Blog
Trezor Recovery Seed Lost or Invalid? How to Restore It
In short
A lost, rejected or incomplete Trezor recovery phrase calls for different checks. First identify the backup format, BIP-39 or SLIP-39, because their word lists and recovery requirements differ.
- If you can still unlock the device and access the correct wallet, including any required passphrase, transfer the assets to a new wallet with a verified backup before wiping the original device.
- For a rejected backup, check spelling, word count and the entry order requested by your Trezor. A hidden wallet also needs its exact passphrase; the phrase alone can open a different wallet.
- Missing-word searches depend on the surviving words, positions and a known address. SLIP-39 recovery also requires the configured share threshold. Trezor’s backup check verifies words you supply; it does not reveal a lost phrase.

Losing your Trezor recovery seed does not automatically mean losing access to your wallet. The next step depends on whether the device still works and whether any usable backup or part of the phrase remains.
If a recovery ends in “Recovery failed” or “Invalid wallet backup”, there is a short list of causes, and most of them you can check yourself. This guide explains why those errors appear, how to fix a wrong-order or misspelled seed phrase, what a search can do when words are missing, and when it makes sense to turn to a professional Trezor recovery service.
What is a Trezor recovery seed, and why does it have to be exact?
When you first set up your Trezor, it creates a wallet backup, also called a recovery seed, seed phrase or recovery phrase. This backup lets you restore the wallet on a compatible device. If your original Trezor still works and you can unlock it with the PIN and access the relevant wallet with any required passphrase, you can transfer your assets to a new wallet whose backup you have recorded and checked. Do not wipe the original device before the transfer is complete.
Which backup you have depends on the model and on when it was set up, as Trezor’s overview of backup formats explains. The Trezor Model One creates a 24-word backup by default, and the Model T and Safe 3 devices set up before June 2024 default to 12 words; both are BIP-39 backups. Since June 2024, the Safe 3, Safe 5 and Safe 7 default to a 20-word Single-share Backup, which follows Trezor’s SLIP-39 standard. Trezor firmware also recognizes 18-word BIP-39 backups and 33-word SLIP-39 shares, so if that’s what you wrote down, it can still be valid. BIP-39 backups draw their words from a fixed list of 2,048 English words; SLIP-39 backups use a separate list of 1,024 words. Both lists are chosen to be easy to read and write down.
Even so, small mistakes are enough to make recovery fail: a misspelled word, a swapped pair, a smudged letter on paper. The system rejects them by design. Your Trezor recovery seed can restore access on any compatible device, which is exactly why it has to be guarded so strictly. For the full restore walkthrough, see our guide on how to recover your Trezor wallet using your seed phrase.
Lost your Trezor seed phrase? Search thoroughly before you give up
A careful second search sometimes turns up the full seed phrase, or at least more of it, so be thorough before you assume the worst.
Your Trezor keeps the wallet’s secret inside the device so it can sign transactions, but it shows the wallet backup only once, during setup, and cannot display it again. Trezor does not keep a copy on its servers. Start your search with the backup cards supplied with the device, then check other places where you may have stored the words.
Physical places to check:
- The wallet backup cards that came with your Trezor
- Notebooks, sticky notes, personal journals
- A safe, lockbox, or secure drawer
- Inside books, under furniture, or other hiding spots you might have used
- The back of a business card or inside a physical wallet
Digital locations, not recommended for storage but worth checking:
- Password managers like Bitwarden or 1Password
- Encrypted USB drives
- Cloud storage, since some people save it there despite the security warnings
If you’ve checked everywhere and still can’t locate your phrase, or it’s incomplete, keep reading.
Invalid or incomplete recovery seed: what the errors mean
When a Trezor rejects a backup, the device reports “Invalid wallet backup entered”, or “Invalid recovery share entered” for a SLIP-39 share, and Trezor’s troubleshooting guide lists messages such as “Recovery failed” and “Invalid wallet backup”. Trezor names two causes. The first is word order. On the Safe models and the Model T you enter the words in their written order, directly on the device. On the Model One, standard recovery asks you to type the words in the order displayed on the Trezor, which differs from the order on your card; typing them in written order instead makes the recovery fail. The second cause is a misspelled or misread word.
