How to Get Your Recovery Seed From Trezor Again

In cryptocurrencies, a recovery seed , or shortly seed , is a list of words in a specific order which shop all the information needed to recover a wallet. Keeping the recovery seed individual and safe is cardinal for long-term safety of the user's cryptocurrency funds.

Synonyms: recovery judgement , recovery phrase , mnemonic .

Contents

• 1 Recovery seed and Trezor
  • i.1 Lost or compromised recovery seed
• 2 Recovery seed and primary binary seed creation
  • two.1 From recovery seed to chief binary seed
• iii Why do Trezor One and Trezor Model T generate recovery seeds of different lengths?

Recovery seed and Trezor [edit]

Past default, while using Trezor Suite, Trezor Model T creates a wallet with 12 seed words and Trezor One generates a 24-word seed. Both models are compatible with public standards and information technology is possible to create a recovery seed for your wallet using 12, xviii or 24-word seed on both devices. In terms of security 12-give-and-take recovery seed is prophylactic enough (128 bits of entropy).

NoteFor advanced users: It is possible to generate 12, 18 or 24-word seeds on both Trezor devices. If y'all want to generate recovery seed with different length than default (e.g., 24 words on Trezor Model T), please meet initialize device with trezorctl command.

See also: Passphrase, Hierarchical deterministic wallet, Unremarkably misspelled recovery seed words

As mentioned above, information technology is imperative to store your recovery in a rubber place. Without the recovery seed, it is incommunicable to restore your funds in case your Trezor device is lost, stolen, or destroyed.

In improver, anyone with access to your recovery seed can as well access and steal all your funds. See Keep your recovery seed safe for some security tips.

Lost or compromised recovery seed [edit]

In example you cannot find your recovery seed or you feel that it might take been compromised, the article Emergency situations might exist helpful.

See also our Security department.

Read more than nearly recovery seed in the following blog posts: Acquire about: Recovery seed, Recovery Seed, Pivot and Passphrase, A few tips on how to store your recovery seed.

Recovery seed and master binary seed creation [edit]

Notation This department describes the creation of a 24-word recovery seed.

During Trezor device initialization, the "Create a new wallet" process creates a new wallet with a new recovery seed. This recovery seed consists of a certain amount of English words (12, xviii or 24) from which the business relationship individual keys, all private keys, public keys, and addresses are mathematically derived. Creation of the recovery seed and primary binary seed is as follows.

First, the 256-chip random number is generated in the Trezor device on its Microcontroller past the RNG (Random Number Generator). This number has 256 zeros or ones, so the entropy, or randomness, of this number is 2 ^ 256. This equals approximately ten ^ 77. For comparison, it is estimated that there are x ^ 78 to 10 ^ 82 atoms in the known universe.

Run into likewise How secure is 256-bit security?

A random number of the same length is then generated in the connected computer and sent to the Trezor device. These two numbers are now together hashed by the SHA-256 algorithm - this number, which is again 256-bit, is the basis for the creation of the recovery seed, let'southward call information technology initial entropy.

Encounter also GitHub code

Before splitting the number - our initial entropy - to recovery seed words, nosotros need to add a checksum. This checksum is created by hashing the initial entropy number by the SHA-256 algorithm, taking the first 8 numbers of this hash and putting them on the end of the initial entropy - so now nosotros have a 264-flake number. A checksum is a way to let y'all know if you got the right sequence of numbers.

The 264-bit number is now divided into 24 numbers, and every number now has 11-bits. An xi-flake number is a number from 0 to 2047 in the decimal system. That'south 24 numbers from 0-2047, e.k., 745, 15, 2012, etc.

These numbers are assigned to the English words that are a role of BIP-39 standard. Here is the total list of words the recovery seed is created from.

The implementation of a mnemonic code or mnemonic sentence - a grouping of like shooting fish in a barrel to remember words - for deterministic wallets is described in BIP39 - bitcoin improvement proposal.

From recovery seed to primary binary seed [edit]

A user may decide to protect the recovery seed with a Passphrase. If a passphrase is not present, an empty string "" is used instead. A mnemonic sentence is created past concatenating all recovery seed words without spaces.

To create a master binary seed from the recovery seed (which is and then used in BIP32), the PBKDF2 function is used. The mnemonic sentence (in UTF-8 NFKD) is used as the password, and the string "mnemonic" + passphrase (over again in UTF-8 NFKD) is used as the common salt. The iteration count is prepare to 2048 and HMAC-SHA512 is used equally the inner function. The length of the derived key is 512 bits. This derived central, or master binary seed, is then used to create all private keys, public keys, and addresses in your wallet using BIP32 standard.

Why do Trezor One and Trezor Model T generate recovery seeds of different lengths? [edit]

This departure comes downward to the level of security in the process of recovering the seed. Trezor One produces a 24-word recovery seed because of the established method of writing your recovery seed in your browser while recovering the wallet.

To mitigate any risks of the seed existence compromised by malicious key-logging software, the Trezor One device instructs the user to enter the individual words in random lodge - instead of entering all words in sequence from the first discussion to the last i. Computing a valid seed out of 24 random seed words is most impossibly hard (i.east., this never happens).

To add more than strength (randomness) when recovering a 12-word seed on Trezor One, at that place are 12 imitation dummy words introduced by the device and mixed in the puddle with the existent words. The user inputs the real words mixed with the fake ones, all randomly shuffled, and the device itself sorts them out.

The recovery process using Trezor Model T is limited to the "on-device" input, meaning that the words never touch a potentially compromised environs and e'er stay safe as yous type them in using the touchscreen. In this case, 12 words are sufficient. The 128-bit entropy (randomness) provided by 12 words is widely considered to be plenty secure.

If you wish to achieve the aforementioned level of security using Trezor One, take a look at the Avant-garde recovery which allows yous to limit the seed input to the device and never let the seed words bear on the browser interface.

johnsonwituarmay38.blogspot.com

Source: https://wiki.trezor.io/Recovery_seed

Share this post