Skip to content

Trezor Recovery

Most difficult Trezor cases are not about the device at all — they are about a hidden wallet behind a forgotten passphrase, or a recovery seed that is no longer fully legible.

Passphrases and hidden wallets on Trezor

Trezor implements the optional BIP39 passphrase prominently as 'hidden wallets'. Every distinct passphrase produces a distinct, valid wallet from the same recovery seed. There is no wrong passphrase, only a different wallet — which is why a typo returns an empty account instead of an error message, and why people conclude their funds have vanished.

The second Trezor-specific consideration is backup format. Alongside standard 12/24-word BIP39 seeds, newer models support Shamir backup (SLIP-39), which splits the secret into shares with a threshold. Recovery there depends on whether enough shares survive, and share sets cannot be mixed between different wallets.

The PIN, as on any hardware wallet, protects only the device. With the seed available, a PIN lockout is an inconvenience rather than a loss.

Trezor scenarios

Forgotten passphrase

Funds sit in a hidden wallet. Candidate passphrases are tested by deriving addresses and comparing with one you know.

Passphrase typo or layout change

A different keyboard layout, an autocorrected character or an invisible trailing space produces a different wallet.

Incomplete recovery seed

Missing or unreadable words on the recovery card, treated as a constrained BIP39 reconstruction.

Shamir shares below threshold

Not enough SLIP-39 shares to meet the threshold. Locating additional shares is the only real path.

PIN lockout

Wipe and restore from the seed. Nothing is extractable from the device without it.

Accounts missing in Trezor Suite

Usually the standard wallet is being shown while the funds are in a hidden wallet, or a different coin/derivation is in use.

Useful details for a Trezor assessment

  • Device model and whether the backup is BIP39 words or SLIP-39 shares.
  • How many words or shares survive, and which positions are uncertain.
  • Whether a passphrase was used, when it was set and roughly how it was composed.
  • The keyboard layout and device (phone or desktop) used when entering it.
  • A receiving address from the hidden wallet, for verification.

Feasibility on Trezor

Assessable

  • Passphrase partially remembered or built from a known personal scheme.
  • One to three missing or ambiguous seed words with an address to verify.
  • Suspected typo, spacing or capitalisation errors in a passphrase.
  • Confusion between the standard wallet and a hidden wallet.

Not possible

  • A completely unknown passphrase of meaningful length.
  • Fewer SLIP-39 shares than the configured threshold, with no further shares findable.
  • Extracting secrets from the device without the backup.
  • Any device or backup that is not yours.

Related pages

Trezor questions

Why does a wrong passphrase not show an error?

Because every passphrase is technically valid. Each one opens a different hidden wallet, so an incorrect entry simply shows an empty one.

Is a passphrase the same as the PIN?

No. The PIN unlocks the physical device. The passphrase changes which wallet the seed derives, and it is never stored on the device.

Can I mix Shamir shares from two different backups?

No. Shares only combine within the same generated set. Mixing sets cannot reconstruct either secret.

My seed works but Trezor Suite shows nothing.

Check whether you are opening the standard wallet rather than a hidden one, and confirm the coin and derivation being scanned.

Not sure whether your case is recoverable?

Describe the wallet, what happened and what information you still have. You will get an honest assessment of whether recovery is technically feasible — without sending any secret credentials.

Assess My Trezor Recovery Case
Start Recovery Assessment