Brain Wallet

A brain wallet is a cryptocurrency wallet whose private key is derived directly from a phrase the user invents and memorizes, storing the key nowhere but in their head. The idea sounds appealing: nothing written down means nothing to steal or confiscate. In practice, brain wallets have proven catastrophically insecure and are strongly discouraged.

The flaw is that humans choose predictable phrases. Because the key is computed deterministically from the phrase, anyone else who tries the same phrase derives the same key and controls the same funds. Attackers run continuous automated sweeps that hash enormous dictionaries of song lyrics, Bible verses, famous quotations, and password lists into candidate keys and check them against the blockchain. Funds sent to brain wallets built on human-chosen phrases have been drained within minutes, and researchers who studied historic brain wallets found nearly all of them emptied by such bots. A phrase that feels obscure to its owner, for example a line from a favorite novel, is trivially within reach of a dictionary attack.

A common misconception is that a memorized BIP-39 seed phrase is a brain wallet; a proper seed phrase is generated from strong randomness by software, not invented by a person, and memorization is then merely a risky backup strategy rather than the source of the key. The lesson brain wallets teach is general: security must come from machine-generated randomness, because human memory and creativity are not random.