Updated · Technical content and source links reviewed.
Blockchain password recovery depends on the wallet format and the material you still have. A legacy encrypted backup, a current recovery phrase and a custodial account login require different approaches.
First identify the access problem
- Self-custody recovery phrase: the correct phrase may restore the accounts it covers through a compatible wallet.
- Encrypted
wallet.aes.jsonbackup: the main password is needed to decrypt it, unless a valid alternate key backup is available. - Second password: some older wallets add another encryption layer for private keys.
- Account email or two-factor authentication: use Blockchain.com’s official support process for that access issue. Account access and decrypting self-custody keys are separate tasks.
Imported addresses may require their own private-key backups; Blockchain.com explicitly notes that its recovery phrase does not back up imported addresses.
How a password search works
Keep a copy of the original encrypted backup. A recovery tool tests candidate passwords against the correct wallet format and validates a candidate before any funds are moved. Useful clues narrow the search: likely length, remembered components, language, capitalization and keyboard layout. More computing power cannot make every password practical to recover.
BTCRecover is a command-line Python project. Its documentation describes wallet-specific inputs and password candidate lists; it does not have the generic “Import” button described in older versions of this article. Follow the project documentation and verify the source of any download.
Why generic SHA-256 instructions are incorrect
A Blockchain wallet backup is not simply a raw SHA-256 password hash. Hashcat’s mode 1400 is not a general Blockchain wallet recovery mode, and its attack mode 0 is a wordlist attack, not an exhaustive brute-force search. Use the official supported-hash reference to match an identified wallet format. Do not choose an algorithm from the filename alone.
Main password versus second password
Recovering the outer password may still leave private keys protected by a second password. Preserve both the original file and information about how it was created. A valid outer decryption is an intermediate result, not proof that the wallet can sign transactions.
What if only a Wallet ID or email remains?
Use the official service to locate your account and check available recovery options. Do not assume an old browser-network extraction procedure still works, and never give someone access to your email merely because they claim they can recover a wallet. Without keys, an applicable phrase, a usable encrypted backup or a signing device, a public address cannot recreate private keys.
For format identification and missing-balance checks, see the Blockchain wallet recovery guide.
Request a recovery assessment
Start with your wallet type, backup filenames and a description of the problem. Do not send passwords, seed phrases or private keys in your first message. Contact Wallet Recovery Service. Our fee is 20% of funds recovered; no recovery, no fee.