Guide 06
68 places a forgotten wallet password can hide — work through them all.
Most “forgotten” wallet passwords are found, not cracked. People write them down, save them, screenshot them, email them to themselves, or bury them in an old backup. This checklist walks you through every place — digital, physical and human — one tick at a time. Tick as you go; your progress is saved in your browser.
By Robbert Bink · ~16 min read · Published 6 August 2026 · Last reviewed: 15 August 2026
How to use this page
Work from top to bottom and tick as you go — set aside 30–60 minutes and only stop when every box is ticked. The two most productive searches are the password-manager and email sections; do those even if you do nothing else today. Not sure what you lost? Start with the quick diagnostic.
Run these searches in your email and cloud storage first
Open your email provider and cloud drives, search for each term, and check the sent, drafts, deleted and archive folders — not just the inbox. These 12 searches catch most self-sent backups in under five minutes.
"seed phrase""recovery phrase""mnemonic""private key""wallet backup""wallet.dat""keystore""blockchain""bitcoin wallet""password" + wallet name"24 words""6P" (BIP38)
Not searching in English? Run the same searches in your own language too — e.g. zaadzin (Dutch), Seed-Phrase (German), phrase de récupération (French), frase semilla (Spanish). The wallet app’s own name works in every language.
Part 1 · Password managers & browser vaults
▼Forgot the manager’s own master password? That is a separate recovery problem — the password manager guide covers KeePass, LastPass and 1Password.
Found the password in a protected ZIP, Office file or PDF but can’t open it — or is the wallet file itself on an encrypted drive? The encrypted-file guide covers all of them — same offline tools.
Your main password manager (LastPass, 1Password, Bitwarden, Dashlane, KeePass)
Search the vault for the wallet’s name, your exchange, “crypto”, “bitcoin”, or the year you set it up. Check every folder and the archive — not just the main list. If you used the manager’s own password generator, the entry’s history tab may show the original value.
Apple iCloud Keychain / Keychain Access
On macOS open Keychain Access and search “wallet”, “bitcoin”, “crypto”, “seed”. Safari-saved passwords live under Settings → Passwords on iPhone and in System Settings on Mac.
Google Password Manager (Chrome / Android)
passwords.google.com or chrome://password-manager/passwords. Search every saved login — people often save the wallet password under the wallet’s website or the exchange URL.
Firefox Lockwise / Edge password vault
Both browsers save passwords locally — check even if you haven’t used them in years. Old browsers on old machines count too.
Password-protected notes inside your manager
Secure notes, credit-card sections, and “notes” tabs are classic seed-phrase hiding spots. Open every secure note, even ones that look unrelated.
A second, older password manager you stopped using
Check the phone/desktop you used before this one. Vaults from LastPass→Bitwarden→1Password migrations often leave the old vault behind, still installed.
Password manager exports / CSV backups
Many apps let you export everything to CSV. People do this “to be safe” and the file lands in Downloads or Documents, never opened again. Search your drives for *.csv, *.kdb and *.kdbx.
The wallet app’s own password field / autofill history
If the desktop wallet (Electrum, Exodus, Bitcoin Core) has “remember password” or autofill, the browser or OS may still hold it. Check form-fill history in Chrome and Safari.
Part 2 · Notes, documents & files
▼Notes apps: Apple Notes, Google Keep, Evernote, Notion, OneNote, Simplenote
Search each app for “wallet”, “seed”, “crypto”, “12 words”, “24 words”, “backup”, “password”. Check the deleted/trash folder in each — notes get deleted and stay recoverable for weeks.
Plain text files on every computer
Search file contents, not just names: passwords.txt, wallet.txt, readme.txt, notes.txt, backup.txt. Use your OS search (or
grep -Rni "seed" ~ on Linux/macOS) across Documents, Desktop, Downloads.Spreadsheets (Excel, Google Sheets, Numbers)
People keep “accounts.xlsx” or a sheet called “Passwords” with every login including the wallet. Search all spreadsheets and check hidden tabs (right-click a sheet tab → Unhide).
Word / Pages / PDF documents
Search for “recovery”, “seed”, “backup” inside documents. PDFs of old emails, tax documents, or “crypto summary” files sometimes contain the words.
