April 2026 – When you plug in a new Ledger or Trezor, a tiny chip inside generates a “random” seed phrase for you. That chip uses a True Random Number Generator (TRNG) — usually based on thermal noise or quantum effects. In theory, it is unpredictable. In practice, you have no way of knowing if that chip was backdoored by a state actor, compromised during manufacturing, or mathematically weakened to produce predictable entropy.
For the vast majority of users, a hardware wallet’s built‑in generation is perfectly safe. But for the hardcore cypherpunk — the activist, the whistleblower, the privacy maximalist, or the whale holding life‑changing wealth — trusting a black box is unacceptable.
The only way to generate true, auditable, mathematically provable entropy is to use the laws of physics. Casino dice. This guide will teach you how to create a BIP39 12‑word or 24‑word seed phrase using nothing but dice, paper, a printed wordlist, and optionally an air‑gapped computer. You will learn the mathematics of entropy, how to convert dice rolls into binary, how to look up words, and — most critically — how to solve the checksum problem for the final word.
Warning: This process is slow, tedious, and requires absolute precision. One mistake in recording your dice rolls will produce a different, unrecoverable wallet. Double‑check every step. If this is too complex, stick with your hardware wallet’s built‑in generation — it is secure enough for 99% of users.
1. The Math of BIP39 & Entropy
What is BIP39?
BIP39 (Bitcoin Improvement Proposal 39) is the standard that defines how a human‑readable mnemonic phrase (12, 18, or 24 words) is generated from random entropy. The wordlist contains exactly 2048 English words (e.g., abandon, ability, able, … zoo). Each word represents 11 bits of data because $2^{11} = 2048$.
A 12‑word seed phrase encodes 128 bits of entropy plus a 4‑bit checksum (total 132 bits ÷ 11 = 12 words). A 24‑word seed phrase encodes 256 bits of entropy plus an 8‑bit checksum (total 264 bits ÷ 11 = 24 words).
Entropy: How Dice Create Randomness
A standard six‑sided die (assuming it is perfectly balanced) produces one of six outcomes: 1, 2, 3, 4, 5, or 6. To extract binary bits, we map odd numbers to 1 and even numbers to 0 (or vice versa, as long as you are consistent). This gives us 1 bit of entropy per roll.
| Die Roll | Parity | Binary Bit |
|---|---|---|
| 1 | Odd | 1 |
| 2 | Even | 0 |
| 3 | Odd | 1 |
| 4 | Even | 0 |
| 5 | Odd | 1 |
| 6 | Even | 0 |
But note: this mapping slightly biases the distribution? No — each parity occurs exactly 50% of the time with a fair die (3 odds, 3 evens). This is a perfect 1‑bit source.
How Many Dice Rolls Do You Need?
To generate the entropy for a 12‑word seed, you need 128 bits of entropy. That means 128 dice rolls (one bit per roll). For a 24‑word seed, you need 256 dice rolls.
However, you will not roll 128 times and then magically get words. You will roll 11 bits at a time to form each word (except the last word, which includes the checksum – see Section 5). For a 12‑word seed, you will roll 11 × 11 = 121 bits of entropy, and the remaining 7 bits are derived from the checksum. Actually, let me correct: For 12 words, total bits = 132 (128 entropy + 4 checksum). You need 128 bits of raw entropy, which is 128 dice rolls. Then you compute the checksum, which adds 4 bits. Those 4 bits combined with the last 7 bits of entropy (since 11 bits per word, the 12th word uses 7 bits of entropy + 4 checksum bits) to make the 12th word. We will cover this in detail later.
For now, understand that each word requires 11 dice rolls — except the final word, which requires only the first 7 (for 12‑word) or first 8 (for 24‑word) dice rolls, and then you compute the checksum.
To understand why this sequence of words acts as the master key to your Dogecoin on the blockchain, read The Ultimate Guide to Dogecoin Seed Phrases: Metal vs. Paper Storage.
2. Equipment Needed & OpSec Preparation
Before you start, assemble your materials. This process must be done in a physically secure environment with no cameras, no listening devices, and no observers.
| Item | Purpose |
|---|---|
| High‑quality casino dice | Use precision‑machined dice with sharp edges. Avoid cheap dice with rounded corners (biased outcomes). Ideally, use multiple dice to speed up rolling, but record them sequentially. |
| Printed BIP39 English wordlist | Download from GitHub (official list) and print it. Do not use a digital device to view the list during the process unless it is completely offline and wiped afterwards. |
| Pen and paper | For recording dice rolls and binary conversions. Use a pencil to allow erasures, but be careful. |
| Airl‑gapped computer (optional) | Only needed for checksum calculation (Section 5). This computer must have no network capability (Wi‑Fi and Bluetooth physically removed or disabled). Boot from a live USB like Tails OS that leaves no trace. |
| Hardware wallet | For final import of the seed phrase (e.g., Trezor Safe 5 or Coldcard that supports direct dice‑roll entry). |
| Metal seed storage | After generating the seed, you will stamp the words onto steel plates (e.g., Billfodl, Cryptosteel). |
You are doing this to avoid digital surveillance. Ensure your physical environment is safe from cameras. See our threat modeling in What is a BIP39 Passphrase? Adding a ‘25th Word’ Hidden Wallet to Secure Your Dogecoin*.
