{"id":70340,"date":"2026-08-11T19:17:06","date_gmt":"2026-08-11T16:17:06","guid":{"rendered":"https:\/\/lwallet.com.ua\/?p=70340"},"modified":"2026-08-11T19:17:06","modified_gmt":"2026-08-11T16:17:06","slug":"recovery-phrase-is-invalid","status":"publish","type":"post","link":"https:\/\/lwallet.com.ua\/en\/recovery-phrase-is-invalid\/","title":{"rendered":"#Tutorial. Recovery phrase is invalid: why your wallet won’t accept your seed phrase"},"content":{"rendered":"\r\n\r\n\r\n

You enter your recovery words, reach the last one, and instead of restoring the wallet, the device shows an error such as \u201cRecovery phrase is invalid.\u201d This does not automatically mean your funds are lost. It means the wallet cannot validate the phrase in the format it expects.<\/p>\r\n\r\n\r\n\r\n

The cause may be simple: a typo, the wrong word order, or an incorrectly selected phrase length. But sometimes the problem is different \u2014 the backup is not BIP39 at all, but SLIP39, an Electrum seed, a Monero mnemonic, or another format. Below, we go through the checks in the order that makes the most sense, then cover a separate case: the phrase is accepted, but the restored wallet shows a zero balance.<\/p>\r\n\r\n\r\n\r\n

What does \u201cRecovery phrase is invalid\u201d mean?<\/h2>\r\n\r\n\r\n
\r\n
\"BIP39<\/figure>\r\n<\/div>\r\n\r\n\r\n

How a BIP39 seed phrase works<\/h3>\r\n\r\n\r\n\r\n

A BIP39 seed phrase is not a random collection of words. The standard uses a fixed list of 2,048 words. Each word represents a number from 0 to 2,047, so every word encodes exactly 11 bits of data.<\/p>\r\n\r\n\r\n\r\n

When a wallet creates a phrase, it first generates random entropy. It then calculates SHA-256 from that entropy, takes the first bits of the hash as a checksum, and appends them to the entropy. The resulting bit string is split into 11-bit groups, with each group mapped to a word from the BIP39 list.<\/p>\r\n\r\n\r\n\r\n

\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
Words<\/th>\r\nEntropy<\/th>\r\nChecksum<\/th>\r\n<\/tr>\r\n<\/thead>\r\n
12<\/td>\r\n128 bits<\/td>\r\n4 bits<\/td>\r\n<\/tr>\r\n
15<\/td>\r\n160 bits<\/td>\r\n5 bits<\/td>\r\n<\/tr>\r\n
18<\/td>\r\n192 bits<\/td>\r\n6 bits<\/td>\r\n<\/tr>\r\n
21<\/td>\r\n224 bits<\/td>\r\n7 bits<\/td>\r\n<\/tr>\r\n
24<\/td>\r\n256 bits<\/td>\r\n8 bits<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n<\/figure>\r\n\r\n\r\n\r\n

What the wallet is actually checking<\/h3>\r\n\r\n\r\n\r\n

During recovery, the wallet performs the process in reverse. It converts the words back into bits, separates the checksum, recalculates SHA-256 from the entropy, and compares the expected checksum with the bits encoded in the phrase.<\/p>\r\n\r\n\r\n\r\n

If the checksum does not match, the wallet rejects the phrase. At this point it is not checking your balance or looking for your coins on the blockchain. It is only checking whether the sequence you entered is a valid mnemonic for the selected format.<\/p>\r\n\r\n\r\n\r\n

Why the checksum matters<\/h3>\r\n\r\n\r\n\r\n

The checksum catches many common mistakes before the wallet opens. If one word was written down incorrectly or two words were swapped, the phrase will usually fail validation.<\/p>\r\n\r\n\r\n\r\n

[vc_message color=”warning” message_box_style=”classic” message_box_color=”alert-warning” style=”rounded”]<\/p>\r\n\r\n\r\n\r\n

An \u201cinvalid\u201d message points to a problem with the phrase format or the words being entered. A zero balance after a successful recovery is a different issue and needs a different set of checks.<\/p>\r\n\r\n\r\n\r\n

[\/vc_message]<\/p>\r\n\r\n\r\n\r\n

Recovery phrase is invalid: what to check first<\/h2>\r\n\r\n\r\n\r\n

If you see \u201cRecovery phrase is invalid,\u201d do not start guessing words immediately. Rule out the simple causes first \u2014 they are quick to check and do not require any third-party tools.<\/p>\r\n\r\n\r\n\r\n

