Introduction to BIP39 seed-phrase brute-force timing
A BIP39 seed phrase is the human-readable backup that controls access to many wallets, and this calculator answers a very narrow question: how long might it take to search the words you do not know? Because BIP39 mnemonics are assembled from a fixed 2,048-word list, every missing word multiplies the candidate phrases instead of just adding a little more work. The calculator turns that multiplication into a time estimate using the guess rate you supply.
That makes the page useful for both legitimate recovery planning and security awareness. If you are trying to rebuild a wallet from a partial backup, the estimate helps you tell the difference between a search that is merely awkward and one that is effectively out of reach. If you are evaluating how safe a mnemonic backup is, the same math explains why a tiny gap in the phrase can still leave a very large search space. The key point is simple: each unknown BIP39 word expands the possibilities by 2,048.
How to Use the BIP39 Seed Phrase Brute Force Time Calculator
To use this BIP39 brute-force estimate, start with the total phrase length, then enter how many words you already know, and finally supply a guess rate in guesses per second. The calculator subtracts the known words from the total, treats the remainder as unknown, and converts that count into both a candidate total and an estimated run time. Because the form accepts the common BIP39 lengths of 12, 15, 18, 21, and 24 words, it stays aligned with the mnemonic sizes people actually encounter in wallet recovery work.
The result should be read as an optimistic offline estimate, not as a guarantee about a real recovery tool. It assumes the work is happening away from any network or service-side throttling and that every candidate can be checked at the same speed. That means a small result suggests a narrowly focused search, while a large result is a practical warning sign that brute force is not the right plan without more clues.
If you are trying to recover a wallet, the number of missing words is what matters most. One missing word can sometimes be tested directly. Two missing words may still be feasible with the right clues and enough hardware. Once the missing count rises further, the problem quickly depends on exact positions, narrowed word lists, checksum filtering, or a remembered passphrase. The calculator is designed to make that progression visible without pretending that every recovery attempt follows the same path.
Formula for BIP39 Missing-Word Search Time
BIP39 mnemonic words come from a list of 2,048 items, and 2,048 is exactly , which is why each word carries 11 bits of entropy. If you know the total phrase length and the number of confirmed words, the unknown count is . The candidate pool then grows as 2048^u before any checksum pruning or wallet verification is applied. Two missing words in a 12-word phrase already produce possible combinations, which is 4,194,304 candidate phrases before the checksum is checked. That step-by-step explosion is what makes the estimate useful.
The calculator converts the combination count into time with the simplified relationship . In this model, T is the time in seconds, u is the number of unknown words, and r is the guess rate in guesses per second. The output is then translated into seconds, minutes, hours, days, or years so the scale is easier to compare with real-world experience. Because the relationship is exponential, adding one more missing word changes the time by another factor of 2,048.
Worked Example: Missing Words in a BIP39 Recovery Search
Imagine a 12-word BIP39 phrase where 10 words are known and 2 are missing. The calculator treats that as 2 unknown words, which means 4,194,304 candidate phrases before any checksum filtering is considered. At 1,000,000 guesses per second, the estimate is about 4.19 seconds. That is the kind of case where a partial recovery can feel surprisingly tractable if the remaining words are truly known to be in the phrase.
If you leave the guess rate unchanged and increase the missing count by one, the picture changes immediately. With 3 missing words, the search rises to 8,589,934,592 combinations and the estimate becomes about 2.39 hours. With 4 missing words, the estimate is roughly 203.61 days. The example is less about any single number and more about the pattern: a small increase in missing words produces a much bigger increase in time.
Guess Rates in BIP39 Recovery
Guess rate is the speed at which candidate BIP39 phrases can be tested each second, and the real number depends on the hardware, the recovery software, and the verification work done for each candidate. A raw hashing benchmark may look enormous, but a real recovery run still has to rebuild the seed, test the wallet path, and check whether the result matches the target. That extra verification work is one reason real-world rates are often lower than simplified lab benchmarks.
The guess rate matters because the calculator uses it as a straight divider on the search space. If the rate is 10 times faster, the estimate is 10 times shorter; if it is 10 times slower, the estimate is 10 times longer. That is an easy relationship to understand, but it does not overpower the exponential growth from missing words. A faster machine helps, but it does not flatten the search space.
The takeaway is that hardware speed changes the line, while unknown words change the curve. One more missing word multiplies the search by 2,048, and no ordinary speedup erases that jump. Fast hardware can make one- or two-word recovery feel possible, but once the phrase is mostly unknown, the exponential side of the math dominates.
BIP39 Checksum and Search-Space Reduction
BIP39 mnemonics include checksum bits in the last word, so not every word combination is valid. This calculator leaves that pruning out on purpose so the estimate stays easy to follow and easy to compare across different inputs. That makes the result conservative from the defender's point of view because it counts the full raw search space before invalid phrases are removed.
If you want a rough validity-adjusted view, the candidate set can be reduced by a factor of , where c is the checksum-bit count, so a simplified adjusted count would be . That matters most when only a few words are missing, because the checksum can prune a noticeable share of invalid phrases. When several words are missing, though, the remaining space is still so large that checksum pruning only trims the edges of the problem. For intuition, the simplified estimate is usually enough.
BIP39 Missing-Word Combinations at a Glance
The table below shows how quickly the candidate set expands as more BIP39 words go missing from a 12-word mnemonic. It does not include checksum filtering; instead, it highlights the raw multiplication that drives the rest of the page. Reading row by row makes the progression obvious: every extra unknown word multiplies the space by 2,048.
Illustrative search space for missing words in a 12-word BIP39 phrase| Unknown Words | Combinations |
|---|
| 1 | 2,048 |
| 2 | 4,194,304 |
| 3 | 8,589,934,592 |
| 4 | 17,592,186,044,416 |
| 5 | 36,028,797,018,963,968 |
What stands out is not just the size of the numbers, but the speed of the growth. Each row is 2,048 times the row above it, so the jump from one missing word to two is much smaller than the jump from three to four. That is the main security property of a mnemonic backup. If you know almost everything, the search may still be bounded; if you are missing several words, the problem can become effectively unmanageable.
BIP39 Search Time on Human Timescales
Once the calculator converts seconds into minutes, hours, days, and years, the result becomes easier to compare with everyday experience. A few seconds or minutes means a relatively small search. Days or weeks suggest a recovery attempt that now depends heavily on extra clues and very favorable hardware. Years or far longer are a strong sign that brute force is no longer the right mental model.
That perspective matters because seed phrases are not ordinary passwords. They behave more like bearer secrets: whoever has the full phrase effectively has control of the wallet. The calculator therefore helps you judge whether a recovery attempt is worth trying, but it also shows why safe storage matters so much. In a BIP39 context, the difference between manageable and impossible is often only one or two words.
Real-World Threats to BIP39 Seed Phrases
In actual BIP39 incidents, phrases are often exposed by mistakes rather than by a clean brute-force success. Malware can capture words as they are typed on a compromised device. Phishing pages can imitate a wallet restore screen and trick someone into revealing the full mnemonic. Screenshots, cloud notes, email drafts, and other digital backups can create risks that have nothing to do with search-space math.
Physical theft matters too. A phrase written on paper or stamped on metal is only as safe as the place where it is stored, and an insecure backup can turn a strong mnemonic into a weak one. That is why the calculator should be read as a scale tool, not a complete security review. It answers one narrow question very well: how fast does the search space grow when BIP39 words are missing? It does not evaluate device hygiene, wallet authenticity, or broader operational security.
Limitations and Assumptions in the BIP39 Estimate
This calculator intentionally uses a simplified model. It assumes an offline search, does not account for an optional BIP39 passphrase, and treats the unknown words as independent choices from the full 2,048-word list. Those assumptions keep the estimate readable and make different phrase lengths easy to compare, but they also mean the answer should be treated as an approximation rather than a promise.
The estimate can change if the recovery process has extra clues. Word positions may already be known, the candidate list may be much smaller than the full list, the checksum may eliminate invalid phrases, or the wallet may require one specific derivation path instead of several. On the other hand, the search can be harder than the calculator suggests if the guess rate is lower than expected or if each verification step is more expensive than a simple test. Use the result to understand scale, not as a precise runtime prediction.
Implications of Partially Known BIP39 Seed Phrases
People often remember most of a seed phrase and lose only one or two words. This is exactly the scenario where brute-force recovery can still be realistic, and the calculator shows why. One missing word means 2,048 possibilities before checksum filtering. Two missing words can still be within reach with the right setup. Once the missing count rises again, the workload grows much faster than intuition suggests.
That has a direct effect on backup strategy. A full, accurate backup stored safely is better than a clever memory trick. Splitting words across different places, relying on recollection alone, or recording the phrase with mistakes can turn a recoverable problem into a much harder one. At the same time, sharing even part of the mnemonic lowers the barrier for a targeted search. The safest habit is still the simplest: keep the full BIP39 phrase private, accurate, and stored in a controlled place.
BIP39 Brute Force vs. Improving Hardware
Computing hardware keeps getting faster, cloud rentals keep getting cheaper, and recovery tools keep getting better. Even so, BIP39 search spaces still grow in powers of 2,048. A big speedup helps when the number of unknown words is already small, but it does not flatten an exponential search. That is why the calculator remains useful even as hardware changes: it shows the shape of the problem rather than relying on one machine benchmark.
The more immediate risk to a wallet is still disclosure of the phrase itself. If the seed phrase stays secret, brute-force recovery remains dominated by the size of the remaining search space. If the phrase leaks through phishing, malware, or a bad backup, no amount of theoretical hardness helps. In practice, that means the best defense is not to chase the fastest hardware, but to keep the mnemonic out of places where it can be copied, photographed, or intercepted.
Conclusion: What the BIP39 Time Estimate Means
The BIP39 Seed Phrase Brute Force Time Calculator turns missing words, known words, and guesses per second into a concrete time estimate you can inspect. It shows why each unknown word matters, why the search grows so quickly, and why a securely stored mnemonic is far safer than a partial one. Use the result to understand the scale of a recovery attempt, then treat the phrase itself as the sensitive secret it is.