Forgot Your Bitcoin Core Password? How to Recover It (and When You Can’t)

Blog » Forgot Your Bitcoin Core Password? How to Recover It (and When You Can’t)
Updated on Jul 13, 2026
Author: Robbert Bink
Illustration of a Crypto Recovers detective unlocking a Bitcoin Core wallet with a key and laptop

You have the wallet.dat file. You just can’t remember the password that unlocks it. That’s a frustrating spot, but often a recoverable one — so before you assume the worst, work through this guide in order.

Here’s the reassuring part. Your Bitcoin is on the blockchain, unchanged. The wallet was only the key, and the password is the lock on that key. Bitcoin Core password recovery is the job of finding that password — not breaking the coins out of anything.

One myth to clear up first. Bitcoin Core does not give you a 12- or 24-word recovery phrase like newer wallets do. There’s no seed phrase to fall back on and no “forgot password” button. Everything lives in wallet.dat, and the password you set is the only thing standing between you and your keys. So the password is the recovery path.

First, confirm the wallet is actually encrypted

Sometimes the wallet was never password-protected and the real problem is something else. Check before you spend hours guessing.

Open Bitcoin Core, go to Window → Console (the Debug Console), and type: walletpassphrase “yourbestguess” 60

Three things can happen:

  • The command runs with no message. The password worked, and the wallet is unlocked for 60 seconds.
  • You get an error saying the passphrase is incorrect. The wallet is encrypted and that guess was wrong. Keep going.
  • You get an error saying the wallet isn’t encrypted. There’s no password to recover — your issue is a corrupted or missing file, not a lost passphrase.

That last case means you’re on the wrong guide. Start with our broader Bitcoin Core wallet recovery walkthrough for deleted and corrupted files instead.

Build your guess list before you touch any tool

This is the step that decides most cases, and most people skip it. Every recovery tool needs raw material — the closer your guesses are to the real password, the faster and more likely the result. So think like the version of you that set it.

Write down everything that might have gone into it:

  • Base words you reuse: pet names, kids’ names, nicknames, street names, bands, sports teams.
  • Numbers you attach: birthdays, years, phone digits, house numbers, a lucky number.
  • Old passwords from that era, and the small changes you make to them.
  • Where the capital usually goes (first letter? a specific word?).
  • Symbols and their spots (a ! or $ on the end, an @ for an a).
  • The rough length, if you remember typing something long or short.

Now the boring things that lock people out more than they’d guess: a Caps Lock left on, a trailing space, a keyboard set to another language, or a simple typo you made twice — once when you set it, once when you wrote it down. The right password is usually closer than it feels.

Test a short list by hand

If your list is small, try the candidates directly in the Debug Console with the same walletpassphrase command above, one at a time. An error means wrong; silence means you’re in. For ten or twenty guesses, this is faster than setting up any software.

Stop guessing once the list runs out. Blindly retyping the same handful of passwords won’t change the answer — the next step will.

When the list is long: automated recovery tools to recover Bitcoin Core Password

Once you’re past a handful of guesses, tools take over. They generate thousands of variations from what you gave them and test each against the file. Two are worth knowing.

BTCRecover is the beginner-friendly choice, built for exactly this kind of case. You don’t hand it the password — you hand it the pattern. Its token-list mode is the key feature: you give it the word fragments you remember (say king, 2014, !) and it tries them in every order and combination, with optional rules for capital letters and common typos. If you remember most of the password but not the exact arrangement, this is what closes the gap. The official documentation walks through setup.

bitcoin2john plus Hashcat is the route for technically confident users with a decent GPU. The bitcoin2john.py script (part of the John the Ripper jumbo toolkit) reads your wallet.dat and pulls out the encrypted hash — a line starting with $bitcoin$. You feed that hash to Hashcat using mode -m 11300, which is Hashcat’s setting for Bitcoin Core wallet files, then run a mask or rule-based attack around your known pattern. It’s more setup, but it uses your graphics card to test far more candidates per second than a CPU can.

Whichever you use, download it only from its official source, and run it offline on a machine that isn’t connected to the internet. Never paste your wallet.dat, keys, or password fragments into a website that offers to “recover” them for you. That’s a common way people lose the coins they still had.

Read more about wallet.dat password recovery.

Why an old wallet is easier to recover than a new one

Two things decide whether recovery is realistic: how much you remember, and how old the wallet is. The second one surprises people.

When you set a password, Bitcoin Core adds deliberate busywork before it will check it. Think of a lock that makes you wait a moment on every single try. That wait is tiny for you, but a recovery tool has to make that same wait on every guess — millions of them. That’s what slows brute force down.