3. Step‑by‑Step: Rolling the Words and the Conversion Table
We will generate a 12‑word seed phrase (128 bits entropy). For a 24‑word seed, the process is identical but you need 256 dice rolls and the checksum uses 8 bits.
Rolling the First Word (11 Dice Rolls)
Take your die. Roll it 11 times, recording each result. For each roll, note whether it is odd (1) or even (0). Write down the binary bits in order.
Example:
| Roll # | Die Result | Parity | Binary Bit |
|---|---|---|---|
| 1 | 3 | Odd | 1 |
| 2 | 5 | Odd | 1 |
| 3 | 2 | Even | 0 |
| 4 | 6 | Even | 0 |
| 5 | 1 | Odd | 1 |
| 6 | 4 | Even | 0 |
| 7 | 6 | Even | 0 |
| 8 | 3 | Odd | 1 |
| 9 | 5 | Odd | 1 |
| 10 | 2 | Even | 0 |
| 11 | 1 | Odd | 1 |
The binary string from these 11 rolls is: 1100 1001 101 (grouped for readability). In full: 11001001101.
Now convert this binary string to a decimal number. Binary 11001001101 = 1×1024 + 1×512 + 0×256 + 0×128 + 1×64 + 0×32 + 0×16 + 1×8 + 1×4 + 0×2 + 1×1 = 1024 + 512 + 0 + 0 + 64 + 0 + 0 + 8 + 4 + 0 + 1 = 1613.
Now look up word number 1613 on the printed BIP39 wordlist (the list is zero‑indexed? Actually, most lists are 1‑indexed from 1 to 2048. The official BIP39 wordlist is numbered from 1. So word 1 = abandon, word 2048 = zoo. Word 1613 is pulse (you can verify). Write down your first word.
Repeat this process for words 2 through 11. That is 10 more words, requiring 10 × 11 = 110 more dice rolls. For each word, you will have a unique 11‑bit binary string, convert to decimal, and find the corresponding word.
This extreme physical entropy method is exactly how institutional custodians generate keys, a process we detailed in Institutional Dogecoin Custody: How Hedge Funds Store Billions in 2026.
4. The Final Word: The Checksum Problem
If you roll 11 more dice for the 12th word, you will have 11 bits (0‑2047). But a 12‑word seed phrase is not simply 12 random words. The last word includes a 4‑bit checksum derived from the SHA‑256 hash of the previous 11 words.
Why? The checksum ensures that if you mistype a word, the wallet can detect the error and reject the seed as invalid. Without the checksum, a typo would create a different but still “valid” wallet, and you would lose your funds.
How the Checksum Works
- Concatenate all the bits from words 1 through 11 (each word contributes 11 bits, total 121 bits). This is your entropy.
- Compute the SHA‑256 hash of those 121 bits (padded to the next byte boundary). The hash is 256 bits long.
- Take the first 4 bits of that hash. These 4 bits are your checksum.
- Append those 4 checksum bits to the original 121 bits → total 125 bits. This is still not a multiple of 11. You need 132 bits (12 words × 11). So you actually need to generate 128 bits of entropy (128 dice rolls), not 121. Wait — I need to be precise.
Let’s clarify the standard BIP39 process for a 12‑word seed:
- Required entropy length: 128 bits (16 bytes).
- You generate 128 random bits (using dice, coin flips, etc.).
- Compute SHA‑256 of those 128 bits. The resulting hash is 256 bits.
- Take the first 4 bits of the hash as your checksum.
- Append those 4 bits to the original 128 bits → 132 bits total.
- Split the 132 bits into 11‑bit chunks → 12 chunks → 12 words.
Therefore, for a dice‑generated seed, you need to roll 128 bits of entropy (128 dice rolls). The first 11 words (words 1‑11) use 11 bits each = 121 bits. The 12th word uses the remaining 7 bits from the entropy (bits 122‑128) plus the 4 checksum bits. So the 12th word is not generated by 11 dice rolls — it is generated by 7 dice rolls plus the computed checksum.
For a 24‑word seed (256 bits entropy): You need 256 dice rolls. Words 1‑23 use 23 × 11 = 253 bits. The 24th word uses the remaining 3 bits of entropy plus 8 checksum bits (first 8 bits of SHA‑256 of the 256 bits). So for 24 words, you roll 256 times, then compute the checksum, then the last word is composed of the last 3 entropy bits + 8 checksum bits = 11 bits.
How to Compute the Checksum Without a Computer?
You have two options:
Option A: Hardware Wallet with Dice Entry (Recommended)
Modern hardware wallets like Trezor Safe 5, Coldcard, and some Ledger models (via advanced features) allow you to enter dice rolls directly into the device. You roll your dice 128 (or 256) times, and the device computes the checksum and displays the final word entirely offline. This is the most secure method because the device never exposes your entropy to a computer.
