Ledger owners arrive with one of two problems, and they are opposites. Either the device rejects the phrase outright, or it accepts the phrase and shows a balance of zero. The first is a transcription problem. The second is usually not a seed problem at all — and it is the one that causes the most unnecessary panic.
What does “Invalid recovery phrase” mean on a Ledger?
It is a checksum failure. Every Ledger recovery phrase is a BIP39 mnemonic drawn from a fixed 2,048-word list, and the device will not accept a word outside that list. A 24-word phrase encodes 264 bits: 256 bits of entropy plus an 8-bit checksum computed from that entropy. A 12-word phrase encodes 128 bits of entropy plus a 4-bit checksum.
When you enter the words, the device recomputes the checksum and compares. A mismatch produces the error. So the message means: these words are internally inconsistent — a word is wrong, a word is missing, or two are out of order. It does not mean your coins have moved.
Why is a single wrong word recoverable?
Because the checksum works for us as well as against us.
If one word of 24 is wrong and you know which position, there are 2,048 possibilities — but only those producing a valid 8-bit checksum can be genuine seeds, and that is 1 in 256. The search collapses to roughly 8 checksum-valid candidates. Each derives a different wallet; we check which one matches your on-chain history. That’s minutes of work, not months.
- One unknown word (24 words): ~8 valid candidates.
- Two unknown words: ~16,000. Trivial.
- Three unknown words: tens of millions. Routine on GPU.
- Four or more: billions — still feasible, and any hint (a first letter, a rough position) collapses it fast.
Note the asymmetry people miss: the last word is mostly checksum. In a 24-word phrase the final word carries 3 bits of entropy and 8 bits of checksum — so if the last word is the one you can’t read, the constraint is even tighter. Conversely, if all 24 words are known but the order is lost, 24! ≈ 6×10²³ arrangements puts it out of reach. Partial order information brings it back.
My phrase was accepted but the wallet is empty. Where are my coins?
If Ledger accepted the phrase, the checksum passed — the seed is valid. An empty restore has two usual causes, and neither means your seed is wrong.
1. A derivation path mismatch. This is the single most misunderstood cause of “empty Ledger”, especially for Ethereum. The same seed generates different addresses on different paths. Ledger’s own software historically derived Ethereum accounts differently from MetaMask and the older MEW/MyCrypto convention — the account index sits in a different position in the path. The result: identical seed, different addresses, apparently empty wallet. For Bitcoin the same applies across legacy (m/44′), SegWit (m/49′), native SegWit (m/84′) and Taproot (m/86′). Your coins are on a path your current software isn’t scanning. We sweep the full path family and account indexes as standard, and this alone resolves a meaningful share of cases.
2. A passphrase. Ledger’s optional passphrase creates a hidden wallet. It is not a password protecting your seed — it is an extra input to key derivation, so every passphrase produces an entirely separate wallet from the same 24 words. There is no “wrong passphrase” error, because no passphrase is wrong; each one just opens a different (usually empty) wallet. If you set one and forgot it, your 24 words alone will always show the empty default wallet.
Why does my Ledger say the phrase is invalid when I copied it exactly?
In order of how often we see it:
- A near-miss word. The BIP39 list has many close pairs, and handwriting does the rest — brush/crush, seek/sick, a “u” that reads as “v”. One letter invalidates the whole phrase.
- Word count. Ledger devices ship with 24 words but support 12 and 18. Selecting the wrong length fails identically to a wrong word.
- Duplicates. Genuine BIP39 phrases can legitimately repeat a word — but a repeat can also mean you wrote a line twice and dropped another.
- Order. Words entered out of sequence fail the checksum exactly like wrong words do.
- Transcription artefacts. Copy-paste from a digital note can carry the wrong encoding or hidden whitespace; typing manually is safer.
The PIN warning that matters
Three consecutive wrong PIN entries wipe a Ledger device. That is by design and it is not a disaster if you have your recovery phrase — the device is just a container; the seed is the wallet. But if your phrase is incomplete and you wipe the device out of frustration, you have destroyed the only working access you had while your backup was still unproven. If your PIN is uncertain and your phrase is uncertain, stop and get advice before entering another PIN.
What we can do that a DIY attempt can’t
- Checksum-constrained reconstruction of unknown, illegible or misspelled words — tested against on-chain history, not guessed by hand.
- Order reconstruction from partial information (a suspected transposition, a column misread).
- Full derivation-path sweeps across path families, account indexes and client conventions — the fix for most “restored empty” cases.
- Passphrase recovery for hidden wallets, including the encoding traps: typographic quote substitution on macOS and Unicode normalisation differences between clients silently produce a different wallet from a passphrase you’d swear is correct. We generate those byte-level variants systematically.
Everything runs offline on our own hardware. Nothing is uploaded to a cloud service.
What you should never do
Never enter your recovery phrase into a website, an app that isn’t your hardware wallet, a “seed validator”, a Telegram bot, or an AI chatbot. Your phrase is your money — anyone who sees it can empty the wallet in seconds, irreversibly. Ledger will never ask for it. Scammers impersonating Ledger support are the single most successful attack in this space, and they rely on the panic you’re feeling right now.
Frequently asked questions
Can you recover my Ledger if the recovery phrase is completely lost?
No. With no phrase, no partial words and no clues, the wallet cannot be recovered — not by us, not by Ledger, not by anyone. The device holds no copy.
One or two words are illegible. Can that be fixed?
Usually yes — this is the strongest case. The BIP39 checksum reduces one unknown word in a 24-word phrase to roughly 8 valid candidates, which we test against the blockchain quickly.
Ledger says “Invalid recovery phrase” but I’m sure the words are correct. Why?
Check the word count you selected and the order first. After that, the usual culprit is a near-miss word — one letter different from a real BIP39 word — or a transposed pair.
My wallet restored successfully but shows no funds. Is my seed wrong?
Almost certainly not. If Ledger accepted the phrase, the checksum passed. An empty restore usually means a derivation-path mismatch or a forgotten optional passphrase opening a different hidden wallet.
Can I restore my Ledger seed on a different wallet?
Yes. A Ledger phrase is standard BIP39, so any BIP39-compatible wallet can restore it — provided it supports the same coin and scans the right derivation path.
How much does Ledger seed recovery cost?
Success-based: a percentage of the recovered value, agreed before we start, payable only if we open the wallet. No upfront payment.
KeychainX has recovered wallets professionally since 2017 from Baar, Zug, Switzerland. Contact us — we reply within 24 hours. We never contact people first on social media and never ask for upfront payment.