Toast Wallet stopped being developed in 2020, but the XRP you kept in it never lived inside the app. It sits on the XRP Ledger, under an account that still exists. To move it, you need a way to unlock the account's secret. Whether you can do that depends on which of Toast's credentials you still have.
Toast gave each user up to five different things to keep track of, and most people we hear from have mixed at least two of them up. So start by working out which one you're holding.
Toast's five credentials, and what each one looks like
- Passphrase. The password you chose when you set Toast up. It had to be at least 8 characters with an uppercase letter, a lowercase letter, a number and a symbol. It unlocks your Toast data on a device or from a backup. On its own, anywhere else, it does nothing.
- PIN. A 6-digit code that opens the app on a device. It's a gate, not a key: it doesn't unlock your account secret, and you can reset it with your passphrase or recovery phrase.
- Recovery phrase (the six recovery words). Six short, made-up lowercase words that Toast generated for you. They look something like
bavo tesuka limo rudep kana fizo(a fictional example, not a real phrase). They aren't English words, and they aren't a standard 12- or 24-word seed phrase. Toast's own warning is blunt: "Your recovery phrase is a second passphrase. It is not a wallet backup." - Backup code. A long block of text you exported from Settings → Backup Wallet. It starts with eight letters and numbers (0–9 and a–f), followed straight away by a long run of text in curly braces with labels such as
walletversion,pindataandaccounts. It holds an encrypted copy of your wallet. - Account secret (also called a family seed). A string starting with a lowercase s. This is the XRP Ledger's own key for your account. Toast only showed it if you went looking for it.
Only two of these can bring your XRP back by themselves. The account secret works in any XRP wallet. The backup code restores into Toast, but you then have to unlock it with your passphrase or your six words.
Find the genuine Toast Wallet first
Toast's mobile apps were pulled from the app stores in June 2020, and the final release, 3.0.0, came out on June 28, 2020. The developer's repository says it's no longer maintained and should be used only to move funds out. The genuine versions still available are:
- the browser version at toastwallet.github.io/browser
- the desktop builds for Windows, macOS and Linux on the official GitHub releases page
Be careful with search results. toast-wallet.net is not Toast's official site. It was registered in October 2025, calls itself the "Official Website", and asks visitors to type in backup codes and recovery words. Toast's own domain, toastwallet.com, now just redirects to the developer's 2020 announcement. In 2021 a fake iPhone app called "Toast Plus" was accused in a lawsuit of taking users' XRP secrets.
The rule is simple: only ever enter a backup code, passphrase or account secret into the genuine Toast software. Never type it into any other website, form or chat.
If Toast still opens, or you know your passphrase
This is the good case. Get your account secret out of Toast and into a maintained wallet. Xaman, formerly Xumm, publishes a migration guide:
- In Toast, open the account and choose Show Secret.
- Enter your passphrase, then tap Reveal Secret. Write the secret down on paper.
- In Xaman, go to Settings → Accounts → Add account → Import existing → Full Access → Family Seed and enter the secret.
- Xaman recommends creating a fresh account and moving your XRP there, so the old secret no longer protects anything.
If you're on a new computer, restore your backup code into the genuine browser or desktop version first, then follow the same steps.
Two things catch people out when they move the XRP:
- Reserve. The XRP Ledger keeps a minimum balance locked in every account. Older Toast builds warned about 20 XRP. The current base reserve is 1 XRP, plus 0.2 XRP for each object the account owns, such as a trust line. You can't send that amount, and the network can change it.
- Destination tags. If you're sending to an exchange, use the exchange's deposit address and its destination tag. Leave the tag off and your deposit can go missing at the exchange.
Forgot the passphrase, but you have the six recovery words
You can fix this yourself. Toast accepts the recovery phrase in place of the current passphrase when you change your passphrase. Open Toast on the device that has your wallet, or restore your backup code into the genuine browser or desktop version. Start the change-passphrase flow, enter your six words where it asks for the current passphrase, and set a new one.
A forgotten PIN works the same way: Toast's reset accepts either your passphrase or your recovery phrase.
Once you're back in, follow the migration steps above. If you added accounts after your last backup, make sure you're working from data that includes them. An old backup code only restores the accounts and credentials that existed when you exported it.
Forgot the passphrase, and the six words are lost or don't work
This is where most Toast cases land, and it's what we do. If you still have either:
- your backup code, or
- the computer where you used the Toast desktop app or browser version
then the encrypted copy of your wallet still exists. Toast stored your account secret locked twice, once under your passphrase and once under your recovery phrase, so getting either one right unlocks it. Crypto Asset Recovery tests passphrase candidates built from what you remember, along with any recovery words you half-remember. The cracking runs on offline, air-gapped machines, so your keys are never exposed online.
