Problem
Incomplete Recovery Phrase
Missing recovery words? Learn how word count, known positions, wallet format and remaining information affect whether a recovery search is feasible.
Short answer
Missing recovery words may be recoverable when enough information remains to limit the search. The number of missing words, their positions, the phrase format and any additional passphrase affect feasibility. For BIP-39, the word list and checksum filter candidates; they do not identify the right wallet by themselves. A known public address helps verify the result. A fully lost phrase cannot be recreated from nothing.
If you're staring at a phrase with one or more blanks, here's why it isn't hopeless: BIP-39 phrases (used by Ledger, Trezor, MetaMask and most modern wallets) encode both the original random data and checksum bits. The final word contains some of each, and every word comes from a fixed list of 2,048. These constraints narrow the search; they do not identify the correct phrase on their own. Start by writing down exactly which positions are missing.
What you should do first
- Write down every word you are sure about, in exact order, and mark the positions you are missing.
- Note which wallet created the phrase and what coin types it holds. Most modern wallets use BIP-39, but Electrum uses its own seed format with a different versioning system, and old wallets may use other formats.
- Check the word count: 12, 15, 18, 21 or 24 words. A phrase with the wrong count (11, 13, 23, 25) usually means a word is missing — or an extra word was added.
What is realistic
- One missing word: a known position gives at most 2,048 candidate words before checksum filtering. A valid checksum does not guarantee a unique answer; compare derived addresses with a known public address using the correct wallet settings and any BIP-39 passphrase.
- Two missing words: knowing both positions keeps the search to 2,048 candidates per unknown word before the checksum narrows it further; not knowing the positions adds the ordering itself to the search.
- Three or more missing words: no fixed number decides it. Each further gap multiplies the raw search space by 2,048, so what counts is which positions you know, whether the remaining words are in the right order, whether the wallet type is known, and whether a public address is available to confirm a candidate. Tools such as btcrecover and mnemonic-recovery scripts run this kind of position-constrained search.
- The wrong word, mixed-up order and illegible words are separate problems: see the wrong seed word and wrong word order pages.
What is not realistic
A phrase with no usable words and no other material — no file, no device, no partial backup — cannot be reconstructed. There is nothing to constrain the search. We will tell you that honestly.
What not to do
- Do not keep guessing on the device. Hardware wallets let you re-enter the phrase, but you will waste attempts and gain no information.
- Do not type partial phrases into websites that claim to "search" them for you: you are leaking the material that proves ownership.
- Do not discard the original backup card, even if several words have faded. Positional clues and handwriting traces are valuable.
When professional help changes the outcome
Professional recovery turns the same checksum logic into a systematic search: candidate generation over the 2,048-word list, positional constraints, checksum verification, and — where the wallet type matters — Electrum seed version detection or SLIP-39 Shamir shares. If you have three or more missing words, or the wallet type is unclear, the structured approach is genuinely faster and safer than what you can run yourself.