Skip to content
ENExplore Calculators

Wallet Key Derivation Calculator

Work out wallet key derivation instantly with clear inputs, formula shown and shareable results.

About Wallet Key Derivation Calculator

BIP-39 encodes entropy plus a checksum into words from a 2048-word list, so each word carries 11 bits: 12 words is 128 bits of entropy plus 4 checksum bits, and 24 words is 256 plus 8. The mnemonic is stretched to a seed with PBKDF2-HMAC-SHA512 at 2048 iterations, then BIP-32 derives a tree of keys, with BIP-44 giving each account an external and a change chain.

Formula

BIP-39 and BIP-44

entropy bits = words x 11 x 32/33; checksum bits = entropy / 32; addresses = accounts x addresses per account x 2 chains

Worked example

With the default values below, Wallet Key Derivation Calculator returns Mnemonic entropy of 128. Change any input above and every figure here is recalculated in your browser.

Inputs used

Mnemonic wordsaccepts 12–24
12
PBKDF2 iterationsminimum 1
2,048
Accounts to deriveminimum 1
5
Addresses per accountminimum 1
20

Results

Mnemonic entropy
128 bits
Checksum bits in the mnemonic
4 bits
Addresses derived (external and change chains)
200
PBKDF2 iterations applied
2,048

Step by step

  1. 1Values used
  2. 2BIP-39 and BIP-44
  3. 3Mnemonic entropy= 128 bits
  4. 4Checksum bits in the mnemonic= 4 bits
  5. 5Addresses derived (external and change chains)= 200
  6. 6PBKDF2 iterations applied= 2,048

Assumptions and limits

  • The result is derived only from the 4 inputs listed above. Anything not among them is not part of the calculation.
  • In particular, this calculator does not take inflation, tax, fees or charges or compounding frequency into account.
  • Figures are rounded for display to whole numbers, so totals built from several rounded parts can differ slightly from the unrounded arithmetic.

How these calculators are built and tested is described on the Methodology page. If a figure looks wrong, please report it.

Frequently Asked Questions

Is 12 words enough?

128 bits of entropy is beyond brute force, so yes for almost all purposes. 24 words gives 256 bits, which some prefer for very long-term or high-value storage.

Why only 2048 PBKDF2 iterations?

It is fixed by the BIP-39 specification for interoperability, which is weak by password-hashing standards. Security relies on the mnemonic's own entropy, not on key stretching, so an optional passphrase is what protects a stolen mnemonic.

Related Calculators

Wallet Key Derivation Calculator | Calcrivo