What If I Forget My BIP-39 Passphrase?

Short answer

BIP-39 passphrase has no reset button — it is stored in no wallet, written on no blockchain. The bad news: this is by design and intentional. The good news: if you remember partial clues (approximate length, words you've used, your usual separators, capitalization preferences), btcrecover can do directed brute-force in hours to days. If you remember nothing at all, the assets are essentially locked on-chain forever.

What passphrase is

Often called the "13th word" or "25th word." It's a secret entry point BIP-39 reserves: alongside the mnemonic, you input an arbitrary string of any length, which becomes part of the PBKDF2 salt. Same mnemonic + different passphrase = completely different wallet.

The "hello" passphrase and "Hello" passphrase derive completely unrelated addresses. Empty string, space-only, no-passphrase — all different wallets. This mechanism gives you a "decoy wallet" for coercion scenarios. The cost: the passphrase is stored in no wallet — it lives only in your head.

The "no support hotline" reality

Forgetting the passphrase means assets are permanently locked. The blockchain has no "Forgot Password" link, no customer service. This is the design contract. You opted into a system where keys are key — both literally and as a synonym for "the only thing that matters."

The btcrecover approach

If you remember partial information, btcrecover takes a wordlist or rule set as input. Examples that work: "I used a passphrase of about 10 characters with 1 number"; "I always start with the same word and append my dog's name"; "I think I used the year I was born"; "It was a phrase from a song but I don't remember which". Even rough guesses reduce the search space from 2^100 (impossible) to 2^30 (hours).

Run on an air-gapped Linux device with the mnemonic loaded into memory. Configure btcrecover with the partial information and let it run. Test each candidate against the expected derived address.

Going forward

If you use a passphrase, write it down. Store in a different physical location than the mnemonic — same security level, separate place. Bank safe-deposit box for one, fireproof home safe for the other is a common layout. The "passphrase lives only in my head" model fails the majority of real-world recovery scenarios; treat it like a long password you must back up.