Blockstream

Generate a Recovery Phrase With a D6 Die

This method uses a standard six-sided die. Results 1–4 provide two bits each, while results 5–6 provide one bit, so the number of rolls required for each provisional word varies. Continue until you have 11 bits, repeat for 12 or 24 words, and then follow the final-word procedure.

Roll the die until you have 11 bits, using this conversion table:

Result Bits
100
201
310
411
50
61

If the final roll provides more bits than needed, retain only the leftmost bits required to reach 11 bits.

Read the accumulated 11-bit value from left to right and use the binary words table to find the BIP-39 word.