Identify the backup format first, BIP-39 or SLIP-39, because each has its own word list. If recovery reports an invalid backup or share, check the words against the matching list: the BIP39 word list or the SLIP-39 word list. A written word that isn’t on the list is misspelled. Look for easily confused letters such as “u” and “v”, and for lookalike pairs such as “boy” and “box” or “aware” and “awake”; Trezor keeps a list of commonly misspelled backup words. Crypto Recovers can help assess the type of error without asking you to put the phrase into an online tool.
Choosing the wrong number of words also makes recovery fail. Trezor asks for the length of your backup before you start, so count your written words first and select that exact number.
If your written seed is incomplete, because a word was left out, the wrong word was written down or some words are illegible, use the word list for the actual backup format as a reference: BIP-39 or SLIP-39. If you’re working from a paper backup, look closely for faded ink: words like “cloud” can easily read as “loud.”
Also check whether your wallet used a hidden wallet passphrase, also known as a 25th word. If so, your seed phrase alone will open an empty wallet, not the one your funds are in. That can make a correct seed look broken. It isn’t. The passphrase is missing, and our guide on how to recover a lost Trezor passphrase explains what’s possible. If instead your device is locked because you forgot your Trezor PIN, that’s a separate fix.
If you can’t sort it out yourself, Crypto Recovers can help with damaged seed cards, partial phrases, and forgotten or incorrect word entries, using brute-force techniques and specialized recovery tools. We can reconstruct missing words, test possible variations, and identify the correct derivation path to restore access to your wallet.
How to recover your Trezor recovery seed when words are missing
If no usable backup, surviving secret data or reliable clues remain, the phrase cannot be recreated from a public address. An accessible device is a separate route: it may still let you transfer your assets without reconstructing the lost phrase. But if you remember most of the phrase and only a few words are missing, recovering the Trezor mnemonic behind your wallet can be realistic. You can start by manually testing possible word combinations from the word list, or use an open-source tool like BTCRecover, which handles BIP-39 phrases and SLIP-39 shares. When only one word is gone, our guide on recovering a single missing seed word is the fastest place to start. Crypto Recovers works with phrases that are missing up to four words.
The table below shows what each situation means for a BIP-39 phrase, where every missing word can be any of 2,048 and the BIP-39 checksum rules out most wrong candidates. The combination counts are exact arithmetic; how long a search takes depends on the hardware and on how far your clues narrow it.
| Scenario | What has to be searched | What decides it | Best approach |
|---|---|---|---|
| 1 word missing | 2,048 candidates for each possible position | The checksum leaves about 1 in 16 (12 words) to 1 in 256 (24 words); an address you know confirms the right one | Manual first (check handwriting), then tools |
| 2 words missing | ~4.2 million (2,048²) per pair of positions | Known positions keep it small: in a 24-word phrase, 16,384 candidates pass the checksum | A recovery tool, or a professional service |
| 3 words missing | ~8.6 billion (2,048³) | Only practical with strong position hints | Professional recovery with GPU software |
| 4 words missing | ~17.6 trillion (2,048⁴) | Known positions and an address to check against | Professional recovery; the upper end of what Crypto Recovers works with |
| 5+ words missing | ~36 quadrillion (2,048⁵) and up | Beyond the range Crypto Recovers works with | Not practical without other material |
| Typo or misspelling | The lookalike words for each doubtful position | How many positions are in doubt | Check against the word list: cloud/loud, price/prize, boy/box |
| Wrong order | 479,001,600 orderings of 12 words (12 factorial), about 1 in 16 of them checksum-valid | Any order you remember; 24 words in unknown order cannot be searched this way | Recovery software that tests orderings against a known address |
| Partial memory | Depends on what you remember | Each certain word and position shrinks the search | Pro tools plus your specific clues are critical |
| Whole phrase gone, with no usable device or other backup | 2¹²⁸ possible 12-word phrases, more for longer ones | Recreating an unknown phrase is not feasible | Preserve any surviving device or backup material for assessment |
Real results depend on how much you remember and how good your clues are. A SLIP-39 share works differently: each word is one of 1,024, and its three-word checksum detects any error that affects up to three words.
When should you seek professional help?
You can try to recover your seed phrase yourself, and for simple cases it is worth trying. Beyond that, professionals bring tools and experience that most people don’t have access to: faster GPU-powered software, deep knowledge of BIP-39 and SLIP-39 edge cases, and the pattern recognition that comes from doing recoveries since 2019.
