130,827 Latest block · snapshot of Oct 20

Tool · Keys & addresses

Seed words

Twelve words become a seed, keys and prl1 addresses

Seed words

12 words → seed → keys → prl1 addresses, the way Oyster does it

Never type a real seed phrase into any website, this one included. Anyone with your 12 words owns your coins. This tool is for learning: use the test words or a phrase it generates, and never send funds to these addresses.

Network
Hardened derivation

Valid: 12 known words and the checksum matches.

  1. 1

    Words → bits 11 bits each

    Each word is a position in a list of 2,048 (2¹¹). 12 × 11 = 132 bits: 128 random bits, then 4 bits of checksum.

    1. 1abandon 00000000000
    2. 2abandon 00000000000
    3. 3abandon 00000000000
    4. 4abandon 00000000000
    5. 5abandon 00000000000
    6. 6abandon 00000000000
    7. 7abandon 00000000000
    8. 8abandon 00000000000
    9. 9abandon 00000000000
    10. 10abandon 00000000000
    11. 11abandon 00000000000
    12. 12about 00000000011

    Entropy (128 bits): 0000000000000000…00000000 · checksum = first 4 bits of SHA-256(entropy) = 0011, matching the last 4 bits of word 12.

  2. 2

    Seed 64 bytes

    PBKDF2-HMAC-SHA512(words, “mnemonic”, 2,048 rounds)

    5eb00bbd dcf06908 4889a8ab 91555681 65f5c453 ccb85e70 811aaed6 f6da5fc1 9a5ac40b 389cd370 d086206d ec8aa6c4 3daea669 0f20ad3d 8d48b2d2 ce9e38e4

    2,048 rounds make each guess slow on purpose. Pearl wallets use no extra passphrase.

  3. 3

    Master key m

    HMAC-SHA512(“Bitcoin seed”, seed) → private key ‖ chain code

    private key
    1837c1be8e2995ec11cda2b066151be2cfb48adf9e47b151d46adab3a21cdf67
    chain code
    7923408dadd3c7b56eed15567707ae5e5dca089de972e07f3b860450e2a3b70e
    fingerprint
    73c5da0a

    The HMAC key is still the text “Bitcoin seed”, unchanged from Bitcoin.

  4. 4

    Down the path m/86'/808276'/0'/0/i

    1. mmaster73c5da0a
    2. 86'purpose: BIP-86 Taproot4e83b613
    3. 808276'coin: “PRL” as decimal ASCIIf124e0d0
    4. 0'account 073bf7af8
    5. 0receive (1 = change)edfa853f

    An apostrophe means hardened: the child is made from the parent’s private key, so the parent’s public key can’t derive it, and a leaked child key can’t expose the parent.

  5. 5

    Account key zpub

    The public half of m/86'/808276'/0', as Oyster shows it (zprv for the private half). It can make every address without being able to spend.

    zpub6s66goCpFBSqGDZyyD6a1Xf8C5TseQYcPFQNpjMzFeTCZpZD6ShaEzAKqv8tDiv81N1RmPyRTu1D65iQv59c7wHZyCbQmnaARE7P6UFNJeG

  6. 6

    First receive addresses BIP-86 Taproot

    1. /0/0prl1pr6yuq8u2r95wjzzgpdy8cpnncpl7l8zgy6x5q0367pnc53s2famqg7pt74
    2. /0/1prl1pyx3nlscz8rvsxqhcjtyqt2g5szuk9ss7m5saszu3afwwhvn9zp2sz62rhm
    3. /0/2prl1pfrfqcvcmghjc3mpsazm9p9ktttyuewzlfmn40dzkwh0muejgkr3sfx9jwd
    4. /0/3prl1prmdvgxfgzmqzq5dj58enw6y7c55wpsfdpr0af7t79x65z6gmms8q4qa93j
    5. /0/4prl1pc9xyu484gw5wsnq7hg00733jlcr4ethphyxmavynyl8me0q7ec7q6qu3wx

Oyster and standard BIP-32 give the same addresses for this phrase, as for almost every phrase. Try “A phrase where Oyster differs”.

Runs in your browser · nothing is sent or saved src/lib/hd.ts · keys.ts · bech32m.ts

What it does

Starting from 12 words, the tool shows each step a Pearl wallet takes: the words as 11-bit numbers, the 128 bits of entropy and the 4-bit checksum, the 64-byte seed, the master key, each level of the path m/86'/808276'/0'/0/i, the account key as a zpub, and the first five receive addresses.

How to read it

  • Words → bits: each word is its position in a list of 2,048. The last 4 bits of word 12 (highlighted) are the first 4 bits of SHA-256 of the entropy; get a word wrong and that check fails 15 times out of 16.
  • Seed: PBKDF2-HMAC-SHA512 with 2,048 rounds and the salt “mnemonic”. Pearl wallets use no extra passphrase.
  • Down the path: 86’ (BIP-86 Taproot), 808276’ (Pearl’s coin type, “PRL” as decimal ASCII; 1 on test networks), account 0’, then 0 for receive. Each node shows its key fingerprint.
  • Hardened derivation: Oyster, Pearl’s wallet, inherits a legacy quirk from btcd. For about 0.8% of seeds a hardened step meets a parent key with a leading zero byte and Oyster derives a different child than standard BIP-32. A phrase where Oyster differs loads a real example; flip the toggle to see the two sets of addresses.

Pearl specifics

  • 12 words, no passphrase, path m/86'/808276'/0'/0/i, keys shown as zprv/zpub (vprv/vpub on test networks).
  • The master key still comes from HMAC-SHA512 keyed with “Bitcoin seed”, as in Bitcoin.
  • Because of the derivation quirk, don’t assume any other BIP-86 wallet restores a Pearl seed to the same addresses.

Under the hood

Runs entirely in your browser; nothing is saved, sent or put in the address bar. Everything comes from src/lib/hd.ts, which mirrors btcd’s hdkeychain and Oyster’s account code. Its unit tests reproduce the research vectors: the BIP-39 test words, Pearl’s mainnet and testnet keys and addresses, the official BIP-86 vectors, and the real phrase where Oyster and standard BIP-32 disagree.

Suggested