Restoring a Crypto Wallet: Your Seed Phrase Gets the Coins Back

You can restore a wallet on any compatible device as long as you have the seed phrase, the list of 12 or 24 words the wallet showed you during setup. The coins themselves never sit on the phone or inside the Bitcoin hardware wallet; they live on the blockchain. Enter the words and the wallet recalculates the same keys, giving you full access again, whether the old device was stolen, broken or lost.

Without a seed phrase and without an individual private key, there is no way back. No manufacturer, no support desk and no authority can open a self-custody wallet. This guide walks through the process step by step, explains the three points where most recoveries fail, and warns about the scams aimed at people in exactly this situation.

Restoring a wallet: why the coins are never on the device

A crypto wallet is not a safe with contents. It is software or a small device that manages private keys. A private key is a very large random number used to sign transactions, proving that the coins at a given address belong to you. How private and public keys relate is covered in detail in our guide to private key and public key.

Modern wallets do not generate these keys one by one. They derive all of them from a single starting value. The technical term is a hierarchical deterministic wallet, or HD wallet: the same starting value always produces the same keys in the same order. The seed phrase is that starting value in readable form. That is why a sheet of paper with words is enough to rebuild a wallet with hundreds of addresses and several coins from scratch.

In practice this leads to a simple rule: the device can be replaced, the words cannot. A new hardware wallet costs anywhere from a few tens to a couple of hundred dollars depending on the model; a lost seed phrase can, at worst, cost the entire balance. If you are choosing a new device, our hardware wallet comparison lists the common models with prices and security features.

BIP39 seed phrase: how 12 or 24 words carry an entire wallet

Almost every wallet uses the BIP39 standard for its seed phrase, an improvement proposal from the Bitcoin project. It defines how random data becomes a word list and how that word list turns back into the wallet's starting value. The key points according to the standard:

• The word list has 2,048 entries. Each word stands for a number from 0 to 2,047.
• Between 128 and 256 bits of random data are allowed. That gives 12 to 24 words in steps of three, so 15, 18 or 21 words are possible too.
• Part of the last word is a checksum taken from the SHA-256 hash of the random data. If you mistype a word, the wallet will usually reject the input.
• The list is designed so that the first four letters identify each word uniquely. Many devices therefore suggest the right word after four letters.

Order matters. The same 24 words in a different sequence produce a different, usually invalid, seed phrase. Always write the words down numbered, and with an old note, first check that the numbering is legible.

What the checksum does and does not catch

The checksum catches typos, but not swapped words that happen to form another valid combination. If the wallet accepts the input without error but shows an empty account, the checksum is almost never the problem. Look instead at the derivation path and the passphrase, the subjects of the next sections.

Restoring a wallet with a seed phrase in five steps

Whether it is a smartphone app, desktop program or hardware wallet, the process is similar for all BIP39 wallets. Depending on the provider, the menu is called “Restore wallet”, “Recover”, “Import existing wallet” or “I already have a wallet”.

1. Choose a clean device

Use a device you trust: a new hardware wallet bought directly from the manufacturer or an authorised reseller, or a smartphone with an up-to-date operating system and a wallet app from the official app store. Never download the app through a link in an email, a chat message or a search ad.

2. Select the restore option

On first launch, the wallet asks whether you want to create a new wallet or restore an existing one. Choose restore and the correct seed phrase length: 12, 18 or 24 words.

3. Enter the words offline

Enter the words in the correct order. On a hardware wallet this happens on the device itself, not on the computer. Do not photograph the list or type it into a notes app; both create a copy on a networked device.

4. Set the passphrase and a new PIN

If you used an additional passphrase, enter it now. Then set a new PIN for the device. The PIN protects only this device and plays no part in the recovery.

5. Check balances and addresses

The wallet now scans the blockchain for your addresses. Compare the first receiving address with an old transaction or a statement from your exchange. If they match, the recovery has worked. Restoring onto a different model from the original is not a problem as long as both use BIP39; the pitfalls of switching manufacturer are covered in our piece on restoring a seed with a different manufacturer.

Derivation path and gap limit: why the restored wallet looks empty

The most common shock after a recovery is a zero balance. In the vast majority of cases the money is not gone. The new wallet is simply looking in the wrong place.

A seed phrase can produce an unlimited number of keys. Which ones a wallet actually uses is set by the derivation path. The BIP44 standard describes it as a sequence of five levels: purpose, coin type, account, change branch and address index, written for example as m/44'/0'/0'/0/0. The coin type comes from the SLIP-44 registry: Bitcoin is 0, Litecoin 2, Ethereum 60 and Solana 501.

Bitcoin adds a further twist: there are several address formats. BIP44 covers the old addresses, while BIP84, with the path m/84'/0'/0', covers the native SegWit addresses starting with bc1q that are common today. If the new wallet restores only one of these paths and the old one used the other, the display stays empty.

