Forgotten the passphrase on your seed phrase

Many wallets offer an optional passphrase on top of the recovery phrase — sometimes called the 25th word, the 13th word, or a hidden wallet. It is a good security feature and an unforgiving one, because forgetting it fails silently.

A wrong passphrase does not produce an error. It produces a different wallet. Every possible passphrase, including a blank one, turns the same recovery phrase into a valid, working wallet — just not the one with your funds in it. So if your phrase restores correctly but the balance is zero, and you ever set a passphrase, the passphrase is the first suspect, not the phrase.

There is no checksum to help. The words of a recovery phrase carry a checksum; the passphrase carries nothing. It can be any length and any characters, and nothing in the wallet records what it was. The only way to know a guess is right is that it produces an address you recognise. So the first step, as with every recovery, is finding an address that held your funds: an old transaction, a withdrawal record, a screenshot.

What is recoverable depends entirely on what you remember. If you remember the passphrase but not its exact form — capitalisation, a space, a trailing number or symbol, a common typo — that is a finite list of variations, often thousands or millions, and a search over it is realistic. If you remember that it was built from a few things you use — a name, a year, a place — in some order, that is also a search. If it was genuinely random and you remember nothing, it is not recoverable, by anyone, at any price.

Each guess is deliberately slow. Turning a phrase and a passphrase into a wallet involves 2,048 rounds of a hash function, precisely so that guessing passphrases is expensive. That is why a passphrase search has to be structured around what you remember rather than trying everything: millions of guesses are practical, trillions are not.

Write down every candidate you can think of, before trying any. The way you usually build passwords, variations you used at the time, names and dates that mattered then, the keyboard layout you were using. Do this on paper. Then try the most likely ones in your wallet, noting each attempt — the recovery attempt log is made for this, so you never repeat a guess or lose track of one.

Check the rest of the chain first. A zero balance can also mean the wallet is looking on a different derivation path, a different address type or the wrong network. If you are not certain you ever set a passphrase, try the phrase with no passphrase in a second standards-compliant wallet that shows those options. What can and cannot be recovered walks through this.

Never hand the phrase to someone to search the passphrase. A service that asks for your recovery phrase so it can "find the passphrase" has everything it needs to take the funds the moment it succeeds — and a strong incentive to say it did not. The search can run on your own machine with the network off; that is how our offline recovery toolkit does it. And read how to spot a recovery scam before trusting anyone who contacts you.