"Invalid token" error when accessing legacy blockchain.info (now .com) wallets

[invalidtoken]

Thanks for the update.

When you say identifier, do you mean wallet id? Or some other information?

Yes, wallet ID.

[yZmXd0bADM0EORhVhVCs]

I can confirm that I had this same issue and indeed the root cause was that there was no e-mail address attached to the account.

The customer service was able to solve the issue but it took a lot of messaging with them back and forth before they did.

[Shaybbbbb]

Hi
I opened here an account in this site to answer this message!

I also get the same problem, when i try to login to my account it tells me invalid token, i am going crazy! When i opened the account in blockchain i didnt give them no email, nothing

I have juat my wallet i.d and my password, i even lost and forgot the 12 words they told me to remmember

I talked with the support, many times until they stopped to answer me anymore and all they told me is "if you cant tell us your email that is connected to your blockchain account we cant help you


And i messaged them so many times back that i didnt give them any email, nothing, when i opened my account, and they insaist to tell me that without my email they cant help me



What to do ?? I really go crazy, all of my money is in this blockchain account i am so frastrated, i tild them this, i told them that i cry all day long, and they dont help

[nubert]

maybe this helps someone in the future

hit the same issue (wallet without email, invalid token on failed migration after login, useless support)

what seems to work is to use this url to get the wallet info (save it to wallet.json)

https://blockchain.info/wallet/UUID?format=json

(where UUID is your wallet id)

then use btcrecover to decrypt private keys

./btcrecover.py --wallet wallet.json --correct-wallet-password YOURPASSWORD --dump-privkeys keys.txt

private keys are in keys.txt, create new wallet in electrum, use option to import private keys

let me know if it worked

[Shaybbbbb]

Unfortunately it Didn't work, as I started to try to do what you told me and tried to enter this site :

https://blockchain.info/wallet/UUID?format=json

and I pot my wallet i.d instead the letters UUID as you said , and i just got a white window with letters and number and Nothing that can help me , it didnt enter me to the site of blockchain , it shows me this : (also it shows letters and numbers when i try to enter the link you sent me without replacing between UUID with my wallet i.d)

{"initial_error":"For Improved security add an email address to your account.","extra_seed":"c2e28f3f6e1886053f386c1fb024a19eecb0e0144aad2ee32cec56045a3f998655fcdcc0fea7389 055414202ee4855b51f8a5d097b64026954d9991c17a61c10","auth_type":0,"real_auth_type":0,"payload":"{\"payload\":\"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\",\"pbkdf2_iterations\":5000,\"version\":4}","symbol_local":{"symbol":"$","code":"USD","symbolAppearsAfter":false,"name":"U.S. dollar","local":true,"conversion":0},"guid":"ed682dde-4d55-41ed-67ad-bcb8507ee973","payload_checksum":"8e3a536ef4d989e0a737f981112bcb919b4d1d0a301d6ccdb190217dcf3f396e","war_checksum":"705948bd199da68a","language":"en","symbol_btc":{"symbol":"BTC","code":"BTC","symbolAppearsAfter":true,"name":"Bitcoin","local":false,"conversion":100000000.00000000},"sync_pubkeys":false}

[nc50lc]

and I pot my wallet i.d instead the letters UUID as you said , and i just got a white window with letters and number and Nothing that can help me , it didnt enter me to the site of blockchain , it shows me this : (also it shows letters and numbers when i try to enter the link you sent me without replacing between UUID with my wallet i.d)

I'm surprised that the instructions above still works on wallets without associated email, that method is old BTW.
Anyways, your wallet.aes.json should be the payload part of that result.

Just snip the line starting from: {\"payload\":\"Wp3y...
to: ...GsoA==\",\"pbkdf2_iterations\":5000,\"version\":4}
Then save it as "wallet.aes.json", make sure to display "common file name extensions" since your OS may be keeping that ".txt" extension if you've used a text file to save it.

[yse]

I can also confirm that my legacy wallet id was giving "invalid token" error due to lack of associated e-mail. Same as above I provided customer support with the wallet ID, approximate creation date and the new e-mail address and my wallet is now accessible. For what it's worth my identity was also "verified"

[Igor Domingo]

I just ran into this issue with an old wallet, but getting Blockchain to add the email address has been difficult.

