How to Generate Reliable Passphrases in Practice 64 bits or more Allow to forget but back up Write good rules BIP39 Passphrase complete generation process Stage 0: Preparation (can be done through networking) Buy 5 dice (regular six sided dice are sufficient, not necessarily "casino grade"; if you mind eccentricity, mix different batches of dice) 2 visits http://eff.org Download eff_rarge_wordlist. txt and verify hash 3 printed on paper (7776 lines, approximately 10 pages) 4 Preparation: Pencil, several sheets of white paper, pad (to prevent handwriting from penetrating to the lower layer), 2 sets of metal backup plates The vocabulary itself is public and not a secret. The real secret is only the string of numbers you threw out. Stage 1: Generation (full network disconnection, no camera) 5. Turn off your phone, camera, and smart speaker, and leave the monitoring range Draw a table with 7 rows and 5 grids on paper Roll 5 dice at once, read out the 5-digit number in the predetermined position order (such as from left to right), and fill in the first line Repeat 7 times to obtain 7 sets of 5-digit numbers 9. Check the table one by one and write down the corresponding 7 words 10. Use hyphens to connect: Word 1-Word 2-Word 3-Word 4-Word 5-Word 6-Word 7 Red line: The result of any pitch cannot be resubmitted because of "dislike". Re invest once, entropy collapses once. Even if there is word repetition, it should be retained - the occurrence of repetition in 7776 words is completely normal and does not affect the intensity. Stage 2: Input Equipment 11. Enable the passphrase feature on the hardware wallet (different paths, OneKey in advanced settings) 12 manual character by character input, all lowercase pure ASCII After completing the input of 13, do not transfer any assets yet Stage 3: Verification (most critical, cannot skip) 14. Record the first receiving address (copy the complete address, or at least 8 digits from the beginning to the end) 15 Power off, completely shut down 16. Restart and re-enter the pass phrase 17. Compare whether the addresses are completely consistent 18 unanimous → passed; Inconsistent → indicates copying or input error, return to step 11 and start over 19. Repeat the power-off input comparison process again, and only when it is consistent twice in a row can it be considered stable Passphrase does not have a checksum. Typing a wrong character will not result in an error, it will only silently enter another empty wallet. This step is to replace manual verification of the checksum. Stage 4: Backup Burn 2 copies of 20 metal, with complete spelling of 7 words (do not just engrave abbreviations) 21. Engrave/write the first 8 digits of the receiving address on the same board or matching card - this is the future self checking anchor point 22 copies are stored in two different physical locations and separated from mnemonic words 23. Destruction of paper drafts: shredding and burning, checking the indentation of the pad together Stage 5: Closing 24 small transfer test (one transaction), confirm receipt and transfer capability 25. Power off and restart again to verify before transferring to the main asset Set a reminder on calendar 26: Conduct a recovery drill every 6 months (rebuild with backup and compare addresses) Remember Passphrase loss=asset permanently reset to zero. There is no customer service, no retrieval, and no backdoor. The asymmetry between it and mnemonic words lies here. Do not leave these 7 words on any connected device - do not enter password manager (if the device itself also has mnemonic words), do not take photos, do not type. The storage location should have inheritance arrangements. Think clearly: If something happens to you tomorrow, who can find these two metal plates, and who knows what they are used for. The answer to this question often determines the ultimate destination of assets more than 90 bits.