Bitcoin Forum

Hi,
I know my wallet ID at blockchain.com
I have my main password correctly.
I have access to my email address. and I have access to my mobile number. and have access to google Google Authenticator set at my wallet.
my problem is I have lost my secondary password used for withdrawal. also I have 8 of 12 word Wallet Recovery Phrases. I have been noted my phrases at a small note book and 4 other word have been noted at the next page and my baby has torn it and then lost.
Is there anywat I can have access to my wallet again? I have some bitcoin and some etherium inside it. I can say the approximate amount of bitcoin and etherium in my wallet and the date I have bought them.
Thanks

Missing 4 words is not much, could be brute-forced. Do you know the address?

Not good news for you. Have you tried to contact with their support? Maybe they can help you to recover the password.

They will definitely have a way to recover this.

I just created a new wallet on blockchain. It didn't ask me to set a secondary password. I also checked the security section and couldn't find anything related to secondary password.
So, I guess you have an old wallet created before their upgrade. If so, read the following topic. It may help you.

To those who lost their Blockchain.info Secondary Password.. (https://bitcointalk.org/index.php?topic=1885397.0)

So you are able to login to your Blockchain.com wallet, but you can't spend or withdraw any of your coins? Correct me if I'm wrong.

Assuming that your partial seed phrase is for your bitcoin balance, and not for ethereum, the best solution is to use the seedrecover.py script from btcrecover (https://github.com/3rdIteration/btcrecover/) to guess the last 4 words of your seed phrase. Since you have the list of addresses in your wallet, you can supply them to seedrecover.py along with the words of your seed phrase to speed up searching, with detailed instructions at https://github.com/3rdIteration/btcrecover/blob/master/docs/Seedrecover_Quick_Start_Guide.md

You can also get your xpub (master public key) from Blockchain.com and supply that to seedrecover.py to help it guess the rest of the words in your seed phrase. In fact xpub is preferred over giving it your addresses so if you have your xpub, then just give it that, and it won't ask for your addresses.

I am pretty sure you will be able to recover your funds by following what @NotATether said. Just make sure you are downloading files from the original and trusted source. You may watch this video tutorial to see how should you work to recover your seeds first. These two tutorials would be helpful to you.
1. Recover your 12 words backup phrase with btcrecover seedrecover (https://youtu.be/XXw6dP7OPR4).
2. Brute-force your online Blockchain wallet with btcrecover. (https://youtu.be/rMtW8vIHHek)

Perhaps the scammer would send you a PM to recover your wallet. Just avoid unsolicited PMs to avoid loss of your funds. If anyone wants to help you personally, just ask them to come on this thread or you may ask here is someone sends you a PM. So we can see if the person is trusted or scammer.

What kind of address do you mean?

---

Yes and this is their reply:
Hello,

Unfortunately we are unable to help recover or reset passwords. This is not a matter of policy. This is due to the very way the file encryption is designed. Please try every possible password combination you may have used.

If you backed up your wallet via the 12 word recovery phrase, then you can recover your funds here - https://login.blockchain.com/#/recover. If the Continue button is inactive, then the recovery phrase submitted is inaccurate. Please be aware any funds or addresses stored within the Imported Addresses section of the wallet will not be restored.

If you do not have the correct password or an accurate recovery phrase, then access to the wallet and any funds it may contain has been lost.

---

Yes I have created my account at Nov 29, 2017. I have the welcome email.
I checked this topic but I could not find any jason file in my emails.

---

Sorry I can not login. after I enter my main password the site asks for the secondary password:
https://i.ibb.co/19C55pv/blockchain.png

[moderator's note: consecutive posts merged]

They definitely do NOT have a way to recover this... In fact, they warned users that there was no way to recover/reset this password when a user would set it up:
https://talkimg.com/images/2023/11/15/zfTj2.png


They even state that they cannot reset your main password either:
https://talkimg.com/images/2023/11/15/zftDc.png


That is very strange... I have "second password" enabled (as per the screenshot above), but I'm not prompted to enter it when I login ???

Anyway, your best shot at recovery is using the seedrecovery python script that is part of btcrecover as mentioned by NotATether.


You will need to know at least one of the addresses that was generated by your Blockchain.com wallet (preferably one of the first 5-10 addresses that you used)... seedrecover needs this so it can check each valid seed mnemonic combination that it generates is the correct one by checking to see if it generates the same addresses that were in your wallet

Yes,
you should take a look at this: https://github.com/gurnec/btcrecover/blob/master/docs/Seedrecover_Quick_Start_Guide.md

It is strange that you cannot log in at all...

I think you should get as much as possible from their Support, maybe at least they will tell you addresses...
It is interesting how you should proof that you are the owner of the account, probably it depends on how far did you go with their KYC procedure.

