Can You Recover a Crypto Wallet With 3 Missing Seed Words?
Losing part of a cryptocurrency recovery phrase does not always mean the wallet is permanently inaccessible.
In some circumstances, if enough of the recovery phrase is still known, the missing word positions are known, and there is a wallet address available for verification, it may be possible to systematically test the missing combinations and recover the original phrase.
We recently tested a scenario involving a 12-word BIP-39 recovery phrase where 9 words were known and the final 3 words were missing.
The result illustrates both how cryptocurrency wallet recovery can work and how quickly the difficulty increases as additional recovery words are lost.
Why three missing seed words creates billions of possibilities
Many cryptocurrency wallets use the BIP-39 standard for generating recovery phrases.
The standard English BIP-39 wordlist contains 2,048 possible words.
If one word is completely unknown, there are 2,048 possibilities.
With two missing words:
2,048 × 2,048 = 4,194,304 possible combinations
With three missing words:
2,048 × 2,048 × 2,048 = 8,589,934,592 possible combinations
That means three completely unknown word positions create a raw search space of more than 8.5 billion possible combinations.
And the difficulty grows extremely quickly:
2 missing words: approximately 4.2 million combinations
3 missing words: approximately 8.6 billion combinations
4 missing words: approximately 17.6 trillion combinations
Each additional unknown word multiplies the raw search space by another 2,048 times.
Building an offline wallet recovery environment
For our test, we created a local recovery environment using equipment we already had available.
The system consisted of an Ubuntu machine equipped with four NVIDIA GTX 1070 GPUs running BTCRecover, an open-source cryptocurrency wallet recovery tool.
The first nine recovery words were fixed in their known positions. BTCRecover then generated possible combinations for the remaining three positions.
Importantly, the recovery process was performed entirely offline.
The recovery phrase did not need to be uploaded to a website, emailed to another party, or entered into an online recovery service.
For sensitive wallet recovery work, maintaining control of seed material is an important security consideration.
How does the system know when it finds the correct phrase?
Generating candidate recovery phrases is only part of the process.
There also needs to be a way to determine whether a particular candidate is correct.
In this scenario, we already had a Bitcoin address known to belong to the wallet.
For each candidate recovery phrase, the system could derive the corresponding wallet addresses and compare them against that known address.
If the derived address matched the known wallet address, the correct recovery phrase had been identified.
This is why having information such as a known receiving address, transaction history, wallet type, or derivation path can be extremely useful during a recovery attempt.
Testing roughly 40,000 candidate phrases per second
Once the four GPUs were running together, our system was processing approximately 40,000 candidate recovery phrases per second.
At that rate, searching the entire raw space of approximately 8.6 billion combinations would take roughly 60 hours.
The correct phrase, however, does not necessarily appear at the end of the search.
Depending on where the correct combination falls within the search order, it could potentially be identified substantially sooner.
This is also where GPU acceleration becomes useful. Wallet recovery involves performing the same types of cryptographic calculations across very large numbers of candidate phrases, which is a workload that can benefit significantly from parallel processing.
Does this mean a 12-word seed phrase can be brute-forced?
No.
There is an important distinction between recovering a partially known phrase and attempting to brute-force an entirely unknown recovery phrase.
In our example:
9 of the 12 words were already known.
The positions of the three missing words were known.
A wallet address was available for verification.
Those constraints reduce the problem to a defined search space.
A completely unknown 12-word BIP-39 recovery phrase represents an astronomically larger search space and would be computationally impractical to brute-force using this type of hardware.
The recovery becomes possible because significant information about the original phrase is already available.
What information can make wallet recovery easier?
Every situation is different, but several pieces of information can significantly narrow a recovery search.
Knowing the positions of the missing words is particularly valuable. If the missing words could appear anywhere in the phrase, the search becomes much more complicated.
Knowing partial information about a damaged word can help as well. For example, if part of a word remains readable, the number of possible BIP-39 words may be reduced substantially.
Other useful information can include the wallet software originally used, cryptocurrency involved, approximate wallet creation date, known addresses, previous transactions, and whether an additional BIP-39 passphrase was used.
The more reliable information that remains, the more constrained the recovery problem may become.
Wallet recovery is highly case-specific
Not every damaged or incomplete recovery phrase can be recovered.
The feasibility depends on factors including how many words are missing, whether their positions are known, whether portions of damaged words remain readable, the type of wallet involved, whether an additional passphrase was used, and whether there is reliable blockchain information available to confirm the correct wallet.
As more information is lost, the computational requirements increase rapidly.
That is why it is important to evaluate the specific circumstances before attempting a large recovery search.
Protecting cryptocurrency recovery phrases
This exercise also highlights why recovery phrase security matters.
A recovery phrase effectively represents control over the underlying wallet. Anyone who obtains the complete phrase can generally recreate the wallet without needing the original device.
Recovery phrases should therefore be stored securely and should not be entered into unknown websites or shared with untrusted parties.
At the same time, keeping only a single fragile paper copy creates its own risks. Fire, water damage, fading ink, physical destruction, or simple loss can make a recovery phrase difficult or impossible to read.
For long-term storage, wallet owners should consider secure and durable backup practices appropriate for the value being protected.
Can Token Trace help with cryptocurrency wallet recovery?
Token Trace specializes in blockchain investigations, cryptocurrency tracing, and technical analysis involving digital assets.
In certain wallet recovery situations, we can evaluate the available information and determine whether a structured recovery attempt may be technically feasible.
Recovery is never guaranteed, particularly when significant portions of a seed phrase or wallet information are missing. However, situations involving a partially known recovery phrase may sometimes be recoverable through careful analysis and controlled offline testing.
If you are dealing with an inaccessible cryptocurrency wallet or damaged recovery phrase, you can contact Token Trace to discuss the circumstances.
