Why Losing Your Seed Phrase Means Losing Access

A seed phrase cannot be reset because no company holds the keys it rebuilds. In a self-custody wallet the phrase is the only recovery path, so if every copy is gone and the device fails, the coins stay on the blockchain but nobody can spend them. Guessing the phrase is not a realistic way back, though a few missing words can be recoverable. If the phrase is lost but the wallet still opens, the keys are still on the device, so there is still time to move the funds to a new, properly backed-up wallet.

Key takeaways

Ethereum.org says there is no customer support in crypto and that wallets can't be easily recovered. The Federal Trade Commission says crypto payments typically are not reversible and that crypto held in accounts is not insured by a government.
A 12-word phrase has 2^132 possible word combinations, but only 2^128 pass the built-in checksum. A 24-word phrase has 2^256 valid ones. Both are far beyond any search.
In a 12-word phrase, one missing word at a known position leaves about 128 checksum-valid candidates, and two missing words leave about 262,144. Both are searchable. A fully lost phrase is not.
The FBI and the FTC warn about offers to recover lost funds for an upfront fee. These are a documented fraud pattern.
In 2018, Chainalysis estimated that between 2.3 and 3.7 million bitcoin were lost. The estimate rests mainly on long wallet inactivity, not on confirmed losses.

Why no one can reset a seed phrase

A bank can reset a password because the bank holds the account and decides who owns it. A self-custody wallet works the other way around. Ethereum.org notes that wallet providers do not have custody of your funds, that the seed phrase is the only way to recover the wallet, and that there is no customer support in crypto. The same page adds that transactions can't be reversed and wallets can't be easily recovered.

The US Federal Trade Commission describes the consequence in consumer terms. Its guide to cryptocurrency and scams says crypto payments typically are not reversible. It also says crypto held in accounts is not insured by a government, unlike FDIC-insured bank deposits. If you lose the password to your digital wallet, or it is stolen, the FTC says you're likely to find that no one can step in to help recover the funds.

The Bitcoin.org information site makes the same point. Its wallet security page warns that forgetting the wallet password can mean permanently lost funds. It also warns that bitcoin can be lost forever without a backup plan that peers and family can follow.

What a seed phrase restores

The seed phrase (also called a recovery phrase) is a list of words, usually 12 or 24. A wallet converts it into the master secret from which its private keys are generated. Many wallets use the format set out in the BIP 39 standard, and the arithmetic below applies to BIP 39 phrases. The bitcoin.org page says that for most modern wallets, a single backup of the recovery phrase is enough to restore all past and future addresses. The words are the backup.

What it does not cover

Custodial accounts. If coins sit in an exchange account, the provider holds the keys. Ethereum.org says that with a centralized exchange you are trusting it with custody of your funds. Access then depends on that provider's own account process, not on a seed phrase you hold.
The device itself. A phone or hardware device is just one place the keys are used. The phrase lets a compatible wallet rebuild them on a different device. That is why the phrase, not the device, is the thing to protect.
Optional extras. If a passphrase was added, BIP 39 specifies that every passphrase generates a valid seed. A wrong or forgotten passphrase therefore opens a different, empty wallet instead of showing an error, and there is no reset for it either.

The arithmetic of guessing words

Each BIP 39 word encodes 11 bits, a number from 0 to 2,047 that points into a 2,048-word list. A 12-word phrase therefore has 2,048^12 = 2^132 raw combinations. The standard uses 4 of those bits as a checksum, so only 1 in 16 combinations is valid, leaving 2^128, or about 3.4 × 10^38. A 24-word phrase uses 8 checksum bits: 2^264 raw combinations, of which 2^256 are valid.

Illustrative example: assume a machine could test one trillion (10^12) candidate 12-word phrases every second. Working through 2^128 of them would take about 1.1 × 10^19 years, roughly 780 million times the commonly cited 13.8-billion-year age of the universe. Real tests would be slower, because the standard runs each phrase through 2,048 rounds of PBKDF2 hashing before keys appear.

When only part of the phrase is missing

The picture changes when most of the phrase survives. Each unknown word multiplies the search by 2,048. In a 12-word phrase, the checksum then removes about 15 of every 16 candidates. The counts below were computed for 12-word phrases.

What is missing	Raw candidates	Checksum-valid (about)
One word, position known	2,048	128
One word, position unknown	12 × 2,048 = 24,576	1,536
Two words, positions known	2,048^2 = 4,194,304	262,144
Three words, positions known	2,048^3 = 8,589,934,592	536,870,912
All 12 words in hand (all different), order unknown	12! = 479,001,600	29,937,600
Six words, positions known	2,048^6 ≈ 7.4 × 10^19	≈ 4.6 × 10^18

A candidate count means nothing until each candidate is checked. A checksum-valid phrase always produces a wallet, so the searcher needs a known address or balance to tell the right wallet from millions of empty ones. One or two missing words with a known address is a search a computer can finish, but six missing words is not. A passphrase, if one was set, multiplies the problem again, because the checksum cannot check it at all.

The same checksum is why a mistyped word is usually caught. In a 12-word phrase, a random wrong word still passes about 1 time in 16 (6.25%). In a 24-word phrase it passes about 1 time in 256. Either way, a wallet app that accepts a phrase has not proven the phrase is the original.

Backups that survive failure

The backup guidance from bitcoin.org and ethereum.org is mostly about removing single points of failure.

