Recovering private keys from a wallet.dat file

[Hayesey]

Hi, I am a complete noob with this stuff. The wallet will not load into the client as it says it is corrupted, can someone walk me through the steps I need to do to recover the private keys from the .dat file that I can see still has information on the file. I need to do this myself because I cannot remember if I pass worded the wallet before I accidentally deleted it which is why it is corrupt and will not load.

Any help would be greatly appreciated and please run me through the steps like I am a five year old.

Thank you.

[mcdouglasx]

Hi, I am a complete noob with this stuff. The wallet will not load into the client as it says it is corrupted, can someone walk me through the steps I need to do to recover the private keys from the .dat file that I can see still has information on the file. I need to do this myself because I cannot remember if I pass worded the wallet before I accidentally deleted it which is why it is corrupt and will not load.

Any help would be greatly appreciated and please run me through the steps like I am a five year old.

Thank you.

First of all, make a copy of your wallet.dat and try to recover it from the copy, to avoid making the situation worse.

apparently you need to use pywallet, you should read this topic https://bitcointalk.org/index.php?topic=5161349.0

Maybe you can easily recover it with pywallet, or maybe not.
It all depends on the health of your wallet, whether it is encrypted or not.
Therefore, you should read a lot about the subject, because there is no easy way that guarantees your success.

[Hayesey]

Thank you I will read the link and see what I can find 

[Hayesey]

I have tried to download python (Pywallet) from GitHub but when i try and run it, it instantly crashes on itself and shuts down. I have even tried to run it as administrator. Is it possible to use java? I am using windows 10 pro. Someone please guide me.

[Cricktor]

You should provide more details and possibly also some error messages, warnings shown or screenshots.

Which Python version did you install from where?
How did you try to execute Pywallet, maybe be more specific what you entered on the command-line?

If you want to post screenshots, upload them on talkimg.com and post the BBcode here. Because you're a newbie your pictures won't be immediatelly visible but higher ranked users can cite your pictures and then they'll show up.

BBcode for embedded images look like this: [img]https://URL_link_to_your_picture[/img]

[ABCbits]

I have tried to download python (Pywallet) from GitHub but when i try and run it, it instantly crashes on itself and shuts down. I have even tried to run it as administrator. Is it possible to use java? I am using windows 10 pro. Someone please guide me.

I think that's not the case. If you simply double-click .py file, it'll print message on CMD and quit immidiately. You should try open CMD, cd to path where pywallet is located and run this command.

Code:

python3 pywallet.py

[RickDeckard]

I have tried to download python (Pywallet) from GitHub but when i try and run it, it instantly crashes on itself and shuts down. I have even tried to run it as administrator. Is it possible to use java? I am using windows 10 pro. Someone please guide me.

I think that's not the case. If you simply double-click .py file, it'll print message on CMD and quit immidiately. You should try open CMD, cd to path where pywallet is located and run this command.

Code:

python3 pywallet.py

OP: If you do not know how to cd to the path, you can just type cmd in the address bar within the folder that holds "pywallet.py", and CMD will open with the correct path. From there just run the command that ABCbits mentioned and it will run as expected.

[Hayesey]

I have tried to download python (Pywallet) from GitHub but when i try and run it, it instantly crashes on itself and shuts down. I have even tried to run it as administrator. Is it possible to use java? I am using windows 10 pro. Someone please guide me.

I think that's not the case. If you simply double-click .py file, it'll print message on CMD and quit immediately. You should try open CMD, cd to path where pywallet is located and run this command.

Code:

python3 pywallet.py

This is the message I get on command prompt Downloads>python3 pywallet.py
Python was not found; run without arguments to install from the Microsoft Store, or disable this shortcut from Settings > Manage App Execution Aliases

Yes that's exactly what was happening when  double-click .py file, it'll print message on CMD and quit immediately.
I presume I'm not using the commands correctly to get pywallet in my downloads folder because as you can see I'm a numpty with them.

