Type in the words you have, mark the ones you don't, and let your own computer find the rest. Your words never go online.
Download the app, turn off your internet, and type the words you're sure of. Mark each gap with a ?. Smudged words can use the letters you can still read.
The app tries every possible word in each gap. Built-in math in your phrase (the checksum) throws out most wrong answers in a fraction of a second.
Many phrases pass the checksum, but only one is yours. Give the app one Bitcoin or Ethereum address from your wallet and it picks out the phrase that owns it.
No tool can recover every wallet. How much you still have decides what's possible.
| What's wrong | Outlook | Tier |
|---|---|---|
| A typo | Very good | Free |
| 1 missing word | Very good · seconds | Free |
| Words out of order | Good if only a few are swapped | Free |
| 2 missing words | Good with your address · minutes | Paid |
| 3 missing words | Hard · can take days | Paid |
| Whole phrase lost | Not possible, for anyone | — |
The paid version doesn't guarantee a result. You're paying for the search, and the table above tells you the odds before you buy.
The app has no network access switched on at all. Unplug your internet first anyway; it works the same.
Anyone can read every line on GitHub. The command-line version is free and open source too, under the MIT license.
The core math is tested against the official BIP39 test vectors, the same ones other wallet software uses. Run python3 tests/test_vectors.py to see for yourself.
There's no support chat and no website to type them into. If anyone ever asks for your words, it isn't us.
Never type your seed phrase into a website, including any that claims to be this tool. Recovery only belongs on your own offline computer. Anyone who promises "guaranteed" recovery, or asks for your words or an upfront fee, is running a scam.