How to Recover a Bitcoin Wallet With a Missing Seed Word

If you've lost or forgotten a single word from your Bitcoin wallet's recovery phrase, the situation is usually much less dire than it feels. Because of how the BIP-39 standard builds a checksum into every mnemonic, a single missing word narrows down to a small, searchable set of candidates rather than an impossible 2,048-way guess. Here's exactly why that works, how to do it safely, and where the limits are.

Why a missing word is a narrow search, not a guessing game

Every standard Bitcoin recovery phrase is built from a fixed list of 2,048 words. Each word encodes 11 bits, and the last few bits of the whole phrase aren't random entropy at all — they're a checksum, computed by hashing the rest of the phrase's underlying data.

That checksum is small: 4 bits for a 12-word phrase, 8 bits for a 24-word phrase (it scales with length). Practically, that means:

• For a 12-word phrase, only about 1 in 16 of the 2,048 possible words for a blank will produce a valid checksum — roughly 128 candidates, not 2,048.
• For a 24-word phrase, only about 1 in 256 will pass — roughly 8 candidates.

That's a small enough set to check exhaustively on an ordinary computer in well under a second. This is the same mechanism that makes typo-correction and missing-word recovery tools work at all — they're not brute-forcing the full wordlist, they're filtering it with the checksum first.

The math gets harder fast with more missing words, though. Two missing words multiply the search space by up to 2,048 again before the checksum filter is applied, so you're checking on the order of tens of thousands to low hundreds of thousands of combinations — still often feasible, but noticeably slower. Three or more missing words, or a missing word combined with an incorrect word elsewhere, can push the search into impractical territory without some other narrowing clue (like a partial memory of the word, or which position it was in).

Checksum-valid is not the same as correct

This is the part people skip, and it matters: a candidate word that produces a valid checksum only proves the phrase is structurally possible. It does not prove it's your phrase. With 128 checksum-valid candidates for a single blank in a 12-word phrase, at most one of them is actually correct — the rest just happen to pass the same math test.

The only way to tell which one (if any) is correct is to derive a public address from each candidate and check it against an address you know is really yours — ideally one you've previously received funds at, or one your wallet software shows you directly. If a candidate derives an address you recognize, you've found it. If none do, either the true missing word wasn't the only thing wrong (check for a mistyped word elsewhere — that's a related but different problem), or you need to also check other derivation paths (see below).

Never treat a "checksum-valid" result as a finished recovery on its own.

The method, step by step

1. Write out exactly what you have, with a clear placeholder (a ?) for the missing word or words. Don't guess-fill anything yet.
2. Double-check every other word is a real BIP-39 wordlist word. A word that "looks close but not quite right" is often a different problem — an incorrect word, not a missing one — and is worth treating separately.
3. Find a known-good address to verify against. A transaction history, an old receiving address, anything your wallet has shown you before. Without this, you can only ever get a list of possibilities, never a confirmed answer.
4. Use a tool that checks every candidate's checksum and, ideally, derives an address from each checksum-valid one, comparing it against the address from step 3. This is exactly the kind of search this site's Recover tool automates — entirely in your browser, with no network request involved in the actual computation.
5. If you get a verified match, that mnemonic is your real recovery phrase. Import it carefully into wallet software you trust, confirm the balance matches what you expect, and consider moving funds to a freshly generated wallet if there's any doubt about how the original phrase was exposed or stored.

Don't forget the derivation path

Even the exact right mnemonic won't reproduce your address if it's derived along the wrong path. Modern wallets follow standard paths for different address types — legacy, nested SegWit, native SegWit, Taproot — and a wallet that assumes the wrong one will show you a different address (and an apparently empty wallet) from the same correct mnemonic. If a verified match still isn't turning up, checking alternate standard paths is the next step, not giving up. See our companion piece on how BIP-39 seed phrases actually work for how the path fits into the picture.

Basic safety rules while you're doing this

• Never type a real recovery phrase into a website. Any tool that asks you to paste your seed phrase into a web form and hits "submit" is a tool you should close immediately. Legitimate offline recovery software runs the computation locally and makes no network call with your phrase.
• Do this offline where practical. Disconnecting from the internet before you start, and reconnecting only after you're done, removes an entire category of risk.
• Be extremely skeptical of anyone who contacts you offering to recover a wallet for a fee, especially if they ask for your seed phrase. We cover why in what to do after a crypto scam — this exact pattern is one of the most common scams targeting people in your situation.

A missing word is one of the more solvable recovery scenarios in Bitcoin, precisely because the standard was designed with a checksum for this reason. Treat "checksum-valid" as a lead to verify, not an answer to trust, and you'll get a real result instead of a false one.