Wallet format · Bitcoin
Electrum wallets — recoverable, but slower than you hope.
Electrum is one of the oldest Bitcoin wallets, and its encrypted wallet files are recoverable with the right clues. But there is a twist: the part that matters most in Electrum is not the file — it is the seed phrase, and the two are recovered very differently.
By Robbert Bink · ~4 min read · Published 6 August 2026 · Last reviewed: 14 August 2026
Electrum wallet passwords can be recovered when you have clues — but the encryption is deliberately slow, so realistic recovery depends on a human-chosen password and a good candidate list. And the single most important fact: if you still have your seed phrase, you do not need the password at all.
Which wallets use this format?
Electrum’s encrypted file format is shared by the whole Electrum family — each coin runs its own fork of the same client:
- Electrum for Bitcoin (the original)
- Electrum-LTC for Litecoin
- Electron-Cash for Bitcoin Cash
- Electrum-DASH for Dash
- Plus smaller forks (Electrum-GRS, Electrum-XVG and more)
The encrypted keystore format introduced in Electrum 2.8 works the same across these clients — older 1.x–2.7 files use a different, weaker scheme (details below) — and so does the seed phrase, which can bypass the password entirely.
How Electrum encryption works
- Electrum 2.8+ wallets store an encrypted keystore protected by your password using a PBKDF2-based key derivation (older 1.x–2.7 files use a weaker double-SHA-256 scheme).
- The wallet file itself is a JSON-like structure; the password derives the key that unlocks the stored seed and keys.
- hashcat supports Electrum as modes 16600 (v1/2.x), 21700 and 21800 (2.8+) — the salt type in the hash picks the mode. Testing speed sits in the hundreds to low-thousands of guesses per second class on a high-end GPU, depending on salt type — slower than old wallet.dat, faster than Ethereum scrypt keystores.
- Modern Electrum versions and seed-derived wallets (type “standard”) can often be restored from the seed phrase alone, making the password mostly irrelevant — see below.
The seed phrase changes everything
Electrum’s default wallet derives all keys from a 12-word seed. That seed — not the wallet file — is the true backup:
- If you have the seed: restore it in the matching Electrum-family wallet for that coin and wallet type — Electrum for Bitcoin, Electron Cash for Bitcoin Cash, Electrum-LTC for Litecoin, and so on — and choose a new password. Do not assume a seed from one Electrum-family fork belongs in ordinary Bitcoin Electrum. Done — in normal cases. If old funds do not appear, check the wallet type, seed type and Electrum’s gap limit before assuming the seed or password is wrong. No cracking needed. If a password protects a wallet whose seed you know, the wallet can simply be recreated.
- If you have the seed but added an extra passphrase layer: you face the “25th word” problem — see what did you lose?
- If you have neither seed nor password: recovery means attacking the encrypted file itself, which is the slow path.
Check your backups before you spend anything
The single highest-value action for an Electrum user is the systematic search for the seed — the paper card, the note, the old backup. If the seed exists, the password problem evaporates.
If you must attack the file
Treat it like every other wallet file:
-
1
Back up read-only
Copy the wallet file and keep the original untouched. The five moves come first.
-
2
Rebuild the candidate list
Your memory of the password matters more than the hardware. The memory method generates the raw material.
-
3
Check feasibility
Clues + human password = realistic. Random 16+ characters = not. The feasibility guide shows the arithmetic.
-
4
Run the tools yourself
Test your candidate list on a copy of the wallet file — the btcrecover walkthrough or the hashcat walkthrough (Electrum modes 16600 / 21700 / 21800) takes you through it. One exception: Electrum 2FA / TrustedCoin wallets are not covered by the standard btcrecover route — current btcrecover documentation excludes 2FA wallets, so identify the wallet type before following the generic commands.
Related reading
Frequently asked questions
Is an Electrum wallet password recoverable?
If you still have the 12-word seed, the password stops mattering — restore the wallet and set a new one. Without the seed, the encrypted wallet file itself is the target: it cracks offline, but Electrum’s key derivation is deliberately slow, so clues and a tight candidate list matter even more than usual.
Which hashcat mode does Electrum use?
Run electrum2john.py on a copy of the wallet file and let it detect the format — for fully encrypted wallets it processes the encrypted container (the base64 BIE1 prefix), not the JSON. The mode follows the generated $electrum$N prefix: 1/2/3 → 16600, 4 → 21700, 5 → 21800. The extractor ships with John the Ripper jumbo; btcrecover reads Electrum wallets directly.
Does the seed phrase make the Electrum password irrelevant?
Yes, if you have it: the seed recreates the wallet on any fresh install, so the old password no longer matters. The password only protects the local wallet file — which makes Electrum a seed-first wallet, and a file-attack case only when the seed is gone.
Sources & references
Cite this page
APA: Bink, R. (2026). Electrum wallets — recoverable, but slower than you hope. ForgotWalletPassword.com. https://forgotwalletpassword.com/electrum-wallet-password-recovery
Markdown: [Electrum wallets — recoverable, but slower than you hope.](https://forgotwalletpassword.com/electrum-wallet-password-recovery)
Keep going — it’s all free
Not sure what you lost or what’s possible?
Take the quick diagnosis for a first verdict — it stops early when the answer is already clear — then work the search checklist. Everything here is informative, runs offline, and is free to use.