Wallet password recovery — the questions everyone asks.

Usually yes, if the password was human-chosen and you have clues. Recovery works by testing candidate passwords against the encrypted wallet file. Three factors decide the outcome: what you remember, the wallet format, and whether the password was random. A random 16-character password is effectively impossible to brute-force; a human-chosen one with hints is often realistic.

Start with the quick diagnosis, then follow where old passwords hide and the feasibility guide. For a one-glance verdict on your specific wallet — reset, crackable, or impossible — see the master list of recoverable wallet passwords. When you’re ready to run the recovery yourself, the complete DIY route — protect, find, rebuild clues, run the tool — is on one page: recover a wallet password yourself.

A wallet password unlocks an encrypted wallet file on your device. A seed phrase (recovery phrase, commonly 12/18/24 words) is the master backup for the accounts and keys derived from that phrase — imported private keys, hardware-wallet accounts, additional recovery phrases and some legacy wallet data may need separate backups. If you still have the seed phrase, you can usually restore the seed-derived accounts in a compatible wallet that supports the same recovery standard and derivation scheme, and choose a new password. If you only lost the password but still have the file, the keys still exist inside it — targeted recovery is possible.

A seed phrase is not just another password. Never type it into this website, a form, an email, or any unknown tool — whoever receives it can recreate the wallet and move the funds.

PINs and extra passphrases are two more distinct cases. See what did you actually lose?

For a self-custody wallet, no. The wallet software stores an encrypted file on your device; the password is only ever used locally, and no company has a copy or a reset button. That’s exactly why a forgotten password is a recovery problem rather than a reset.

For a custodial account (an exchange), the provider holds the keys and can reset your login after identity verification — see exchange & custodial wallets.

Your seed phrase, private keys and wallet password. Never send them to a recovery provider, website or helper — those values alone can move the funds. Legitimate recovery runs with local, offline, verified tools on your own machine; such tools may ask you to enter this material locally, which is completely different from sharing it.

It depends almost entirely on clues and format. With strong clues and a human password: hours to a few weeks of GPU time. With a random password: effectively forever. Formats also differ hugely — old wallet.dat files run hundreds of guesses per second on a CPU (thousands with a GPU), while Ethereum scrypt keystores run at only around a hundred.

See the full speed table in is recovery technically possible?

Not on this site. A completely lost seed phrase cannot be rebuilt from nothing — but access may still be recoverable if another key-bearing backup, wallet file or functioning device survives (for example an encrypted vault with its password). Reconstructing missing or reordered words is a specialist matter this site deliberately leaves out.

Before concluding it is gone, run the 30-minute sweep: paper, notes, photos, email, password managers, old devices. If your seed words are intact but you forgot the passphrase layered on top (the 25th/13th word), that is a password problem — and one of the most recoverable there is.

Sometimes — the wallet file is a second door. If the password-encrypted wallet file still exists, the password can be tested against it offline with btcrecover, hashcat or John the Ripper. A human-made password with genuine clues is often realistic; a long random one is not — the math is on the feasibility page.

Some wallets also have their own no-file routes to check first — for example, the Blockchain.com mobile app can create an encrypted iCloud/Google Drive backup that restores the wallet on the same OS/cloud account with your PIN. If the seed is gone and the file is gone, there is nothing to test and recovery is not possible — see recovery without the wallet file for the rare exceptions. For your exact wallet, the master list gives the verdict in one glance.

An optional extra passphrase layered on your seed creates a hidden wallet: the same 12–24 words with a different passphrase derive completely different keys. If you forgot it, the seed alone opens a different, empty wallet.

Good news: passphrases are almost always human-chosen — which makes them one of the most recoverable types when you reconstruct your own habits. The memory method is built for exactly this.

A BIP38 paper wallet is a Bitcoin private key encrypted with a password and printed, usually as a string starting with 6P. The encrypted string is the wallet — there is no backup file.

Recovery is possible if you can reconstruct the password: scrypt-based encryption runs at only tens of guesses per second, so human-chosen passphrases with clues are realistic, while long random ones are not. The BIP38 guide has the details.

Five things, in order:

• Make read-only backup copies of the wallet file.
• Write down everything you remember about the password.
• Note the wallet type and version.
• Note the wallet address and last activity.
• Check your password managers and notes for a stored copy — and if the manager’s own password is gone, recover the manager.

Do not reinstall the wallet, wipe the device, upload files to public checkers or unknown websites, or share your seed phrase with anyone. The five-move guide explains why each step matters.

Verify the wallet opens and the balance matches what you expect, then move the funds to a maintained wallet using official software only — and note the balance before you transfer so you can spot problems immediately.

Never lose access covers the storage rule.

No — and the reason is technical: a candidate password is usually tested against an encrypted file, so without the file there is usually nothing to test. The real exceptions are not cracking: a seed phrase restores the wallet, a custodial account resets via KYC, a brain wallet has no file by design, and a BIP38 6P… encrypted private key is itself the test target. What still works without the file

No — the tools run on any machine, and CPU-only recovery is realistic for the slower formats and for small candidate lists. A GPU mainly makes fast formats dramatically faster. See the measured speeds to judge your own case before you buy anything.

Treat them as dangerous until proven otherwise. Legitimate professionals run the same free tools offline on your copy; scammers ask for your file, your seed, upfront payment or remote access. Run the red-flag checklist first, and check the reported-services list — never share your seed phrase with anyone, ever.

It depends on the wallet. Hardware wallets wipe themselves after a small number of wrong PIN attempts (the PIN is not the backup — the seed is). Most software wallets do not permanently lock from wrong passwords, but some apps throttle or time you out, and exchanges lock after repeated failures. The rule is the same everywhere: test your candidate list on a copy, never on the original — the prevention guide explains the layers.

In general, recovering access to your own wallet, your own files and your own machine is a legitimate access-recovery activity. Laws and authorization requirements can vary by country and situation, and this site is not a source of legal advice — never use these tools on someone else’s wallet or device without explicit legal authority. This site’s scope is your own access recovery only.