Trezor passphrase recovery

A lost Trezor passphrase feels hopeless because Trezor, by design, stores it nowhere and cannot reset it. But “stored nowhere” is exactly why Trezor passphrase recovery is possible: the passphrase is a piece of mathematics, not a password on a server, so if you hold your recovery seed it can be searched for and found. The first thing to sort out is which secret you have actually lost, because people routinely confuse three different things.

Passphrase vs PIN vs seed — know which you lost

These get mixed up constantly, and the recovery path is completely different for each:

• The PIN only unlocks the physical Trezor. It is not part of your keys. If you forgot the PIN but have your recovery seed, you don’t need it — you simply restore the seed. The PIN cannot be brute-forced, because the device wipes itself after repeated wrong attempts.
• The recovery seed is the 12 or 24 words that back up your whole wallet. Lose these and there is no anchor to recover from.
• The passphrase is the optional extra word (the “25th word”) that, combined with your seed, unlocks a separate hidden wallet. This is the cryptographic secret we recover.

If you have the seed and only the passphrase is missing, you are in the best possible position. The rest of this guide is about that case.

What a Trezor passphrase really is

When you enable a passphrase, Trezor takes your recovery seed and your passphrase together and derives an entirely new set of accounts — the hidden wallet. Change a single character of the passphrase and you get a completely different, valid, empty wallet, with no error message. There is no “wrong passphrase” warning because every passphrase is technically valid; each just opens a different wallet.

The passphrase is case-sensitive, can contain any characters, and is never written to the device or to the seed backup. That is what makes it powerful security — and what makes an exact copy of it so important. It applies across Trezor One, Model T, Safe 3 and Safe 5 in the same way.

The good news: if you still have your recovery seed

With your seed words in hand, a lost passphrase becomes a search rather than a dead end. We take your seed, generate passphrase candidates, derive the hidden wallet’s addresses for each, and compare them to a receiving address you know was yours. The instant the derived address matches, we have the passphrase — and your recovery seed itself is never attacked or exposed in the process.

This is why we always ask for a target address from the hidden wallet: it is the anchor that tells us, with certainty, when a candidate is correct.

Why a “correct” passphrase fails — the part most people miss

A large share of the cases we see are people who know their passphrase, type it exactly, and still land in an empty wallet. The passphrase isn’t wrong — the bytes are. Because the hidden wallet depends on the exact characters, tiny invisible differences send you to a different wallet entirely:

• Smart quotes. A phone or macOS auto-correcting a straight ‘ or “ into a curly ’ or ” changes the passphrase completely.
• Unicode normalisation. An accented or non-Latin character can be stored two different ways (NFC vs NFKD) that look identical but are different bytes.
• Keyboard layout. A passphrase created on one layout and re-typed on another can swap y/z, or special characters, without you noticing.
• Stray spaces and invisible characters at the start or end, or a capital where you meant lowercase.

Reproducing and sweeping these variations is a core part of what we do — and it is often the whole reason a “lost” passphrase is recovered in minutes rather than never.

How Trezor passphrase recovery works

Recovery is a structured search, not blind guessing. From everything you can tell us — the length, a theme, partial recall, the language and keyboard you used, words or numbers you tend to reuse — we build targeted candidate sets and then expand them with mutations: capitalisation, spacing, common substitutions, and the smart-quote and Unicode variants above. Each candidate is derived across the standard paths (m/44’/0’/0′, m/49′, m/84′ for Bitcoin, and the Ethereum path where relevant) and checked against your target address.

Because the check is a derivation rather than an online guess, it runs fast and entirely offline — there is no device to lock out and nothing leaves our hardware. When a candidate’s derived address matches yours, the passphrase is confirmed and you regain access to the hidden wallet.

What you need to give us

• Your recovery seed — all 12 or 24 words, in order. This is the anchor; without it there is nothing to search from.
• A target address from the hidden wallet — any receiving address you know held funds, so we can confirm a hit.
• Passphrase hints — anything at all: length, a theme, characters you remember, the device or computer you set it up on, the language and keyboard.

What we can’t do — honestly

We won’t pretend otherwise, because false hope wastes your time. If you have lost the recovery seed itself, there is no anchor and the wallet cannot be recovered. If you remember nothing about a long, fully random passphrase, the search space may simply be too large to be feasible — we will tell you that up front rather than take the case. And we do not “bypass” or unlock the physical device or its PIN; that is not how any of this works, and anyone claiming to do so should be treated as a scammer. A legitimate service, including us, works no-recovery, no-fee and never asks for payment upfront.

KeychainX has recovered wallets since 2017 — 1000+ clients served, ~79% success rate, on a 20% success-based fee (you pay only if we recover).

Frequently asked questions