Gap limit: when the search stops too early

BIP44 also sets a gap limit of 20. Once the wallet finds 20 unused addresses in a row, it assumes no used addresses follow and stops searching. Anyone who generated many receiving addresses in the past without using all of them may therefore see only part of the balance after a recovery.

The wallet settings are the fix. Many programs let you switch the address format, add further accounts or raise the gap limit. Check the addresses against your records again afterwards.

The passphrase as a 25th word: the hidden wallet behind the seed phrase

Some users have protected their seed phrase with an additional passphrase, often called the “25th word”. BIP39 processes it like this: the words plus the text “mnemonic” and the passphrase go through 2,048 rounds of PBKDF2 with HMAC-SHA512 to produce the actual starting value.

The standard states explicitly that every possible passphrase produces a valid wallet. A wrong passphrase therefore triggers no error message; it opens a different, empty wallet. Upper and lower case, spaces and special characters all count. If you see an empty account after a recovery and are unsure whether you once set a passphrase, rule that out first.

The passphrase is strong protection if someone finds the words. It is also a second point where a recovery can fail. How to store words and passphrase separately and durably is explained in our guide on how to store a seed phrase safely.

Restoring a wallet with a private key: import instead of recovery

Older wallets, paper wallets and some browser wallets hand out a single private key instead of a word list. For Bitcoin it often comes in WIF format and starts with 5, K or L. For Ethereum it is a string of 64 hexadecimal characters, meaning digits and the letters a to f.

A private key opens exactly one address, not a whole wallet. That is why most programs call the process “import private key” rather than “restore wallet”. Two variants are common:

• Import: the key is added to the new wallet. It stays exactly as safe or unsafe as before, because every old copy keeps working.
• Sweep: the wallet transfers the entire balance of the old address to a new address derived from your own seed phrase. This costs a network fee but makes the old key worthless.

For a key that sat on paper or in a file for a long time, sweeping is the cleaner choice. If you do not know who may have seen the file or printout in the meantime, do not assume nobody did.

Electrum, multisig and exchange accounts: where the seed phrase alone is not enough

Not every word list follows BIP39. According to its documentation, the Bitcoin wallet Electrum has not generated BIP39 seeds since version 2.0 and instead uses its own system with a built-in version number. That number shows whether the wallet is a standard wallet, a SegWit wallet or one with two-factor protection. The easiest way to restore an Electrum seed phrase is therefore in Electrum itself. Many other wallets do not recognise the format and report invalid input.

Multisig: several keys, several building blocks

A multisig wallet requires signatures from several keys, two of three for example. To restore it, you need as many seed phrases as a signature requires, plus the wallet descriptor containing all public keys. Without that descriptor, the addresses often cannot be reconstructed even when all the words are available.

Exchange account: no seed, just account access

Coins on an exchange or with a broker are held in the provider's custody. There is no seed phrase to restore. You regain access through the account: reset the password, set up the two-factor code again and, if necessary, verify your identity once more. This is done only through the provider's official website or app.

Wallet recovery scams: recovery services and fake support

Someone who has just lost access to their wallet looks for help fast and is easy prey. The tricks are similar: a supposed support agent responds on social media to a public question, a search ad leads to a convincing copy of the manufacturer's site, or a “recovery service” promises to retrieve lost coins for a fee.

One principle protects against almost all of these cases: the seed phrase belongs only in the device you are restoring yourself. No reputable manufacturer, exchange or support team will ever ask for the words, whether by form, chat or phone. A website that wants your seed phrase to “synchronise” or “validate” your wallet is always a scam.

• Download apps and firmware only from an address you type into the browser yourself, or from the official app store.
• Do not reply to direct messages that arrive after a public question about your problem.
• Do not pay an upfront fee to rescue coins. Without a seed phrase or private key, no service provider can open a wallet either.

If the seed phrase has already fallen into someone else's hands, time matters. Restore the wallet on a clean device, immediately create a new wallet there with a new seed phrase and move all balances to it. If you no longer want to keep coins on your smartphone, the software wallet comparison also lists apps that pair with a hardware wallet.

Wallet backup: whoever holds the seed phrase holds the coins

A recovery succeeds when three components fit together: the complete seed phrase in the right order, any passphrase you set, and the derivation path of the old wallet. If one is missing, the display stays empty or the input is rejected. Three steps make sure it works when it counts:

1. Practise the recovery once. Set up a spare device with your seed phrase while the old one still works, and compare the receiving addresses. Suitable devices are listed in the hardware wallet comparison.
2. Note the path, wallet type and a passphrase hint. Record which app and which address format you used to create the wallet, and store that note separately from the words. If you plan to switch apps, the software wallet comparison helps you choose.
3. Move small amounts first. After restoring on a new device, send a small amount to a new address and confirm it arrives before larger sums follow. A hardware wallet from the hardware wallet comparison keeps the keys away from the networked computer.

(As of November 3, 2026. This article is not investment advice. Prices and fee structures change; check the terms with the provider before you buy.)