Why does my Ledger device say 'Invalid Recovery Phrase' or 'Wrong Word'?

This error occurs for two distinct reasons: either a typed word is not in the standard 2048-word BIP-39 dictionary (autocomplete rejection), or all 24 words exist but fail the 8-bit SHA-256 checksum due to a misspelled word, swapped word order, or incorrect 24th word.

What does it mean if the Ledger Recovery Check app says 'Phrase does not match'?

This means the 24-word phrase you entered is a mathematically valid BIP-39 sequence, but it generates a different master seed than the one currently stored in your Ledger device's Secure Element.

Does an invalid recovery phrase error mean my funds are lost?

No. Your funds reside on the blockchain. An error on the Ledger device only indicates that the entered word sequence cannot reconstruct your root key. If your device is still configured and accessible with its PIN, your access is intact.

Does finding a word that passes the checksum guarantee I recovered my wallet?

No. For any 23 words, exactly 8 words out of 2048 will satisfy the checksum mathematically. However, passing the checksum only confirms mathematical consistency, not identity. A valid checksum does not confirm that the phrase matches your original seed or holds funds. Furthermore, if any of the first 23 words are incorrect, the true phrase will not be among those 8 candidates.

Can the Ledger Recovery Check app reset or erase my device?

No. The official Recovery Check app is a read-only, non-destructive utility. It compares the entered phrase in RAM without altering or wiping the device firmware.

Ledger 24-Word Seed Phrase Invalid, Typo & Wrong Word Fix

To resolve Ledger 24-Word Seed Phrase Invalid, Wrong Word & Typo Fix (Stax / Nano X / S+), fix. Ensure all derivation paths, environment parameters, and cryptographic signatures are verified client-side using deterministic tools before broadcasting live transactions.

If your Ledger Stax, Ledger Flex, Nano X, Nano S+, or Nano S displays “Invalid Recovery Phrase”, “Wrong Word”, or fails verification in the official Recovery Check app, stop and do not reset your hardware.

Quick Diagnostic Answer: What Your Error Actually Means

“Wrong Word” during entry: You typed characters that do not match any word in the official 2,048-word BIP-39 dictionary. Ledger devices only permit selection of words from this standardized list.
“Invalid Recovery Phrase” / Checksum Failure: All 24 words exist in the dictionary, but their combined 264-bit sequence fails the 8-bit SHA-256 checksum. This is caused by entering words in the wrong numerical order, mistyping a word that happens to resemble another BIP-39 word (e.g., board vs border), or an incorrect 24th word.
Recovery Check app says “Phrase does not match the one configured on this device”: The 24 words are mathematically valid BIP-39 words, but they belong to a different seed than the one currently active inside your Ledger’s Secure Element chip.
Phrase is accepted, but balance is $0 (“Seed phrase correct but no funds ledger” / “Ledger recovery phrase valid but wrong wallet”): You do not have a checksum error. Your wallet is either on an alternate derivation path or missing an optional 25th-word passphrase. Entering 24 words without your original passphrase creates an entirely valid—but completely empty—secondary wallet. Navigate directly to our dedicated recovery guides:
- Ledger Valid Phrase but 0 Balance & Passphrase Recovery Guide
- Ledger Live Zero Balance BIP-44 Derivation Mismatch Guide

Critical Security Caution

Never enter your real 24-word recovery phrase on any website, web tool, browser extension, or digital form.
Never transmit your phrase, private keys, or PIN to support agents, community channels, chatbots, or article authors. Legitimate Ledger staff will never ask for them.
Never reset a functioning hardware device to experiment with an unverified backup phrase. If your device PIN is still working, preserving device access is your only immediate window to safely move funds.

