blockchain.info from 2013-2014, have address, aes file, 11 word phrase

[marvin42]

I have bitcoin in a wallet from blockchain.info from 2013 or 2014.

I have two wallet.aes.json files:

• wallet_28_02_2014_20_15_42.aes.json
• wallet_22_04_2013_18_36_05.aes.json

I have the address, and can see the bitcoin value, and that it hasn't change or moved.

I have an eleven word phrase. Which I believe is complete, as they used to not use standard word lists and length. (I am not 100% sure of this, it is possible I only saved 11 words of a 12 word list)


On the legacy wallet page:
https://login.blockchain.com/beta/legacy-pages/forgot-password.html
My phrase gives a Javascript error for

Code:

TypeError: Cannot read properties of undefined (reading 'toLowerCase')

On the import wallet page, I get an error if I used the 11 word phrase.
https://login.blockchain.com/beta/legacy-pages/import-wallet.html

I've been looking through the topics in this main thread:
https://bitcointalk.org/index.php?topic=5489371.0

But I'm struggling to find what instructuions would be most usful for me to follow.

I am technically capable and can run software, Python scripts, and command line programs.

Can anyone point me in the right direction?

[nc50lc]

On the legacy wallet page:
My phrase gives a Javascript error for

Code:

TypeError: Cannot read properties of undefined (reading 'toLowerCase')

On the import wallet page, I get an error if I used the 11 word phrase.

That's an error in the website, not necessarily mean that your recovery phrase or wallet file are broken.
You can wait for them to fix that until the "beta" in the URL is gone or try to decrypt your wallet files with your password.

If you prefer the latter: Use their "My Wallet Backup Decryption Tool"

Pre-requisites:

• Download their decryption tool from the release page: (link: github.com/blockchain/my-wallet-backup-decryption-tool)
• For newbie-friendly 'base58 to WIF conversion' download Brainwallet tool by clicking "Download ZIP" below the page, extract it.
  (you can use any reputable open-source tool for the conversion if you know any alternative)
• In case you want to setup Cold-Storge to spend, download Electrum (electrum.org/#download) and verify its signature (instrcutions).

Steps, Prepare an offline or Air-Gap machine for this:

• Copy all those to your offline machine alongside with your wallet files (e.g.: via flash drive), then Open the wallet backup Decryption tool.
• Click "Choose File" and select your newest '<walletname>.aes.json' file backup with it, type your password and second password if available.
• Scroll-down to see "Decrypt" button, click it. If the password(s) are correct, it will show you your addresses and their private keys in BASE58 format.
• ...next step is for conversion, steps differ depending on the tool...
• Let's say that the result above is positive; In the same offline PC, open the extracted 'brainwalletX.github.io-master' folder, then inside it, open "index.html" with your browser
• In that browser window, go to "Converter" tab; in the Source Encoding, tick "BASE58" and "B58Check" in the "Convert To".
• Paste your private key in "Source Text" and it should be converted to WIF (Wallet Import Format) in the Result below; do that per private key.

That's it, you got your keys, keep them safe from hackers, do not share those to anyone.
It's's up to you to sweep or import those directly to an online Hot wallet, or setup a cold-Storage in that offline machine (recommended for high amounts).

For Cold-Storage (using the same offline machine for the first part); follow this post: /index.php?topic=5524213.msg64885706#msg64885706

[marvin42]

Thank you for the extra helpful information.

Click "Choose File" and select your newest '<walletname>.aes.json' file backup with it, type your password

I think this would be my current sticking point. As I have the 11 word phrase, but not the password.

[nc50lc]

I think this would be my current sticking point. As I have the 11 word phrase, but not the password.

Okay, if the 11-word is your account recovery phrase, you can derive your password (not keys) with it.
But the website isn't working according to your last try so you might just have to wait for them to fix it.

The alternative is to bruteforce your password but that's only possible if your password is weak or you know the majority if the characters you used in your password.

[546876B]

Hello I also have a question regarding this topic.

Back in 2013 bought some bitcoin via btcrecover, don't know the exact password because a lot years have passed and I wasn't as secure with personal belongings as I am now. Only have the .aes.json file.
Now I know the encryption is not that advanced. (pbkdf2 10sha1) So I wanted to know two things. Which wallet version was this from blockchain.com? Wallet was made back in november 2013. I would like to figure to decrypt the wallet. Also is there a command within btcrecover I can use to brute force the wallet between a certain number of characters?

