Brute force a blockchain.com wallet

[zoltanb]

Hello, I have a client who has some Bitcoin on a blockchain.com wallet but he can not login.
He knows his wallet id and knows a set of characters (8-12 as he remember) he usually use for password. What is the best way to help him brute force his wallet?

Any advise is appreciated. Thank you.

[1714043047]

1714043047

[1714043047]

1714043047

[1714043047]

1714043047

[1714043047]

1714043047

[Oshosondy]

Did he remember his seed phrase? 12 to 24 words the wallet generated for him when he first opened the wallet. He can just import the seed phrase on electrum wallet. He will be able to recover back his bitcoin.

If he has no electrum wallet installed, he can visit electrum.org to download it.

[zoltanb]

No, he doesn't remember the seed phrase, he did not write it down. So, the only way is probably the brute force.

Did he remember his seed phrase? 12 to 24 words the wallet generated for him when he first opened the wallet. He can just import the seed phrase on electrum wallet. He will be able to recover back his bitcoin.

If he has no electrum wallet installed, he can visit electrum.org to download it.

[nc50lc]

No, he doesn't remember the seed phrase, he did not write it down. So, the only way is probably the brute force.

He can't bruteforce it without the wallet.aes.json file.
You can try to contact blockchain's support to request for the encrypted wallet file that's stored in their server; best use the email associated with that account.

His wallet identifier (WalletID) might be requested by the support as well.

[TheBeardedBaby]

A guy contacted the blockchain support about an account with only aliasId without a registered email and they reply that it's possible to help t Then you should get in contact with the their support and they will solve your case as well.

[keychainX]

Hello, I have a client who has some Bitcoin on a blockchain.com wallet but he can not login.
He knows his wallet id and knows a set of characters (8-12 as he remember) he usually use for password. What is the best way to help him brute force his wallet?

Any advise is appreciated. Thank you.

Check our blog how to recover


https://keychainx.medium.com/recover-blockchain-com-password-df21cbebac6

If you need help just wink

/KX

[Theb]

A guy contacted the blockchain support about an account with only aliasId without a registered email and they reply that it's possible to help t Then you should get in contact with the their support and they will solve your case as well.

His case is different though as the guy from that thread already has his alias and password on zoltanb's client he has forgotten his password and his only option is to use brute force to know it. Also based on what I have read the support team of blockchain.com can't do anything with your account if you have forgotten your password so I think his best option right now is for him to just brute force it starting from the passwords he remembers using and variations near it.

I forgot my password. What can you do to help?

Unfortunately, we're unable to help you regain access to your wallet if you've lost or forgotten your password. This is because we don't have access to your wallet or your wallet password. You can read more about how our wallet works here. If you are getting the error message "Error decrypting wallet" when attempting to log in, then this means the password you're using is incorrect.

[bob123]

~snip~
If you need help just wink

/KX

OP, if you decide to use a recovery service, i would recommend to only use Dave's recovery service.
He is the most trusted one in this community. For years.

If would be pretty risky to use any other service.

And some people also make very contradicting statements quite often which lets me question their technical expertise (e.g. the person quoted above).
So, don't trust anyone blindly just because they summarized a few commands in their blog.

[FNT]

Hi zoltanb,

have you made a copy of wallet? just "play" with copies of wallets.
did you already managed to get the hash of the wallet file?

Bye

PS: If it's not clear, don't send any wallet.dat files to anybody, just use the hash, to be on safe side!

[adaseb]

The issue with Blockchain wallet id is that its a 3rd party setup and if you try and brute force on their server they will ban you. So you need to get your encrypted wallet from blockchain.com support. Hopefully they will get back to you and send it over.

If he remembers 80% of the characters then it shouldn't be too difficult. Even if its random symbol and numbers/letters with lower/upper case. However if he completely forgot his password and its not in the english dictionary then it will be extremely difficult and time consuming to crack.

[sheenshane]

I didn't understand why OP mentioned brute force in his wallet seems he had a wallet ID and the 12 words seed and assume also that he has the email address associated with that account.  If you had all of this information, it is easy to access your wallet without having brute force which is impossible to work with, and I'm afraid that you might get into trouble waiting for a response from their support since they had a horrible contact service which you need a patient.

Reaching out to them and just be patient with the response is the only way you can do now, isn't recommended for me to brute force your Blockchain wallet.

[nc50lc]

I didn't understand why OP mentioned brute force in his wallet seems he had a wallet ID and the 12 words seed -snip-

He doesn't have the 12-word recovery phrase, all he mentioned in the OP is a 8-12 possible characters of the password.

Plus he posted this:

No, he doesn't remember the seed phrase, he did not write it down. So, the only way is probably the brute force.

[BayAreaCoins]

A guy contacted the blockchain support about an account with only aliasId without a registered email and they reply that it's possible to help t Then you should get in contact with the their support and they will solve your case as well.

Blockchain support is trash af.

