user95571: I just learned about BIP85 today. It will generate a new seed that I don't need to back up.
I think it is pretty cool to only have to backup my one BIP39 seed and the index of BIP85.
However I started to think that this BIP85 can be used for something malicious. A wallet developer can make a wallet to generate a BIP85 seed from that wallet developer's BIP39 seed. So I wonder how can I verify the seeds that I got from some wallet software/hardware are not a BIP85 seed?

user208: This can't be prevented or detected.
But if you're considering the possibility that your wallet itself is under attacker control, you have bigger problems. It could just send your coins to the attacker directly, without needing to trick you into creating a backdoored seed.

95571: <p>I just learned about BIP85 today. It will generate a new seed that I don't need to back up.
I think it is pretty cool to only have to backup my one BIP39 seed and the index of BIP85.</p>
<p>However I started to think that this BIP85 can be used for something malicious. A wallet developer can make a wallet to generate a BIP85 seed from that wallet developer's BIP39 seed. So I wonder how can I verify the seeds that I got from some wallet software/hardware are not a BIP85 seed?</p>
 208: <p>This can't be prevented or detected.</p>
<p>But if you're considering the possibility that your wallet itself is under attacker control, you have bigger problems. It could just send your coins to the attacker directly, without needing to trick you into creating a backdoored seed.</p>
