BIP-85
One seed, many children
Derive independent wallets, keys, raw entropy, and passwords from Passport Prime’s master seed. No child can reveal its siblings or the parent, and restoring your one seed brings every child back identical.
Last updated Jul 2026
App picker and stepper
Overview
A BIP-85 derivation app that runs on Passport Prime and turns its master seed into a family tree of independent secrets. From one seed you derive a fresh 12-, 18-, or 24-word BIP-39 mnemonic, a WIF key, an XPRV, 32- or 64-byte raw HEX entropy, or a 20-86 character base64 password. No child can reveal its siblings or the parent, and if you lose everything and restore your one seed phrase, every child you ever derived comes back identical. Everything happens fully offline on a device with no network stack.
Every application is pinned to the official BIP-85 test vectors and cross-verified byte-for-byte against an independent BIP-85 implementation, so the same seed in produces the same child out across all eight derivation types. Children derive from the bare master seed itself: KeyOS exposes base entropy only, so BIP-39 passphrases never enter the derivation. WIF and XPRV can be encoded for testnet with a clear banner label. Derivations save to private Internal storage by default, or to the USB-visible Airlock behind an explicit warning, with a built-in browser to view and delete saved files.
What it does
- Eight derivation types: BIP-39 (12/18/24 words), WIF, XPRV, HEX (32/64 bytes), and passwords (20-86 chars).
- Pinned to the official BIP-85 test vectors and cross-verified byte-for-byte against an independent implementation.
- SeedQR output (SeedSigner standard) for any mnemonic; WIF, XPRV, and HEX render as plain QRs.
- Home screen shows the master seed’s BIP-32 fingerprint; every BIP-39 and XPRV child shows its own fingerprint for verification.
- 10,000 children per application, selected with plus/minus 1 and plus/minus 100 stepper buttons, no keyboard needed.
- Mainnet and testnet encodings for WIF and XPRV, with testnet clearly banner-labeled.
- Save derivations to private Internal storage or the USB-visible Airlock, with a built-in browser to view and delete files.
Technical breakdown
How the proof-of-concept is built, for developers evaluating the platform.
Standards-compliant by proof
Every application is pinned to the official BIP-85 test vectors and cross-verified byte-for-byte against an independent BIP-85 implementation. Same seed in, same child out, across all eight derivation types.
Fingerprints for verification
The home screen shows the master seed’s BIP-32 fingerprint, and every BIP-39 and XPRV child shows its own fingerprint, so you can confirm a restored wallet imported the right child at a glance.
Bare-seed root and storage
Children derive from the master seed itself; KeyOS exposes base entropy only, so BIP-39 passphrases never fold into the derivation. Results save to private Internal storage by default, or to the USB-visible Airlock behind an explicit warning.
Dig into the source
README, architecture notes, and the wire protocol live in the repo.