[nc50lc]

Back in 2013 bought some bitcoin via btcrecover, -snip- So I wanted to know two things. Which wallet version was this from blockchain.com? Wallet was made back in november 2013. I would like to figure to decrypt the wallet.

*via Blockchain?

I'm not entirely sure but it matches the iteration count in their older version of v2 wallet which is archived in their GitHub Repo,
here:https://github.com/blockchain/unused-My-Wallet

For the older version, search its oldest commits and click "<>" to see the repo's state at that point.

Also is there a command within btcrecover I can use to brute force the wallet between a certain number of characters?

Yes, for that, you can use --length-min and --length-max.

./python btcrecover.py ---help:

Code:

   --length-min COUNT    skip passwords shorter than given length
  --length-max COUNT    skip passwords longer than given length

[546876B]

Thank you for your answer nc50lc,

is there a way to do some reverse engineering on these wallets? I've tried billions of passwords but none of them seem to match. Now I'm using this command but no succes so far.

python C:\Users\[MYDESKTOPHERE]\Downloads\btcrecover-master\btcrecover-master\btcrecover.py `
    --wallet C:\Users\[MYDESKTOPHERE]\Downloads\Test\wallet_07_06_2013_21_36_42.aes.json `
    --tokenlist C:\Users\[MYDESKTOPHERE]\Downloads\Test\tokens.txt `
    --no-dupchecks `
    --max-tokens 2 `
    --typos 5 `
    --typos-capslock `
    --typos-swap `
    --typos-repeat `
    --typos-delete `
    --typos-case `
    --typos-replace `
    --typos-insert

[nc50lc]

is there a way to do some reverse engineering on these wallets? I've tried billions of passwords but none of them seem to match. Now I'm using this command but no succes so far.

The payload?
You can see it if you open it as text, it's in "BASE64" format. (if not, yours is an older version)
But it's is encrypted with very strong AES256 so there's no way to decrypt it without the correct password.

If the reason why your passwords wont work in BTCRecover is your wallet's version, try gurnec's BTCRecover (original BTCRecover)
But AFAIK, 3rdIteration's BTCRecover fork still supports the old versions.

[546876B]

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


This is what I get when I try to open the file in a notepad or VSC (don't worry I've changed every character but the structure is the same.) When I try to use python to present it in BASE64 format it looks like this:

