<p>This can't be prevented or detected.</p>
<p>But if you're considering the possibility that your wallet itself is under attacker control, you have bigger problems. It could just send your coins to the attacker directly, without needing to trick you into creating a backdoored seed.</p>

CC BY-SA 4.0
2021-08-31T16:58:51.400Z
So in that case... Do you think it's possible that Satoshi Nakamoto or other creators of bitcoin has that master seed of all seeds? or the master private key of all private keys in BTC? We will never know right?
bbnn
CC BY-SA 4.0
2021-08-31T18:23:32.343Z
If you create your own seed with honest software, you know it's not backdoored.
Pieter Wuille
CC BY-SA 4.0
2021-09-03T20:27:33.627Z
Yes but is it possible that there is a master key to backdoor all the seeds?
bbnn
CC BY-SA 4.0
2021-09-03T20:45:19.597Z
Most wallets, and certainly the only ones you should use, are open source. You can verify yourself how they're generating the seed.
Pieter Wuille
CC BY-SA 4.0
2021-08-29T18:04:50.263Z
2021-08-29T18:04:50.263Z
Pieter Wuille
<p>I just learned about BIP85 today. It will generate a new seed that I don't need to back up.
I think it is pretty cool to only have to backup my one BIP39 seed and the index of BIP85.</p>
<p>However I started to think that this BIP85 can be used for something malicious. A wallet developer can make a wallet to generate a BIP85 seed from that wallet developer's BIP39 seed. So I wonder how can I verify the seeds that I got from some wallet software/hardware are not a BIP85 seed?</p>

CC BY-SA 4.0
2022-02-20T04:33:54.773Z
This is why you use FOSS only. And mainstream, not too new, used by millions, smart people have audited the code.
HansBKK
<wallet><mnemonic-seed><seed><bip85-deterministic-entropy>
How to verify that the seed generated by wallet software/hardware is not BIP85 seed?
bbnn
# How to verify that the seed generated by wallet software/hardware is not BIP85 seed?

(Asked by: username_0 on 2021-08-29)

I just learned about BIP85 today. It will generate a new seed that I don't need to back up.
I think it is pretty cool to only have to backup my one BIP39 seed and the index of BIP85.

However I started to think that this BIP85 can be used for something malicious. A wallet developer can make a wallet to generate a BIP85 seed from that wallet developer's BIP39 seed. So I wonder how can I verify the seeds that I got from some wallet software/hardware are not a BIP85 seed?

**Tags:** wallet, mnemonic-seed, seed, bip85-deterministic-entropy

> **Comments:**
> **username_1**: This is why you use FOSS only. And mainstream, not too new, used by millions, smart people have audited the code.  

---

## 1 answers

### Answer by username_2 on 2021-08-29. Score: 1

This can't be prevented or detected.

But if you're considering the possibility that your wallet itself is under attacker control, you have bigger problems. It could just send your coins to the attacker directly, without needing to trick you into creating a backdoored seed.

> **Comments:**
> **username_0**: So in that case... Do you think it's possible that Satoshi Nakamoto or other creators of bitcoin has that master seed of all seeds? or the master private key of all private keys in BTC? We will never know right?  
> **username_2**: If you create your own seed with honest software, you know it's not backdoored.  
> **username_0**: Yes but is it possible that there is a master key to backdoor all the seeds?  
> **username_2**: Most wallets, and certainly the only ones you should use, are open source. You can verify yourself how they're generating the seed.  

---

