6 Missing Seed Words From 12-Word BIP39 Phrase: Trust Wallet Access Blocked
IndeterminateWallet passphrase was unavailable — whether access was ultimately recovered is not known.
On October 3, 2020, a BitcoinTalk forum user posted an access failure involving a Trust Wallet protected by a 12-word BIP39 seed phrase. The user retained only the first five and last five words; six words in the middle remained unrecovered. The user inquired whether brute force recovery tools existed.
Community member xhomerx10 performed a feasibility calculation: with 6 unknown words positioned in the middle of a 12-word phrase, the computational space encompassed approximately 7.2×10¹⁹ possible combinations. As reference, xhomerx10 noted that a previous case involving only 4 missing words had been cracked using rented GPU compute resources at a cost of $350; scaling to 6 missing words would increase the cost by millions of times, rendering the approach economically impractical for most individuals.
pooya87 contributed additional technical context: recovery feasibility varies significantly based on wallet implementation (BIP39 vs. Electrum), derivation path configuration, and whether hardened key derivation was enabled. Hardened derivation paths could theoretically reduce brute force time by approximately 50×, but this reduction would leave the baseline challenge prohibitive.
Other responders suggested memory recovery techniques as alternatives, including hypnosis, proposed as potentially cheaper than GPU rental. The tool btcrecover was mentioned as a potential resource, though community members acknowledged that testing 6 unknown words would be time-consuming and computationally demanding.
The thread does not record whether the user ultimately recovered access, the quantity of Bitcoin at stake, or any resolution. The case exemplifies a custody failure driven by incomplete documentation of the seed phrase—a critical dependency on knowledge now inaccessible and absent from any backup medium.
| Stress condition | Passphrase unavailable |
| Custody system | Software wallet |
| Outcome | Indeterminate |
| Documentation | Partial |
| Year observed | 2020 |
| Country | unknown |
Why passphrases fail years after they are set
The failure mode documented consistently across observed cases is temporal: the passphrase is set with confidence, not used for an extended period, and then cannot be reproduced exactly when needed. A single character difference — different capitalization, an added space, a slightly different special character — produces a different wallet with a zero balance. The holder may be certain they remember the passphrase while being unable to produce the exact string that was originally set.
What makes this particularly difficult is that there is no signal at the moment of failure. A wrong passphrase does not produce an error message. It opens an empty wallet. The holder sees a zero balance and typically concludes the passphrase was wrong — but without knowing which part was wrong, or by how much.
Professional passphrase recovery services can attempt permutations when the holder has partial information: they remember the general structure, typical patterns they use for passwords, the approximate length, or that it included a specific word. Recovery from total non-recollection is not feasible.
The preventive action is to store a passphrase record — not with the seed phrase, which would defeat its security purpose, but in a separate secure location accessible to the holder and potentially a designated recovery person. A passphrase that exists only in memory has a time horizon: it will eventually be forgotten, and the timing is unpredictable.
Translate