Don't trust.
Get in control.

Roll dice, flip coins, draw poker cards, or pick words yourself. Typing words is the most transparent method there is: you pull 24 slips of paper blindly, and Seedmate only adjusts the final word so the checksum is valid, showing details of the operation. The other 23 stay exactly as you picked them.

• All dice conversion methods, use it to double check other wallet results offline:
  • Raw entropy, easy to verify manually
  • String hash "1-6" (Most manufacturers)
  • String hash "0-5" (Keystone)
• Results are equivalent to the Ian Coleman BIP39 tool and Bitcoin Seed tool, with one caveat: in raw entropy mode, if there are excess bits (dice/cards), Ian coleman discards the first bits but Seedmate discards last bits to maintain validity of all words calculated during the process. Use online tools for dummy tests only.
• 12 or 24 words — 24 recommended

Don't want to rely on a single source of randomness? Generate several mnemonics by different methods and XOR them together. The result carries the combined entropy of all of them, and remains a standard BIP39 mnemonic.

XOR is reversible: A ⊕ B = C, so C ⊕ B = A. That property is also what makes the recovery schemes below possible.

XOR is compatible with other devices and can be tested here Bitcoin Seed tool XOR. Use it for test only.

Don't want to manage multiple physical backups for different wallets? Use a single master mnemonic to deterministically generate entirely new, independent 12 or 24-word seed phrases. Each child seed acts as a standalone wallet. If one of these derived seeds is ever compromised, your master seed and all other child seeds remain mathematically isolated and perfectly secure. This means you only ever need to safely secure one master backup. Results are fully deterministic and compliant with the standard BIP85 specification.

Use cases: hot wallets, family wallets, test-nets, compartmentalization, etc

Split your secret into up to 9 shares and use any k of them to rebuild it. Every share is itself a valid BIP39 mnemonic, so a share found alone reveals nothing and can even hold decoy funds.

• Split into m parts, m ≤ 9 · merge with k parts, 2 ≤ k ≤ 6
• A free offline HTML tool mirrors every function, so losing the device never locks you out. Test everything with dummy mnemonics. If it needs to be used for actual recovery do it strictly offline => how to setup Tails safe environment.

Apply a reversible transformation to your seed and store the result instead. Whoever finds it holds a perfectly valid mnemonic — just not yours. Fund it with a small amount and it becomes a canary: if those coins ever move, your physical backup has been found. Be careful using complex setups, sometime simpler is better (e.g. use invisible ink)

• Circular bit shift, left or right
• NOT — negate the entropy bits
• ADD / SUB — shift every word by n positions

This structure allows you to take a valid 24-word master mnemonic and split it into two valid 12-word mnemonics, giving you a total of three working seeds. You can then keep the two halves physically separated and even place decoy funds on the 12-word shares to hand over under duress, or to serve as an early-warning "canary" if the funds move. To access the main wallet, simply enter both 12-word parts in the correct order (there are only two possible combinations).