Technical question re BIP85

The index number derives a child key - could this be done with a passphrase instead of an index though (ala BIP39 passphrase)?

Ie instead of Index: 1234567890

Passphrase: One23456789-Zero

Usecase would be similar in that one seed rules them all, but instead of an up to 10-digit number which could be bruteforced, I could give a child wallet to someone and protect the master seed for them but I couldn’t get to their child seed as they’d have a master password which I couldn’t bruteforce?

Reply to this note

Please Login to reply.

Discussion

I'd test with a coldcard to see if possible. Based on how the passphrase works with the coldcard UI, I think it would work.

I think the risk of a loved one trusting you pales in comparison to them forgetting the passphrase.

I think I know what you are saying.

I use multiple passphrase off of a 24 word seed.

Totally not deterministic so you can’t derive any of the either addresses or keys from each 24 word + passphrase.

On the cold card you can enter in or remove passphrase to set up signing from that configuration.

Would also recommend keeping the “blank” (mnemonic) passphrase with some duress sats maybe.