Diagnostic Symptom Tree: Identify Your Exact Failure Mode

Displayed Error / Device Symptom	Technical Root Cause	Safe Resolution Path
”Wrong Word” on Ledger Nano S+ / Nano X	Typed characters do not exist in the 2,048-word BIP-39 standard wordlist.	Verify spelling against standard BIP-39 wordlist. Note: only first 4 letters are needed to identify any word uniquely.
”Invalid Recovery Phrase” on Ledger Stax / Flex	SHA-256 checksum mismatch. Touchscreen predictive tap registered adjacent word, or word order swapped.	Inspect visually similar BIP-39 words, verify word order (1–24), calculate 24th word checksum parity.
Recovery Check: “Phrase does not match configured device”	Valid BIP-39 seed, but different from active device seed.	Check if you have multiple backup sheets from different setups, or if a 25th-word passphrase was configured.
”Phrase is correct”, but accounts show $0 balance / wrong wallet	Valid seed accepted, but account derivation path mismatch or missing 25th-word passphrase.	See Valid Phrase But 0 Balance Guide and BIP44/49/84 Derivation Paths.
Paper backup fails, but device still unlocks with PIN	Device active, paper sheet contains an unrecorded typo.	URGENT: Keep device powered. Create a new backup or transfer funds immediately while device access remains.

Interactive Diagnostic Tool: BIP-39 Checksum Solver & Word Inspector

If you have 23 verified words and need to mathematically calculate the exact 8 valid candidate words for position #24, or inspect potential word typos using Levenshtein distance metrics, launch our client-side utility: BIP-39 Checksum Calculator & Missing Word Solver.

Zero-Secrets Sandbox Policy: The calculator executes 100% locally in your browser memory via native WebCrypto (crypto.subtle) with zero remote network calls. Never enter a live, funded recovery phrase on any computer or web browser. Use this utility strictly with isolated test vectors, partial word combinations, or offline non-funded recovery practice.

Architectural Breakdown: The BIP-39 Checksum and Entropy Mapping

The BIP-39 (Bitcoin Improvement Proposal 39) standard defines how high-entropy binary randomness is converted into a human-readable mnemonic phrase. When a Ledger device rejects your phrase during setup or restore, it is executing an exact mathematical checksum verification inside its Secure Element.

The Mathematical Construction of a 24-Word Seed

A 24-word mnemonic represents 264 bits of total data:

Initial Entropy: 256 bits of raw randomness (generated by the Ledger’s True Random Number Generator or TRNG).
Checksum: 8 bits derived from the SHA-256 hash of the initial entropy (SHA-256(Entropy)[0..7]).
Total Binary Payload: 264 bits ($24 \text{ words} \times 11 \text{ bits} = 264 \text{ bits}$).

Each 11-bit slice maps directly to a discrete index (0 to 2047) in the standardized 2,048-word English BIP-39 dictionary.

The Checksum Verification Pipeline

When you enter your 24 words into your Ledger device:

The Secure Element converts the 24 words back into 264 bits.
It separates the first 256 bits (entropy) from the trailing 8 bits (checksum).
It computes SHA-256(first 256 bits).
It compares the first 8 bits of the resulting hash against the trailing 8 bits from step 2.

If there is a discrepancy of even a single bit, the hardware triggers “Invalid Recovery Phrase”. Because the checksum occupies 8 bits ($2^8 = 256$), an arbitrary sequence of 24 words from the dictionary has only a 1 in 256 chance of passing the checksum by coincidence.

BIP-39 Checksum Rules & Recovery Limitations

Exact Candidate Count: For any fixed sequence of 23 valid words from the BIP-39 dictionary, exactly 8 words out of the 2,048 options will mathematically satisfy the 8-bit SHA-256 checksum ($2^{11 - 8} = 2^3 = 8$).
Checksum Does Not Confirm Original Seed: A mathematically valid checksum only proves internal parity for that specific 24-word string. It does not prove that this phrase was the one originally assigned to your device or that it matches your accounts.
No Confirmation of Balances: A valid checksum does not indicate whether derived accounts have existing transactions or funds. Any valid mnemonic simply traverses an infinite HD address tree.
Dependency on Preceding Words: If any word among the first 23 has a typo or is out of order, your true original 24th word will not be among the 8 candidates computed for that flawed list.
Single-App Zero Balance Trap: Never assume a recovered phrase is incorrect purely because one interface (e.g. Ledger Live) shows a zero balance; derivation path mismatches, missing passphrases, or network cache desynchronization can hide valid funds.

