How to recover a Bitcoin wallet

Many Bitcoin owners have a vague memory of buying coins years ago and no idea where to start. The good news is that a Bitcoin wallet is rarely truly lost — far more often the coins are sitting safely on the blockchain behind a forgotten password, a scrambled seed phrase, or a wallet file on a computer you no longer use. To recover a Bitcoin wallet you almost never need to “hack” anything; you need to identify what you have and attack the one piece that is missing.

Most recovery guides published in the last few years are AI-generated, with fuzzy logic and incomplete steps. This one is hand-written by a lab that has recovered wallets since 2017. The fastest first move: search your email for the word bitcoin — old exchange receipts, wallet backups and setup emails are the single best clue to which wallet you used.

First, identify which Bitcoin wallet you had

This is the most important step, and the one people skip. The recovery method is completely different for each wallet, so before anything else, work out which software or device held your coins. Ask yourself:

• Roughly what year did you buy or move the Bitcoin? Wallet formats changed a lot between 2011 and today.
• Was it a program on a computer (Bitcoin Core, Electrum, Armory, MultiBit), a website or app (blockchain.info / blockchain.com), a phone wallet, or a hardware device (Trezor, Ledger)?
• What backup do you still have? A file on a drive, a string of words on paper, a printed private key, or just an email confirmation?

Once you know the wallet, you can find the file it leaves behind and choose the right recovery path.

Identify the wallet by its file or backup

Each wallet leaves a recognisable fingerprint on disk. Use this table to match what you have:

A couple of things worth knowing. If you find a text file that is a string of around 240 characters starting with U2 and ending with =, that is an OpenSSL AES-encrypted blob — often decryptable with the free tool BTCRecover once you have the password. And note that Electrum uses its own seed format that is not compatible with Bitcoin Core or Trezor (BIP39); don’t assume an Electrum seed will restore elsewhere.

What you need to recover a Bitcoin wallet

Legitimate recovery comes down to three ingredients. The more of each you have, the better the odds:

• The encrypted wallet file or the seed phrase. This is the container your keys live in. Without it — if you only have a public address — recovery is not possible for anyone.
• A hint about the password. The length, a few characters, the style you used, or an old password you reused elsewhere. Even a rough memory changes everything.
• A target address. A receiving address you know belongs to the wallet lets us confirm the instant a candidate is correct.

How Bitcoin password recovery actually works

Your wallet never stores the password itself. It stores an encrypted key, and your password derives the value that unlocks it. Recovery means finding that password — the keys are never attacked directly.

The naive approach, trying every possible combination, is hopeless for anything but the shortest passwords. Real recovery is hint-driven: from what you remember we build targeted candidate lists using masks and rules, feed them to GPU tools such as hashcat or BTCRecover, and test each against the wallet until one decrypts. A wallet.dat, for example, is extracted to a hash and attacked with hashcat mode 11300.

A surprising number of “wrong” passwords are actually right but mistyped. We routinely fix a 0 written as an O, a 1 as an l or I, and passwords that fail because of a special character, a keyboard-layout swap, or a Unicode normalisation mismatch. Custom tooling tries these variations automatically.

Recovering a lost or partial seed phrase

If your backup is a list of words, the order matters: a 12 or 24-word mnemonic reconstructs the tree of private keys only in the exact sequence it was written. A standard seed also carries a checksum, which is what makes partial recovery possible — a small number of missing or unreadable words can be solved by testing valid combinations against a known address.

Two things commonly go wrong beyond missing words: the words are correct but in the wrong order, or the wallet is searched on the wrong derivation path (so the funds look like they’ve vanished after an import). Both are solvable when the seed itself is intact. If you also had an extra secret word — a passphrase, sometimes called the 25th word — that becomes a separate search on top of the seed.

If the wallet file is deleted or on a dead drive

A missing file is not the same as a missing wallet. On a spinning hard drive, deleted and even formatted data usually survives until it is overwritten. The free tool pywallet can scan an entire disk for wallet files and stray private keys, which is often enough to bring a “lost” wallet.dat back.

When the drive won’t mount, the phone is dead, or the media is physically damaged, that becomes a forensic job — imaging the device and carving the wallet out of it. That is work we do in-house; see our guide on recovering Bitcoin from a dead hard drive. One honest limit: on SSDs, the TRIM command can permanently erase deleted data, so deleted-file recovery from an SSD is far less reliable than from a hard drive.

Do it yourself vs. a recovery service

If you are technical and remember your password well, you can often recover a Bitcoin wallet yourself. The core free tools are pywallet (disk and file scanning), BTCRecover (password and seed recovery for many wallet types) and hashcat (GPU password cracking). Start there before paying anyone.

Bring in a service when the password space is large, the wallet is damaged, the media has failed, or the value is high enough that a mistake is costly. If you do, protect yourself: a legitimate recovery firm works on a no-recovery, no-fee basis and never asks for payment upfront. Anyone who DMs you first on Telegram, Facebook, Instagram, Quora or X claiming to be a recovery service, or who guarantees 100% success, is a scammer. Stolen or mis-sent coins cannot be reversed by anyone — ignore any “recovery” offer that says otherwise.

KeychainX has recovered wallets since 2017 — 1000+ clients served, ~79% success rate, on a 20% success-based fee (you pay only if we recover).

Frequently asked questions