We can work from Toast's desktop and browser versions. We can't yet recover a Toast wallet that only ever lived on a phone.
You only pay if we succeed. Completely risk-free.
Don't know where to start with old passwords? Our guide on how to find old passwords covers the places people forget to check.
Six recovery words only, and no backup
We have to be straight with you here. Six recovery words on their own can't rebuild a Toast wallet. They were never the wallet's key. They were a second password for an encrypted copy that lived on your device or in your backup code. With no backup code and no surviving wallet data, nobody can recover the account: not us, not the developer, and not Xaman.
Before you give up, search for the other two things that matter:
- An account secret starting with "s", written in a notebook, a password manager, a screenshot or a printout. On its own, it gets you straight back in.
- Old devices that ran Toast's desktop app or browser version. Toast keeps its data locally, so an old laptop you haven't wiped may still have it.
If you're not sure which computer you used, our guide to working out where you created a crypto wallet helps you retrace it.
What not to do
- Don't enter your backup code or recovery words on lookalike sites such as toast-wallet.net, or give them to anyone who messages you offering to help.
- Don't uninstall Toast or clear the browser's site data on a computer that may still hold your wallet. That data may be your only copy.
- Don't reset or reinstall Toast to "start fresh" on that device. Setting up a new wallet there could overwrite the old one.
- Don't keep guessing on the only device with no backup. Export a backup code first if Toast still opens.
- Don't pay anyone who guarantees recovery. Nobody can promise it.
If your XRP was taken by a scam or a fake app, password recovery won't bring it back. Crypto Asset Recovery doesn't trace or recover stolen funds. Our crypto scam recovery checklist explains the steps to take, including reporting to IC3 and the police.
How our Toast recovery works
We start by asking what you have, because Toast's credentials are easy to blur together. We'll ask about each one separately:
- Your passphrase: what you think it was, how you usually build passwords, and any variations.
- Your six recovery words: whether you have them, or any of them, and whether you tried them.
- Your PIN: whether you remember it. It can't unlock the account secret, but people often mix it up with the passphrase, so we check.
- Your wallet data: the backup code, or the computer and browser where Toast ran.
You send the backup code or wallet data plus your guesses. If you're not comfortable sharing every password you use, you can send close variants or only the ones you think are relevant. That lowers the odds, but it's your call. We run the search offline and come back to you for new ideas if the first batch doesn't hit. When we find the passphrase, we help you get the account secret out and move your XRP to a wallet that's still maintained.
Why Choose Crypto Asset Recovery to Recover Your Toast Wallet?
- Secure, offline recovery. The cracking runs on air-gapped, offline machines, so your keys are never exposed online.
- We know Toast's credentials. We'll tell you quickly whether your backup and words give us something to work with.
- Success-based pricing. You only pay if we get you back in.
- Talk to a real person. Reach out any time, and you can get on a Zoom with our founders, the father-and-son team Chris and Charles.
- Featured in BBC, Forbes, Vice, The Block, and Business Insider.
Frequently asked questions
What does a Toast Wallet backup code look like? A long block of text that starts with eight characters (the numbers 0–9 and the letters a–f), followed by a section in curly braces with labels like walletversion, pindata and accounts. It isn't six words and it isn't a seed phrase. It's an encrypted copy of your wallet that you exported from Settings → Backup Wallet.
Is the Toast recovery phrase a seed phrase? No. Toast's six recovery words are made-up words Toast generated, not BIP39 words. Toast calls them "a second passphrase", not a wallet backup. They unlock your wallet data, but they can't rebuild it without the backup code or the original device.
Can I recover a Toast wallet without the backup code? Only if the wallet data still exists on a computer where you used Toast's desktop app or browser version, or if you wrote down your account secret. Without one of those, it can't be recovered.
Can I still download Toast Wallet? Yes, but only to move funds out. Use the browser version at toastwallet.github.io/browser or the 3.0.0 desktop releases on Toast's GitHub page. Avoid lookalike sites such as toast-wallet.net.
How long does Toast passphrase recovery take? It varies a lot. Some cases are solved in 20 to 30 minutes. Our longest took more than two years. Most of the work is passive: we run your guesses offline and come back to you for fresh ones.
Is it safe to send you my Toast backup code? That's a fair question to ask any recovery service. Crypto Asset Recovery is a registered New Hampshire company run in public by a father-and-son team, Chris and Charles, and you can meet them on Zoom before you send anything. We work offline from the encrypted backup and your guesses. A business that works this openly has everything to lose by stealing from a client.
