Recovery tool can find the password?
Take note that if you ever used that tool to decrypt your wallet.aes.json file (
after recovering the password),
the private keys in the output will be in plain BASE58 format which doesn't have any network code, flag and checksum.
In other words, it's not readily compatible with most Bitcoin wallets.
It has to be encoded into WIF private key to be compatible.
The advantage though is you wont have to rely on their website and everything can be done offline where its safe.
There's no limit on how many tries so start with it using your mentioned 1~20 possible passwords.