ZIP / RAR / 7z / TAR archives
Old backups live in archives. Search for *.zip, *.rar, *.7z, *.tar.gz and look inside — wallet files and seed text files are often archived and forgotten. Check archive passwords you reused elsewhere.
Screenshots and photos on every device
Open the gallery/photo app and search “screenshot”, “QR”, “wallet”, “backup”. The setup screen, the recovery sheet, a QR code of the address — all common screenshots. Check deleted-photos folders too.
Exchange export / tax-report files
CoinTracker, Koinly, or exchange CSV exports sometimes carry address lists or note fields. Search for the wallet address you remember — it may appear alongside a saved password or label.
Browser downloads folder & browser history
The keystore JSON you downloaded from MyEtherWallet years ago may still sit in Downloads. Search history for “keystore”, “myetherwallet”, “generate”, “wallet” to retrace when you created it.
Desktop sticky notes and widget notes
macOS Notes widgets, Windows Sticky Notes, and desktop applets. Windows Sticky Notes are searchable via the Sticky Notes app; Mac Stickies too. Physically check your monitor frame and desk for paper notes while you’re at it.
Part 3 · Email & messages
▼Search every email folder — sent, drafts, deleted, spam, archive
People email themselves seeds “for safekeeping”. Search all folders, not just the inbox. Use the quick-search terms above and check the trash before it purges.
Emails to yourself with attachments
Search “to:me” + “wallet” / “backup” / “keystore”. Attached JSON keystores, wallet files, or screenshots are the classic self-backup that works.
Old email accounts — the one before your current address
Hotmail, Yahoo, Gmail, work email. Log into each and run the same searches. Old accounts are where the “setup era” mail lives.
WhatsApp / Telegram “Saved Messages” / Discord / Signal DMs to yourself
Saved Messages in Telegram is a very common seed hiding spot. Search your own chats for “seed”, “words”, “backup”, “phrase”. Check group chats where you might have shared it in an emergency (then consider those funds moved).
Messages with the friend who introduced you to crypto
That person may have told you how to set it up — the chat may contain the wallet name, the exchange, the year, or (concerningly) a shared phrase.
Exchange welcome / recovery emails
Coinbase, Kraken, Binance emails about your account may reference the wallet address or app used. They can also help you date the wallet’s creation, which anchors your memory search.
Email drafts you never sent
Drafts are the most forgotten folder. A half-written “my seed is...” draft counts as a backup — and if you find it, move the funds and delete it.
Cloud chat exports (Slack, Teams, forums)
If you discussed the wallet in a work chat or crypto forum, search those histories for the wallet name, address, or backup terms.
Part 4 · Cloud storage & backups
▼Google Drive / iCloud Drive / Dropbox / OneDrive / Mega
Search each for *.txt, *.json, *.dat, *.csv and the keywords above. Check the trash/recycle bin of each cloud drive — deleted files linger for 30+ days.
Old cloud accounts on other email addresses
The Drive/Dropbox tied to your old email still holds its files. Same search, different account.
Time Machine / Windows File History / Apple backups
Time Machine may contain old deleted wallet files if a backup from that period still exists. Browse the backup timeline to the wallet’s setup period and look for wallet.dat, keystores, or seed text — but do not assume years-old deleted files are guaranteed: old backups can be thinned or deleted when the backup disk fills, and local snapshots are short-lived.
Phone backups (iTunes, iCloud, Android)
A full phone backup can contain app data, notes and photos from the era. Restoring/searching an old backup is work, but it’s one of the highest-yield searches when a seed was ever on a phone — getting the vault off the phone is its own step.
NAS / home server / external drive
If you own a Synology/QNAP or a USB drive “for backups”, search it — especially folders named backup, crypto, documents.
Third-party backup services (Carbonite, Backblaze, Acronis, CrashPlan)
Continuous backup services quietly hold versions of everything, including files deleted locally. Restore a file list from the setup era.
Git repositories / code hosting
Developers sometimes commit config files or keystores to private repos “temporarily”. Search GitHub/GitLab private repos and local .git history for wallet files. (And if you find one committed publicly — move the funds now.)
Virtual machines / cloud servers / Docker volumes
If you ran a node or a trading bot on a VPS (DigitalOcean, AWS, Vultr) or in Docker, the wallet or seed may live in that machine’s home directory or volume.