    \r\n
  1. Count how many words are actually in your backup.<\/li>\r\n\r\n\r\n\r\n
  2. Identify which wallet or device originally created the phrase.<\/li>\r\n\r\n\r\n\r\n
  3. Check whether it is really BIP39 or a different backup format.<\/li>\r\n\r\n\r\n\r\n
  4. Make sure you selected the correct phrase length on the device.<\/li>\r\n\r\n\r\n\r\n
  5. Check every word against the official word list for that standard.<\/li>\r\n\r\n\r\n\r\n
  6. If every word is valid, look for similar words and verify the order.<\/li>\r\n\r\n\r\n\r\n
  7. Restart the recovery process and confirm every word carefully on the device.<\/li>\r\n<\/ol>\r\n\r\n\r\n\r\n

    Reason 1. It is not BIP39<\/h2>\r\n\r\n\r\n
    \r\n
    \"BIP39<\/figure>\r\n<\/div>\r\n\r\n\r\n

    The word count is your first clue, but it is not definitive on its own. Different backup systems may use similar-looking English words even though the underlying formats are not compatible.<\/p>\r\n\r\n\r\n\r\n

    \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
    Word count<\/th>\r\nWhat it may be<\/th>\r\n<\/tr>\r\n<\/thead>\r\n
    12, 15, 18, 21, or 24<\/td>\r\nBIP39; a 12-word phrase may also be an Electrum seed<\/td>\r\n<\/tr>\r\n
    20<\/td>\r\nSLIP39 Single-share Backup or one share of a Multi-share Backup<\/td>\r\n<\/tr>\r\n
    25<\/td>\r\nMonero Legacy or an Algorand mnemonic<\/td>\r\n<\/tr>\r\n
    16<\/td>\r\nMonero Polyseed<\/td>\r\n<\/tr>\r\n
    13<\/td>\r\nMyMonero and some other wallet-specific formats<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n<\/figure>\r\n\r\n\r\n\r\n

    SLIP39: Trezor\u2019s 20-word backup<\/h3>\r\n\r\n\r\n\r\n

    SLIP39 is a backup standard developed by SatoshiLabs. It supports both a complete Single-share Backup and Multi-share setups where several shares are created and a defined threshold is required for recovery. On current Trezor Safe 3, Safe 5, and Safe 7 devices, a 20-word Single-share Backup is the standard option when creating a new wallet.<\/p>\r\n\r\n\r\n\r\n

    Trezor Model T also supports SLIP39, but its traditional default backup format was a 12-word BIP39 phrase. That is why the device brand alone is not enough to identify the standard \u2014 you need to know which backup type was originally created.<\/p>\r\n\r\n\r\n\r\n

    SLIP39 uses a different word list from BIP39. If you have a 20-word SLIP39 share, entering it into a standard BIP39 recovery flow will not work. A Multi-share Backup also requires enough shares to meet the recovery threshold. Trezor documents the current backup formats and model compatibility in its official backup guide<\/a>.<\/p>\r\n\r\n\r\n\r\n

    Electrum: its own seed format<\/h3>\r\n\r\n\r\n\r\n

    Electrum does not generate BIP39 seed phrases. Its current seed format uses its own versioning system: the wallet checks an HMAC-SHA512 value derived from the normalized phrase and identifies the seed type from a specific version prefix.<\/p>\r\n\r\n\r\n\r\n

    As a result, a standard BIP39 device may reject a perfectly valid Electrum seed. That does not necessarily mean the words are damaged. The seed needs to be restored in a compatible Electrum environment rather than forced into a BIP39 recovery flow.<\/p>\r\n\r\n\r\n\r\n

    Monero: 25 words or a 16-word Polyseed<\/h3>\r\n\r\n\r\n\r\n

    Monero\u2019s classic mnemonic format uses 25 words: the first 24 encode the seed, while the final word acts as a checksum. The English Monero Legacy word list contains 1,626 words and is not the BIP39 word list.<\/p>\r\n\r\n\r\n\r\n

    The newer Polyseed format uses 16 words. It has a different internal structure, its own checksum, and embedded information about the approximate wallet creation time, which helps determine the restore height. Its word lists are based on BIP39 lists, but the format itself is not BIP39-compatible.<\/p>\r\n\r\n\r\n\r\n

    Algorand: 25 words from the BIP39 list<\/h3>\r\n\r\n\r\n\r\n

    Algorand uses a 25-word mnemonic built from the English BIP39 word list, but the encoding scheme is different. The mnemonic represents the private key directly, and the twenty-fifth word serves as a checksum.<\/p>\r\n\r\n\r\n\r\n

