Namely, enter string -> get private key?

1 Answer 1


Answer by Vitalik Buterin on reddit:


function brainwallet(username, password, hardness) {
    return web3.sha3(Array(hardness + 1).join(username + ":" + password));

Set hardness to something reasonably large, at least 2000. Use your usual username for username, even if lots of people know it. These two things together give you a ~20 bit-of-entropy improvement in security over the simple "sha3 of your string" approach at basically no cost to hardness of memorization.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.