Official MASTR logo MASTR Support the work
Contents
← Wiki home

Technical reference

BIP-39 passphrases: the wrong phrase can open a different wallet

Recovery words and the optional passphrase are separate inputs to key generation.

Source-based reference · Updated 12 September 2026

Research articles and reference entries are published in English. Navigation is available in seven languages.

In this article
  1. Two inputs, one seed
  2. Why recovery can look successful but be wrong
  3. Backups need a recovery test
  4. Sources

Two inputs, one seed

BIP-39 describes mnemonic words and a process that derives a seed from the mnemonic plus an optional passphrase. The mnemonic is not simply an account password checked by a recovery server. Different passphrases derive different seeds.

Why recovery can look successful but be wrong

A wallet may accept the words and a mistyped passphrase without reporting a failed login. It can instead derive a different set of keys and show no expected funds. The same symptom can also arise from a different derivation path or account selection. An empty balance alone does not distinguish these causes.

Backups need a recovery test

Keep any passphrase backup separate according to the threat model, but ensure that recovery does not depend solely on memory. Test recovery on a trusted device without typing secrets into a website or support chat. Never publish the words or passphrase as evidence in a public finding. A checksum on the mnemonic cannot validate the correctness of the separate passphrase.

Sources

Related reading

MASTR

Support independent research

The investigations, original evidence and guides here are free to read. Voluntary donations help fund the research and keep MASTR’s tools available.

Open wallet