Skip to content

Electrum Seed Recovery: Why It's Not BIP39

Electrum uses its own seed format, not BIP39 — which is why other wallets call it 'invalid'. How Electrum seeds work, and how to identify and restore yours.

Published on 3 min read

If your recovery phrase keeps getting rejected as "invalid" by wallet after wallet — but you're sure you copied it correctly — there's a good chance you have an Electrum seed, not a BIP39 one. They look similar (a list of English words) but they are different standards under the hood.

Our Validate tool now detects Electrum seeds automatically and shows their addresses — entirely in your browser.

Electrum is its own standard

Most wallets use BIP39. Electrum predates BIP39's dominance and uses its own seed format. The practical consequences:

  • A BIP39 wallet (MetaMask, Ledger Live, Trust Wallet) will say an Electrum seed is invalid — because it fails BIP39's checksum, which Electrum seeds were never built to pass.
  • The two formats turn words into a wallet differently, so you can't simply move an Electrum seed into a BIP39 wallet and expect the same addresses.

The words aren't wrong. They're speaking a different language.

How Electrum validates a seed

Instead of BIP39's per-word checksum, Electrum checks the whole phrase with a hash. A phrase is a valid Electrum seed when HMAC-SHA512("Seed version", phrase) begins with a version prefix:

PrefixElectrum wallet type
01Standard (legacy)
100SegWit
1012FA
1022FA SegWit

This is also how you can tell which kind of Electrum wallet you have. Our tool runs exactly this check and reports the type.

How Electrum derives addresses

Two more differences from BIP39:

  • The seed stretch. Electrum derives its wallet seed with PBKDF2 using an "electrum" salt (BIP39 uses "mnemonic"). Same algorithm, different salt — so the same words produce a different master key.
  • The paths. A standard Electrum wallet uses m/0/i and produces legacy 1… addresses. A SegWit Electrum wallet uses m/0'/0/i and produces native SegWit bc1… addresses.

(2FA wallets are 2-of-3 multisig, so a single seed alone doesn't produce a spendable address — you'd restore them in Electrum with the second factor.)

How to identify and restore your Electrum seed

  1. Open the Validate tab and paste your phrase.
  2. If it's an Electrum seed, the tool tells you the type (standard / SegWit / 2FA) and shows the first addresses it derives — confirm one matches your wallet.
  3. To actually spend, restore the seed in Electrum (File → New/Restore → "I already have a seed"). Electrum is the wallet that understands its own format.

If the tool says it's not an Electrum seed and your BIP39 wallet also rejects it, then it's a BIP39 phrase with an error — head to the "invalid recovery phrase" guide.

A note on old Electrum seeds

Very old Electrum wallets (pre-2.0) used yet another format (a different word list, or raw hex). Those are rarer; if your phrase isn't recognized as a modern Electrum seed, it may be an old-style one that only old Electrum versions restore.

Stay safe

  • Identify and restore offline when you can.
  • Never share your seed or paste it into a tool that transmits it — see is it safe to enter your seed phrase online.
  • After recovering on an online device, move funds to a fresh wallet.

Not every "invalid" phrase is broken — sometimes it's just Electrum. Identify the format first, and the path forward gets clear. For the bigger picture, see what is a seed phrase.

Check your seed format →

Related articles

Lost or broken Ledger? Your 24-word recovery phrase is standard BIP39 and restores anywhere. How to recover safely — and the risks of typing it online.
Monero uses a 25-word seed, not BIP39 — its own wordlist, checksum, and keys. How the Monero mnemonic works, and how to identify and recover yours safely.
A calm, step-by-step guide to recovering a BIP39 seed phrase when words are missing, misspelled, or out of order — safely and entirely offline.