Trust Wallet — Password vs Seed Recovery

Trust Wallet, owned by Binance since 2018, is the largest non-custodial mobile wallet by user count (over 70 million installs). Like all proper non-custodial wallets, it stores your encrypted seed locally — Binance has no copy. The "I forgot my password" flow inside the app simply uses your seed phrase to reset the password. The seed is the real backup; the password is per-device convenience.

Scenario 1: I have the phone but forgot the password

This is the brute-force scenario. You need to extract the encrypted vault from the device. On unrooted Android, your options are limited; on rooted Android or jailbroken iOS, extraction is straightforward.

# Android root extraction example
adb shell "su -c 'tar -czf /sdcard/trust.tar.gz /data/data/com.wallet.crypto.trustapp/'"
adb pull /sdcard/trust.tar.gz

# Inspect for the vault file
tar -tzf trust.tar.gz | grep -i "wallet\|vault\|key"

# Trust Wallet stores keystores in db files. The relevant table is
# typically 'wallets' with a JSON column containing the v3 keystore.

Trust Wallet encryption envelope

{
  "version": 3,
  "id": "...",
  "crypto": {
    "ciphertext": "...",
    "cipherparams": { "iv": "..." },
    "cipher": "aes-128-ctr",
    "kdf": "scrypt",
    "kdfparams": {
      "dklen": 32,
      "n": 16384,
      "p": 1,
      "r": 8,
      "salt": "..."
    },
    "mac": "..."
  }
}

# This is the standard Web3 v3 format - hashcat mode 15700 works
# directly with the right ethereum2john conversion.

Notice that n=16384 is much weaker than MEW's default (262144). This makes Trust Wallet roughly 16× faster to brute-force than a high-cost MEW keystore.

Brute force throughput

Scenario 2: I have only the seed phrase

This is the easy case. The 12 or 24-word seed is the master backup. Reinstall Trust Wallet on any phone, choose "I already have a wallet", paste the seed, set a new password. All your addresses across BTC, ETH, BNB, MATIC, etc. will reappear.

If you imported coins not in Trust Wallet's default set, you may need to manually add them or use an alternative wallet (Coinomi, Exodus) that supports more derivation paths. See multi-asset wallet recovery for migration options.

Scenario 3: I have neither — what now?

Then your funds are unrecoverable. Trust Wallet does not custody your keys. Binance does not have your seed. Nobody does. The blockchain transactions remain visible and the funds remain at the address — but no one can spend them.

Recoverable vs not

Related guides

• Exodus / Atomic / Trust Wallet — broader multi-asset overview.
• Coinomi recovery — sister mobile wallet flow.
• BIP39 partial seed recovery.
• Recovery scam taxonomy.

Frequently asked questions