True Randomness · No Computer RNG

Roll 100 Dice.
Forge a Bitcoin Seed.

One hundred physical six-sided dice yield 100·log₂(6) ≈ 258.5 bits of entropy — more than the 256 bits that secure a seed. Their values are concatenated and hashed with SHA-256 to produce a 256-bit wallet seed, then encoded as a 24-word BIP39 mnemonic.

🔊 Sound
Dice Rolled0/100
Entropy0.0 bits
Digits0/100
StatusIdle
0 bits258.5 bits target

The Roll

Each die is a cryptographically-uniform 1–6. Watch them tumble and settle on their true value.

Concatenated Dice String

The 100 face values, joined into a single string — the SHA-256 preimage.

SHA-256 → 256-bit Seed

seed = SHA-256( diceString ). Deterministic: same dice, same seed. Random: because the dice are.

BIP39 Recovery Phrase · 24 words

The 256-bit seed + 8-bit checksum, split into twenty-four 11-bit indices into the BIP39 English wordlist.
Roll the dice to generate your recovery phrase…

Entropy source: crypto.getRandomValues per die (stands in for physical dice). Hashing via crypto.subtle.digest("SHA-256").
Educational simulation. Never type a real seed into anything you didn't build and audit yourself.