I have tried to download python (Pywallet) from GitHub but when i try and run it, it instantly crashes on itself and shuts down. I have even tried to run it as administrator. Is it possible to use java? I am using windows 10 pro. Someone please guide me.

I think that's not the case. If you simply double-click .py file, it'll print message on CMD and quit immidiately. You should try open CMD, cd to path where pywallet is located and run this command.

Code:

python3 pywallet.py

OP: If you do not know how to cd to the path, you can just type cmd in the address bar within the folder that holds "pywallet.py", and CMD will open with the correct path. From there just run the command that ABCbits mentioned and it will run as expected.

There isn't a folder with pywallet.py in it, it is in my downloads as pywallet and if I type cmd in the address bar in my downloads nothing happens. Sorry I'm obviously being stupid.

[moderator's note: consecutive posts merged]

[mcdouglasx]

Code:

python3 pywallet.py

This is the message I get on command prompt Downloads>python3 pywallet.py
Python was not found; run without arguments to install from the Microsoft Store, or disable this shortcut from Settings > Manage App Execution Aliases

Yes that's exactly what was happening when  double-click .py file, it'll print message on CMD and quit immediately.
I presume I'm not using the commands correctly to get pywallet in my downloads folder because as you can see I'm a numpty with them.

know it's a silly question, but have you installed Python? I'm not sure which version of PyWallet you downloaded, but it used to require Python 2.7, and the command was something like this:

Code:

python pywallet.py --dumpwallet --datadir=

or

Code:

python pywallet.py --recover --recov_device=key --recov_size=1000 --recov_outputdir=./recovered --datadir=./wallet

[Hayesey]

Code:

python3 pywallet.py

This is the message I get on command prompt Downloads>python3 pywallet.py
Python was not found; run without arguments to install from the Microsoft Store, or disable this shortcut from Settings > Manage App Execution Aliases

Yes that's exactly what was happening when  double-click .py file, it'll print message on CMD and quit immediately.
I presume I'm not using the commands correctly to get pywallet in my downloads folder because as you can see I'm a numpty with them.

know it's a silly question, but have you installed Python? I'm not sure which version of PyWallet you downloaded, but it used to require Python 2.7, and the command was something like this:

Code:

python pywallet.py --dumpwallet --datadir=

or

Code:

python pywallet.py --recover --recov_device=key --recov_size=1000 --recov_outputdir=./recovered --datadir=./wallet

I have downloaded from this link https://github.com/jackjack-jj/pywallet/blob/master/pywallet.py  and it is currently in my downloads folder as pywallet as far as installing it, it keeps going off the second i double click on it.

[nc50lc]

There isn't a folder with pywallet.py in it, it is in my downloads as pywallet and if I type cmd in the address bar in my downloads nothing happens. Sorry I'm obviously being stupid.

You're using Windows 10, right? Its 'Windows Explorer' hides extensions by default so you're seeing "pywallet" instead of "pywallet.py"
Google search "how to view file name extension" if you want to see extensions like ".py".

It should be executed in your command line plus it requires Python v2.x (v2.7.8 works) to work.
Since you're using Windows10, use "PowerShell".

After you successfully installed python and you can run: python -V command to show its version and to test if it's installed correctly;
You can run pywallet by holding SHIFT then right-click on an empty space (not on any file) in your 'downloads' folder (where 'pywallet.py' is located) and select "Open PowerShell window here" in the expanded right-click menu.
Then a PowerShell window will open with the working directory automatically set to your downloads folder (you should see the path after PS..., the correct path is important)

Then it's about using the correct command, e.g. (for testing functionality):

Code:

python pywallet.py --tests

As for the command to dump privKeys, refer to others' replies.

--edit--
Changed simple commands during test.

[Hayesey]

I can now see the extensions.

Yes I am using windows10. I downloaded python from your link and when I type in the command in PowerShell  > python -s
Python was not found; run without arguments to install from the Microsoft Store, or disable this shortcut from Settings > Manage App Execution Aliases.

