Wallet Provider and 2FA lock my wallet - need help

[Reddix25]

Hi my friends

I signed up at greenaddress.it and used there my wallet and I locked it with only a confirmation E-mail

The E-mail provider went offline without saying anythink (they just need to change the redirect of my email) -

results is that my greenadress confirmation email goes to the Nirvana and I can not see it

sadly i need it to send / recive anything on my wallet - also the settings

the wallet provider greenaddress say that they can't to anything - and the email provider is OFFLINE and not accessible anymore (former secure-mail.biz)

I have my mmemorical passphrase login and can login to my account as usual

Anyone have an idea?

[TryNinja]

So, you were using your email as 2FA to confirm the transactions?

What exactly was GreenAddress' answer when you contacted them? They had a page[1] saying they could reset your 2FA if you still had access to your mnemonic seed, but that was almost 3 years ago.

[1] https://blog.greenaddress.it/2018/03/26/two-factor-authentication-recovery/

[Reddix25]

I wrote with them at that time, and they only said that they can not help me in this case...

I mean I have the passphrases, cant I just import them to another wallet providet or dump my wallet with the keys?

[xenon131]

Hi my friends

I signed up at greenaddress.it and used there my wallet and I locked it with only a confirmation E-mail

The E-mail provider went offline without saying anythink (they just need to change the redirect of my email) -

results is that my greenadress confirmation email goes to the Nirvana and I can not see it

sadly i need it to send / recive anything on my wallet - also the settings

the wallet provider greenaddress say that they can't to anything - and the email provider is OFFLINE and not accessible anymore (former secure-mail.biz)

I have my mmemorical passphrase login and can login to my account as usual

Anyone have an idea?

 the details of Greenadress,

[bob123]

I mean I have the passphrases, cant I just import them to another wallet providet or dump my wallet with the keys?

It depends.

From their FAQ:

If your coins are in a 2of2 account then you will need to recover your authentication - we cannot disable it in this or any other case. Alternately, if you had enabled nLocktime transactions then you can use them to recover your coins after the nLocktime expires (90 days by default).

If you transferred your coins to a 2of3 account then you can move them without two-factor authentication since you have 2 of the 3 required signatures. If not, then unless you can recover your authorization we cannot help you.

If you have a "2of2 account", both signatures are required. Therefore you need the 2FA to actually have your transaction co-signed.
If you have a "2of3 account", your mnemonic code is enough to recover your funds in any wallet.

Do you know which of these you were using?
You can always try by importing your mnemonic code into any BIP39 compatible wallet (e.g. electrum).

[Reddix25]

I got a 2of3 wallet with a few subaccounts in it but I also tried to send btc out from the subwallets but it asked for email again...I tried to login again now...and it dont work this time....do you have a PM to help me on this?

I ve got Electrum but i think i imported wrong...I dont see anythink in electrum

[bob123]

I ve got Electrum but i think i imported wrong...I dont see anythink in electrum

Were you able to restore from the mnemonic code in such a way that you were shown a "wallet" with addresses, and an (empty) transaction history?
If this is the case, can you then confirm that these addresses start with the same letter as your "old" addresses where you send funds to?

If not, the issue might already be found.
When restoring from the mnemonic code, choose BIP39 (which you probably already did) and choose the correct script type according to the first char(s) of your address:

• "P2PKH" to restore addresses starting with 1..
• "P2WPKH-P2SH" to restore addresses starting with 3..
• "P2WPKH" to restore addresses starting with bc1..

If on the other hand you have already chosen the correct script type, can you verify that electrum is connected? Do you see a green circle in the bottom right corner?

Further, since you are talking about multiple "subaccounts", you might need to change the derivation path when restoring from the mnemonic.
This means, when restoring and choosing the script type (see above), you might need to change the derivation path by increasing the last digit:
For native segwit (p2wpkh), this would be: m/84'/0'/1' instead of m/84'/0'/0' for example. Depending on the amount of "subaccounts you might want to increase it a few times until you have found the correct path.