Here’s the part that helps you. Bitcoin Core sets the length of that wait based on how fast your computer was when you first encrypted the wallet. An old wallet from, say, 2012 was made on a slow computer, so the wait per guess is short. A wallet made on a newer, faster computer has a much longer wait built in. Shorter wait means a tool can test far more guesses per hour. So an old wallet.dat is much easier to work with than a new one — same password, same equipment.

Either way, what you remember matters most. If you recall the rough shape of the password and just need software to fill in the gaps, the odds are good, and it may take a few days. If the password was long, fully random, and you remember nothing about it, there are simply too many combinations to get through. We’d rather tell you that straight than watch you spend weeks on something that can’t work.

How to recover safely without losing your coins

Trying to unlock a wallet is exactly when people lose the money they still had. The recovery itself is low-risk if you follow a few rules. Skipping them is where funds disappear.

  1. Work only with a copy. Copy your wallet.dat to a separate folder and run everything on that copy. If a tool damages a file, it damages the throwaway, not your original.
  2. Keep it offline. Run recovery tools on a computer that isn’t connected to the internet. Never upload your wallet.dat, your keys, or your password guesses to any website that offers to “recover” them for you. Those sites exist to steal what you have left.
  3. Download tools only from their official sources — BTCRecover, Hashcat, and bitcoin2john from the John the Ripper project. Fake copies of recovery tools are a common trap.
  4. If you use a service, share the hash, not the file. The $bitcoin$ line that bitcoin2john pulls out lets someone test passwords, but it can’t move your coins on its own — that still needs your wallet.dat. So you can get help finding the password without ever handing over the keys to your money.
  5. Once you’re back in, move the coins to a fresh wallet you set up yourself.

One more warning. If your Bitcoin already left the wallet — sent to the wrong address, or taken by a scammer — no one can bring it back. Blockchain transactions are final, and anyone promising to reverse one or “trace and retrieve” your coins is lying. Password recovery only works when the coins are still in a wallet you own and you’ve just lost the way in.

Still can’t get in?

If your guesses and the tools came up short, Crypto Recovers can help — 200+ wallets recovered since 2019, No Cure No Pay, so no fee unless you get access back. And you stay in control: you move the funds yourself and pay the 20% on the spot — we never touch your coins.

I forgot my Bitcoin Core wallet password — how can I recover or crack it?

Treat it as a search, not a guess. Write down every fragment you might have used — base words, numbers, where the capital and symbols usually go — then test a short list directly in Bitcoin Core’s Debug Console with the walletpassphrase command. If that runs out, feed your pattern to a tool like BTCRecover, which tries variations for you. Your odds come down to how much you remember; a password with no hints at all is far harder.

Is there any way to recover my Bitcoin Core wallet without the password?

Not in the way most people hope. Bitcoin Core has no seed phrase and no backdoor — the password is the only key to the encrypted wallet.dat, and there’s no reset path around it. The one exception is if you exported a private key or kept an unencrypted backup before setting the password. Otherwise, recovery means finding the password itself, which is realistic only when you remember something about it.

My wallet loads and shows the balance, but I can’t send because of the forgotten password — what now?

That balance is public blockchain data, so Bitcoin Core can display it without the password. Spending is different: moving coins needs the private keys inside wallet.dat, and those stay encrypted until the passphrase unlocks them. So you’re in a normal password-recovery situation, not a separate problem. Build a list of likely passwords, test them in the Debug Console, then move to a tool like BTCRecover if the short list fails.

Lost my Bitcoin Core password after a PC crash or reinstall — is professional recovery possible?

Often, yes — as long as the wallet.dat file survived the crash or reinstall. A serious service copies the file and runs offline GPU tools against your remembered pattern on air-gapped machines, on No Cure No Pay, so there’s no fee unless you get access back. Watch for the opposite: anyone demanding payment upfront, guaranteeing results, or asking for your seed phrase is a scam. Legitimate fees are success-based — ours is 20%, negotiable, and you move your own funds yourself at the handover.

Clear agreements before work begins. Before recovery work begins, both parties sign a service agreement setting out the assignment, fees, responsibilities, confidentiality and data handling. At your request, an NDA can also be signed before confidential details about your case are discussed.

Non-custodial wallet access recovery. Your wallet remains yours. We do not hold, manage or transfer your crypto-assets on your behalf. After a successful recovery, you move your funds to a new wallet yourself and pay the agreed success fee separately.

Robbert

Robbert Bink

Founder & CEO

Robbert Bink is the founder and a wallet recovery specialist at Crypto Recovers. He has more than 15 years of experience in programming and IT and has specialized in crypto wallet access recovery since 2019. Through Crypto Recovers, he helps rightful owners securely and efficiently regain access to inaccessible wallets.

Other Blogs by Crypto Recovers