Logótipo oficial do MASTR MASTR Apoiar o trabalho
Índice
← Início da wiki

Technical reference

BIP-39 passphrases: the wrong phrase can open a different wallet

Recovery words and the optional passphrase are separate inputs to key generation.

Source-based reference · Updated 12 September 2026

Os artigos de investigação e as referências são publicados em inglês. A navegação está disponível em sete idiomas.

Neste artigo
  1. Two inputs, one seed
  2. Why recovery can look successful but be wrong
  3. Backups need a recovery test
  4. Sources

Two inputs, one seed

BIP-39 describes mnemonic words and a process that derives a seed from the mnemonic plus an optional passphrase. The mnemonic is not simply an account password checked by a recovery server. Different passphrases derive different seeds.

Why recovery can look successful but be wrong

A wallet may accept the words and a mistyped passphrase without reporting a failed login. It can instead derive a different set of keys and show no expected funds. The same symptom can also arise from a different derivation path or account selection. An empty balance alone does not distinguish these causes.

Backups need a recovery test

Keep any passphrase backup separate according to the threat model, but ensure that recovery does not depend solely on memory. Test recovery on a trusted device without typing secrets into a website or support chat. Never publish the words or passphrase as evidence in a public finding. A checksum on the mnemonic cannot validate the correctness of the separate passphrase.

Sources

Leituras relacionadas

MASTR

Apoiar a investigação independente

As investigações, as provas originais e os guias são de acesso livre. Os donativos voluntários ajudam a financiar a investigação e a manter disponíveis as ferramentas MASTR.

Abrir carteira