Monero Seed Recovery: The 25-Word Mnemonic Explained
Monero uses a 25-word seed, not BIP39 — its own wordlist, checksum, and keys. How the Monero mnemonic works, and how to identify and recover yours safely.
If your recovery phrase has 25 words, you're not looking at a BIP39 seed — you have a Monero seed, which is a completely separate standard. Here's how it works and how to recover it safely.
Paste it into our Validate tool — it detects Monero seeds and shows the address they derive, all in your browser.
Monero does its own thing
Most wallets use BIP39 (12 or 24 words). Monero predates that convention and uses its own mnemonic system:
- A different wordlist — 1626 words, where only the first 3 letters of each word are significant.
- A 25th checksum word instead of BIP39's embedded checksum bits.
- ed25519 keys (like Solana) rather than Bitcoin's secp256k1.
Because of all this, a Monero seed won't import into a BIP39 wallet, and a BIP39 phrase isn't a valid Monero seed. If a tool calls your 25 words "invalid," it's almost certainly expecting BIP39.
How the 25 words break down
- Words 1–24 encode your 32-byte private spend key. Every group of three words maps to four bytes.
- Word 25 is a checksum: a CRC over the first three letters of the other words selects which word is repeated. If anything is mistyped or reordered, the checksum no longer matches — which is exactly how you catch an error.
From the spend key, Monero deterministically derives everything else:
spend key → (hash) → view key → public keys → your address (
4…)
So the seed alone fully restores the wallet — there's nothing else to remember (unless you set a wallet password, which only encrypts the local file).
How to identify and recover your Monero seed
- Open the Validate tab and paste your 25 words.
- If it's a Monero seed, the tool confirms it and shows the primary address — check that it matches the wallet you're recovering.
- If the checksum is flagged wrong, a word is misspelled or out of order. Only the first three letters of each word matter, so compare carefully (e.g. a word abbreviated in your backup is fine as long as the first three letters are right).
- To actually access funds, restore the seed in a Monero wallet — the official GUI/CLI, Feather, or Cake — using "Restore from seed."
25 words vs 13 words
Some lightweight wallets (notably MyMonero) use a shorter 13-word seed, which encodes 16 bytes instead of 32. It's a different variant; restore those in a wallet that supports the MyMonero scheme.
Stay safe
- Identify and restore offline when you can.
- Never share your 25 words or paste them into a tool that transmits them — see is it safe to enter your seed phrase online.
- Be wary of "Monero recovery services" — no one can recover a wallet you genuinely can't, and none needs your seed. See recovery scams.
A 25-word phrase isn't a broken BIP39 seed — it's Monero doing things its own way. Identify the format first, confirm the address, then restore in a Monero wallet. New to seeds in general? Start with what is a seed phrase.