) words, and verify the order against your original backup.
Can this validator steal my seed phrase?
No. The tool runs entirely in your browser. The phrase, passphrase, entropy, and seed are never sent to any server. You can verify this by opening your browser's network tab and watching for requests while validating. That said, avoid entering your phrase on a public or compromised device, since browser extensions or malware can read the page content.
Does the validator support non-English wordlists?
This tool uses the BIP39 English wordlist, which is the most widely used. BIP39 also defines wordlists for Japanese, Spanish, French, Italian, and other languages. If your phrase uses a non-English wordlist, the validator will flag every word as invalid. Convert the phrase to the English wordlist or use a tool that supports the specific language list.
What entropy bit count do I need for good security?
128 bits (12 words) is the minimum and is considered secure against brute-force with current hardware. 256 bits (24 words) provides the maximum security margin and is recommended for cold storage and large balances. The validator shows the entropy bit count and a security level label when the phrase is valid.
Conclusion
A BIP39 seed phrase validator is the safety net between writing down a phrase and actually recovering a wallet. This tool checks the wordlist, word count, and checksum, then derives the entropy and seed so you can confirm the phrase is correct before importing it. Run it on a trusted machine, fix any flagged words, and verify the derived seed matches your wallet. For generating a new phrase from scratch, use the mnemonic phrase generator. For final verification of high-value wallets, always confirm on a hardware wallet before trusting the recovery.