Mnemonic code for generating deterministic keys.

Lets wallets turn a backup of every key into a list of 12 to 24 ordinary words.

Writing down a long random number is error-prone. This BIP turns it into a short list of common words that a wallet can turn back into all of its keys. Anyone who has the words controls the wallet, so they must be kept secret. From 2017 its header summed up the comments on it as 'Unanimously Discourage for implementation'. In July 2026 that line was removed. The BIP now lists its shortcomings, such as having no version number, and names SLIP-0039 as the successor its authors proposed.