I chose to download Windows x86-64 MSI installer and went through the instillation. I can also open python.exe so not sure why i am getting that answer.
I also ran the command python pywallet.py --tests in powershell by shift and right clicking and so fourth where i had "pywallet.py" downloaded and got this answer
Python was not found; run without arguments to install from the Microsoft Store, or disable this shortcut from Settings > Manage App Execution Aliases.
Maybe because my python is not installed correctly

[nc50lc]

-snip-
Maybe because my python is not installed correctly

AFAIK, there's an option during installation that enables it to be called in the command line via "py" or "python", ticked by default in the newer versions.
But since you've mentioned that installed it already, you can start it with "python.exe" by manually pointing to its absolute path.

Example, if python.exe is in "C:\python27" you use the command:

Code:

C:/python27/python.exe -V

Don't forget to change the path above (C:/python27/...) to where you installed python 2.7.

[Hayesey]

So  PS C:\Python27> C:/python27/python.exe -V
      Python 2.7.18

Does that mean it is all good now because it shows what version of python I am using. That is on windows PowerShell when i hold shift and right click on  This PC  local disk C  Python 27.

[nc50lc]

So  PS C:\Python27> C:/python27/python.exe -V
      Python 2.7.18

Does that mean it is all good now because it shows what version of python I am using. That is on windows PowerShell when i hold shift and right click on  This PC  local disk C  Python 27.

That works since it returned with its version, although you don't have to change directory to where python.exe is since you've indicated its absolute path already.

In that case, the ideal setup is to copy-paste "pywallet.py" and your wallet files to "C:\Python27",
Open PowerShell, cd to "C:\Python27" (or the "SHIFT-Right click" menu) so you can enter your preferred commands without indicating any path.

Once everything is inside "C:\Python27", do this to use pywallet:

• Open PowerShell inside "C:\Python27" with the SHIFT-RightClick method, PowerShell should start with PS C:\Python27
• Check pywallet with the command:  ./python.exe pywallet.py -h
• If command line options are displayed, it should work with the command instructed to you by others.

And the command to dump private keys based from that setup is:

Code:

./python.exe pywallet.py --passphrase="YOUR_WALLET'S_PASSPHRASE" -w "YOUR_WALLET.DAT" -d > 111dump01.txt

You can keep the quotation marks if your passphrase or wallet.dat's name have blankspace.
If successful, you wont see any error and PowerShell will create another line, a file named "111dump01.txt" (you can name this to your preference) will be created inside "C:\Python27" containing your wallet's contents.
Your WIF private keys should be the "sec:" under every address.

The thing is, your wallet.dat files are corrupted so this might not work
Your next option is to use --recover to instruct pywallet to manually search for private keys from a partition which is slightly harder than dumpwallet.

[Hayesey]

So I have copy and pasted pywallet into C:\Python27
When I typed in the command   ./python.exe pywallet.py -h   
It came out with   
C:\Python27\python.exe: can't open file 'pywallet.py': [Errno 2] No such file or directory

not sure why it says No such file or directory, maybe I'm being stupid?

[nc50lc]

C:\Python27\python.exe: can't open file 'pywallet.py': [Errno 2] No such file or directory

That error is literal; it can't find "pywallet.py" in your working directory: "C:\Python27".

In Windows Explorer, search manually inside "C:\Python27" if you can actually see the copied "pywallet.py" file in there.
The file's name should be exactly what you typed.
Check if you've accidentally renamed it into "pywallet.py.py" because of the previous hidden file name extension. (View->Show->File Name Extensions)

Don't forget to copy the corrupted wallet files as well.

It's worth noting that you should do that on an offline PC since you don't know if your Windows10 PC is safe from malware and virus.
Don't connect it online even for a second until you successfully spent your bitcoins with a good number of confirmations.

[Hayesey]

Okay so silly me had a (1) in the middle so I changed that to just pywallet.py and yeah this came up when I retyped the command. I'm guessing this is where I will need my corrupted file in my C python 27 and run the command you sent in an earlier post. Also where will I place the command in all this text.

