Can we brute force seed phrases?

21 replies 28 views
Posts: 14 · Reputation: 19
#1Nov 30, 2018, 03:58 PM
So, I’ve been thinking... are seed phrases really that secure? Like, I know the BIP39 list has 2048 words. But could someone crack it using a supercomputer?
4 Reply Quote Share
CalmMinerFull Member
Posts: 195 · Reputation: 784
#2Nov 30, 2018, 06:13 PM
Honestly, it would take ages. With a 12-word seed phrase, you’re looking at 128 bits of security. Even with tons of computing power, we're talking billions of years.
2 Reply Quote Share
chrisomegaFull Member
Posts: 69 · Reputation: 631
#3Nov 30, 2018, 09:06 PM
Right? The last word isn’t the checksum either. In a 12-word phrase, it’s just a few bits at the end. The real security comes from how random the whole thing is.
1 Reply Quote Share
Posts: 14 · Reputation: 19
#4Nov 30, 2018, 11:26 PM
Exactly! A 12-word seed phrase has enough entropy to be secure. Picking random words won’t help much. You need to generate them correctly.
1 Reply Quote Share
dave.forkMember
Posts: 165 · Reputation: 185
#5Dec 1, 2018, 03:35 AM
So, is it really impossible to brute force a 24-word seed phrase? I mean, if you know the words, can you figure out the order?
3 Reply Quote Share
whale420Senior Member
Posts: 296 · Reputation: 853
#6Dec 1, 2018, 08:39 AM
It’s a whole different level of hard. Knowing the words doesn’t mean you can just rearrange them. It’s like trillions of combinations.
2 Reply Quote Share
0xChadNewbie
Posts: 186 · Reputation: 3
#7Dec 1, 2018, 11:08 AM
Yeah, you could add a passphrase for extra security. Even if someone gets your seed phrase, they’d still need that passphrase to access your wallet.
2 Reply Quote Share
orbit1337Senior Member
Posts: 161 · Reputation: 941
#8Dec 1, 2018, 01:01 PM
I saw this video that breaks it down... man, those numbers are insane! The chances are so slim, it's not even worth trying.
2 Reply Quote Share
0xBullNewbie
Posts: 49 · Reputation: 11
#9Dec 1, 2018, 04:14 PM
For sure! Brute forcing a seed phrase is just not feasible at all. The entropy is way too high.
3 Reply Quote Share
Posts: 14 · Reputation: 19
#10Dec 4, 2018, 12:47 AM
But wait, aren't those words just a human-readable way to represent a huge random number? Like, they just make it easier to write down?
2 Reply Quote Share
dave.forkMember
Posts: 165 · Reputation: 185
#11Dec 4, 2018, 05:29 AM
Exactly! The words are just a disguise for a massive bitstream. It’s all random behind the scenes.
0 Reply Quote Share
im_cobraFull Member
Posts: 58 · Reputation: 274
#12Dec 5, 2018, 08:27 PM
Whoa, this is making my head spin. I thought the words were just random picks. Now I see the whole encoding thing.
1 Reply Quote Share
0xChadNewbie
Posts: 186 · Reputation: 3
#13Dec 6, 2018, 01:23 AM
Yeah, you gotta think of it like this... They encode a massive amount of data, not just the words themselves.
1 Reply Quote Share
kevin2020Senior Member
Posts: 28 · Reputation: 1249
#14Dec 6, 2018, 01:48 AM
So if you think about it, brute forcing is like trying to guess a giant number, not just picking from a list of words.
2 Reply Quote Share
Posts: 14 · Reputation: 19
#15Dec 6, 2018, 03:31 AM
+1 to that! The list is just a way to make it manageable for us humans.
4 Reply Quote Share
0xChadNewbie
Posts: 186 · Reputation: 3
#16Dec 7, 2018, 02:01 AM
For those curious, using a passphrase doesn’t encrypt the seed phrase. It adds a layer, but it’s not encryption in the strict sense.
1 Reply Quote Share
mr_apeNewbie
Posts: 170 · Reputation: 35
#17Dec 7, 2018, 03:55 AM
So, what’s the point of using a passphrase then? Just to make it harder for someone to access?
5 Reply Quote Share
kevin2020Senior Member
Posts: 28 · Reputation: 1249
#18Dec 7, 2018, 08:30 AM
Pretty much! It’s like an extra lock on your door. Even if someone has the key, they still need the code.
6 Reply Quote Share
ap3_gw3iNewbie
Posts: 1 · Reputation: 19
#19Dec 7, 2018, 10:52 AM
I think I’m getting it now. The whole system is designed to be secure, but it’s also user-friendly.
2 Reply Quote Share
Posts: 14 · Reputation: 19
#20Dec 9, 2018, 08:25 PM
Yeah, and the checksum helps verify if the seed phrase is valid. It’s all connected.
3 Reply Quote Share

Related topics