Web3 Lab · T.11

Seed Security

12 or 24 words? Pick a word count, type an attacker rate — entropy and crack time live. Pure math.

All tools Seed Validator Wallet Generator Guide: 12 vs. 24 words
Word count

Model: average half keyspace (2N−1) at R guesses/second. Real seed attacks additionally run through PBKDF2 (2048 rounds) — so it takes even longer.

Knowledge · Entropy

What bits mean here

Entropy in bits measures true randomness: N bits mean 2N possible keys. Each extra bit doubles the search space — 129 bits are twice as secure as 128. Word count sets it: 12 words = 128 bits, 24 words = 256 bits (in between: 15 = 160, 18 = 192, 21 = 224).

Key takeaway: attackers don't crack random seeds — they steal them. Phishing, malware and bad randomness are the real dangers, not too little entropy. Back up on paper or steel, never store digitally. Deep dive: How a wallet actually works.

FAQ

Frequently asked questions

Are 12 words enough?
128 bits of entropy are practically uncrackable by brute force — even at billions of guesses per second it takes hundreds of billions of universe ages on average. 24 words are reserve for decades.
What does entropy in bits mean?
N bits mean 2 to the N possible keys, each bit more doubles the space. 12 words = 128 bits, 24 words = 256 bits.
Does PBKDF2 slow attackers down?
Yes, by roughly factor 2000: every seed-phrase guess runs through 2048 rounds of key stretching. The calculator above shows the raw math — in reality it takes much longer.
What does it not protect against?
Above all not: phishing, malware, bad randomness and self-invented phrases. Back up on paper or steel, never store digitally.

Planning a custody concept or payment flow?

Seed handling, backup processes and custody architecture belong in every Web3 project — I help with reviews and setup.

Request a call Validate a seed