    That familiar word list makes an Algorand backup easy to mistake for BIP39. Do not cut a 25-word phrase down to 24 words or try to force it into another wallet\u2019s recovery format.<\/p>\r\n\r\n\r\n\r\n

    [vc_message color=”warning” message_box_style=”classic” message_box_color=”alert-warning” style=”rounded”]<\/p>\r\n\r\n\r\n\r\n

    The backup standard is determined by where the phrase came from. If the word count looks unusual, identify the wallet that created it before choosing a recovery method.<\/p>\r\n\r\n\r\n\r\n

    [\/vc_message]<\/p>\r\n\r\n\r\n\r\n

    Reason 2. The wrong phrase length is selected<\/h2>\r\n\r\n\r\n\r\n

    Many hardware wallets ask you to choose the number of words before recovery begins. If you select the wrong length, the recovery process will not match your backup even when every word has been recorded correctly.<\/p>\r\n\r\n\r\n\r\n

    BIP39 itself allows 12, 15, 18, 21, and 24 words, but an individual device may support only some of those lengths. BitBox02, for example, supports 12-, 18-, and 24-word BIP39 seed phrases. Other devices may offer different options, so always check the documentation for your exact model.<\/p>\r\n\r\n\r\n\r\n

    Count the words on your physical backup as well. A skipped line, a duplicated word, or a mistake made while transferring the phrase to another medium can change the actual word count.<\/p>\r\n\r\n\r\n\r\n

    Also consider how the wallet was designed to handle backups. Tangem can be set up without a seed phrase by using backup cards, although current versions also support an optional BIP39 seed. Cypherock X1 uses its own architecture to distribute the secret between the X1 Vault and four X1 Cards, so a paper seed backup is not required in the standard setup.<\/p>\r\n\r\n\r\n\r\n

    Reason 3. One of the words is not in the word list<\/h2>\r\n\r\n\r\n
    \r\n
    \"Handwritten<\/figure>\r\n<\/div>\r\n\r\n\r\n

    Handwriting and transcription errors<\/h3>\r\n\r\n\r\n\r\n

    A recovery phrase is often written down once and read again years later. By then, ink may have faded, the paper may be damaged, and your own handwriting may be much less obvious than it looked on the day you wrote it.<\/p>\r\n\r\n\r\n\r\n

    Look closely at characters that are easy to confuse: 1 and lowercase l, 0 and O, u and v, rn and m, or a and o. Abbreviated words and unclear final letters create the same problem.<\/p>\r\n\r\n\r\n\r\n

    The four-letter rule<\/h3>\r\n\r\n\r\n\r\n

    The BIP39 word list is designed so that the first four letters uniquely identify each word. Words shorter than four letters are written in full.<\/p>\r\n\r\n\r\n\r\n

    This is useful when a paper backup is damaged. If the first four letters are still clearly readable, you can identify the intended word unambiguously from the official list.<\/p>\r\n\r\n\r\n\r\n

    How to check a word safely<\/h3>\r\n\r\n\r\n\r\n

    For BIP39, use the official BIP39 English word list<\/a> in the Bitcoin Improvement Proposals repository. For SLIP39, use SatoshiLabs documentation and its corresponding word list. Check individual words in the list \u2014 never paste the entire recovery phrase into a third-party website.<\/p>\r\n\r\n\r\n\r\n

    [vc_message color=”warning” message_box_style=”classic” message_box_color=”alert-warning” style=”rounded”]<\/p>\r\n\r\n\r\n\r\n

    Never enter your full seed phrase into an online checker, search box, chat, notes app, or \u201cwallet recovery\u201d website. Anyone who obtains the complete phrase can potentially control the funds it protects.<\/p>\r\n\r\n\r\n\r\n

    [\/vc_message]<\/p>\r\n\r\n\r\n\r\n

    Reason 4. The word is valid, but it is the wrong word<\/h2>\r\n\r\n\r\n
    \r\n
    \"Checking<\/figure>\r\n<\/div>\r\n\r\n\r\n

    A trickier case is when a transcription mistake turns one valid BIP39 word into another valid BIP39 word. For example, you may have written box instead of boy. Both words exist in the list, so the wallet\u2019s autocomplete cannot tell you which one was originally intended. The mismatch only becomes apparent when the checksum is checked.<\/p>\r\n\r\n\r\n\r\n

    Similar-looking words<\/h3>\r\n\r\n\r\n\r\n