Bitcoin Core
The passphrase set with encryptwallet protects the keys inside wallet.dat. The file usually survives; the passphrase is the missing piece.
Forgot Your Crypto Wallet Password?
If the wallet file or browser vault still exists, a forgotten password is one of the more recoverable situations in crypto — but only when something about the password can be reconstructed. Here is how that is judged.
Why a forgotten password is different from a lost seed
A wallet password does not generate your keys; it encrypts them. The private keys already exist inside the wallet file, the keystore or the browser vault, sealed behind a key-derivation function. Recovery therefore means finding the input that unlocks an existing container — a search that can be verified instantly and run in parallel.
That is the good news. The limit is arithmetic: each additional unknown character multiplies the work, and wallets deliberately use slow key-derivation functions so that every guess costs real time. A password you half-remember is a small search. A twenty-character random string is not a search at all.
So the decisive question is never 'can passwords be cracked' but 'how much of yours can you still describe'.
What to write down before an assessment
Do not send the password fragments anywhere yet. Just reconstruct them for yourself — the assessment only needs to know how constrained the search is.
- Approximate length, and whether it was one word, several words or a phrase.
- Words, names, dates or places you habitually used at that time.
- Capitalisation and substitution habits, such as a leading capital or digits appended at the end.
- Which keyboard layout and language you were using when the wallet was created.
- Whether a password manager was involved, and if so which one and whether its database still exists.
- Whether the password was ever written down, photographed, or stored in an old notes file or email draft.
- The exact error message the wallet shows — some clients distinguish a wrong password from a corrupted file.
When password recovery may work
Realistic cases
- You remember the password but a few characters are uncertain.
- You used a personal scheme and can list the components it was built from.
- The password is one of a handful of candidates you have reused historically.
- A password manager database or an old backup file exists and can be examined.
- Typing errors or keyboard-layout changes are the actual cause, rather than memory loss.
Unrealistic cases
- A long random password generated by software and never memorised.
- No recollection at all and no wallet file, vault or backup to attack.
- A file so damaged that the encrypted payload itself is unreadable.
- Cases where the wallet has been overwritten by a fresh installation.
Common situations by wallet type
MetaMask
The password decrypts a vault stored in the browser extension profile. If the profile still exists, there is something to work with.
Electrum
Password protection may cover the whole wallet file or only the private keys, which changes what is visible without it.
Ethereum keystore (UTC/JSON)
A standard scrypt or PBKDF2 container. Verifiable per guess, and directly constrained by how much of the password you recall.
Wallet-specific password pages
Bitcoin Core wallet recoveryEncrypted wallet.dat passphrases and very old Core backups.MetaMask password recoveryVault data in the browser profile and what it can and cannot yield.Electrum wallet recoveryLegacy Electrum files and password-protected seeds.wallet.dat recoveryWhat to check when an old Bitcoin wallet file will not open.
Forgotten password questions
Can any wallet password be brute-forced eventually?
No. Wallets use deliberately slow key derivation, so each guess costs meaningful time. Unconstrained searches over strong passwords exceed any realistic timeframe. Only a constrained search — driven by what you remember — is practical.
I have the seed phrase but not the password. Is the password still needed?
Usually not. A valid seed phrase lets you restore the wallet in fresh software with a new password. If the seed restores an empty wallet, the issue is normally the derivation path, the wallet type, or an additional passphrase rather than the password.
Does reinstalling the wallet help?
It frequently destroys the very data recovery depends on. Reinstalling can overwrite the encrypted vault or wallet file. Copy the existing data to separate storage before changing anything.
How many password candidates are enough to be useful?
There is no fixed number. What matters is the structure: knowing that the password is 'a capitalised word, a four-digit year and one symbol' is far more valuable than a list of unrelated guesses.
Not sure whether your case is recoverable?
Describe the wallet, what happened and what information you still have. You will get an honest assessment of whether recovery is technically feasible — without sending any secret credentials.
Assess My Password Recovery Case