Missing words
One or more positions in a 12-, 18- or 24-word phrase are blank, smudged or were never written down.
Partial Seed Phrase Recovery
A recovery phrase with a few missing or uncertain words is often solvable; a phrase that is entirely gone is not. The difference is combinatorics, and it can be estimated before any work begins.
Why partial phrases can be reconstructed at all
BIP39 phrases are not arbitrary text. Every word comes from a fixed 2048-word list, and the final word encodes a checksum over the rest. That structure eliminates most nonsense combinations immediately, and every surviving candidate can be tested by deriving addresses and comparing them with an address you know belonged to the wallet.
This is what makes partial recovery a search rather than a guess. With one unknown word the candidate set is trivial. With two or three it is still well within reach of ordinary hardware. Beyond that the space grows by roughly three orders of magnitude per missing word, and it quickly stops being a computing problem and becomes an impossibility.
Word order is a related but separate case: if all words are present and only the sequence is wrong, the checksum and address verification usually narrow it down efficiently, especially when parts of the order are certain.
Situations this page covers
Illegible handwriting
Words exist on paper but cannot be read with certainty — a candidate-set problem rather than a blank one.
Wrong word order
All words are known but the sequence was recorded incorrectly or the paper was cut and reassembled.
Invalid checksum
The wallet rejects the phrase outright, usually meaning one word is wrong rather than the whole phrase being lost.
Restores an empty wallet
The phrase is accepted but shows no funds — commonly a derivation path, passphrase or wallet-type mismatch.
Forgotten BIP39 passphrase
The optional extra word that creates a hidden wallet, where the 12/24 words alone show an empty account.
What makes a partial-seed case solvable
- A public address or transaction from the wallet, so candidates can be verified against the chain.
- The wallet software used, since it determines the derivation path and address format.
- How many positions are unknown, and whether their positions are known.
- For illegible words, the plausible readings for each position.
- Whether a BIP39 passphrase was ever set, even if its content is uncertain.
- Whether the phrase is standard BIP39 or an Electrum-style seed, which uses a different scheme.
Feasibility, stated honestly
Generally feasible
- One to three unknown words with a verifiable address.
- Any number of ambiguous words where each has only a few candidate readings.
- Unknown ordering with all words present.
- A single incorrect word causing a checksum failure.
- An 'empty wallet' result caused by the wrong derivation path or account index.
Not feasible
- A completely lost phrase with no words, no wallet file and no backup.
- Five or more unknown words with no address to verify against and no further constraints.
- A phrase where neither the wallet type nor any address is known, leaving nothing to test candidates against.
- Claims that a phrase can be 'regenerated' from a wallet address — it cannot; that direction is one-way by design.
Related pages
Hardware wallet recoveryRecovery sheets, hidden wallets and device passphrases.Forgotten wallet passwordWhen the seed is fine but the encrypting password is not.Old wallet recoveryPre-BIP39 wallets that never had a seed phrase at all.Trezor recoveryPassphrase-protected hidden wallets on Trezor devices.
Seed phrase questions
I am missing 6 of 12 words. Is that recoverable?
Realistically, no. Each unknown word multiplies the candidate space by 2048; six unknown words is on the order of 10^19 combinations before checksum filtering, which no practical hardware can search against a slow derivation function.
My phrase is rejected as invalid. What does that mean?
It means the checksum does not match. Most often a single word was misread or misspelled — 'gauge' and 'guage', or two visually similar words. This is one of the more tractable cases.
The phrase works but the wallet is empty. Are my coins gone?
Not necessarily. The same seed produces different addresses under different derivation paths and address types. Scanning the standard paths for the wallet software in question often locates the funds.
Can the word order really be recovered?
Yes, in many cases. Full 12-word permutation is astronomically large, but real cases almost always have partial ordering knowledge, and the checksum plus address verification prune the space dramatically.
Not sure whether your case is recoverable?
Describe the wallet, what happened and what information you still have. You will get an honest assessment of whether recovery is technically feasible — without sending any secret credentials.
Assess My Seed Phrase Case