# Generate a Recovery Phrase Offline

Source URL: https://help.blockstream.com/generate-recovery-phrase-offline
Updated: 2026-08-12T16:18:10.000Z

---

# Generate Recovery Phrase Words from the Real World

True Random [MnemonicThe ordered list of words that encodes a wallet’s keys, defined by BIP-39\. Blockstream calls it a **recovery phrase**.](https://help.blockstream.com/education/glossary/mnemonic) Generator (TRMG) maps dice, coins, and cards to BIP-39 word indices. Choose a method, record 11 bits for each provisional word, and correct the final word checksum offline.

[Choose a Method](#methods) 

## How It Works

Each method produces an 11-bit number from `0` to `2047`. Use that number to find a BIP-39 word, repeat until you have 12 or 24 provisional words, then [correct the final word](#correct-the-final-word).

> **Entropy Quality Matters** Use only dice, coins, or cards that are as fair and unbiased as possible. Inspect them for damage or manufacturing bias, and shuffle cards thoroughly between draws. A biased physical source reduces the quality of the entropy in the resulting recovery phrase.

> **Back Up Your Recovery Phrase Securely** A reliable offline backup is essential to avoid losing access to your funds. Store it where it is protected from loss, damage, theft, and unauthorized access; never rely on a single copy or a digital screenshot.

> **Limit Recovery Phrase Exposure** Do not copy or enter your recovery phrase on multiple devices or computers. Use it only with the software or hardware wallet for which it was generated, and only when necessary.

> **Use at Your Own Risk** These methods and this website are provided as is, without any guarantee regarding the safety of your recovery phrase or funds. You are solely responsible for verifying the process and for any loss of funds resulting from its use.

## Methods

| Method                                                                                                 | How It Produces Each Provisional Word                      |
| ------------------------------------------------------------------------------------------------------ | ---------------------------------------------------------- |
| [Coin](https://help.blockstream.com/generate-recovery-phrase-offline-coin)                             | Eleven flips make one 11-bit word index.                   |
| [D6](https://help.blockstream.com/generate-recovery-phrase-offline-d6)                                 | Convert six-sided die rolls into one or two bits.          |
| [D8](https://help.blockstream.com/generate-recovery-phrase-offline-d8)                                 | Four rolls create 12 bits; retain the first 11.            |
| [D8/D16/D16](https://help.blockstream.com/generate-recovery-phrase-offline-d8-d16-d16)                 | Three dice select one word index in a single set of rolls. |
| [D8/D8/D8/coin/coin](https://help.blockstream.com/generate-recovery-phrase-offline-d8-d8-d8-coin-coin) | Three D8 rolls and two flips select one word index.        |
| [Poker cards](https://help.blockstream.com/generate-recovery-phrase-offline-poker)                     | Draw, map the card to bits, return it, and reshuffle.      |
| [Piacentine cards](https://help.blockstream.com/generate-recovery-phrase-offline-piacentine)           | Use a 40-card regional Italian deck to collect bits.       |
| [Tarot](https://help.blockstream.com/generate-recovery-phrase-offline-tarot)                           | Use all 78 cards and their tier-based bit values.          |

## Correct the Final Word

For a 12-word recovery phrase, generate 12 provisional words and correct only the 12th. For a 24-word recovery phrase, generate 24 provisional words and correct only the 24th. The final word combines entropy with a BIP-39 checksum, so the provisional final word identifies a group rather than a guaranteed valid word.

| Recovery Phrase Length | Keep from Provisional Final Word | Candidates in Its Group |
| ---------------------- | -------------------------------- | ----------------------- |
| 12 words               | First 7 bits                     | 16                      |
| 24 words               | First 3 bits                     | 128                     |

Use the [binary words table](https://help.blockstream.com/generate-recovery-phrase-offline-binary-table) to find the group, then use an offline, trusted BIP-39-compatible wallet or tool to calculate the valid candidate from the preceding words. Only one candidate in that group has the correct checksum.

Never type your recovery phrase into a website or an untrusted device.