Forgotten encryptwallet passphrase
The dominant case. The file is fine; the passphrase set years ago is not remembered exactly.
Bitcoin Core keeps everything in a local database rather than a seed phrase, so recovery revolves around one file, one passphrase, and whether the client can be persuaded to see all of your addresses.
Core writes keys into wallet.dat inside the data directory — %APPDATA%\Bitcoin on Windows, ~/Library/Application Support/Bitcoin on macOS, ~/.bitcoin on Linux. Running encryptwallet seals the master key with a passphrase-derived key; the rest of the database structure stays intact.
Wallets created before HD support contain a finite pool of pre-generated keys, typically a hundred at a time. Newer wallets are HD and derive addresses from an internal seed, but Core still does not present that seed as a 12-word phrase, so a file backup remains the only backup.
Because Core is a full node wallet, a restored file often shows a zero balance until the chain is rescanned from the wallet's birthday. That is a display state, not a loss.
The dominant case. The file is fine; the passphrase set years ago is not remembered exactly.
A pre-HD backup missing keys generated after it was made, so part of the balance is invisible.
The blockchain data was deleted to reclaim space and wallet.dat went with it, leaving only backups to find.
A wallet from an early Core or Bitcoin-Qt release that needs careful handling rather than a direct upgrade.
An unclean shutdown or failing disk left the file unloadable, requiring low-level parsing.
Usually an incomplete rescan or a wallet birthday set too late, not missing coins.
Traditionally no. Modern descriptor wallets are HD internally, but Core does not present a BIP39 phrase for you to write down, so the file backup is what protects you.
Rescan the chain from before the wallet's first transaction. On a pruned node this may require reindexing or a full sync. The coins are on-chain regardless of what the client displays.
Sometimes, but it modifies the file. Always make copies first and treat the original as evidence — specialist parsing frequently recovers more than the built-in tools.
That is the classic pre-HD key-pool gap. Look for a later backup; keys created after the backup date are simply not present in it.
Describe the wallet, what happened and what information you still have. You will get an honest assessment of whether recovery is technically feasible — without sending any secret credentials.
Assess My Bitcoin Core Recovery Case