If you have ever tried to restore an Electrum wallet in a different wallet application, or import a Ledger or MetaMask seed into Electrum, you have almost certainly run into the same problem: the seed gets rejected. The wallet calls it “invalid,” and you are left wondering whether something is wrong with your backup. In most cases, nothing is wrong with the words. The problem is that Electrum and most other wallets use different systems to validate the same set of words.
Understanding that difference is essential for anyone who uses Electrum, because it determines what you can and cannot do with your seed phrase, which wallets accept it, and how recovery works if something goes wrong.
What Makes Electrum’s Seed Different from BIP-39
Both Electrum and BIP-39 wallets generate seed phrases from the same 2,048-word English list. The words look identical. But the way each system validates those words is fundamentally different.
BIP-39 (the standard used by Ledger, Trezor, MetaMask, and most other wallets) encodes a checksum directly into the last word of the phrase. The final word is partially determined by the preceding words, which means only certain combinations are valid. A BIP-39 validator checks this embedded checksum, and if it fails, the phrase is rejected.
Electrum uses a completely different approach. Instead of encoding a checksum into the words, Electrum derives a hash from the entire phrase and checks whether that hash starts with a specific prefix. The prefix identifies the seed version: “01” for a standard wallet, “100” for a SegWit wallet, “101” for a 2FA wallet, and so on. If the hash does not start with the expected prefix, Electrum rejects the phrase. This is Electrum’s version system, and it is the core reason the two formats are incompatible.
The practical consequence: a valid BIP-39 seed is almost never a valid Electrum seed, and vice versa. The same 12 words, in the same order, will be accepted by one system and rejected by the other. Neither phrase is wrong. They are validated against different rules.
Why Electrum Chose Its Own Format
Electrum’s developer, Thomas Voegtlin, designed the version-based seed system to solve a problem that BIP-39 does not address: forward compatibility. In BIP-39, the seed format never changes. A 12-word BIP-39 phrase from 2014 is validated the same way as one from 2026. That sounds like a strength, but it means the seed itself carries no information about which wallet type or derivation path it belongs to. When you restore a BIP-39 seed, the wallet has to guess which address type you used, and it can guess wrong.
Electrum’s prefix system embeds the wallet type directly into the seed’s validation. When Electrum sees a seed whose hash starts with “100,” it knows immediately that it is a SegWit wallet. It does not need to scan multiple derivation paths or ask the user to choose. This makes Electrum’s seed format self-describing, at the cost of being incompatible with every wallet that only understands BIP-39.
Seed phrase not working in Electrum?
If your phrase is rejected and you cannot figure out why, contact us for a free assessment. We diagnose the issue before any commitment.
How to Tell Whether Your Seed Is Electrum or BIP-39
If you created the wallet in Electrum and never imported a seed from another wallet, it is an Electrum seed. If you created the wallet on a Ledger, Trezor, MetaMask, Trust Wallet, Exodus, or any other non-Electrum application, it is almost certainly a BIP-39 seed.
If you are not sure, try both. Enter the phrase in Electrum with default settings (no options ticked). If Electrum accepts it, it is a native Electrum seed. If Electrum rejects it, click “Options” and tick “BIP39 seed,” then try again. If Electrum now accepts it, the phrase is BIP-39.
If both attempts fail, the phrase has an error: a misspelled word, two words swapped, or one or more words missing. Check each word against the BIP-39 wordlist (both Electrum and BIP-39 use the same 2,048 words). A single character difference invalidates the entire phrase.
Electrum’s Wordlist
Current versions of Electrum (2.0 and later) use the standard English BIP-39 wordlist of 2,048 words. The words themselves are identical to those used by Ledger, Trezor, and every other BIP-39 wallet. The difference is entirely in how the words are validated, not in which words are available.
Very early versions of Electrum (1.x, dating from 2011 to 2013) used a smaller, different wordlist. If you have a seed from that era, modern Electrum still recognises it automatically. You do not need to do anything special: type the words and Electrum detects the old format. If you encounter problems, it is worth checking whether the words match the old Electrum 1.x list rather than the current BIP-39 list.
Electrum-LTC and Other Forks
Electrum-LTC (the Litecoin version of Electrum) uses the same seed format and wordlist as Electrum for Bitcoin. The seeds are cross-compatible in terms of format, but they derive different keys because they target different blockchains. An Electrum-LTC seed entered into Electrum for Bitcoin will produce valid but empty Bitcoin addresses, not Litecoin addresses. The same applies to other Electrum forks like Electron Cash (Bitcoin Cash).
Seed Extensions (the 13th Word)
Electrum allows users to add a custom passphrase, called a “seed extension,” on top of the standard 12-word seed. This extension functions as a 13th word: the same seed with a different extension produces a completely different wallet with different addresses and keys.
The extension is optional and set during wallet creation. If you used one, you must enter it every time you restore the wallet. Without it, the seed restores a valid but empty wallet, because the derived keys are entirely different.
If you cannot remember your seed extension, the recovery becomes a passphrase search: testing candidates against the expected blockchain addresses, similar to password recovery. For more on this scenario, see our guide on recovering a forgotten wallet passphrase.
What This Means for Recovery
If your seed is native Electrum format, it can only be restored in Electrum (or an Electrum fork). You cannot enter it into MetaMask, Ledger Live, or Trust Wallet and expect it to work. If you need to move your Bitcoin to a different wallet, restore in Electrum first, then send the coins to a new address in the destination wallet.
If your seed is BIP-39 (imported from another wallet), Electrum can restore it with the BIP-39 option enabled, but you may need to select the correct derivation path manually. The default path in Electrum may not match the default in the wallet that originally generated the phrase, which is why a BIP-39 restore in Electrum sometimes shows a zero balance.
If the seed is incomplete or contains errors, the recovery process depends on the format. Electrum seeds can be reconstructed by testing candidates against Electrum’s hash-prefix checksum. BIP-39 seeds use a different checksum. The tools and approach differ, which is why identifying the seed type is the first step in any recovery case.
Seed issues you cannot solve yourself?
Crypto Recovers handles every Electrum seed format, from 1.x legacy to current SegWit. Free assessment, No Cure No Pay.
FAQ
Can I convert an Electrum seed to a BIP-39 seed?
No. The two formats are fundamentally different in how they validate and derive keys. There is no conversion between them. If you want a BIP-39 seed, create a new wallet in a BIP-39-compatible application and send your coins from Electrum to the new wallet.
Does Electrum support 24-word seed phrases?
Electrum generates 12-word seeds by default. It can import 24-word BIP-39 seeds from other wallets (with the BIP-39 option enabled), but it does not generate 24-word phrases itself.
What is the Electrum seed checksum?
Electrum validates a seed by hashing the entire phrase and checking whether the resulting hash starts with a version-specific prefix. This is different from BIP-39, which embeds a checksum in the last word. Electrum’s checksum verifies both that the words are correct and which wallet type the seed belongs to.
My Electrum seed works but shows the wrong balance. Why?
The most common cause is a wallet type mismatch. If you restore a SegWit seed as Legacy (or vice versa), Electrum generates different addresses and shows a zero or incorrect balance. Restore again and select the correct wallet type. If you used a seed extension and are not entering it, the seed also opens a different, empty wallet.
