The Human Memory Problem with Random Unconnected Words

Human memory is optimized for narrative structure, personal stories, and emotional context—not for memorizing sequences of 24 random, disconnected dictionary words (e.g., furnace, liquid, orbit, zebra, quantum...).

When cryptocurrency self-custody protocols require users to memorize or write down 24 random BIP-39 words, one of two failures almost always occurs:

  1. Forgetfulness & Lost Access: The user tries to memorize the random words, forgets one or two words over time, and loses access to millions in digital assets.
  2. Insecure Storage: Realizing they cannot memorize the words, the user writes them on plain paper or stores them in an unencrypted digital text file, exposing their funds to physical theft or cloud breaches.

There is a mathematically superior approach: using long narrative sentences backed by memory-hard cryptographic key derivation.

The Cryptographic Math of Narrative Passphrases

Cryptographic strength is measured in bits of entropy—the degree of unpredictability in a secret.

While 24 random BIP-39 dictionary words provide 256 bits of entropy, a natural, personal narrative sentence—such as:
"Life was good in the 90s, I was not born then, but my dad was"
contains approximately 80 to 100+ bits of entropy due to its length, custom punctuation, and unique phrasing choices.

In cryptography, an 80+ bit search space contains over 1,200,000,000,000,000,000,000,000 possible combinations. When processed through a memory-hard key derivation function like Argon2id, brute-forcing a narrative passphrase becomes computationally impossible for even the world's largest supercomputing clusters or GPU farms.

How ZeroLatch Private Mode Implements Custom Passphrases

ZeroLatch Private Mode gives users full freedom to secure their encrypted digital vaults using either a generated 24-word ZeroLatch phrase OR a custom memorable passphrase/sentence.

Here is how ZeroLatch Private Mode protects your custom narrative passphrase:

  • Client-Side Argon2id Key Derivation: When you enter a custom sentence (e.g., "Life was good in the 90s..."), your browser executes Argon2id (configured with 64 MiB memory, 3 iterations, and 16-byte random salt) to derive the 256-bit wrapping key locally.
  • HKDF-SHA-512 Key Expansion: Derives unique per-item AES-256-GCM keys and nonces for every encrypted message, file payload, and filename.
  • Absolute Zero-Knowledge Custody: ZeroLatch servers receive only AES-256-GCM ciphertext. ZeroLatch never receives, stores, or sees your custom passphrase or 24-word phrase and has zero technical ability to reset it.

If you miss your scheduled check-ins (1-day minimum interval) and your safety grace period passes, ZeroLatch releases the encrypted vault payload to your recipient. Your recipient then enters the pre-shared memorable sentence or phrase to decrypt the files in their browser.

How to Craft a Secure, Unforgettable Narrative Passphrase

Follow these rules to create an unbreakable, memorable custom passphrase:

  1. Incorporate Personal Narrative: Choose a sentence tied to a distinct personal memory that only you and your trusted beneficiaries know (e.g., "My first car was a red 1998 Honda that broke down in Seattle").
  2. Aim for 10+ Words: Ensure the sentence contains at least 10 words to guarantee high information entropy.
  3. Include Custom Punctuation & Numbers: Mix natural numbers and punctuation marks into the sentence.
  4. Never Use Famous Quotes: Avoid public book quotes, song lyrics, or popular movie lines, as dictionary attacks test known literature.

Create a Zero-Knowledge Vault with Your Custom Passphrase →