# ZIP 339: Wallet Recovery Words

Status: Reserved

Owners: Daira-Emma Hopwood

Snapshot: a34cfc091434275120ff017c92c3b50d3cef623a

Source date: 2026-10-16T02:56:04+01:00

[Source revision](https://github.com/zcash/zips/commit/a34cfc091434275120ff017c92c3b50d3cef623a)

[Official source](https://zips.z.cash/zip-0339) · [Source file](https://github.com/zcash/zips/blob/a34cfc091434275120ff017c92c3b50d3cef623a/zips/zip-0339.rst) · [Discussion](https://github.com/zcash/zips/issues/364)

[BIP39](https://github.com/bitcoin/bips/blob/master/bip-0039.mediawiki) specifies a standardized mnemonic code for displaying or inputting entropy.

Advantages:

- anecdotally, data entry from mnemonic codes is much easier than base58, hex, or digits. This is true for many reasons: eye tracking of the current position, subvocalization, locally detecting typos.

- the redundancy can prevent information loss or simple transcription errors like transposition. (eg: handwritten digits are more likely to be smudged or lost in creases, etc…

- if we declare a standard soon in the ecosystem's lifetime, it provides better interoperability across software.

- if we use similar encoding standards as Bitcoin we can leverage Bitcoin key management tools, eg [https://iancoleman.github.io/bip39/](https://iancoleman.github.io/bip39/)

Disadvantages:

- the word-lists are language specific.

- users may be tempted to try to memorize word lists more than 'opaque encodings' and then forget them and lose funds.

- users may be tempted to pick their own words from the list, thus having low entropy, thus having their funds stolen.

(Nathan just wrote the last two disadvantages to be even-handed, but is skeptical of both claims.)

Note: This is an attempt to break out multiple overlapping features from zcash/zcash#18.

## Citation relationships

Cites: None

Cited by: None