Bitcoin · Seeds — one backup to rule them all: derive every wallet you'll ever hand out from the seed you already protect.
BIP-85 turns your Passport Prime's master seed into a family tree of independent secrets. Need a seed for a hot wallet, a gift, a test device, a friend getting started — or a password that can never be forgotten? Derive a child — a fresh 12-, 18-, or 24-word mnemonic, a WIF key, an XPRV, raw entropy, or a strong password — and hand it out knowing that no child can ever reveal its siblings or the parent. Lose everything, restore your one seed phrase, and every child you ever derived comes back, identical. Fully offline, like everything on Prime.
| Application | Output |
|---|---|
| BIP-39 · 12 / 18 / 24 words | a mnemonic for another wallet |
| WIF | a Bitcoin Core sethdseed key |
| XPRV | a BIP-32 root for coordinators |
| HEX · 32 / 64 bytes | raw entropy for anything else |
| Password · 20–86 chars | a base64 password, 120–512 bits (default 21 chars ≈ 126 bits) for anything with a login |
- Standards-compliant by proof — pinned to the official BIP-85 test vectors, and every application cross-verified byte-for-byte against an independent BIP-85 implementation: same seed in, same child out, on all eight derivation types.
- SeedQR out — show any mnemonic as a SeedQR (SeedSigner standard) for direct camera import into any SeedQR-aware wallet; WIF/XPRV/HEX render as plain QRs.
- Fingerprints for verification — the home screen shows your master seed's BIP-32 fingerprint, and every BIP-39/XPRV child shows its fingerprint — so you can confirm a restored wallet imported the right child at a glance.
- 10,000 children per application — indexes 0–9999 via ±1/±100 stepper buttons; no keyboard needed.
- Mainnet & testnet encodings — WIF and XPRV can be encoded for testnet (clearly banner-labeled).
- Save derivations on your terms — to private Internal storage by default, or to the USB-visible Airlock behind an explicit warning, with a built-in browser to view and delete saved files.
- Bare-seed root, always — children derive from the master seed itself; BIP-39 passphrases never enter the derivation (KeyOS exposes base entropy only), so a wallet that folds an active BIP-39 passphrase into its BIP-85 children will derive a different family. The derive screen says so, right above the button.
- Secrets stay secret — nothing sensitive ever appears in logs, and everything happens on a device with no network stack.
The screenshots show children of the all-zero test seed ("abandon … art") in the simulator — publicly known vectors, never funded.
With the Foundation SDK installed, build and launch in the simulator with:
foundation sim- THIRD-PARTY.md — libraries this app is built on
If this app is useful to you, a small bitcoin donation is always appreciated — entirely optional.
Donations help cover development costs and keep more open-source bitcoin tools coming. No VC funding, no ads, no tracking.
Licensed under the GNU General Public License v3.0 or later — see COPYING. Sections 15–17 of that license disclaim all warranty and limit liability; the notes below restate that in plain language.
This is experimental software and it has not been independently audited. It is provided "as is", without warranty of any kind, express or implied, including but not limited to the warranties of merchantability, fitness for a particular purpose, and non-infringement.
Use it at your own risk. To the maximum extent permitted by law, in no event shall the authors, copyright holders, or contributors be liable for any claim, damages, or other liability — including, without limitation, loss of bitcoin or other funds, loss of keys or seeds, or loss of data — whether in an action of contract, tort, or otherwise, arising from, out of, or in connection with this software or its use.
Nothing in this project is financial, investment, legal, or tax advice. You are solely responsible for verifying addresses, amounts, fees, and backups before moving funds, and for complying with the laws of your jurisdiction. Test on test networks, or with amounts you can afford to lose, first.
Derived child seeds are real, spendable secrets. Anyone who sees a derived mnemonic, WIF, XPRV, or SeedQR can take any funds it controls — treat every derivation with the same care as the device master seed it came from.



