Skip to content
Satnam SatoshiIn service of humanityFind your place ↗
Menu

Sikh Bitcoin · Expert · Lesson 3 of 21

Entropy, mnemonics and passphrase tradeoffs

Understand recovery inputs without improvising cryptography.

About 14 minutes with practice. You only need something to take notes with. No real wallet details or payments are part of this lesson.

Course contents · Lesson 3 of 21
  1. Threat model before tools
  2. Design a custody architecture
  3. Entropy, mnemonics and passphrase tradeoffs
  4. Hardware signing and trusted displays
  5. Multisig and independent control
  6. Recovery and continuity across people
  7. Coin control and privacy tradeoffs
  8. Lightning operations and recovery
  9. Payment operations and reconciliation
  10. Native bitcoin and wrapped claims
  11. USDC, reserves and redemption
  12. Identify a Morpho market precisely
  13. Oracles, prices and measurement risk
  14. LTV, liquidation and nonlinear losses
  15. Variable rates and growing debt
  16. Vaults, allocation and exit liquidity
  17. Arc, Base and cross-chain dependencies
  18. Allowances, signing and simulation
  19. Treasury accounting and restricted funds
  20. Incident response with clear human authority
  21. Capstone: a defensible treasury design

What you will learn

  • Distinguish a mnemonic from an optional passphrase.
  • Explain how extra secrecy can create recovery failure.

Words encode carefully generated material

BIP 39 describes a mnemonic representation derived from entropy with a checksum and a process for deriving a seed. Choosing memorable words yourself is not equivalent to following a wallet’s secure generation process. A checksum helps detect certain mistakes; it is not proof that the underlying randomness was strong or privately generated.

An additional passphrase changes the result

In BIP 39, an optional passphrase participates in seed derivation. Different passphrases produce different results; a typo may lead to an apparently empty wallet rather than a helpful error. This can strengthen a particular design but also create a new loss path if the intended passphrase is forgotten or omitted from recovery planning.

Avoid home-made backup experiments

Do not split words casually among people, invent a brainwallet or enter existing recovery material into a website to see what happens. Different schemes have different security and compatibility properties. A classroom exercise can represent inputs as symbols: mnemonic M and passphrase P produce seed S. The real system should follow documented wallet behavior and be tested with an isolated, nonvaluable setup before anyone depends on it.

Practice on paper

A fictional recovery package contains a mnemonic but the wallet originally used an additional passphrase that nobody recorded. Why might the package fail?

Reveal the worked answer

The intended seed depends on both inputs. Omitting or mistyping the passphrase can derive a different wallet. The existence of valid words alone does not establish recoverability of the intended funds.

Check your understanding

Choose an answer in your head or on paper, then reveal the explanation. Retry whenever you like. Answers are not submitted or scored; completion marks are your own learning notes.

1. Is a mnemonic checksum proof of strong random generation?

  • Yes
  • No
Reveal answer 1

No. It checks structure, not the quality or secrecy of generation.

2. Must a wrong BIP 39 passphrase produce an error?

  • Yes
  • No
Reveal answer 2

No. It can derive a different valid seed.

Take this with you

Additional secrets need an equally deliberate recovery plan.

Your learning, at your pace

Read every lesson freely. Optional progress tracking needs JavaScript and browser storage; it does not require an account or wallet.