Diceware Passphrase Masterclass: How to Roll a 100% Offline Bitcoin Passphrase with Physical Dice
A BIP39 passphrase (often called the 13th or 25th word) creates an encrypted hidden wallet on top of your seed phrase. In this comprehensive guide, learn why passphrases eliminate single points of failure and how to roll high-entropy Diceware passphrases completely offline using physical dice.
Watch video masterclass on YouTube · Official Resources: Diceware Instructions & Wordlist
Why a Passphrase is Essential for Bitcoin Self-Custody
During the recent Coldcard random number generator (RNG) entropy flaw, thousands of generated 24-word seed phrases dropped to vulnerable 32–72 bit entropy levels. Automated scanning bots actively swept funds from seed-phrase-only wallets.
However, holders who applied a strong, complex passphrase were shielded! The passphrase added user-supplied cryptographic entropy, acting as a crucial stopgap that prevented automated scripts from accessing their hidden wallets.
1. What is a BIP39 Passphrase?
A BIP39 passphrase is an additional piece of user-created information (words, letters, numbers, or symbols) that is combined with your 12-word or 24-word seed phrase to mathematically derive an entirely separate, hidden wallet.
Eliminates Single Point of Failure
If an attacker discovers your physical seed phrase paper or metal plate backup, they still cannot access your Bitcoin without your passphrase.
Protects Against Hardware RNG Bugs
Adding human-generated passphrase entropy protects you if a hardware wallet's internal random number generator fails or is flawed.
Plausible Deniability
Your base seed phrase can host a small "decoy wallet", while your core life savings remain safely encrypted behind the hidden passphrase wallet.
Customizable Cryptographic Depth
A 6 to 7 word Diceware passphrase adds 77 to 90+ bits of unhackable entropy, ensuring resistance against brute-force supercomputers.
2. Why Use Physical Dice & The Diceware Method?
Humans are notoriously poor at creating true randomness. When asked to invent a password or passphrase, we naturally gravitate toward familiar patterns, song lyrics, quotes, or predictable word combinations that computer algorithms can easily guess.
The Diceware System created by Arnold Reinhold solves this problem by using 5 physical dice rolls to select truly random words from a master list of 7,776 words. Each 5-digit roll (e.g. 5 3 2 1 4) maps to a specific word.
Step-by-Step Tutorial: Rolling Your Diceware Passphrase
Gather Equipment
- 5 Physical Dice: Standard 6-sided dice (casino-grade precision dice are ideal, but standard board game dice work well).
- A Rolling Container: A Tupperware box, shoe box, or dice cup to ensure vigorous shaking.
- Single Sheet of Paper & Pen: Do not use a multi-page notepad stack, as pen pressure can leave hidden imprints on pages underneath.
- Diceware Wordlist: Print or view the Official Diceware Wordlist on a secure, offline screen.
Execute 5-Dice Rolls (6 to 7 Times)
- Place all 5 dice into your container.
- Shake vigorously at least 10 full times.
- Pour or tilt the dice out onto a flat surface. Line them up strictly from left to right.
- Do Not Rearrange: Write down the 5-digit number exactly as rolled (e.g.,
5 3 2 1 4). Trying to manually rearrange numbers reduces true mathematical randomness. - Repeat this process for a total of 6 to 7 words (30 to 35 total dice rolls).
Look Up Your Words & Apply Quality Checks
Cross-reference each 5-digit number on the Diceware wordlist. Example roll output:
| Roll # | 5-Digit Dice Output | Mapped Diceware Word |
|---|---|---|
| Word 1 | 5 3 2 1 4 | scour |
| Word 2 | 4 6 2 1 1 | room |
| Word 3 | 3 5 1 6 2 | layers |
| Word 4 | 2 4 1 5 3 | hara |
| Word 5 | 5 6 3 2 1 | stray |
| Word 6 | 2 1 4 6 5 | fisk |
| Word 7 | 1 2 5 4 3 | adden |
Quality Control Checks:
- If random chance produces multiple 1-character or 2-character words, re-roll the entire word sequence.
- If your words accidentally form a coherent English sentence, re-roll to avoid semantic predictability.
- Separate your words with standard single spaces when entering into wallet software.
3. Crucial Rules for Passphrase Backups
If you lose your passphrase, your Bitcoin is lost forever. No hardware manufacturer, software developer, or coach can recover funds from a passphrase-encrypted wallet without the exact passphrase.
- Store Backups Separately: Keep your passphrase backup in a separate geographic location from your 24-word seed phrase backup. If someone steals one location, they do not gain access to your wallet.
- Verify Your Master Fingerprint: Before transferring funds, type your passphrase into your hardware wallet or Sparrow Wallet and note the 8-character hex Master Fingerprint (e.g.
f7b4c91a). Verify that re-entering the passphrase reproduces the exact same fingerprint!
Want Expert Guidance Validating Your Passphrase Setup?
If you want 1-on-1 assistance setting up a Diceware passphrase, checking Master Fingerprints, or establishing physical security protocols: