How to Back Up and Restore a Crypto Wallet

Crypto wallet recovery comes down to one question: do you still have your recovery phrase, or a backup that contains it? If you do, restoring your wallet takes a few minutes and works on any compatible device, anywhere in the world. If you do not, your options narrow sharply, and some of them close permanently.

Your coins are never stored in your phone or in the app. They sit on the blockchain, and your wallet holds the keys that unlock them. Losing a device destroys your copy of those keys rather than the coins themselves, which is why a backup made in advance turns a disaster into an inconvenience.

This guide covers what to do when access is already lost, how to diagnose a restore that appears to fail, and how to back up so that the first two sections never apply to you again.

Key Takeaways

• Recovery depends entirely on what you still hold. A full recovery phrase restores everything. A single private key restores only the funds at its own address.
• Before assuming theft, look up your old address in a block explorer. If the coins are still sitting there, you have a restore problem instead of a loss.
• A restored wallet showing a zero balance is usually correct words pointed at the wrong branch. Derivation path, address type, and a forgotten passphrase cause most of these cases.
• Record the wallet software, the address type, and the derivation path alongside your words. This one habit prevents the most common recovery failure.
• Test your backup before you need it. A phrase you have never restored from is an assumption rather than a backup.
• The FBI warns that people who have already lost crypto are targeted a second time by services claiming they can recover it. Upfront fees are the clearest signal.
• No legitimate wallet provider, including Bitcoin.com, can recover your funds without your recovery information. Self-custody means nobody holds a copy.

Compared to a long string of random characters, the words in a recovery phrase (sometimes called backup phrases, or seed phrases) are a set of random dictionary words like those pictured above, which are easier to read and write down without human error.

What Do You Still Have?

Every recovery path starts here. Find your situation in the table, then read the section it points to.

One step belongs before all of them. Take an address you know belonged to the wallet, paste it into a block explorer, and look at the balance.

If the funds are still sitting at that address, nothing has been stolen and you have a restore problem, which the diagnostic section below will solve. If the funds moved in a transaction you did not make, you are dealing with a compromise instead, and the response is different and urgent.

Without it, a restore problem and a theft look identical.

How Wallet Backup and Recovery Work

A crypto wallet holds keys. Those keys prove control over entries on a public ledger, and the ledger is what actually records who owns what. Your wallet app is a viewer and a signing tool, and both are replaceable.

Almost every wallet built since 2013 follows BIP-39, which converts the wallet's master secret into a list of twelve or twenty-four ordinary words drawn from a fixed set of 2,048. A twelve-word phrase encodes 128 bits of randomness, a twenty-four-word phrase encodes 256 bits, and in both cases the final word carries a checksum over everything before it.

Mistype one word and the software will almost always reject the whole phrase instead of silently opening a different wallet, turning a catastrophic error into an error message.

The words then feed BIP-32, the hierarchical deterministic standard, which expands the master secret into an unlimited tree of keys and addresses. This is why one phrase restores an entire wallet history rather than a single address, and the relationship between phrases, keys, and addresses sets the limits on what any backup can recover.

Two things follow from the design.

Nothing about your wallet is stored on a server. Restoring is a computation performed on your device from the words you enter, which is why it works offline and why no company can perform it for you.

And the phrase is the wallet. Anyone holding those words controls the funds, on any device, without your phone, your PIN, or your permission. Backup is therefore a balancing act between making a copy durable enough to survive disaster and hidden enough to survive discovery.

How to Restore a Wallet from a Recovery Phrase

The flow is broadly the same across wallet software. The specifics below are for the Bitcoin.com Wallet, and other apps differ mainly in menu names.

Before you start, download the app from the official publisher's listing. Fake wallet apps and lookalike websites are a standard way of harvesting recovery phrases, and search advertisements are a common delivery route. Type the address yourself or use the store listing directly.

Restoring from a Written Recovery Phrase

1. Install the app and open it.
2. On the sign-in screen, choose to restore rather than create a new wallet.
3. Select the import option for a 12-word recovery phrase.
4. Choose the asset type for the wallet you are restoring, such as BTC, BCH, or ETH.
5. Enter the words. All lowercase, a single space between each word, and no space after the final word.
6. Tap Import.
7. Repeat the process for each additional wallet you are restoring.

That last point catches people out and is covered in its own section below.

Restoring from Cloud Backup

1. Install the app and open it.
2. On the sign-in screen, sign in with the Google or Apple account you used when the backup was created.
3. Select the cloud storage location, Google Drive on Android or iCloud on iOS.
4. Enter the master password you chose when setting up the backup. This decrypts the file.
5. Tap Restore Backup.

Cloud Backup restores every wallet in the app at once, which is its main advantage over entering phrases individually.

If You Have Forgotten Your Spending Password

The spending password protects actions inside the app on that device. It is not your recovery information, and it cannot be reset from within the app. Remove the affected wallet from the device, then restore it using either your Cloud Backup master password or the 12-word phrase for that wallet.

Note the order of dependencies here. Viewing your recovery phrase inside the app requires the spending password, so a user who has neither the spending password nor a written phrase has no route back in. Write the phrase down while you still have access.

What to Do When a Restored Wallet Shows Zero

You entered the words. The wallet accepted them. The balance reads zero.

In most cases the funds are untouched and the wallet is simply looking at the wrong branch of the tree those words generate. Work through the causes in order.

The first two causes account for the overwhelming majority of cases, and both come from the same root. BIP-44 and the standards built on it assign a different path to each address type:

Two wallets can read the same correct phrase and show different balances purely because one defaults to m/84' and the other to m/44'. Nothing is lost, and nothing is wrong with your words. The software is looking in the wrong place.

The reliable way to confirm which path you need is to compare the first receive address the restored wallet shows against an address you know you used. If they match, the path is right and the balance is real. If they do not, change the account type and check again.

The passphrase case deserves its own warning. A BIP-39 passphrase, sometimes called the twenty-fifth word, is mixed into the calculation that turns your words into a seed. Adding one produces an entirely different wallet from the same twelve words. There is no error message for a wrong passphrase, because every possible passphrase produces a technically valid, usually empty wallet. If you ever set one, the phrase alone will not reach your funds.

Recovering without a Full Recovery Phrase

Partial recovery is real in some situations and impossible in others. The difference is whether the missing information can be reconstructed from the information you still hold.

One or two missing or uncertain words. This is often solvable. The checksum built into BIP-39 means only a small fraction of word combinations produce a valid phrase, which cuts the search space dramatically. With one missing word at a known position, there are 2,048 candidates and the checksum eliminates all but a handful. With two, the search grows but remains tractable on ordinary hardware. Software exists for this, and the safe way to run it is offline, on a device with no network connection, using open-source tooling you have verified.

Words in the wrong order. Recoverable in principle, difficult in practice. The number of permutations grows very fast, though partial knowledge of the order narrows it considerably.

A private key but no phrase. Import the key directly. This recovers the funds locked to that key's address and nothing else, since a single key sits at the bottom of the tree rather than the top.

A wallet file with a forgotten password. Feasible only when you remember the password's structure, such as its length, the words it was built from, or the pattern you habitually used. A genuinely forgotten random password is not recoverable.

A physically damaged hardware wallet with no phrase. Sometimes recoverable through chip-level data extraction by a specialist, depending on the device and the damage. This is real engineering work with an uncertain outcome, and it is the one category where paying a professional can be legitimate.

Nothing at all. If the phrase, the private keys, the wallet file, any backup, and any still-working device are all gone, the funds are unreachable. No company, no developer, and no law enforcement agency can restore them. The mathematics that prevents an attacker from taking your coins prevents everyone else too, including you.

Someone who has just been told that is also the easiest person in crypto to defraud.

Are Crypto Recovery Services Legitimate?

A small number are. Most are not, and the ones that are not target people at their worst moment.

The FBI has issued repeated warnings about this pattern, including a public service announcement in July 2026 describing criminals impersonating FBI and Internet Crime Complaint Center staff, using AI-generated video and spoofed websites, to offer fund recovery to people who had already been defrauded. The bureau's guidance for cryptocurrency fraud victims states plainly that paying these operators does not result in recovering funds, and that the IC3 never charges fees to recover money or refers victims to companies that do.

Use the distinction below:

Two specific patterns are worth naming.

Revictimization. Scammers monitor social media, forums, and comment sections for people describing a loss, then approach with an offer. Information from the original fraud, or from a data breach, makes the approach convincing.

Fee escalation. An operator takes an upfront payment, reports progress, then discovers a complication requiring a further payment for taxes, network fees, or unlocking charges. The complications continue until the victim stops paying.

Anything advertising itself as a key finder, a seed scanner, or a brute-force recovery tool is a separate category and does not work at all. Searching a 256-bit key space is not a hard computing problem, it is an impossible one, and software claiming otherwise is typically malware that scans your device for the wallet files you still have.

If you have lost funds to fraud rather than to a forgotten phrase, report it to the relevant national authority. In the United States that is ic3.gov, and the transaction IDs and addresses involved are the most useful details you can provide. Recognizing the wider set of crypto fraud patterns is the best protection against the follow-up attempt.

What to Do If Your Recovery Phrase Is Exposed

Exposure is permanent. Anyone with the words can rebuild the wallet on their own device, and changing your PIN, reinstalling the app, or moving to a new phone achieves nothing.

Move in this order.

1. Generate a new wallet on a device you trust. If malware may be present on the original device, use a different one. Write the new phrase down offline before going any further.
2. Transfer the funds immediately. Automated bots watch compromised addresses and can move a balance within seconds of it arriving or of a key being posted anywhere public.
3. Revoke outstanding token approvals tied to the old addresses, so that smart contracts cannot pull assets later.
4. Retire the old phrase. It can never be made safe. Do not reuse it, do not keep a small balance there, and do not attempt to recover dust from it later.

If the balance is large enough that a bot would win a race against a manual transfer, consider whether a single transaction consolidating everything is faster than several, and have the destination address ready before you begin.

How to Back Up a Crypto Wallet

A backup has to survive two very different threats. It must outlast fire, water, and time, and it must stay hidden from anyone who might find it. Methods that are excellent at one are often poor at the other.

Jameson Lopp's long-running metal seed storage stress tests are the most useful independent evidence available on the physical media, and two findings stand out.

The first is that fire and water arrive together. A house fire is put out by firefighters, so any device that survives 2,000°F only to be quenched in cold water has not actually passed the test. Later rounds of the testing added exactly that step for this reason.

The second is that construction matters more than material. Tile-based designs, where individual letter tiles sit in a housing, repeatedly failed because heat warped the housing enough to release the tiles. Recovering a pile of loose letters with no order is close to worthless. Single-piece designs, where the words are stamped or punched directly into one plate, performed far better. Painted or coated surfaces also burned away within seconds, so any device relying on a coating for legibility should be treated as paper.

What to Write Down Alongside the Words

Missing this information is what turns a correct phrase into a failed restore.

Record all of the following with your phrase, or in a separate note kept with it:

• The wallet software the phrase came from, and roughly when it was created
• The asset or blockchain it controls
• The address type, identified by the prefix of your addresses, such as bc1q
• The derivation path, if the wallet displays one
• Whether a passphrase is set, without recording the passphrase itself
• The first receive address, which you will use to verify a future restore

None of this is secret on its own, and none of it helps an attacker who does not already have your words. All of it turns a confusing zero-balance restore into a two-minute fix.

Keep any passphrase physically separate from the words. Storing them together removes the entire benefit of having one.

How to Test Your Backup

A phrase you have written down and never used is an assumption. Testing converts it into a backup.

The non-destructive method. On a second device, restore your phrase into a watch-only or read-only wallet, then compare the addresses and balance it displays against your live wallet. If they match, your phrase and your recorded derivation path are both correct. Delete the test wallet afterward.

The full method. Best done when a wallet is new or holds a small amount.

1. Confirm your written phrase is complete, legible, and in the right order.
2. Send a small test amount to the wallet.
3. Delete the wallet from your device.
4. Restore it from your written words alone, without looking at anything else.
5. Confirm the balance and the first receive address both appear as expected.

Step four is what proves the backup. Use only your written copy, not your memory and not an app backup, since the written copy is the thing you will depend on in a real recovery.

Set a reminder to repeat the check annually, and after any wallet software migration. Retest whenever you move the backup to a new location, since transcription is where errors enter.

For larger amounts, the failure modes change and arrangements that remove the single point of failure become worth the complexity. Splitting a secret across several shares using a Shamir scheme, holding funds in a multi-signature arrangement where no single backup controls anything, or using key-splitting approaches such as MPC all trade simplicity for resilience. Moving long-term holdings into cold storage changes the backup requirements again.

Backing Up More Than One Wallet

"Back up your wallet" implies there is one. In most modern apps there are several.

The Bitcoin.com Wallet contains a separate wallet for each blockchain it supports, and each of those has its own twelve-word recovery phrase. An account holding Bitcoin, Bitcoin Cash, Ethereum, and Polygon has four phrases, and creating additional wallets on any of those networks creates additional phrases. Backing up the Bitcoin wallet does nothing for the others.

This is the reason the Cloud Backup option exists. It encrypts every recovery phrase in the app into a single file held in your own Google Drive or iCloud account, decrypted by one master password you choose. The password must be at least eight characters with upper and lower case letters and at least one number, and it is not recoverable, so it needs writing down like any phrase.

The two methods have different risk profiles and there is no reason to choose only one.

Bitcoin.com stores neither your master password nor your recovery phrases. Nobody at the company can see them, and nobody can restore your wallet for you. That is what self-custody means in practice, and it is a deliberate tradeoff rather than a gap in the service.

Enabling two-factor authentication on the Google or Apple account holding the encrypted backup adds a meaningful layer, since an attacker then needs to defeat that as well as guess your master password.

What Happens to Your Crypto When You Die

Self-custody has no next of kin process. If nobody can reach your recovery information, the funds stay on the blockchain permanently, visible to everyone and spendable by no one.

Planning for this is straightforward, and the mistakes are predictable.

Do not put your recovery phrase in your will. In many jurisdictions a will becomes a public record once it enters probate, which would publish your phrase to anyone who requests the document. It can also be read by executors and witnesses long before then.

Do write an instruction letter. Kept separately from the phrase, it explains what exists, where the backup is, which wallet software to install, and what the derivation path and address type are. Someone who has never used crypto needs the procedure, not just the secret.

Do consider a staged approach. A sealed backup held by a lawyer or in a safe deposit box, combined with instructions held by a family member, means neither party can act alone while both together can.

Do consider multisig for larger holdings. A two-of-three arrangement where an heir or a professional holds one key removes the all-or-nothing problem entirely, since no single lost or found item is decisive.

Do walk through it once. Have the person who would inherit perform a test restore of a small wallet, with you present. Written instructions that have never been followed are usually incomplete in ways their author cannot see.

Estate rules for digital assets vary considerably between jurisdictions, and a lawyer familiar with them is worth consulting for anything substantial.

Conclusion

Wallet recovery is a sorting problem before it is a technical one. Check whether the coins are still at the address, establish what recovery material you actually hold, then follow the path that material allows. A complete phrase restores everything, a partial phrase is often salvageable, a single private key restores one address, and nothing restores nothing.

The zero-balance restore that looks like theft is nearly always a derivation path or an address type, which is why recording those two details next to your words is worth more than any hardware you can buy. Test the backup at least once so that you are practicing rather than improvising. Store it somewhere that survives both a fire and the water used to put it out, and somewhere a burglar will not find it.

And if the phrase is genuinely gone, no service can retrieve it. The people who say otherwise found you for a reason.