MultiBit Classic is one of the fastest wallet formats to crack.

Which wallets use this format?

The MultiBit wallet file exists in two editions, and only MultiBit software produces them:

• MultiBit Classic — *.key key backups use a triple-MD5 scheme (exceptionally fast to crack); the main *.wallet file uses scrypt like HD
• MultiBit HD — a mbhd.wallet.aes scrypt-based keystore with a 12–24-word backup phrase (a much harder, different story)

Both are discontinued; support and maintenance ended on 26 July 2017. The files still sit on old hard drives everywhere, which is exactly why this guide exists.

Classic vs HD: two completely different wallets

Speeds are published btcrecover measurements (i7-10700K / Ryzen 9 9950X, 2026): btcrecover.readthedocs.io/Benchmarks. The gap between the .key backup and the scrypt-based files — roughly three to four orders of magnitude — is what a real key-derivation function buys you.

Which file do you have? The three MultiBit formats

MultiBit left behind three different file types, and they are not interchangeable. The file name and location tell you which one you have:

You do not need the MultiBit app to read any of these — they are plain data files. btcrecover reads the Classic .key backups and the HD .wallet.aes directly, and can also run against the Classic .wallet file itself — but the .key backup is strongly preferred because it is much faster. hashcat mode 27700 or the multibit2john extractor are alternative routes for the .wallet. This page covers the password angle; for the complete MultiBit walkthrough — version identification, HD seed recovery, export and migration — see the dedicated guide at multibit.online.

What the 3×MD5 .key backup means for you

MD5 is not designed for password storage; hashing it three times changes almost nothing. The practical translation:

• a 6-character lowercase password: found in minutes, even random;
• an 8-character letters+digits password: hours to days;
• a 10-character patterned password (a word, a date, your habits): very reachable with a memory-driven token list;
• a random 12+ character password: still hard — MD5 being fast doesn’t shrink the search space, it just makes every guess cheap.

If this is your situation, the expectation is unusually good. The 68-place search checklist may even find the password before any cracking starts.

Getting the file out of a dead app

MultiBit’s software is abandoned and its websites are long gone, but the files are plain data — you don’t need the app to recover:

1. 1
   Locate the .wallet, .key or mbhd.wallet.aes file (paths above; the OS-wide methods in how to find your wallet file help).
2. 2
   Copy it somewhere safe — never work on the original. (The copy rules.)
3. 3
   Prefer the key-backup files if you have them (MultiBit Classic): btcrecover reads the key-backup folder (e.g. %appdata%\MultiBit\multibit-data\key-backup) more reliably than the main .wallet file. For MultiBit HD, point it at mbhd.wallet.aes.
4. 4
   Feed the copy to btcrecover — the .key backup is its native MultiBit Classic input (btcrecover can also read the .wallet file directly, but .key is far faster; hashcat mode 27700 or the JtR multibit format are alternatives) — with token lists built from your memory.
5. 5
   On success, the private keys are yours again — sweep them into a modern wallet you control.

The full tool workflow — token lists, masks, and the all-important safe usage rules — is on offline recovery tools.

HD: a note

If your wallet is MultiBit HD (scrypt), the easy wins are gone. The same feasibility framework as every other scrypt wallet applies: an old patterned password with good memory clues is still recoverable; a random password is not, for anyone. Run the calculator before you decide how far to go.

Next step

Identify which MultiBit you have (file location is usually enough — see the three formats above), secure the file, then either work the checklist or go straight to the tools — btcrecover handles both Classic and HD.

Frequently asked questions

Sources & references

1. btcrecover — performance benchmarks
2. btcrecover — password recovery quick start (MultiBit Classic .key backups, HD mbhd.wallet.aes)