I provided all kinds of verification information, but now they're requesting I send a selfie holding my ID along with a piece of paper containing handwritten details, including my full name, address, and date of birth.

This is all on an account where I already have the valid wallet ID and password.

Aside from the privacy concerns, I'm miffed that I received no notification that these changes were coming. They could have at least advised me on my last login that I was about to lose access to my funds, giving me the chance to change providers. Now they're holding my money hostage until I give up all this personal info.

Does anyone have suggestions on how to deal with this?

[nc50lc]

Does anyone have suggestions on how to deal with this?

Since you said that yours isn't associated with an email, it shouldn't ask for email verification on login?
Or do you mean that you want to link another email to replace the original?

If the former, then try the last mentioned method by Shaybbbbb to get the payload (that wont work if the account needs email verification).
If the latter (not applicable to your case) you would need to follow this to export your payload (wallet.aes.json) but it requires email verification to work: /index.php?topic=5549745.msg65591943#msg65591943

Then as a summary of the next steps: export the private keys using their wallet decryption tool, convert those to WIF and import them to Electrum.
But if you have funds outside your DeFi wallet, I'm afraid that you'll need to comply with their request since it's in their custody.

In any case, I'd recommend you to post a new topic regarding the result since it's quite off topic to this thread.
Posts about the decryption can be posted here in this board, while if it's exclusively for their mobile/web client, post it in "Web Wallets" board.

[Igor Domingo]

Since you said that yours isn't associated with an email, it shouldn't ask for email verification on login?
Or do you mean that you want to link another email to replace the original?

There was no original email, because it wasn't required at the time I created the wallet. Now their system is simply throwing up an error on login for all accounts that don't have an associated email address. I don't even get to the point of them asking for verification. I just get "invalid token".

I tried contacting Blockchain, exactly as the first users in this thread suggested, but they are asking me for much more information than they requested of those users, which is where my doubt comes in.

Thanks for the detailed instructions, but I'm afraid that's all way beyond my knowledge. I will post another topic though.

[nc50lc]

Thanks for the detailed instructions, but I'm afraid that's all way beyond my knowledge. I will post another topic though.

The first option is rather simple though.
Simply replace "UUID" with your walletID in the sample Blockchain URL in that post to get your wallet's payload.
e.g.:

Code:

https://blockchain.info/wallet/12345678-abcd-1234-4321-0123456789abc?format=json

Then copy the payload's value as instructed above and paste it on a text file, rename it into "wallet.aes.json".

Mention that in you new topic, if successful, you'll only need instructions to decrypt it which is very easy if you know the password.

[Keijdn399]

I successfully restored my wallet, which didn't have an email address linked to it. If anyone needs help, I can help.
Once you have received the payload json string, you need to convert it to the correct format using another script, and then get the private keys using btcrecover

python btcrecover.py --wallet wallet.aes.json --dump-wallet wallet_decrypted.txt --correct-wallet-password PASSWORD

Starting btcrecover 1.13.0-Cryptoguide on Python 3.12.3 64-bit, 21-bit unicodes, 64-bit ints

Dumping Wallet File or Keys...

Wallet successfully dumped...

 

This method only works if you have a valid Wallet ID and password, but the email has not been linked and you get an invalid token error when log-in.

[Cricktor]

..., you need to convert it to the correct format using another script, ...

Thanks for reporting you had success. What "another script" are you talking about (link, sources) besides btcrecover?

[Keijdn399]

To properly format the payload string, I used this script

fix_wallet.py

import json, pathlib

# read the source file
raw = pathlib.Path("wallet.aes.json").read_text(encoding="utf-8").strip()

# first json.loads will turn the string into a normal JSON string
data = json.loads(raw)

# if after that it's still a string, try again
if isinstance(data, str):
    data = json.loads(data)

# now data should be a dict with keys: pbkdf2_iterations, version, payload
if not isinstance(data, dict):
    raise TypeError("Expected dict, got %s" % type(data))

path_out = pathlib.Path("wallet.aes.fixed.json")
path_out.write_text(json.dumps(data, ensure_ascii=False, separators=(",", ":")), encoding="utf-8")
print("File saved as", path_out)
print("Top-level keys:", list(data.keys()))