1

I'm trying to check in on some BTC I stored in a blockchain.info wallet 4 years ago (12/2013). I can log into my account just fine, but the wallet with my coins still needs a private key. I've got a couple .aes.json files, but I haven't found any way to import them (best I found was something called "wallet-key-tool" that might work, but none of the passwords I tried did anything - could be bad password but could also be bad software).

I've also got a piece of paper with two sets of words: one with 29 words and one with 13. I'm pretty sure these are related to the blockchain.info wallet, but I can't find any reference to this sort of recovery phrase (everything seems to want 12 words these days).

Finally, the last option would be to do a mini brute-force attack on the key. I'm reasonably sure I could narrow the password options down to a few thousand - are there any command-line tools that can attempt to decrypt an .aes.json file and recognize when it worked or not?

2
  • 1
    I adapted gist.github.com/fcicq/3368495 to read from a file with a hundred thousand possible passwords. Turns out the wallet was double-encrypted, but this at least took care of the first layer, and then wallet-key-tool took me the rest of the way. Hooray!
    – Steve
    Jun 11, 2017 at 7:25
  • Hey Steve, congrats! This sounds like it could be useful to other people trying to recover their wallets. Could you please post your comment as an answer?
    – Murch
    Jun 22, 2017 at 7:08

1 Answer 1

2

I ended up adapting gist.github.com/fcicq/3368495 to read from a file with a hundred thousand possible passwords (which I generated by permuting the inputs I was pretty sure I used to generate it in the first place).

It turns out that the wallet was double-encrypted, but this at least took care of the first layer, and then wallet-key-tool took me the rest of the way, by trying a few passwords by hand (once I found out the first password, the second was easier to guess/recall).

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.