In short:
Please check that electrum is connected.
Afterwards check with what char the addresses should start with (by looking at your old transactions or addresses) and choose the correct script type.
As the last step, increase the last digit of the derivation path.


P.s. Be careful with people PM'ing you.
Try to keep it as public as possible and don't give away any sensitive information.

[HCP]

I get the feeling that attempting to recover these 2-of-3 "sub-accounts" is going to be extremely difficult without access to the 2FA email...

I've just tried creating a new "GreenAddress" wallet... it gave me an initial mnemonic (used to login??!?). However, when I create a "2-of-3 subaccount"... it displays this:


With an additional mnemonic specific to that subaccount, and an xpub.


Looking at the recovery process for "2-of-3 accounts: https://blog.greenaddress.it/2of3recovery/

The options are:

1. A (most likely non-functioning) custom Electrum plugin
or
2. Their "garecovery" tool: https://github.com/greenaddress/garecovery, which requires Ubuntu and a full Bitcoin Core node

You also need to have:

1. Your "main" Green Address recovery mnemonic
2. The "subaccount" recovery mnemonic
3. The "subaccount" xpub (as per the screenshot above)


@Reddix25, do you have all 3 of those things?

[Reddix25]

I have the mmem for main and sub accounts but not the xpub address...

I dont want to make something wrong so I write all steps here so you see

I open Electrum and choose a new wallet :

- Standart wallet
- wallet with two factor authorization
- multi signature wallet
- import btc adress and private key

what should I pick?

[LoyceV]

what should I pick?

You need to click the multisig wallet, but there's no point as long as you don't have the xpub.

Did you ever send a transaction from that wallet? If I understand correctly, you may be able to get what you need from an old transaction, but I'm not sure and I've never attempted this.

[Reddix25]

thats not good....

and where I can find the xpub ?

greenwallet released a post on how to recover btc addresses...

[HCP]

I'm not sure if that xpub is shown anywhere other than on the screen when you originally setup the account... You could try and contact GreenAddress and ask them, as technically, it is "their" xpub...

The 2-of-3 multsig accounts are constructed from:

- Your main account seed
- Your subaccount seed
- GreenAddresses' XPUB

Theoretically, they should have a record of that xpub, as they're the ones who hold the xprv (master private key) and/or seed that the XPUB is generated from.

[Reddix25]

Isnt here anyone skilled to help me for 100-200euro to get my wallet to another one ?

[LoyceV]

the wallet provider greenaddress say that they can't to anything

You're not the first they don't want to help, see GreenAddress blacklisted my wallet, and now holds custodial control of it.

[1] https://blog.greenaddress.it/2018/03/26/two-factor-authentication-recovery/

From this link:

Once you are logged in to the wallet, you can request a two factor reset from the settings menu. You must provide an email address for use as recovery two factor authentication and upon which we can contact you in case of any issue throughout the grace period.  Note that this applies even if you already have an email setup in the wallet. The email address can be an anonymous email account if you wish, but you must ensure it is one that is secure and readable only by you. If you lose access to the email you use for recovery, you risk having to restart the 2FA reset process from scratch.
~snip~
Once the grace period expires without dispute, the recovery email you provided will become your wallet’s email two factor authentication method. At this point you can access your coins as you normally would.

Have you tried this?

(former secure-mail.biz)

Any idea what happened to them? Maybe they'll let you buy the domain. It expires 2 years from now.
Namecheap allows to make an offer (I've never tried this paid service).

This is why I don't like 2FA, and don't use custodial wallets for any serious amounts.

[HCP]

This is why I don't like 2FA, and don't use custodial wallets for any serious amounts.

Not technically a "custodial" wallet tho... it's a somewhat complicated multisig with some "timelock" stuff thrown in for good measure...

The real issue is that they don't really place enough emphasis on the wallet recovery procedure and the information you absolutely must retain etc... how many users would realise that you need to make permanent records of the other parties XPUB for wallet recover?

Added to this, it is a rather technical process to actually recover the wallet should you need to.

Granted the "security" that the wallet offers is quite good... possibly too good as it would appear in this case