Logo MASTR ufficiale MASTR Sostieni il lavoro
Indice
← Home della wiki

Technical reference

BIP-39 passphrases: the wrong phrase can open a different wallet

Recovery words and the optional passphrase are separate inputs to key generation.

Source-based reference · Updated 12 September 2026

Gli articoli di ricerca e le schede sono pubblicati in inglese. La navigazione è disponibile in sette lingue.

In questo articolo
  1. Two inputs, one seed
  2. Why recovery can look successful but be wrong
  3. Backups need a recovery test
  4. Sources

Two inputs, one seed

BIP-39 describes mnemonic words and a process that derives a seed from the mnemonic plus an optional passphrase. The mnemonic is not simply an account password checked by a recovery server. Different passphrases derive different seeds.

Why recovery can look successful but be wrong

A wallet may accept the words and a mistyped passphrase without reporting a failed login. It can instead derive a different set of keys and show no expected funds. The same symptom can also arise from a different derivation path or account selection. An empty balance alone does not distinguish these causes.

Backups need a recovery test

Keep any passphrase backup separate according to the threat model, but ensure that recovery does not depend solely on memory. Test recovery on a trusted device without typing secrets into a website or support chat. Never publish the words or passphrase as evidence in a public finding. A checksum on the mnemonic cannot validate the correctness of the separate passphrase.

Sources

Letture correlate

MASTR

Sostieni la ricerca indipendente

Le indagini, le prove originali e le guide sono accessibili gratuitamente. Le donazioni volontarie contribuiscono a finanziare la ricerca e a mantenere disponibili gli strumenti MASTR.

Apri wallet