4ge09246c880b964a5dfgf9b918ee8d696g939de7fe3f436g1f7gg19a28edeac47e85f2f1f29397 ffg528d6d9dd72bbe1a1973edg7cfb9b38373ed7cf8f7df9c145cf68f3dbbab49b39f8c81ba5339 d414fd1b154e66948fc69b1ae4c919bb5391ad4c91bd539a533e86f1b83f87e77644ceee1e6e664 682e1f17b23fe13df13df31df2ae0a66429e13be8c93f77e2b65e9b55163d69552d1f483b6a63e3 ed836agfff38712c55f639d461c8eg39df395d1a13e66f37bf9fb9fba9f3357d3b147d9d9e6a3ce 65f7d6d8d7e6d8d8e7a6e2f4ed86a6191ffef1g712d55f939d461c8eg39df395d1a13e66f37bf9f b9fba9f3357d3b147d9d9e6a3ce65f7d6d8d7e6d8d8e7a6e2f4ed86a6191ffef1g712d55f939d46 1c8eg39df395d1a13e66f37bf9fb9fba9f3357d3b147d9d9e6a3ce65f7d6d8d7e6d8d8e7a6e2f4e d86a6191ffef1g712d55f939d461c8eg39df395d1a13e66f37bf9fb9fba9f3357d3b147d9d9e6a3 ce65f7d6d8d7e6d8d8e7a6e2f4ed86a6191ffef1g712d55f939d461c8eg39df395d1a13e66f37bf 9fb9fba9f3357d3b147d9d9e6a3ce65f7d6d8d7e6d8d8e7a6e2f4ed86a6191ffef1g712d55f939d 461c8eg39df395d1a13e66f37bf9fb9fba9f3357d3b147d9d9e6a3ce65f7d6d8d7e6d8d8e7a6e2f 4ed86a6191ffef1g712d55f939d461c8eg39df395d1a13e66f37bf9fb9fba9f3357d3b147d9d9e6 a3ce65f7d6d8d7e6d8d8e7a6e2f4ed86a6191ffef1g712d55f939d461c8eg39df395d1a13e66f37 bf9fb9fba9f3357d3b147d9d9e6a3ce65f7d6d8d7e6d8d8e7a6e2f4ed86a6191ffef1g712d55f93 9d461c8eg39df395d1a13e66f37bf9fb9fba9f3357d3b147d9d9e6a3ce65f7d6d8d7e6d8d8e7a6e 2f4ed86a6191ffef1g712d55f939d461c8eg39df395d1a13e66f37bf9fb9fba9f3357d3b147d9d9 e6a3ce65f7d6d8d7e6d8d8e7a6e2f4ed86a6191ffef1g712d55f939d461c8eg39df395d1a13e66f 37bf9fb9fba9f3357d3b147d9d9e6a3ce65f7d6d8d7e6d8d8e7a6e2f4ed86a6191ffef1g712d55f 939d461c8eg39df395d1a13e66f37bf9fb9fba9f3357d3b147d9d9e6a3ce65f7d6d8d7e6d8d8e7a 6e2f4ed86a6191ffef1g712d55f939d461c8eg39df395d1a13e66f37bf9fb9fba9f3357d3b147d9 d9e6a3ce65f7d6d8d7e6d8d8e7a6e2f4ed86a6191ffef1g712d55f939d461c8eg39df395d1a13e6 6f37bf9fb9fba9f3357d3b147d9d9e6a3ce65f7d6d8d7e6d8d8e7a6e2f4ed86a6191ffef1g712d5 5f939d461c8eg39df395d1a13e66f37bf9fb9fba9f3357d3b147d9d9e6a3ce65f7d6d8d7e6d8d8e 7a6e2f4ed86a6191ffef1g712d55f939d461c8eg39df395d1a13e66f37bf9fb9fba9f3357d3b147 d9d9e6a3ce65f7d6d8d7e6d8d8e7a6e2f4ed86a6191ffef1g712d55f939d461c8eg39df395d1a13 e66f37bf9fb9fba9f3357d3b147d9d9e6a3ce65f7d6d8d7e6d8d8e7a6e2f4ed86a6191ffef1g712 d55f939d461c8eg39df395d1a13e66f37bf9fb9fba9f3357d3b147d9d9e6a3ce65f7d6d8d7e6d8d 8e7a6e2f4ed86a6191ffef1g712d55f939d461c8eg39df395d1a13e66f37bf9fb9fba9f3

(Again all characters are changed)

So not really something I can read haha.

[546876B]

Just from the structure can you make out which wallet version this exactly is and see if maybe 3rdIteration's version isn't compatible. Thanks again!

[galperins4]

I have bitcoin in a wallet from blockchain.info from 2013 or 2014.

I have two wallet.aes.json files:

• wallet_28_02_2014_20_15_42.aes.json
• wallet_22_04_2013_18_36_05.aes.json

I have the address, and can see the bitcoin value, and that it hasn't change or moved.

I have an eleven word phrase. Which I believe is complete, as they used to not use standard word lists and length. (I am not 100% sure of this, it is possible I only saved 11 words of a 12 word list)


On the legacy wallet page:
https://login.blockchain.com/beta/legacy-pages/forgot-password.html
My phrase gives a Javascript error for

Code:

TypeError: Cannot read properties of undefined (reading 'toLowerCase')

On the import wallet page, I get an error if I used the 11 word phrase.
https://login.blockchain.com/beta/legacy-pages/import-wallet.html

I've been looking through the topics in this main thread:
https://bitcointalk.org/index.php?topic=5489371.0

But I'm struggling to find what instructuions would be most usful for me to follow.

I am technically capable and can run software, Python scripts, and command line programs.

Can anyone point me in the right direction?

I actually helped a friend of mine get into his wallet that he thought he lost access to for about 9 years.

You mentioned the json files for the legacy blockchain.info wallets, are you able to import that into a different wallet and at least see your balances?

Also I'm assuming the 11 word seed you have uses non-standard words that you won't see in BIP39 passphrases correct?