[The Cryptovator]

A guy contacted the blockchain support about an account with only aliasId without a registered email and they reply that it's possible to help t Then you should get in contact with the their support and they will solve your case as well

That's quite impossible IMO. Blockchain doesn't have a password recovery option. You mentioned a different case where the victim has a password, so there is a possibility to get help from the blockchain. Also, their support system is quite the worst.

If OP has access to email where he would receive his wallet file, then it's possible to brute force the password. Since your friend remembers a part of the password, so it would be more easier to recover. OP, please let us know if you have access to your email address.

[crypto-recovery]

This thread has several suggestions to contact Blockchain's customer support -- we've worked with a lot of folks that have lost their Blockchain passwords, and I've never had a client that managed to get a useful response from these support folks. Patience is not a virtue in this case.

Plus -- you can get your wallet.aes.json file without going through support.  Install the 3rd iteration of btcrecover (https://github.com/3rdIteration/btcrecover).  Among other things, that will install a script called:

extract-scripts/download-blockchain-wallet.py

When you execute that script it will prompt you for your wallet id. 

Enter your wallet id

If you have confirmed your email address on Blockchain.info / Blockchain.com, you'll get a message that says: "Authorization Required. Please check your email."

(If you didn't confirm your email address then you won't need to jump through this hoop)

Check your email, approve the authorization request.  (You won't need your password for this step -- they're just verifying that you have control of the email address)

Now you'll see a message that says: "Wallet file saved as wallet.aes.json"

That's your wallet backup -- it's an encrypted version of your private key.  It can only be decrypted with the correct password.  Now, you can start testing password variations using btcrecover or hashcat.

[BitMaxz]

Alternatively from the crypto-recovery posted above, you can also get your wallet.aes.json as a text by following the guide below

Try to get your wallet.aes.json by pasting your walletID to this URL:

Code:

https://blockchain.info/wallet/WALLET_ID?format=json

Replace "WALLET_ID" with your Wallet ID, do not change anything like the punctuation marks.
If you didn't set 2FA, the URL will display your wallet.aes.json in txt format (if you have 2fa, use the method below).

With it, create a "wallet.aes.json" file and paste the text using a txt editor, then decrypt it using decryption tools.
This one should work: https://github.com/blockchain/my-wallet-backup-decryption-tool/releases
But the private key from the result isn't WIF (Wallet Import Format), it's in base58 form.

If you successfully decrypted the wallet file, you can convert the base58 private keys into WIF by using base58 decoder and then convert the result ECDSA PrvKey into WIF (compressed) to be able to import/sweep it to other wallets.
Another method to get your wallet.aes.json file is to use btcrecover's extract-script: download-blockchain-wallet.py from https://github.com/gurnec/btcrecover/tree/master/extract-scripts

nc50lc didn't mention it here so I quoted his old post.

I don't know if this will work on a new or HD account but worth trying. Once you get the wallet.aes.json your last step is to decrypt the wallet to get the private key.

[crypto-recovery]

>https://blockchain.info/wallet/WALLET_ID?format=json
BitMarx, that's a great suggestion!  I've never seen that before.

I tested it with one of my Blockchain accounts that has 2FA enabled, and I got an error that said: "initial_error":"Authorization Required. Please check your email."

I then promptly received an authorization email and approved the "login" attempt -- but, still was not able to access a text version of the wallet.aes.json file.  (I just got the same error message repeatedly).

Then, I created a new Blockchain.com account, did not confirm my email address and did not set 2FA.  When I used the URL you mentioned, I was able to get a text version of the wallet.aes.json file!  Wheewho!

However, I then confirmed my email, and once I did that (even though I hadn't set 2FA) I was no longer able to get the wallet.aes.json file.

My guess is that this is pretty old functionality, and that it perhaps predates Blockchain.info requesting that people confirm their email addresses?  (That's just a guess).

 >This one should work: https://github.com/blockchain/my-wallet-backup-decryption-tool/releases
I haven't used this tool or looked at the source code -- but, this is not a common suggestion for cracking blockchain wallets.  The two most common tools are the 3rd iteration of btcrecover (definitely don't use the first version, it gives false negatives on some wallet versions) and hashcat.

[nc50lc]

Alternatively from the crypto-recovery posted above, you can also get your wallet.aes.json as a text by following the guide below

-snip-

nc50lc didn't mention it here so I quoted his old post.

That's because this thread is older than the quoted post.
Also, the decryption tool is for users who know their wallet's password, it can't bruteforce passwords.
The OP in that thread knows his password and got his old mnemonic (only login backup) but cannot login to blockchain.com due to inaccessible email.
It probably didn't worked because of crypto-recovery's tests above.

>This one should work: https://github.com/blockchain/my-wallet-backup-decryption-tool/releases
I haven't used this tool or looked at the source code -- but, this is not a common suggestion for cracking blockchain wallets. -snip-

That's their official wallet decryption tool.
It's quite outdated but still works at that post's timestamp (but it isn't a "cracking tool"), I haven't tested it after they added native SegWit to users' wallets though.