Built for long-term holders. A Bitcoin seed minted in your own room, on a machine you control, with no part you can't see. 256 bits from the browser's CSPRNG, optionally folded together with dice, cards, or keystrokes via SHA‑256. Reproducible to the byte if you ever want to check.
This page was downloaded from somewhere. Nothing on it can prove the file was not altered in transit or at rest — a modified copy could bias the entropy and still look identical. The only real check is a SHA‑256 digest compared against a value you obtained independently of the download: the project's release notes, a signed manifest, a copy a friend already trusts.
You can compute the same digest without this page, which is the better habit:
Linux / BSD sha256sum "Amulet.html" macOS shasum -a 256 "Amulet.html" Windows certutil -hashfile "Amulet.html" SHA256 PowerShell Get-FileHash "Amulet.html" -Algorithm SHA256
A matching digest proves the file is unmodified. It does not prove the file is trustworthy — that depends entirely on where your expected value came from. A checksum published on the same page that served the download proves nothing against a compromised server.
SHA‑256(csprng ‖ user_input) and logged in the report so you can recreate the seed offline.No extra input. The browser's cryptographic RNG (256 bits) is the sole source — this is cryptographically sufficient on its own.
Everything happens locally. Nothing leaves your browser.
Type or paste your 12 or 24 words. Words are matched against the BIP‑39 English list, and the checksum is checked. Works for any wallet ever made by any tool.
Drop or pick a .enc or .txt file that this tool wrote for you. For an .enc, enter its password. For a PDF, open it, copy the twelve or twenty-four words, and paste them into the From seed phrase tab.
Replay the exact same SHA‑256 chain the Generator used, so a v1.52 wallet made with dice or cards + a random CSPRNG becomes reproducible when you have both parts on hand. For v1.53/v1.54 reproducible-mode wallets, leave the CSPRNG blank.
computing…
Import the public keys into a watch‑only wallet (Sparrow, Electrum, BlueWallet, Nunchuk…) to monitor funds without exposing the seed. Private keys let you fully import the wallet and spend — handle with the same care as the seed.
computing…Derivation path m/purpose'/0'/0'/0/i. Computed locally from the seed and the passphrase above — no network calls.
Shoulder-surfing warning: the line below is the exact input that was hashed into your seed. Anyone who reads or photographs it can rebuild this wallet without ever seeing your words.
Choose what to save. The default gives you all three files, each as a separate download. Only the encrypted .enc file can be opened later in Amulet Scryer to watch this wallet's balance.
The .txt and .pdf hold your seed in the clear, exactly like writing it on paper, and the PDF SeedQR is itself a scannable seed. They also record the exact input string that was hashed to build the seed, so either file rebuilds this wallet even with the word list removed. Treat them as the seed itself: offline only, never emailed, synced, or printed on a shared printer. The .enc file is encrypted with a password you choose and is the one to keep on a normal disk.
Done copying everything to paper or steel? Scrub this browser tab.