BIP39 Dice Entropy & Hardware Wallet Seed Verification Workbench

1. Entropy Collector D6 / Coin

0 / 128 Bits 0%

Add Physical D6 Dice Roll (2.58 bits/roll)

Add Binary Coin Flip (1 bit/flip)

Raw Inputs Log:

No entropy input collected yet. Click dice buttons (1-6) or coin flips above.

2. Bit Expansion & SHA-256 Checksum Pipeline Waiting for entropy...

RAW ENTROPY HEXADECIMAL (CS) 0 bits

00000000000000000000000000000000

SHA-256 DIGEST & CHECKSUM DERIVATION CS = ENT / 32

SHA256: Awaiting full entropy payload...

Checksum bits needed: 4 bits

FULL BITSTREAM & 11-BIT CHUNK MAP ■ Data Bits ■ Checksum

3. Derived BIP39 Mnemonic Phrase

Entropy Uniformity Diagnostic Chi-Square (χ²) Test

Chi-Square Score

Distribution Status

Pending Data

D6 Frequency Distribution

Audit Hardware Wallet Seed BIP39 Compliance Check

Cryptographic Proof Report Ready

Download a fully deterministic JSON audit trace of your raw physical entropy, SHA-256 hash, and word mapping.

Trace the saved watermark counting rules and fixture limits

Your browser does not support video.

Read the explanation

The saved dice verifier maps each entered face minus one to a padded three-bit chunk. A uniform six-sided die has only log base two six, about two point five eight five bits of entropy, while the displayed chunk has three positions. Both bars show bits at one hundred eighty pixels per bit. Chunk positions are not independent unbiased bits. This direct face mapping is a source teaching limitation and cannot establish uniform wallet entropy. Its twelve-word mode requires one hundred twenty-eight input positions and adds four checksum bits, for one hundred thirty-two positions. Twenty-four-word mode uses two hundred fifty-six plus eight, for two hundred sixty-four. Both bars show combined positions at two pixels per position. The source computes the checksum using browser SHA-256 and groups eleven bits per lookup, giving twelve or twenty-four groups. Checksum validity alone does not prove unpredictable entropy. Eleven-bit indices span two thousand forty-eight possibilities. The saved page constructs that many entries but most are synthetic word underscore index placeholders beyond a short sample and selected overrides. Both bars illustrate the index width eleven and checksum width four at forty-five pixels per bit. Its generated list is not a complete standard mnemonic word list. Treat the published tool as a derivation demonstration; its placeholder output is not validated wallet recovery material.