Hardware-Specific Input Considerations

Ledger Stax & Ledger Flex (Touchscreen Interface)

On touchscreen models with virtual keyboards:

Predictive Taps & Stax 24-Words Invalid Error: The virtual keyboard suggests matching words after 2–3 letters. Users frequently tap an adjacent word suggestion (for example, tapping credit when intending creek), triggering a Ledger Stax 24-words invalid checksum rejection upon completion. View our dedicated Ledger Stax 24-Words Invalid Diagnostic Reference for predictive tap recovery protocols.
Ledger Flex Touchscreen Seed Errors: For Ledger Flex E-Ink display calibration and word selection issues, follow the Ledger Flex 24-Words Invalid & Touchscreen Typo Fix.
Capacitive Input: Ensure the screen is clean and free of moisture or thick third-party screen protectors that can register ghost taps during phrase entry.

Ledger Nano S, S+, and Nano X (Physical Buttons)

On two-button hardware interfaces:

First 4 Letters Rule & Nano S+ Wrong Word: Every word in the 2,048-word BIP-39 dictionary is uniquely identifiable by its first 4 letters (words with 3 letters like act or add are complete after 3 characters). If your Ledger Nano S+ displays “Wrong word”, follow our Ledger Nano S Plus 24-Words Typo Diagnostic.
Legacy Nano S 320KB Memory Limits: On the original Nano S, inspect flash app limits and word order traps via the Ledger Nano S 24-Words Typo & Invalid Recovery Phrase Guide.
Button Bounce & Nano X 24-Words Typo: When scrolling through the alphabet with physical buttons, a double-click or mechanical switch bounce can inadvertently select an adjacent word (e.g., built instead of build, board instead of border), creating a subtle Ledger Nano X 24-words typo that fails the final SHA-256 checksum parity. See our Ledger Nano X 24-Words Invalid & Typo Resolution.

Visually Similar BIP-39 Words

If you suspect an illegible character or handwriting typo on your paper backup, compare your notes against commonly confused pairs:

built vs build
canvas vs canyon
pave vs page
smile vs smoke
board vs border
clog vs cloth

Safe Verification with the Official Recovery Check App

If your Ledger device is currently functioning and you simply want to test your written paper backup, use the official Recovery Check app from Ledger.

Safe Step-by-Step Procedure

Open Ledger Live and connect your device.
In the My Ledger tab, search for Recovery Check and install it on your device.
Open the Recovery Check app on the device screen.
Select your phrase length (24 words).
Enter Word #1 through Word #24 directly on your hardware device.
Observe the result on the device screen:
- “Phrase is correct”: Your paper backup matches the seed currently running on your device.
- “Phrase does not match the one configured on this device”: The phrase is valid BIP-39, but belongs to a different seed than the active device.
- “Invalid recovery phrase”: The entered sequence fails the BIP-39 checksum or contains an unlisted word.

Non-Destructive Operation: The official Recovery Check app is completely non-destructive. It executes in isolated RAM on the Secure Element and will never wipe, reset, or alter your Ledger device, even if you enter an invalid or non-matching phrase.

Critical Emergency Action: If Backup Fails While Device Still Unlocks

If your paper backup fails verification, but you can still unlock your Ledger device with your PIN and access your accounts in Ledger Live:

DO NOT reset or update your device firmware.
Immediately generate a fresh wallet on a secondary hardware device, or set up a secure temporary wallet.
Transfer all assets from your current Ledger accounts to the temporary addresses while your device PIN access is active.
Only after verifying all on-chain transfers should you wipe and re-initialize your device with a newly generated, verified 24-word backup.

Primary Technical References & Documentation

Ledger Official Support: Invalid recovery phrase error
Ledger Official Support: Check your recovery phrase with Recovery Check
Bitcoin Improvement Proposal 39 (BIP-39): Mnemonic code for generating deterministic keys
BIP-39 Standard English Wordlist: BIP-0039 English Wordlist

Ledger 24-Word Seed Phrase Invalid, Wrong Word & Typo Fix (Stax / Nano X / S+)