If the wallet still works, move assets to a new wallet with a verified backup immediately. If access is lost and no valid backup, private key or supported recovery mechanism exists, a self-custody provider usually cannot restore the funds.
Execution checklist#
- Keep the existing device online only as needed. Complete this through the verified product interface, then test the control instead of assuming it is active.
- Create and verify a new wallet backup. Compare the exact domain, address, network or permission with an independent official source before continuing.
- Send a small test to the new wallet. Keep the first exposure small enough that a wrong assumption can be corrected without a material loss.
- Move all assets and update payment addresses. Write the boundary down first so urgency cannot quietly expand what the wallet or account is allowed to expose.
- Retire the old wallet after confirming balances and records. Compare the exact domain, address, network or permission with an independent official source before continuing.
Before you take action#
A wallet password unlocks one local installation; it is not necessarily a portable backup. Device failure, app removal or forgotten credentials can turn a missing seed into permanent loss.
For lost seed phrase, separate what can be verified before acting from what can only be monitored afterward. Put hard limits around the second category.
A safer default#
Act before troubleshooting aggressively. When one working session remains, preserving signing access is more important than cleaning up the old installation.
What can still go wrong#
- Resetting or reinstalling the only working device. This weakens a control that should limit the blast radius of lost seed phrase.
- Trusting seed-recovery software from strangers. This can expose the root credential; a later password change may not remove the attacker’s access.
- Assuming support keeps a copy. The branding can be copied, so the request must be re-opened through an independently verified channel.
- Moving tokens without enough native gas. A label can look correct while the underlying destination differs, and a confirmed onchain action may be irreversible.
Evidence to keep#
Do not judge the outcome of lost seed phrase only by whether the interface shows a success message. Use evidence that can still be checked after the page is closed.
| Checkpoint | Evidence | Stop condition |
|---|---|---|
| Keep the existing device online only as needed | Dated screenshot or onchain record with sensitive data removed | Resetting or reinstalling the only working device |
| Create and verify a new wallet backup | Dated control check, recovery test or authenticated settings record with secrets removed | Trusting seed-recovery software from strangers |
| Send a small test to the new wallet | Transaction or withdrawal ID plus the matching explorer or account record | Assuming support keeps a copy |
Keep transaction hashes, official case numbers or dated screenshots when they help document lost seed phrase, but exclude seed phrases, private keys and authentication codes.
Frequently asked questions#
Can I reveal the seed from an unlocked wallet?
Some wallets provide a reveal function after authentication, but use it privately and follow official documentation.
Can brute force recover a completely missing phrase?
Not realistically. Partial recovery may sometimes be possible, but scammers overstate success and request dangerous access.
Does the exchange know my seed?
A custodial exchange does not use your personal wallet seed; it has its own account-recovery process.
Related guides#
Sources#
- Ethereum.org: Security and Scam Prevention
- MetaMask: Wallet Security
- CISA: Avoiding Social Engineering and Phishing Attacks
Risk notice: Crypto actions can be irreversible. Never share a seed phrase, private key, password or authentication code, and verify every domain and wallet prompt independently.
Editorial standard
This guide is educational and source-led. Security controls, exchange rules and legal requirements can change; verify critical steps through the relevant official service before acting.
