Got this
#BIP39 #Checksum Summary
What Is It?
The checksum is a built-in error-detection code that ensures your recovery phrase is valid. It sits inside the final word of your seed phrase.
How It Works
Step Process
1 Generate entropy (128 bits for 12 words, 256 bits for 24 words)
2 Apply SHA-256 hash to the entropy
3 Take first 4 bits (12 words) or 8 bits (24 words) of hash = checksum
4 Append checksum bits to end of entropy
5 Split total bits into groups of 11 → each group = one word index (0-2047)
Why You Can't Choose the Last Word Freely
The last word contains the checksum bits. These bits are mathematically determined by SHA-256 of your first words (entropy). Change any word earlier in the phrase → checksum changes → last word must change too.
Why It Exists
Without a checksum:
Typos go undetected
You could silently create a different wallet
Your backup appears valid but fails when restoring
With checksum:
Invalid phrases are rejected immediately
Hardware wallets only accept valid last words
Restoring with a typo fails fast
Analogy
Like an IBAN number: the last digits are a control number. One wrong digit = invalid account. Same principle in BIP39.
Formula (Simple)
checksum = first (ENT/33) bits of SHA256(entropy)
valid_phrase = entropy + checksum → split into 11-bit chunks → map to words
Bottom line: Checksum = fingerprint of your entropy. Ensures you didn't make mistakes. Last word isn't yours to pick—it's locked by math.
Barkskin
npub1l9…2c0nc
2026-08-02 17:55:18 UTC
Author Public Key
npub1l9yfv3l4vnmcrdtnd2z5e30yv7qms6yp7ha64shpy0upawvhx7wqu2c0ncSeen on
wss://vault.iris.toPublished at
2026-08-02 17:55:18 UTCEvent JSON
{
"id": "c613811ff4b42d8bb45fc6b3d98a8848388fa08f2a0cbc2838c20ea45a34c0b4",
"pubkey": "f9489647f564f781b5736a854cc5e46781b86881f5fbaac2e123f81eb997379c",
"created_at": 1785693318,
"kind": 1,
"tags": [
[
"t",
"BIP39"
],
[
"t",
"Checksum"
],
[
"r",
"wss://relay.primal.net/"
],
[
"r",
"wss://purplepag.es/"
],
[
"r",
"wss://vault.iris.to/"
],
[
"client",
"Primal Web"
]
],
"content": "Got this\n#BIP39 #Checksum Summary\nWhat Is It?\nThe checksum is a built-in error-detection code that ensures your recovery phrase is valid. It sits inside the final word of your seed phrase.\n\nHow It Works\nStep\tProcess\n1\tGenerate entropy (128 bits for 12 words, 256 bits for 24 words)\n2\tApply SHA-256 hash to the entropy\n3\tTake first 4 bits (12 words) or 8 bits (24 words) of hash = checksum\n4\tAppend checksum bits to end of entropy\n5\tSplit total bits into groups of 11 → each group = one word index (0-2047)\nWhy You Can't Choose the Last Word Freely\nThe last word contains the checksum bits. These bits are mathematically determined by SHA-256 of your first words (entropy). Change any word earlier in the phrase → checksum changes → last word must change too.\n\nWhy It Exists\nWithout a checksum:\n\nTypos go undetected\nYou could silently create a different wallet\nYour backup appears valid but fails when restoring\nWith checksum:\n\nInvalid phrases are rejected immediately\nHardware wallets only accept valid last words\nRestoring with a typo fails fast\nAnalogy\nLike an IBAN number: the last digits are a control number. One wrong digit = invalid account. Same principle in BIP39.\n\nFormula (Simple)\nchecksum = first (ENT/33) bits of SHA256(entropy)\nvalid_phrase = entropy + checksum → split into 11-bit chunks → map to words\n\nBottom line: Checksum = fingerprint of your entropy. Ensures you didn't make mistakes. Last word isn't yours to pick—it's locked by math.",
"sig": "cbe3dc2a51bcc2acf69c7fb855f1098ab3599c02c96e94d11b40844b2c3f7995b5596e4a9e376d0de3ca551cc6beab2d07fe7122d16168ca8261a8b03c980d51"
}