More than one physical copy. The bitcoin.org page says single points of failure are bad for security. It suggests keeping copies in more than one physical place, on durable storage media.
Offline, not synced. Ethereum.org's wallets page says not to store the phrase on a computer. Its security guidance warns that screenshots of a seed phrase may sync to a cloud data provider. Bitcoin.org says any backup stored online is highly vulnerable to theft.
Complete backups. Bitcoin.org also cautions that a backup covering only the keys currently visible to you may not recover all of your funds. Confirm what your wallet's backup actually includes.
Restoring as the only real test. This is editorial reasoning rather than a rule from those sources. A checksum cannot prove a phrase matches the original wallet, so the only way to confirm a backup is to restore it in a fresh wallet. Then check that the first receiving address matches the original.

A fireproof copy that sits beside the first copy still fails along with it, so location matters as much as material. Giving the phrase to someone else improves resilience but also hands that person full control. Ethereum.org's security page warns that anyone who has the recovery phrase can access all of your accounts and drain every asset.

Recovery scams after a loss

People who have lost crypto are a target for fraudsters who claim they can get it back. The FBI's Internet Crime Complaint Center has warned about companies falsely claiming an ability to recover funds lost in crypto investment scams. These fake firms contact victims on social media or messaging platforms, or advertise in the comment sections of online news articles. They charge an upfront fee. Then they either stop responding or deliver an incomplete or inaccurate tracing report and ask for more fees. The same alert notes that private recovery companies cannot issue seizure orders.

A June 2024 FBI alert covers fake law firms that contact scam victims, sometimes claiming the case was referred by a government agency such as the FBI or CFPB. The FBI reported losses of over $9.9 million to this scheme between February 2023 and February 2024. The FTC's page on refund and recovery scams gives the general rule: never pay upfront for a refund or for help with a refund.

Those alerts concern scam victims, but the pitch to someone who lost their own phrase is similar. Ethereum.org's security guidance describes fake support agents who offer to return lost ETH in exchange for your private keys. It states that no legitimate service, support agent or website will ever ask for your recovery phrase. No outside party can regenerate the words, so any message offering to "restore" a lost phrase is a red flag.

Lost coins and inheritance

The coins do not vanish when the phrase does. They remain on the ledger at their addresses, simply unspendable. Chainalysis, a blockchain analytics firm, estimated in June 2018 that between 2.3 million and 3.7 million bitcoin were lost. Its method relies mainly on how long wallets have gone without spending, because people do not always announce that they have lost their keys. A smaller part of the lower figure, about 0.2 million, was extrapolated from reports of lost keys and misdirected transactions. Treat the range as an inference, not a count: an old, untouched wallet may belong to a patient holder. It is also dated. The same post replaced an earlier November 2017 estimate of 2.8 to 3.8 million, after Chainalysis changed its method.

Inheritance is the same problem with a different cause. A model law, the Revised Uniform Fiduciary Access to Digital Assets Act, governs access to online accounts when the owner dies or loses the ability to manage them. It also lets fiduciaries manage digital property, including virtual currency. States adopt uniform acts with their own changes, so details vary by state. Legal authority cannot produce the keys to a self-custody wallet, though, so heirs depend on the words being findable. The practical answer is a documented location for the backup that a trusted person or the executor can reach. Keep the words themselves out of the will, which other people read and which may be filed with a court in probate. A probate attorney can explain the local rules.

Frequently asked questions

If I only forgot my passphrase, is there a fix?

Not by reset. Under BIP 39, every passphrase generates a valid seed, so a wrong guess never triggers an error. Only the exact original passphrase, typed exactly as set, leads back to the funds. If the wallet with the passphrase still opens on a device, move the funds while it does.

Does a 24-word phrase change the odds?

Yes, in both directions. A full 24-word phrase has 2^256 valid combinations, far more than a 12-word phrase. Its 8 checksum bits also filter harder: one missing word at a known position leaves about 2,048 ÷ 256 = 8 valid candidates, compared with about 128 for a 12-word phrase.

Can a court or the government restore lost keys?

No such mechanism exists for self-custody wallets. The FTC says crypto in accounts is not insured by a government. The FBI notes that private recovery companies cannot issue seizure orders, and that exchanges freeze accounts only under their own processes or in response to legal process. Legal process can reach a company that holds funds, but no court order can regenerate keys that nobody holds.

What if the phrase is lost but the wallet still opens?

Then the keys still exist on that device, and the funds can still be moved. This follows from how wallets work, not from a specific rule. Set up a new wallet, back up its new phrase properly, test the backup, and send the funds there before the old device fails.

What if a website asks me to enter my phrase to check or restore it?

Treat it as an attempt to drain the wallet. Ethereum.org states that no legitimate service, support agent or website will ask for the phrase, and that anyone who has it can drain every asset.

A short backup check

Write the words in order, with numbers, on a durable offline medium, and read them back once against the wallet's screen.
Make at least two copies and keep them in different physical places.
Note separately whether a passphrase is in use, and store it apart from the words.
Restore from the backup into a fresh wallet and confirm the first address matches before moving significant funds.
Leave an executor or trusted person instructions for finding the backup, not the words themselves.
Ignore anyone who offers to recover access in exchange for a fee, keys or the phrase. Report them to the FTC at ReportFraud.ftc.gov or to the FBI's IC3.