Process:
- Boot your hardware wallet without connecting it to any computer.
- Navigate to the “Advanced” or “Recovery” menu.
- Select “Generate seed from dice rolls” or similar.
- Enter each die roll (e.g.,
1,2,3, …6) sequentially. The device will accumulate entropy. - After 128 rolls, the device computes the checksum and displays your 12‑word seed phrase.
- Write down the words (including the final word). Do not photograph them.
Option B: Air‑gapped Computer + Ian Coleman Tool (Advanced)
If your hardware wallet does not support dice entry, you can use a completely offline computer to compute the checksum.
Requirements:
- A computer with no network connectivity (remove Wi‑Fi card, disable Bluetooth).
- Boot from a Tails OS USB drive (which runs in RAM only, leaves no trace on the hard drive).
- Download the Ian Coleman BIP39 tool (
iancoleman.io/bip39/) as a static HTML file from a trusted source (e.g., GitHub) onto a USB stick before going offline. - A printed BIP39 wordlist as backup.
Process:
- Boot into Tails OS on the air‑gapped computer.
- Insert the USB stick containing the Ian Coleman HTML file. Open it in the browser (still offline).
- Under “Generate”, select “Dice Entropy”. Enter your 128 dice rolls (as numbers 1‑6) sequentially. The tool will compute the entropy, the checksum, and display the 12 words.
- Write down the words (including the final word).
- Shut down the computer. Tails OS will wipe all RAM. Physically destroy the USB stick if you are extremely paranoid.
Important: The Ian Coleman tool is open source and widely trusted, but you must verify its integrity by checking the SHA‑256 hash against a known good copy downloaded over HTTPS on a trusted machine before going offline.
5. Completing the Process: From Words to Wallet
You now have a complete 12‑word (or 24‑word) seed phrase. Your dice‑generated entropy has never touched the internet. No hardware manufacturer, no software wallet, no random number generator backdoor can compromise it.
Importing into a Hardware Wallet
- Initialize your hardware wallet (e.g., Ledger, Trezor).
- Choose “Recover from recovery phrase” or “Import existing seed”.
- Enter your 12 or 24 words manually using the device’s buttons.
- Set a strong PIN.
- Your wallet is now ready to receive Dogecoin.
Security Aftermath
- Destroy your worksheets. Burn the paper with your dice rolls and binary conversions. Do not leave any trace.
- Stamp the seed words into metal. Use a steel plate (Billfodl, Cryptosteel, or a DIY washer stamp kit). Store the metal backup in a secure, geographically separate location from your hardware wallet.
- Optional: Add a BIP39 passphrase (25th word). This adds an additional layer of security. See our guide on BIP39 Passphrase.
Now that you have the most secure wallet on Earth, learn how to safely transfer your assets off centralized exchanges via How to Withdraw Dogecoin from Binance to Ledger Nano X.
6. Testing Your Seed Phrase (Without Depositing Funds)
Before sending any Dogecoin, you must verify that your seed phrase is correct. The worst thing you can do is generate a seed, send $100,000, and then discover that a transcription error made the wallet unrecoverable.
Testing method:
- After importing the seed into your hardware wallet, note the first receive address (e.g.,
D...). - Wipe the hardware wallet (reset it).
- Re‑import the seed phrase again. Check that the first receive address matches.
- If they match, your seed is correct. If not, you made an error in transcription – start over.
Do not skip this step.
7. Why This Matters: The Cypherpunk Ethos
Using dice to generate entropy is not just a technical exercise. It is a political statement. It says: “I do not trust your chips. I do not trust your backdoors. I will generate my own randomness using physical processes that I can see and verify.”
The NSA has backdoored random number generators. Intel’s RDRAND instruction has been suspected of containing a secret trapdoor. Even hardware wallets could theoretically be compromised by a nation‑state before reaching you.
Dice are transparent. You can examine them for balance. You can roll them in a Faraday cage. You can destroy the records afterwards. This is the only way to achieve true, mathematically provable, auditable entropy without trusting any third party.
For a $100 Dogecoin portfolio, this is overkill. For a $1,000,000 portfolio, it is not.
8. Conclusion: You Are Now the Ultimate Custodian
You have created a seed phrase that has never been touched by a computer chip’s RNG. You have verified its integrity. You have stamped it into metal. You have stored it offline, away from fire and flood.
This is the gold standard of self‑custody. This is how Satoshi Nakamoto likely generated their keys. This is how the cypherpunks of the 1990s envisioned digital cash.
Now go forth, protect your Dogecoin, and Do Only Good Everyday.
🔒 Need a hardware wallet to import your new seed? See our Best Dogecoin Wallets in 2026 guide.
Not financial or security advice. This article is for educational purposes. The author assumes no responsibility for loss of funds due to user error. Always test your seed phrase with a small amount before depositing large sums.