How to use this sheet

This list is sorted alphabetically, which is the same order as sorting by binary value - read it left to right, then top to bottom.

Fast method:

1. Roll a die five times and write down the results in order as one number (e.g. rolling a sequence of 3, 4, 1, 6, 2 results in the number "34162").
2. Look for that number in the dice-range column (e.g. our number falls between 34161-34163, which matches the word "hill") and write down the word.
3. Do this twelve times for a twelve-word seed (~128 bits of entropy), and twenty-four times for a twenty-four-word seed (~256 bits of entropy).

Note: your seed phrase made using this method will have a maximum entropy of 127.906 bits of the desired 128 bits for a 12-word seed, and 255.803 bits of the desired 256 bits for a 24-word seed. This method introduces a small (but negligible) bias because six-sided dice rolls can't divide evenly into 11-bit numbers.

Zero-bias method (12 or 24 words):

To remove the small bias, we can trade 5 dice rolls per word for eleven dice rolls per word. Treat each die as a coin flip - 1, 2, or 3 becomes 0, and 4, 5, 6 becomes 1. Write the results down as a string of bits, something like 01011001101, and match that directly against the BINARY column to find the matching word.

Special treatment of the final word:

The final word is special. Only the first few bits (7 bits for a 12-word seed, 3 bits for a 24-word seed) are fixed - the rest is a checksum that must be calculated by a secure offline electronic device. Find all the words which share the first 7 or 3 bits; your device may offer many final words, but only one will match your range of words - that is your final word.