There’s been a lot of discussion around wallet security lately, and I actually think UniSat taking the time to explain mnemonic security in detail was necessary.
A lot of people instinctively ask the same question:
Are 12 words no longer safe?Should everyone just switch to 24 words?
But that’s not really the core issue.
Under BIP-39, a 12-word mnemonic is generated from 128 bits of entropy, while a 24-word mnemonic uses 256 bits. There’s also checksum data included, but that doesn’t add extra randomness.
What matters isn’t just the number of words.
It’s whether the entropy was generated securely, whether the wallet implementation is sound, and whether the mnemonic itself has ever been exposed.
The same goes for a BIP-39 passphrase.
It doesn’t magically turn a 12-word mnemonic into a “higher-entropy mnemonic.” It works as an additional input when deriving the seed. Used properly, it adds another layer of protection. Used carelessly, it becomes another critical secret you can’t afford to lose.
That’s why I don’t see UniSat’s update as just another wallet version update.
Whenever the industry gets hit by security incidents, the conversation eventually comes back to the boring fundamentals: randomness, private keys, mnemonics, and implementation quality.
Nobody talks much about them during the hype.
Until something bre
#brc #FB