Question: if my private key is, say, 12 BIP39 words and a 13th-word password, is there any way someone who knows or guesses those 12 words will know there is a 13th word password?

i.e. would they know the 12 words are a valid key and they just need to figure out the password, or will they simply have to assume the 12 words were not in fact a valid key?

The 13th word creates an entirely new key, so I’m assuming there’s no way for an attacker to know “they’re on the right track”, right?

Reply to this note

Please Login to reply.

Discussion

My understanding is not really. As you say, the 13th makes it completely different.

Now, if I found your 12 words engraved or something & it was a wallet with no balance out activity then I'd assume there's a 13th.

If it were me, I'd consider the 12 word wallet a decoy & put a believable amount into it.