Seed phrase words in the wrong order: what can be recovered

You have every word, you are sure of the spelling, and the wallet still says the phrase is invalid — or restores an empty wallet. Words out of order is one of the commonest reasons. It happens when a phrase is copied down columns instead of across rows, transcribed from a photo, split across two pieces of paper, or written from memory.

How big the problem is depends almost entirely on length. Twelve words can be arranged in 479,001,600 ways. That is a large number for a person and a small one for a computer. Twenty-four words can be arranged in roughly 620 thousand billion billion ways, which is not a search anyone can run, on any hardware, ever. So the first thing to establish is how many words you have, and how much of the order you are sure of.

The checksum removes most wrong orders for free. The last word of a phrase carries a checksum over the others, and a wrong order usually breaks it. For a 12-word phrase about fifteen in every sixteen orders fail it; for 24 words, about 255 in 256. That turns 479 million orderings into roughly 30 million candidates without any real work. How the checksum works explains why.

Thirty million candidates still need an address to finish. Many of the survivors are valid phrases — just not yours. The only way to tell yours apart is to derive each one's addresses and look for one you know. So before anything else, find an address that held your funds: an old transaction, an exchange withdrawal record, a screenshot of the wallet's receive screen. With one, a full 12-word reordering is hours on an ordinary computer. Without one, it cannot be finished at all.

Most scrambles are not random, and that is what makes 24 words possible. Nobody shuffles a phrase like a deck of cards. The usual mistakes have a shape: a grid read down instead of across, two neighbouring words swapped, the second half written before the first, one word moved to the end. Each pattern is a handful of candidates, not billions. Trying the likely shapes first solves most real cases — including 24-word ones — in minutes.

Try the likely shapes before the exhaustive search. If your backup is a grid, try reading it the other way. If it spans two cards, try them in the other order. Then try every swap of two neighbouring words: for twelve words that is only eleven phrases. The offline checker tells you which of your attempts even pass the checksum, on a computer with the internet disconnected.

Check the wallet before you blame the order. A correct phrase can restore an empty-looking wallet if the software is looking on a different derivation path, a different address type, or the wrong network. If the phrase already passes the checksum, try it in a second standards-compliant wallet that shows the path options before assuming the order is wrong. What can and cannot be recovered covers this in more detail.

Never do any of this on a website. Not ours, not anyone's. A page that takes your words to "test the order" has the words, and needs nothing else. Reordering is arithmetic, and it can all be done on a machine that is not connected to the internet — which is how our offline recovery toolkit does it, and why it will not start while the machine is online.