One documented example: a client had 22 of 24 words, with the other two completely faded on the backup card. Using positional clues and a receiving address the client already knew, the phrase was rebuilt and confirmed in about four hours, as the case study describes. Another case can need a very different search. A partial recovery can only be assessed from the actual phrase format, the unknown positions, the surviving words and other reliable constraints, so do not infer timing or odds from someone else’s case.
Before you reach out to anyone, protect yourself. Legitimate recovery services will never guarantee results, and they will never ask for full payment upfront. If someone promises instant recovery or a guaranteed outcome, that’s almost certainly a scam. Walk away.
And no matter what, never enter your seed phrase into any website. No legitimate service will ever ask you to share it online. Only ever enter your Trezor recovery seed the way your Trezor itself tells you to: directly on the device or, on a Model One, in Trezor Suite in the order the device displays. If you’d like a hand, you can start with a free, confidential assessment through our Trezor wallet recovery service.
We never take custody of your crypto. If access is restored, you send the funds yourself to a new wallet you set up, and the agreed fee is a separate payment that you make yourself.
Best ways to back up your Trezor recovery seed after recovery
Once you’re back in, take a moment to make sure this doesn’t happen again. The goal is a backup that survives fire, water, and time, and that you can actually find when you need it.
Don’t store your seed phrase online. On paper the words fade, smudge and tear; stamped or engraved metal does not, which is why a metal backup, such as Trezor’s own Keep Metal, is the usual step up from the card that came with the device.
For extra resilience, consider Trezor’s Multi-share Backup, which uses the SLIP-39 (Shamir) standard. Instead of a single backup, it splits it into multiple “shares,” and you set how many are needed to restore: with a 3-of-5 setup, any three shares recover the wallet even if two are lost or destroyed. According to Trezor’s SLIP-39 FAQ, it works on the Safe 3, Safe 5, Safe 7 and Model T with firmware 2.7.2 or newer, and a 20-word Single-share Backup created since June 2024 can be upgraded to it. The Trezor Model One uses BIP-39 only and does not support Shamir.
Whichever method you choose, store your backup separately from the device, keep at least one copy off-site, and test it once so you know it actually restores your wallet.
FAQ: restore a Trezor seed
Can I recover my wallet without a recovery phrase?
Yes, if your existing Trezor still works and you can unlock it and access the relevant wallet, including any required passphrase. Transfer your assets to a new wallet with a backup you have recorded and checked before wiping the old device. Without usable secret data or a recoverable backup, neither Trezor nor a recovery service can recreate the keys from a public address.
How do I use a Trezor recovery seed?
Select “Recover Wallet” in Trezor Suite, choose the number of words, and enter the seed phrase as your Trezor instructs: in written order on the device for the Safe models and the Model T, or in the order the screen asks for on a Model One. This restores your wallet access and private keys. Enter it carefully to avoid exposure to keyloggers or phishing, and only ever on your trusted device.
What happens if I lose my Trezor seed phrase?
If your device is later reset or lost, a missing seed phrase means permanent loss of access, because the keys can’t be regenerated without it. To prevent this, store the seed offline in more than one secure location, or use a metal or Shamir backup.
How do I verify my Trezor seed?
In Trezor Suite, open the device settings (the gear icon, then “Device”) and click “Check backup” under “Wallet backup”. It has you re-enter the phrase on the device to confirm it’s correct, without moving any funds. Never enter your seed on an untrusted device.
How do I find my Trezor recovery seed?
Look for the backup cards or other offline records you made. Your Trezor shows the backup only once, during setup, and Trezor Suite’s “Check backup” only checks the words you supply; it does not reveal a missing backup. The device retains secret data for using the wallet, but Trezor does not hold a recoverable copy on its servers.
How many words is a Trezor seed phrase?
Usually 12, 20 or 24. BIP-39 backups have 12 or 24 words: 24 is the Model One default, and 12 the default on the Model T and on Safe 3 devices set up before June 2024. The 20-word backup is Trezor’s SLIP-39 Single-share Backup, the default on the Safe family since June 2024. Trezor firmware also recognizes 18-word BIP-39 backups and 33-word SLIP-39 shares.
Can a Trezor recovery seed be recovered if some words are missing?
Yes, within limits. With one or two words missing or illegible the search is small, because BIP-39’s built-in checksum rules out most wrong candidates. Each further missing word multiplies the search by 2,048, so from three words up it stays practical only with good clues about which positions are missing. Crypto Recovers works with phrases that are missing up to four words.
