BIP39 · BIP32 · BIP352 · offline generator
This page performs zero network I/O. All cryptography runs locally. Do not treat this tool as a substitute for an audited hardware wallet.
Generate a 24-word BIP39 mnemonic, optionally protect it with a passphrase,
and derive the BIP352 scan and spend keys using the standard derivation
paths: m/352'/0'/0'/1'/0 for the scan key and
m/352'/0'/0'/0'/0 for the spend key.
Write down your mnemonic. Anyone with the words can spend
your funds.
Leave this empty for a standard seed. If you set one, you must enter it every time you restore — BIP39 has no checksum on the passphrase, so a single wrong character silently produces a different, empty wallet.
The passphrase is held in memory only and is never written to storage.
Never share these words. Never type them into a website you do not fully trust.
b_scan)b_spend)
The address encodes B_scan ‖ B_spend with bech32m under the
human-readable part sp, witness version 0
(so every valid address begins sp1q…). Post it anywhere —
every payment lands at a fresh on-chain P2TR output that only your wallet
can detect.
QR rendered locally as inline SVG.
Each sender derives a unique P2TR output for your silent address. The table below shows the first 8 hypothetical outputs your wallet would detect when scanning (k = 0…7). The actual outputs depend on each sender's inputs.
| k | Derived P2TR x-only (simulated) | P2TR scriptPubKey |
|---|---|---|
| Generate a wallet first. | ||
List each transaction input (txid, vout, input private key). The app sums
the public keys, computes the shared secret against your B_scan,
and derives one P2TR output per requested index.
| k | t_k (hex) | P_k x-only | P2TR scriptPubKey |
|---|
Paste the summed input public key, smallest outpoint, and candidate output x-only keys. The app detects matches against your current wallet.
This wallet uses standard BIP39 mnemonic + BIP32 derivation. Any wallet that supports BIP352 silent payments and the derivation path below can restore your funds.
sp1… address.0 (sp1q…) is interoperable with current wallets. This tool now emits version 0.| # | Test | Status | Detail |
|---|
Silent Payments (BIP352) let a sender derive a fresh
P2TR output for a recipient without prior interaction. The recipient
publishes one static sp1… address and scans for outputs using
their scan private key.
This wallet adds BIP39 mnemonic backup and BIP32 HD derivation so the same seed can restore the wallet in any compatible application.