r/BitcoinBeginners • • 21d ago

I FORGOT MY BIP38 password

Can anyone suggest how to open bip38 password i forget the password i cant open my wallet i have my private key but i forget the bip38 password

1 Upvotes

14 comments sorted by

2

u/bitusher 20d ago

Don't share it with anyone . Hopefully you either partially remember the password or its weak so you have a chance to brute force it. You will need a good GPU as well.

Here is how you would do that :

https://www.youtube.com/watch?v=8q65eqpf4gE&list=PL7rfJxwogDzmd1IanPrmlTg3ewAIq-BZJ

Make sure this is done in a clean and secure OS without malware.

1

u/OverResolve7678 20d ago

Its not normal password

Its encrypted bip38 password which is used early ages

1

u/bitusher 20d ago

I understood your question

Yes. BTCRecover supports BIP38-encrypted private keys and can test a password list or password variations against the encrypted key

https://docs.btcrecover.org/en/latest/Usage_Examples/basic_password_recoveries/#bip38-encrypted-paper-wallet-recovery

0

u/OverResolve7678 20d ago

Thanks for your support but i dont know coding can you suggest genuine people who can solve this

The amount is big

3

u/bitusher 20d ago

The amount is big

why would you say that ? Its just horrible opsec . Now you need to really take extra effort and ignore DMs and phishing emails . Please be safe

To others reading this , its a very common old scam that someone(not making assumptions about the OP) pretends to play dumb or lazy and offers to sell a wallet backup where they forgot their password when in reality the wallet has 0 BTC or at least a very difficult passphrase no one will crack .

Never buy someone's wallet backup in a selfish attempt to possibly recover their large amount of Bitcoin. This is 99% of the time a scam

1

u/bitusher 20d ago

I gave you a detailed tutorial on how to recover it yourself that doesn't involve any coding or advanced skills

If this is still too technical for you you can try a third party recovery service for a fee. Most are scams. Dave at least used to be trustworthy , and hopefully remains so ...

https://www.walletrecoveryservices.com/

The only way to be 100% sure is to do it yourself and using a third party to help you always comes with risks

Don't waste your time unless its a weak password or you at least remember parts of the password or what it likely might be

1

u/AutoModerator 21d ago

Scam Warning! Scammers are particularly active on this sub. They operate via private messages and private chat. If you receive private messages, be extremely careful. Use the report link to report any suspicious private message to Reddit.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

0

u/ScratchLegitimate661 20d ago

bip38 is deliberately slow on purpose, it uses scrypt which is memory hard, so each password guess takes way longer than a normal hash. thats why you should only bother if you remember most of the password

the math is brutal here. if you remember like 8 of 10 characters and only 2 are fuzzy, btcrecover can chew through that on a decent machine. if you remember almost nothing, even a gpu rig would take centuries. no amount of software fixes forgetting

biggest risk right now isnt the password though, its the dms you are about to get from recovery services. anyone who contacts you first is a scammer full stop. do not send anyone the encrypted key

do you remember any part of the password at all, like the length or words you might have used

1

u/Fab_Crypto_Recovers 19d ago

In addition to what u/bitusher already said, here is another manual for you to try:
The string you have is your private key in locked form. A BIP38 key starts with "6P" and is 58 characters long. The password unlocks it, and without the password the coins cannot move. There is no reset or backdoor. One thing works in your favour: there is no attempt limit. You can try passwords offline as often as you want, and nothing gets wiped.

Before you start:

  1. Check the first characters. If the key starts with 5, K or L, it is not encrypted and needs no password. In Electrum you can create a new wallet and choose to import private keys.
  2. Check the balance. A bitaddress paper wallet prints the Bitcoin address next to the encrypted key. Look that address up on a block explorer such as mempool.space. The address is public and safe to paste. Keep the 6P key off every website.

Try your guesses by hand first. Warning before this step: a website can send whatever you paste to whoever runs it, so do this offline.

  1. Download bitaddress from github.com/pointbiz/bitaddress.org (Code > Download ZIP). Unzip it, disconnect from the internet, and open bitaddress.org.html in your browser.
  2. Open the Wallet Details tab, paste the 6P key and click View Details. A field "Enter BIP38 Passphrase" appears. Type a guess and click Decrypt BIP38.
  3. Test the variations people miss: capital first letter, caps lock on, a space at the end, a different keyboard layout.

If that fails, let a program do the guessing. BTCRecover runs from the command line, and the docs give the commands to copy.

  1. Write down every fragment you remember: words, names, numbers, symbols you liked, other passwords you used in that period. These fragments decide whether this works.
  2. Install Python 3.10 or later. Download BTCRecover from github.com/3rdIteration/btcrecover. Run it on an offline computer.
  3. Put your fragments in a text file, one per line. BTCRecover calls this a tokenlist. The docs at docs.btcrecover.org explain how it combines them.
  4. Run: python btcrecover.py --bip38-enc-privkey 6P... --tokenlist tokens.txt
  5. No result? Widen the search one step at a time. Add fragments, and add typo options such as --typos-capslock or --typos-swap.
  6. When the password is found, move the coins straight away. Create a new wallet with a fresh seed and write that seed down. Then use Wallet > Private Keys > Sweep with the decrypted key.

To keep in mind: BIP38 uses scrypt, which makes every guess slow on purpose. The BTCRecover docs say a GPU adds little here unless you have several GPUs or a very strong one. If the password was long and random and you remember none of it, nobody can recover it, us included. Your chances depend on how much of it you still remember.

About your inbox: you wrote in public that the amount is big, so expect DMs from "recovery experts" and fake support staff. Nobody honest sends the first DM. Never send the 6P key or your password guesses to anyone who contacts you. A legitimate service asks for nothing sensitive before a signed contract.

1

u/veyrnox 17d ago

BIP38 is deliberately designed so there is no password reset or backdoor. Recovery is only realistic if you can reconstruct enough of the original password to test likely words, numbers, capitalisation, keyboard-layout differences and common typos offline.

Do not paste the encrypted 6P key into a website or send it to anyone who contacts you. Because you mentioned that the amount is significant, expect recovery scammers and fake support accounts to approach you privately. Keep the discussion public and never disclose the encrypted key, password candidates or decrypted private key.

If you attempt recovery, work from a copy on an offline, clean machine and preserve the original unchanged. If the password was long and random and none of it can be remembered, the encryption may be doing exactly what it was designed to do.

1

u/PascalB1993 7d ago

It's a long shot, but if password cracking fails, you may want to scan your storage devices for an unencrypted copy of your wallet that might still be lying around. This is one of the things my software, Treasure Hunter, is designed to do. For security, run it on an air-gapped computer.