Introduction to Tezos Mnemonic Recovery
Losing access to a Tezos (XTZ) wallet can be a stressful experience, especially when the mnemonic phrase—typically 12 or 24 words—is partially forgotten or corrupted. While brute-forcing a full BIP39 mnemonic is computationally infeasible, targeted Tezos mnemonic brute force and dictionary generation techniques can help recover wallets when you retain partial knowledge, such as a few known words, their order, or the derivation path. This guide explores practical, offline methods to generate custom dictionaries, leverage open-source tools, and ethically recover your own Tezos assets.
At Crypto Wallet Recovery Guide (/) , we specialize in cryptocurrency wallet recovery, offering step-by-step tutorials for Bitcoin, Ethereum, and Tezos. Our mission is to provide verified, security-first strategies for regaining access to lost wallets without compromising private keys.
Understanding Tezos Mnemonic Standards
Tezos wallets like Kukai, Temple, and Ledger Live typically use the BIP39 standard for mnemonic generation, combined with BIP32/BIP44 for hierarchical deterministic (HD) key derivation. The default derivation path for Tezos is often m/44'/1729'/0'/0', but some wallets use alternative paths. Before attempting any brute-force or dictionary attack, you must identify:
- Mnemonic length: 12, 15, 18, 21, or 24 words.
- Wordlist: BIP39 English (or other languages).
- Known words and positions: Even partial knowledge drastically reduces the search space.
- Passphrase (optional): Some wallets add a 25th word or passphrase.
Why Pure Brute Force Is Impractical
A 12-word BIP39 mnemonic has 2048^12 ≈ 5.4 × 10^39 combinations. Even with massive GPU clusters, exhaustive search is impossible. However, if you know 6 words and their positions, the remaining 6 words yield 2048^6 ≈ 7.4 × 10^19 possibilities—still large but potentially tractable with optimized tools and dictionary reduction.
Dictionary Generation for Tezos Mnemonic Attacks
A dictionary attack uses a curated list of candidate words or phrases to guess the mnemonic. For Tezos, you can generate custom dictionaries based on:
- Partial mnemonic recall: Words you remember, typos, or similar-sounding words.
- Common patterns: Repeated words, sequences from BIP39 wordlist, or user-created phrases.

- Derivation path variations: Include multiple paths to test each candidate.
Step-by-Step: Building a Targeted Dictionary
- Collect known words: Write down any words you remember, even if unsure of order.
- Expand with BIP39 wordlist: Use the official 2048-word list as a base. Filter by length, starting letter, or phonetic similarity.
- Generate permutations: If you know the positions of some words, fix them and permute the rest. Tools like
crunchor Python scripts can automate this. - Include checksum validation: BIP39 mnemonics have a checksum. Only valid combinations (those passing the checksum) need to be tested, reducing candidates by ~1/16 for 12-word phrases.
- Optimize for Tezos: Add derivation paths and passphrase variations to your testing script.
Tools for Dictionary Generation and Brute Force
- btcrecover: Originally for Bitcoin, it supports BIP39 and can be adapted for Tezos with custom scripts.
- HashCat: Powerful GPU-based hash cracker. Use mode 26600 for Tezos (if applicable) or BIP39 seed recovery modes.
- Pywallet: For wallet.dat files, but can be extended for mnemonic testing.
- Custom Python scripts: Leverage
bip_utilsorpytezosto validate mnemonics and derive addresses.
Important: Always run these tools in an offline environment (air-gapped machine) to prevent leaking your partial mnemonic or private keys.
Practical Tezos Mnemonic Brute Force with Python
Below is a simplified workflow to test candidate mnemonics against a known Tezos address. This assumes you have a list of candidate 12-word phrases.

from pytezos import pytezos
from bip_utils import Bip39SeedGenerator, Bip44, Bip44Coins
# Known Tezos address (tz1...)
target_address = "tz1..."
# Load dictionary of candidate mnemonics
with open("candidates.txt", "r") as f:
candidates = [line.strip() for line in f]
for mnemonic in candidates:
try:
# Generate seed
seed = Bip39SeedGenerator(mnemonic).Generate()
# Derive Tezos key using BIP44 path m/44'/1729'/0'/0'
bip44_ctx = Bip44.FromSeed(seed, Bip44Coins.TEZOS)
priv_key = bip44_ctx.PrivateKey().Raw().ToHex()
# Get public key hash (address)
addr = bip44_ctx.PublicKey().ToAddress()
if addr == target_address:
print(f"Found! Mnemonic: {mnemonic}")
break
except Exception as e:
continue

This script iterates through candidates, derives the Tezos address, and compares it to your target. For performance, use multiprocessing or GPU acceleration with HashCat.
Optimizing Brute Force Speed
- Reduce search space: Use known word positions and checksum filtering.
- Parallelize: Split dictionary across CPU cores or GPUs.
- Use HashCat: Convert mnemonic testing to a hash-cracking problem if you have a derived hash (e.g., from a wallet file).
- Cloud vs. local: For sensitive mnemonics, always prefer local hardware. Cloud GPUs risk exposure.
Security and Ethical Considerations
- Only recover your own wallets: Brute-forcing someone else's mnemonic is illegal and unethical.
- Offline operation: Disconnect from the internet before handling mnemonics or private keys.
- Secure deletion: After recovery, securely wipe temporary files and dictionaries.
- Prevention: Store multiple backups of your mnemonic in separate, secure locations. Consider Shamir's Secret Sharing for splitting the phrase.
For more advanced recovery strategies, including hardware wallet restoration and password cracking for encrypted wallets, visit Crypto Wallet Recovery Guide at /. Our comprehensive resources cover Bitcoin, Ethereum, and Tezos recovery with a focus on safety and legality.
Conclusion
Recovering a Tezos wallet via mnemonic brute force and dictionary generation is feasible only with partial knowledge and optimized tooling. By building targeted dictionaries, leveraging BIP39 checksums, and using offline scripts, you can systematically test candidates without exposing your assets. Always prioritize security, and remember that prevention—through robust backups—is far better than recovery. If you need further guidance, our team at Crypto Wallet Recovery Guide is here to help you navigate the complexities of cryptocurrency wallet recovery.