Part 5 · Old devices & dead hardware
▼The old laptop/PC you used when you set up the wallet
This is the single highest-yield physical search. Even a dead laptop’s drive can be pulled and read as an external disk — the wallet file and browser data are still there. If the disk uses BitLocker, FileVault or another full-disk encryption system, you also need the disk unlock password, recovery key or account-based recovery route — do not assume the data is readable just because the drive can be physically removed. See where wallet files live.
Old phones and tablets
Search each one’s notes, gallery, and app data — even the ones “that stopped working”. If the phone powers on, check every app; if not, a backup may still exist.
Old USB sticks and SD cards
Plug in every stick you own and browse — not just the root. People save wallets to USB “for safety” and forget the stick entirely.
The hardware wallet itself (Ledger, Trezor, etc.)
Check its box, its recovery card, and the original packaging insert. Many devices ship with a card that people write the seed on. If you still have the device and it boots, note that a device PIN is not a wallet password — the real backup is the seed card it shipped with.
Dead laptop hard drives — read them as secondary disks
A “dead” laptop usually means the screen or battery died, not the disk. Pull the drive, put it in a USB enclosure, and browse it on another machine — but if the disk is BitLocker- or FileVault-encrypted, browsing it also requires the unlock password, recovery key or account-based recovery route; the data is not readable just because the drive can be removed. Full guide: how to find your wallet file.
Old user profiles on shared computers
Family PCs often have several Windows/macOS user accounts. The wallet was created under the account you used then — check each profile’s Documents/AppData.
Old routers / IoT devices you configured
A long shot, but if you ran a node on a Raspberry Pi or configured a router with a “notes” field, check those. Raspberry Pi SD cards are easy to read on a PC.
Digital cameras / scanners / scan-to-email folders
Paper backups are sometimes photographed or scanned. Check camera SD cards and any scan folder in your email.
Old SIM cards and phone boxes
People store seeds in the small box their phone or SIM came in. Check every gadget box in the house, not just phone boxes.
Part 6 · Physical places
▼Notebooks and journals — including old ones
The classic spot. Flip through every notebook, planner and diary you own, not just recent ones. Seeds are often written on the last page or the inside cover.
Sticky notes — desk, monitor, fridge, inside drawers
The most underestimated place in the house. Check the back of notes, under the monitor stand, on the fridge, and inside desk drawers.
Wallets, card holders, phone cases
Yes, the physical wallet. Cards with handwritten numbers, slips of paper, the sleeve inside a phone case — all plausible hiding spots.
Safes, lockboxes, safety deposit boxes
If you have a home safe or a bank deposit box, that’s prime real estate for a seed on paper or metal. Check old ones you haven’t opened in years.
Books — especially on a specific shelf
Seeds are hidden between book pages, inside book covers, or in “bible-dip” style hiding spots. Check the books near your desk and the crypto/tech books you owned.
Filing cabinets and old documents
Bank statements, insurance folders, tax folders, old passports — a paper with 12 words doesn’t look special among papers. Go through the drawer systematically.
Coat pockets, jacket linings, handbags, luggage
The “emergency backup” in a coat you wore once. Check every pocket of every coat and bag, including travel bags.
Garage, attic, basement, storage units
Boxes you haven’t opened since a move are where paper backups go to die. Go through the labeled boxes — especially “documents”, “office”, “electronics”.
Car — glovebox, sun visors, under seats, trunk
A paper seed in the car “in case of house fire”. Check every compartment, including the spare tire area.
Old calendars, planners, diaries, address books
Passwords written next to dates, seeds on a calendar page, codes in an address book. Flip through every year, not just the current one.
Under the keyboard, desk mats, monitor stands
The “under the keyboard” cliché is a cliché because it works. Check desk mats, drawers within the desk, and the underside of monitor stands.
A previous home — if you moved since setting up the wallet
If you moved after creating the wallet, the paper backup may still be at the old address. Ask the current residents or landlord, and check any storage you left there. This is a real, documented recovery story category.
Part 7 · People, timeline & memory
▼Your partner, family, or housemates
Ask the people who live with you whether they ever saw a paper with words or numbers, a USB stick, or a “crypto notebook”. Shared households create shared hiding spots.
The friend or colleague who helped you set it up
They may remember the wallet type, the year, or have a copy. Ask directly — most people who helped set up a wallet remember more than the owner does.
