Security

Protect the map.
Keep the keys elsewhere.

BitTwelve is intentionally designed for a small amount of recovery-roadmap text: where to look, who to contact, and what to do next. The safest BitTwelve is one that contains no passwords, wallet seeds, private keys, legal originals, or other access credentials.

01

Minimize what you put in.

Use BitTwelve as a pointer system. Describe the location of your real recovery materials and the order of operations without copying the underlying secrets into the map. Less sensitive content means less consequence if anything ever goes wrong.

02

Encryption begins on your device.

Your browser generates a twelve-word BitTwelve code with a cryptographically secure random-number generator. The roadmap is designed to be encrypted with AES-256-GCM in the browser before the hosted encrypted package is stored.

03

Twelve words. Never a wallet seed.

BitTwelve uses the familiar BIP39 English vocabulary but deliberately rejects generated twelve-word sequences that pass the BIP39 checksum. During recovery, a valid 12-word BIP39 wallet mnemonic is refused locally before a network request is made.

The service does not need

your account · your beneficiary · your wallet seed · your password · your private key · your legal documents

04

Hosted storage is only a convenience.

The website, domain, hosting provider, browser environment, or project itself may change or disappear. Download the self-contained offline recovery file and preserve your real recovery materials independently. Test your recovery plan periodically.

05

Privacy is not anonymity.

Cloudflare, your ISP, browsers, and other network infrastructure may process ordinary connection metadata. A compromised device, browser extension, software defect, malicious deployment, or future cryptographic weakness could also defeat the intended privacy model.

06

Open source. Experimental.

The source is intended to be public and auditable. Open source improves inspectability, but it is not a security guarantee. BitTwelve is a small experimental project and should not be your sole recovery mechanism for anything important.

The principle is simple.

Store the directions.
Keep the secrets yourself.

Create a recovery map