Guide . Blockchain.info
The 15–21 word Blockchain.info mnemonic, explained
If you have an old Blockchain.info backup of 15, 17, 19 or 21 words that modern software rejects, you’re not doing anything wrong. It’s a legacy format almost nobody supports — and it’s still recoverable.
People are often told these odd-length phrases are impossible to use or decrypt or derive an address. That’s wrong. This is a technical explainer of what the old Blockchain.info word phrases actually were, why they broke, and how recovery works — drawn from real cases we’ve solved. For the service view, see our Blockchain.com recovery page.
What the phrase actually is
Modern wallets use a 12-word (sometimes 24-word) BIP39 seed drawn from a standard 2,048-word list, and that phrase is your private key. Early Blockchain.info did something different: its backup was a word phrase that encoded your Wallet ID and password, not a raw key, and it could run to 15, 17, 19 or 21 words. Longer phrases generally corresponded to longer passwords. It predates the BIP39 standard entirely, so nothing about it lines up with today’s tools.
The 50,000-word list (not 2,048)
Here’s the detail that surprises people: the old scheme didn’t use the familiar 2,048-word list at all. It drew on a much larger dictionary — on the order of 50,000 words — and, in at least some versions, used two different word lists: one to compute a checksum, and another to encode the Wallet ID and password. That’s why feeding an old phrase into a modern BIP39 tool produces nothing but an error: the words often aren’t even in the list the tool knows about.
Multiple versions, multiple encryptions
The format also changed over time. Different wallet versions used different encryption variations and different iteration counts (how many times the password was run through the algorithm). So “a Blockchain.info phrase” isn’t one thing — it’s a family of related formats, and recovering one means first identifying which version and which word lists were in play, then reproducing that exact scheme.
How recovery actually works
Because the original documentation and code for the earliest (v1) wallets is no longer published, recovery is genuine reverse engineering. The approach that works: pull old snapshots of the Blockchain.info site and its JavaScript from web archives to recover the historical word lists and logic; identify which version your phrase belongs to; then reconstruct the derivation and test the valid interpretations of your words against a known address until the checksum is correct and the wallet decrypts. In one case, a client’s remembered 17 words gave a wrong checksum, but the correct 18-word interpretation decrypted the wallet.aes.json cleanly — and 2014 Bitcoin came back.
If your phrase is incomplete
A missing or uncertain word isn’t fatal. Because we validate every candidate reconstruction against your real receiving address, we can search across plausible words and orderings and know with certainty when the right one lands — it either derives your address or it doesn’t. Partial, out-of-order, or a word or two misremembered are all workable; a completely blank memory with no phrase and no wallet ID is the hard limit.
Why this knowledge is rare
Almost no one can do this, and that’s not marketing — it’s a consequence of how the format died. The word lists were huge and non-standard, the earliest source code was pulled from public repositories, and the scheme was replaced years ago, so the knowledge exists only where someone deliberately preserved and reconstructed it from archives. That’s why the modern site, and most tools and services, simply return “invalid.” It isn’t that the wallet can’t be opened; it’s that the method fell out of circulation. Recovering these is as much digital archaeology as cryptography.
简要回顾
To summarise: old Blockchain.info wallets used 15, 17, 19 or 21 word phrases that encoded your Wallet ID and password, drawn from a large custom word list — not BIP39 — which is why modern tools reject them. The format varied by version, with different encryption and iteration counts. Recovery means reconstructing the original scheme from archived code and word lists, identifying your version, and validating candidate reconstructions against your known address until the checksum is right. Partial or out-of-order phrases are workable. The wallet isn’t lost — the way in just needs rebuilding.
What to do if you have one
If you’re holding one of these phrases and the official site calls it invalid, don’t take that as final — the wallet still exists on-chain. Note how many words you have, whether you’re sure of the order, and any receiving address you know, and treat the phrase as recoverable until proven otherwise. This is specialised work rather than DIY, precisely because the word lists and logic aren’t in any modern tool — but it is very much solvable.
常见问题
How long does recovering an old phrase or seed take?
It depends on how many words you’re sure of and the version. Identifying the format and word lists is the slow part; once that’s set, validating against your address is fast.
Why won’t my 15/17/19/21 word Blockchain phrase import?
Because it’s a legacy, pre-BIP39 format that encoded your Wallet ID and password using a large custom word list — not the 2,048-word BIP39 list modern wallets use. Standard tools simply don’t recognise it.
Are odd-length mnemonics really recoverable?
Yes. Despite claims that they’re impossible, early Blockchain.info wallets used 15–21 word phrases that can be decrypted by reconstructing the original scheme from archived code and word lists.
I only remember most of the words — can it still work?
Often yes. Reconstructions are validated against your known address, so missing, out-of-order, or slightly wrong words can be searched and the correct arrangement confirmed with certainty.
Is this something I can do myself?
Rarely — the historical word lists and derivation logic aren’t in any modern tool, so it takes reverse engineering of archived versions. But the wallet isn’t lost; it needs the right method.
这要多少钱？
按成功结果付费：仅在我们重建钱包后，按追回金额的一定比例收取费用，且无需预付任何费用。
Have an old odd-length Blockchain phrase?
Tell us how many words you have and your address if you know it. We’ll assess whether it can be rebuilt within 24 hours, success-based fee.