Rebuild the timeline: when, where, on what device
When did you buy crypto? Which exchange? Which device was new then? Pin the year and the machine — it shrinks the search from “everywhere” to “that machine, that era”. The memory guide walks through this systematically.
The wallet’s creation evidence: exchange history, purchase records
Your exchange purchase history dates the wallet. Bank statements and tax files confirm the year. A dated wallet = a dated search window.
The password manager’s own timeline / password history
If the wallet password was ever stored in a manager and later changed, the manager’s history may show the older value. Check item history where available.
The IT person or previous owner of the machine
If the laptop was bought second-hand, work-issued, or set up by an IT friend, they may have created user accounts or saved files. Worth one polite question.
The wallet’s address in old chats, emails, or posts
Search for the address string itself (e.g. bc1…, 0x…). Where the address appears, the surrounding conversation often reveals the wallet type and era.
Part 8 · Digital archaeology & deleted files
▼Recycle bin / trash on every OS and cloud drive
Deleted wallet files and seed notes sit in trash for weeks. Check the recycle bin on each computer and the trash in Drive/Dropbox/iCloud. Before you do: stop using the disk — see the golden rule in protect your wallet files.
Undelete tools for recently deleted files
If a wallet file was deleted recently and the disk hasn’t been overwritten, undelete tools (Recuva, PhotoRec, TestDisk) can often recover it. The more the drive has been used since, the lower the odds — act fast, offline.
Browser profile data of old browsers
Old Firefox/Chrome profiles contain saved passwords, form history and cookies from the wallet era. Dig into %APPDATA%\Mozilla or ~/Library/Application Support — even without the browser installed, the profile folder may survive.
OS-level file search for wallet-file names
Search every drive for
wallet.dat, default_wallet, UTC--*, *.keystore, *.wallet, and files containing encrypted_key or ciphertext. Paths per wallet: find your wallet file.Hardware wallet recovery sheets and stickers
Ledger/Trezor ship recovery cards; some people stick the seed under the device, on the box, or in the manual. Check the manual and the sticker habit.
Old app data from the wallet app itself
Uninstalled apps leave data behind: %APPDATA%, ~/Library/Application Support, Android /data. The wallet identifier tells you which file you’re looking for per app.
Paper backups photographed into cloud photo libraries
Google Photos and iCloud Photos index text in images. Search your photo library for “words”, “paper”, “document”, or the wallet name — OCR may surface a photographed seed sheet. If you find one, treat that seed as digitally exposed: do not only delete the photo. First restore/check the wallet safely, create a fresh wallet with a new seed, move the funds to fresh addresses, and only then clean up the photo, trash folders, cloud backups and synced devices.
Found something? Don’t celebrate yet — protect it first.
Found the wallet file, a seed, or a password? Before you do anything with it: make a read-only copy, then read protect your wallet files. And if you found a seed or password in email, photos or chat — move the funds and delete the copy; it has been exposed for years.
Every box ticked and still nothing? Here is what it means.
If you’ve genuinely searched all 68 places, you are not a disorganized person — you’re in the majority. Most people who forget a wallet password also forgot where they put the backup. At this point the situation splits into three paths:
- You have the wallet file but not the password. This is the recoverable path: is recovery technically possible? and the offline tools explain the odds, which depend on the password’s strength and your memory of it.
- You have part of a seed phrase. That’s seed reconstruction, outside this site’s scope — the goal here is finding a complete copy. If the phrase is intact but a passphrase (25th/13th word) was used, that IS a password problem we cover.
- Nothing at all, no file, no phrase. Be honest with yourself: a fully random password with no file is mathematically unreachable — your realistic path is finding a stored copy.
Cite this page
APA: Bink, R. (2026). 68 places a forgotten wallet password can hide — work through them all. ForgotWalletPassword.com. https://forgotwalletpassword.com/the-ultimate-search-checklist
Markdown: [68 places a forgotten wallet password can hide — work through them all.](https://forgotwalletpassword.com/the-ultimate-search-checklist)
Missing something, or spot an error? Tell us — every correction is checked and applied.
Was this guide helpful?
Thanks — it helps us improve the guide.
Keep going — it’s all free
Not sure what you lost or what’s possible?
Take the quick diagnosis for a first verdict — it stops early when the answer is already clear — then work the search checklist. Everything here is informative, runs offline, and is free to use.