BIP39 Checksum Explained
Checksum is the quiet part of BIP39 that catches many fake or mistyped phrases. It is useful, but it is not a safety guarantee.
Direct answer
A BIP39 checksum is a small number of bits derived from the original entropy and appended before the bitstream is mapped to words. It helps detect invalid or mistyped mnemonic phrases.
Checksum by word count
| Words | Entropy bits | Checksum bits | Total bits |
|---|---|---|---|
| 12 | 128 | 4 | 132 |
| 15 | 160 | 5 | 165 |
| 18 | 192 | 6 | 198 |
| 21 | 224 | 7 | 231 |
| 24 | 256 | 8 | 264 |
Why valid words can fail
The BIP39 English wordlist has 2048 words, but a valid phrase is not just any random selection of those words. The last bits must match the checksum rule. This is why validators can report "valid words, invalid checksum."
That error usually means the phrase was mistyped, copied incorrectly, generated by a nonstandard tool, or assembled manually without following BIP39.
What checksum cannot prove
Checksum validation cannot prove that the phrase was generated with enough randomness, that it was kept private, that it controls a wallet, or that it has funds. It is a structure check, not a trust certificate.
Open the validatorChecksum FAQ
Can all BIP39 words make a valid phrase?
No. A phrase can use only valid BIP39 words and still fail checksum validation because the final checksum bits do not match the entropy.
Does checksum validation prove a phrase is safe?
No. It only proves BIP39 structure. It does not prove safe generation, privacy, wallet balance, or ownership.
How many checksum bits does a 24-word phrase use?
A 24-word BIP39 phrase uses 256 bits of entropy plus 8 checksum bits, for 264 total bits mapped to 24 words.