Wallet
Electrum Wallet Recovery Service
Electrum wallet recovery: seed types, wallet files and forgotten passwords - free assessment, success-based.
Quick answers
Is my Electrum seed a BIP-39 seed?
No. Electrum uses its own seed format, so a BIP-39 checker will wrongly call a valid Electrum seed invalid.
I restored the seed and see a zero balance. What now?
Identify the phrase type first. Modern Electrum seeds encode the wallet’s derivation method; imported BIP-39 phrases require the original address type and derivation path. Compare the derived addresses with a known public address. Review the gap limit only if gaps between used addresses may be hiding transaction history.
Can the wallet file be recovered if I forgot the password?
The file is encrypted and Electrum has no reset. Recovery is a password search against the file, on a copy, using what you remember.
Can an Electrum seed with missing words be recovered?
Possibly. Electrum uses its own seed-version system rather than the BIP-39 checksum, so the first step is identifying the seed type. Feasibility then depends on the seed length, the number and positions of unknown words, the known words and other reliable constraints. We check candidate seeds safely against an address you already know; there is no universal four-word cutoff.
Electrum is the Bitcoin wallet people misunderstand most often, because its seed format and wallet types behave differently from other wallets. Two facts explain most lockouts:
- An Electrum seed is not a BIP39 seed. A phrase that a BIP39 checker calls invalid can be perfectly good - it was tested against the wrong standard.
- Modern Electrum seeds include a version that tells Electrum how to derive the wallet, including standard, SegWit and 2FA formats. Importing a BIP-39 phrase is a separate route: it requires the address type and derivation path used by the original wallet. Older Electrum seeds need handling appropriate to their version.
When professional recovery is the right call
- The encrypted wallet file exists: its format and any remembered password pattern, length or period of use determine whether a candidate search is practical.
- An old-format seed that restores to an empty wallet: needs version-aware handling, not panic.
- A seed extension (custom word) that is forgotten: the standard seed alone does not fail — it silently restores a different, empty wallet.
What is impossible
- No seed, no wallet file, no exported private keys. Nothing exists to search.
- Coins already sent to a scammer or the wrong address. Electrum cannot reverse a transaction.
Practical notes
- Never type your seed into a website, including "checkers" and "recovery tools". Real recovery happens in the Electrum app or in offline tooling you run yourself.
- Password search speed depends on the encryption format, the hardware and the secret being searched. Electrum distinguishes AES-256-CBC protection of the seed and private keys from ECIES encryption of the whole file, enabled by default since version 2.8. For password-protected whole-file encryption, it derives a key with 1,024 PBKDF2-HMAC-SHA512 rounds; the older double-SHA-256 derivation does not describe every file. The separate seed-to-master-key derivation uses 2,048 rounds. A useful estimate must therefore consider the actual file format and the number of plausible password candidates.
- A partial Electrum seed may be reconstructable against Electrum's own format, but word count alone cannot provide a reliable timeframe. Feasibility and search time depend on the seed version, known positions, plausible alternatives, a known receiving address, wallet type and available hardware. Use the assessment to establish those constraints before relying on an estimate.