<p>The short answer is NO because of a checksum. You are playing with fire if you are arbitrarily using the list of words from <a href="https://github.com/bitcoin/bips/blob/master/bip-0039/bip-0039-wordlists.md#wordlists" rel="nofollow noreferrer">https://github.com/bitcoin/bips/blob/master/bip-0039/bip-0039-wordlists.md#wordlists</a>.  </p>

<p>However, you can synthesize a list of from a from triplets of 3, 6, 9, 12, 15, 18, 21, and 24 words using 32, 64, 96, 128, 160, 192, 224, 256 binary seeds. See the three working examples below that use Bitcoin-Explorer (bx) command line interface.</p>

<p><strong><em>24 Word Example:</em></strong></p>

<p>% echo -n "This is a crappy brainwallet!" | bx base16-encode | bx sha256 | bx mnemonic-new</p>

<p><code>swear favorite title elegant eye trim situate velvet own atom change same net winner seven drum thunder subway convince arrive bid notice during vacant</code></p>

<p><strong><em>18 Word Example:</em></strong></p>

<p>% echo -n "This is a crappy brainwallet!" | bx base16-encode | bx sha256 | cut -c 1-48 | bx mnemonic-new</p>

<p><code>swear favorite title elegant eye trim situate velvet own atom change same net winner seven drum thunder surround</code></p>

<p><strong><em>12 Word Example:</em></strong></p>

<p>% echo -n "This is a crappy brainwallet!" | bx base16-encode | bx sha256 | cut -c 1-32 | bx mnemonic-new</p>

<p><code>swear favorite title elegant eye trim situate velvet own atom change sail</code></p>

<p>From the working examples above the checksum causes the last word of the triplet set of words to vary.</p>

CC BY-SA 3.0
2017-09-29T03:36:27.273Z
2017-09-29T03:36:27.273Z
skaht
<p>If you choose the words yourself, you're more likely to be biased towards some word selections based on position in the list, words you like and dislike, etc. Ledger is designed to pick the words as securely as possible. Also, some words are used as checksum I believe, so if you just picked them randomly the checksum would be invalid and you'd probably get a warning. But yes, it would still probably work.</p>

CC BY-SA 3.0
2017-09-28T13:10:28.590Z
There is indeed a checksum as specified by [BIP 39](https://github.com/bitcoin/bips/blob/master/bip-0039.mediawiki).  I don't know how Ledger works, but I would expect that it would reject a phrase with a checksum mismatch, not merely give a warning.  If that's the case then it would probably NOT work, with probability 255/256.
Nate Eldredge
CC BY-SA 3.0
2017-09-28T10:56:33.887Z
2017-09-28T10:56:33.887Z
meshcollider
<p>You can generate your own master seed and use the resulting mnemonic in a restore function on any BIP39 compatible wallet.  On the BIP39 generator, you can opt to enter your own entropy number (in hexadecimal, decimal, binary, etc.).</p>

<p>This approach is probably more reliable than directly choosing the words yourself.</p>

<p>"Is there any disadvantage to creating a wallet this way instead of having say Ledger generate 24 words for me?"</p>

<p>If you use a strong enough password in addition to the seed words, then no.  The password changes the master seed, so even if the seed words are released publicly, nobody can access your funds or generate your private keys unless they know your password.</p>

CC BY-SA 4.0
2019-01-22T14:23:00.953Z
2019-01-22T14:23:00.953Z
John C.
<p>Can I create a wallet and restore it on something like a Ledger S using any 24 words that I choose from the list of accepted words?</p>

<p>Is there any disadvantage to creating a wallet this way instead of having say Ledger generate 24 words for me?</p>

<wallet>
Can I restore a wallet using any valid 24 words?
user1283776
# Can I restore a wallet using any valid 24 words?

(Asked by: username_0 on 2017-09-28)

Can I create a wallet and restore it on something like a Ledger S using any 24 words that I choose from the list of accepted words?

Is there any disadvantage to creating a wallet this way instead of having say Ledger generate 24 words for me?

**Tags:** wallet


---

## 3 answers

### Answer by username_1 on 2017-09-29. Score: 1 | Accepted answer

The short answer is NO because of a checksum. You are playing with fire if you are arbitrarily using the list of words from <https://github.com/bitcoin/bips/blob/master/bip-0039/bip-0039-wordlists.md#wordlists>.

However, you can synthesize a list of from a from triplets of 3, 6, 9, 12, 15, 18, 21, and 24 words using 32, 64, 96, 128, 160, 192, 224, 256 binary seeds. See the three working examples below that use Bitcoin-Explorer (bx) command line interface.

***24 Word Example:***

% echo -n "This is a crappy brainwallet!" | bx base16-encode | bx sha256 | bx mnemonic-new

`swear favorite title elegant eye trim situate velvet own atom change same net winner seven drum thunder subway convince arrive bid notice during vacant`

***18 Word Example:***

% echo -n "This is a crappy brainwallet!" | bx base16-encode | bx sha256 | cut -c 1-48 | bx mnemonic-new

`swear favorite title elegant eye trim situate velvet own atom change same net winner seven drum thunder surround`

***12 Word Example:***

% echo -n "This is a crappy brainwallet!" | bx base16-encode | bx sha256 | cut -c 1-32 | bx mnemonic-new

`swear favorite title elegant eye trim situate velvet own atom change sail`

From the working examples above the checksum causes the last word of the triplet set of words to vary.


---

### Answer by username_2 on 2017-09-28. Score: 1

If you choose the words yourself, you're more likely to be biased towards some word selections based on position in the list, words you like and dislike, etc. Ledger is designed to pick the words as securely as possible. Also, some words are used as checksum I believe, so if you just picked them randomly the checksum would be invalid and you'd probably get a warning. But yes, it would still probably work.

> **Comments:**
> **username_3**: There is indeed a checksum as specified by [BIP 39](https://github.com/bitcoin/bips/blob/master/bip-0039.mediawiki).  I don't know how Ledger works, but I would expect that it would reject a phrase with a checksum mismatch, not merely give a warning.  If that's the case then it would probably NOT work, with probability 255/256.  

---

### Answer by username_4 on 2019-01-22. Score: 0

You can generate your own master seed and use the resulting mnemonic in a restore function on any BIP39 compatible wallet. On the BIP39 generator, you can opt to enter your own entropy number (in hexadecimal, decimal, binary, etc.).

This approach is probably more reliable than directly choosing the words yourself.

"Is there any disadvantage to creating a wallet this way instead of having say Ledger generate 24 words for me?"

If you use a strong enough password in addition to the seed words, then no. The password changes the master seed, so even if the seed words are released publicly, nobody can access your funds or generate your private keys unless they know your password.


---