PS C:\Python27> ./python.exe pywallet.py -h
WARNING:root:pycrypto or libssl not found, decryption may be slow
Usage: pywallet.py [options]

Options:
  --version             show program's version number and exit
  -h, --help            show this help message and exit
  --dump_bip32=DUMP_BIP32
                        dump the keys from a xpriv and a path, usage:
                        --dump_bip32 xprv9s21ZrQH143K m/0H/1-2/2H/2-4
  --bip32_format=BIP32_FORMAT
                        format of dumped bip32 keys
  --passphrase=PASSPHRASE
                        passphrase for the encrypted wallet
  --find_address=FIND_ADDRESS
                        find info about an address
  -d, --dumpwallet      dump wallet in json format
  --dumpformat=DUMPFORMAT
                        choose what to extract in a wallet dump
  --dumpwithbalance     includes balance of each address in the json dump,
                        takes about 2 minutes per 100 addresses
  --importprivkey=KEY   import private key from vanitygen
  --importhex           DEPRECATED, useless
  --datadir=DATADIR     REMOVED OPTION: put full path in the --wallet option
  -w WALLETFILE, --wallet=WALLETFILE
                        wallet filename (defaults to wallet.dat)
  --label=LABEL         label shown in the adress book (defaults to '')
  --testnet             use testnet subdirectory and address type
  --namecoin            use namecoin address type
  --eth                 use ethereum address type
  --otherversion=OTHERVERSION
                        use other network address type, either P2PKH prefix
                        only (e.g. 111) or full network info as
                        'name,p2pkh,p2sh,wif,segwithrp' (e.g. btc,0,0,0x80,bc)
  --info                display pubkey, privkey (both depending on the
                        network) and hexkey
  --reserve             import as a reserve key, i.e. it won't show in the
                        adress book
  --multidelete=MULTIDELETE
                        deletes data in your wallet, according to the file
                        provided
  --balance=KEY_BALANCE
                        prints balance of KEY_BALANCE
  --recover             recover your deleted keys, use with recov_size and
                        recov_device
  --recov_device=RECOV_DEVICE
                        device to read (e.g. /dev/sda1 or E: or a file)
  --recov_size=RECOV_SIZE
                        number of bytes to read (e.g. 20Mo or 50Gio)
  --recov_outputdir=RECOV_OUTPUTDIR
                        output directory where the recovered wallet will be
                        put
  --clone_watchonly_from=CLONE_WATCHONLY_FROM
                        path of the original wallet
  --clone_watchonly_to=CLONE_WATCHONLY_TO
                        path of the resulting watch-only wallet
  --dont_check_walletversion
                        don't check if wallet version > 81000 before running
                        (WARNING: this may break your wallet, be sure you know
                        what you do)
  --random_key          print info of a randomly generated private key
  --whitepaper          write the Bitcoin whitepaper using bitcoin-cli or
                        blockchain.info
  --minimal_encrypted_copy
                        write a copy of an encrypted wallet with only an empty
                        address, *should* be safe to share when needing help
                        bruteforcing the password
  --tests               run tests

[nc50lc]

I'm guessing this is where I will need my corrupted file in my C python 27 and run the command you sent in an earlier post. Also where will I place the command in all this text.

Those texts are just the result of pywallet's --help arg,
You can still enter another command as long as you can see the "PS C:\Python27> |" with a blinking text cursor.

You can either ignore those and type the command in the next line just like how you entered the help command.
Or type and enter clear to remove all previous text in your current PowerShell window or open another PowerShell window with "C:\Python27" as your working directory.

[Hayesey]

So I have put my wallet.dat file into C Python27 and ran the command in Windowspowershell replacing the passphrase with mine ands the name of my wallet.dat file and it came out with
ERROR:root:Couldn't open wallet.dat/main. Try quitting Bitcoin and running this again.
I didn't have anything to do with bitcoin open. Does this mean I have to do the other method as it is corrupted.