This is a very strange setup. Giving an option the user to reset any password via their email is more logical. In fact that's how it works. I think blockchain.com just need to shut down and on the homepage they should have a message like this:

/s

Okay so I tried searching a solution from their Support and found out that there is nothing they can do for missing words on passphrases.
Check their answer here: https://support.blockchain.com/hc/en-us/articles/211205343-I-forgot-my-password-What-can-you-do-to-help-

The only way is to keep on guessing or do some brute forcing applications. Just make sure you are using legit applications and not those which contains malwares and viruses.
Here is a suggestion from Youtuber Bitcoin Daytrader: https://www.youtube.com/watch?v=d1Y6TPGzVn0&t=9s
I have used Hashcat a few months ago but did not work for me when I was trying to bruteforce a wallet for solving puzzles.

Sending messages go the support for help in this kind of situation is useless because theres nothing they can do about it from their end and you're the one that need to help yourself by writing in paper all previous password and the password you think you may have used as the secondary password or used the seedrecover.py script gave to you before.


Thats because the OP has tried to access the account so many time.

The truth of the matter is, you can't get your password back or make withdrawals from that wallet anymore. That's why they always warn to write down your secondary password and even take a step further to verify if you did by asking you to write it down. It's a step to ensure tight security and avoid the case of missing funds and we accusing them of tempering with our wallets.
Let's just hope what you've got in that wallet isn't huge because, it is as well lost.

Wrong, read about these guys, they recovered a wallet with second pass from 2015... Even Dave Bitcoin failed


https://medium.com/@keychainx/how-to-make-70x-profit-on-bitcoin-6c38961b710e

The article mentions downloading the wallet backup file, but not how they did this...

I'd be interested to know how they went about actually getting hold of the wallet.aes.json wallet backup file, as the old methods don't seem like they work anymore. So, unless you happen to already have the file included in an old email, it would seem that you're out of luck. :-\

I'm also having trouble with my blockchain account specifically the second password. When I logged in on my phone today after about a month to try send some funds it asks you first for the second password which it didn't used to do. It was always the last thing before you finally sent the funds. However, when I put the password in it says incorrect password which it isn't and I'm 100% sure of that. All my funds are still there. I wonder if this is just an error with the updated app as the layout has changed a bit??? I think I've only ever been asked to input the second password once upon log on years ago when they changed their system up. It made me a bit worried but everything was fine. Anyone know whats up with this??? I'll try log onto my desktop wallet when I'm back on a safe computer and see if it's the same.

I've been using it for years and only really use it as a wallet on the go so don't have much in there. It was workign fine last month.

Sounds like you were using the old Blockchain.com UI. The instructions at To those who lost their Blockchain.info Secondary Password.. (https://bitcointalk.org/index.php?topic=1885397.0) say that Blockchain sent their users a wallet.aes.json file in an email attachment that needs to be imported to regain access to your funds. This link was also posted somewhere above this thread.

Apparently the secondary passwords were deleted during the update:

I checked and it still needs the second password and I have lost it. perhaps it is removed for new users.

Thanks. It's weird that they wouldn't notify users of this. I'm not sure I have my json file though. I have my back up phrase. Is that enough??? I searched my emails for the json file and nothing comes up and searching them for 'blockchain' the earliest message I have from them is the 'welcome to my wallet' one but it doesn't include the json file. I don't believe I have deleted any mails. I checked another older account/email for a different wallet there and it seems I have the json on that one which is in a separate email that came straight after the welcome message, but that's no use to me as there's no coins in that one.

Just to make sure of which version of their wallet you have, how many words does it contain? and do they match what's on this word list https://github.com/bitcoin/bips/blob/master/bip-0039/english.txt?

You can recover it here, https://login.blockchain.com/#/recover.

I never use Blockchain.co web wallet for how many months after I heard several issues towards them, they are very buggy web wallet sites and it seems most common issues are not getting email verification.

Due to this topic, I tried to open my account and it was successfully log in. I used my wallet ID and input my password, I quickly received the email verification on my Gmail address and there's nothing any issues.

As I read, email verification usually arrives at 5 minutes more or less.
https://support.blockchain.com/hc/en-us/articles/360000937726-I-am-not-receiving-my-authorization-email

Afaik, the Blockchain wallet doesn't support the recovery for the old wallets which have opened before 2017. The new interface and recovery options are good for the new users but the old Blockchain wallet users complain about the limited support on social media pages of this company. The backup phrase is enough to recover the whole wallet in third-party software if it is a source for creating the wallet seed. If someone has done this before, enlightening this will be better.

Are you using the Blockchain mobile app on your phone? Or are you logging in via a browser to the website?

I tried using the mobile app and got asked for my 2nd password, and it worked "OK"... logging in via the browser does not, it just makes me do the email link authorisation thing, and then opens the wallet.


Maybe try using your browser if the app is causing problems. ???

I can really help you in this matter 100% if you still have that problem. I have already posted a post regarding this very thing. Please click my profile and look for the post  and tell me if you fall in this category.