Mist . Ethereum Wallet

Mist Ethereum wallet recovery

Mist and the Ethereum Wallet app were how many early holders stored their ETH. The app is long dead, but if you still have the keystore file, the password is usually recoverable.

Atualizado em julho de 2026 · KeychainX — Recuperação de carteiras desde 2017

Mist — and the desktop Ethereum Wallet app built on it — was the official Ethereum wallet in the network’s first years, before MetaMask and hardware wallets. It let you create an account, set a password, and store ETH locally. Mist was discontinued in 2019, so there’s no app to reinstall and no support to call. The good news: Mist saved your key in the standard Ethereum keystore format, and as long as you still have that file, a forgotten password is one of the more recoverable situations there is.

What Mist actually saved

When you created an account, Mist wrote an encrypted keystore file to disk — a JSON file named like UTC–2016-03-11T…–<address>, holding your private key encrypted to the Ethereum Web3 Secret Storage V3 standard. This is the same format Geth uses, because Mist ran on Geth underneath. That file is the whole game: with it and a password hint, recovery is realistic; without it, there is nothing to decrypt.

Look for the keystore folder here:

• Windows: %APPDATA%\Ethereum\keystore\
• macOS: ~/Library/Ethereum/keystore/
• Linux: ~/.ethereum/keystore/

The files start with UTC– and have no extension. Mist may also have left a backup under its own application-data folder, so it’s worth checking both.

How the password protects the file

Your Mist password is never stored. It’s run through a deliberately slow key-derivation function — usually PBKDF2-HMAC-SHA256 with a high iteration count (the client used on the order of 262,144 rounds), or scrypt in some builds — to derive a key that decrypts your private key, with a MAC that confirms whether a guess was right. AES-128-CTR does the actual encryption. That heavy stretching is intentional: it makes each password guess expensive, which is exactly why recovery succeeds on good hints rather than brute force.

How we recover a Mist password

We read the key-derivation settings straight from your keystore file, then build candidate passwords from what you remember — length, fragments, the words and numbers you tend to use, the era and the computer you set it up on — and test them offline on dedicated GPU hardware (hashcat modes 15600 for PBKDF2 and 15700 for scrypt keystores). The instant a candidate satisfies the file’s MAC, the password is confirmed and your key is recovered. Nothing is entered on any live site, and your private key is never exposed in the clear until it’s back in your hands.

The encoding trap on old Mist passwords

Mist ran across Windows, macOS and Linux in an era when text encoding was far less consistent, and that’s behind many “my password is definitely right” cases. A password with an accented letter, an umlaut or another non-ASCII character could be stored in one byte encoding but re-typed today in another, so the two no longer match — even though you’re typing the “same” password. We reproduce those encoding and normalization variants (UTF-8 versus Latin-1, composed versus decomposed forms) systematically, which is where a large share of Mist cases are actually won.

Finding the file on an old machine

Because Mist ran on a computer, the keystore is often on hardware you haven’t used in years — an old laptop, a retired desktop, an external drive or an upgrade backup. The account address in the filename lets you confirm you’ve found the right one. If the drive is dead or the file was deleted, that’s not necessarily the end: we can take a forensic image of the media and carve the keystore out of it, then recover the password from the reconstructed file. If you suspect the file is gone, stop using that drive and don’t reformat it — every write reduces what can be recovered.

Why so many Mist wallets are locked today

Mist and the Ethereum Wallet app were the default choice in 2015–2017, the window when a lot of people first bought ETH at a few dollars and set a password they never expected to need again. The Ethereum Foundation wound Mist down in 2019, partly over security concerns with its browser component, and pointed people elsewhere. The result is a large population of wallets that are perfectly intact on-chain but practically locked: the app is gone, the password is a distant memory, and the balance is now worth many times what it cost. If that describes you, the keystore file is the one thing to protect — it is what turns a dead app into a recoverable wallet.

O que não podemos fazer

If the keystore file is truly gone and can’t be recovered from any old device or backup, there is nothing to decrypt. If you only have the public address, that’s not recoverable. And if the password was long and fully random with no memory of it at all, the heavy key-derivation cost may make the search infeasible — we’ll tell you honestly before you commit. We never ask for payment upfront.

Perguntas frequentes