CustodyStress
Archive › Passphrase unavailable
Part of the CustodyStress archive of observed Bitcoin custody incidents
CS-00962

Passphrase unavailable — software wallet (2021)

Blocked
Case description
The widely-reported case of Stefan Thomas, a Bitcoin developer with 7,002 BTC on an IronKey encrypted drive, reached public attention in January 2021. Thomas confirmed he had two password attempts remaining before the drive's encryption would permanently destroy the contents. He had entered the password incorrectly eight times. Multiple security firms offered assistance but none successfully recovered the drive.
Custody context
Stress conditionPassphrase unavailable
Custody systemMobile or software wallet
OutcomeBlocked
DocumentationUnknown
Year observed2021
CountryUnited States
Structural dependencies observed
Single point of failure
What this illustrates
The seed phrase was there, but the passphrase that unlocked it was gone. Both are required. Access was not recoverable.
Outcome interpretation
Access was not possible under the reported conditions.
Source
Publicly Reported
Evidence type
News article
Related cases involving passphrase unavailable
217 cases involve passphrase unavailable 572 cases involve mobile or software wallet View archive statistics →
This archive documents observed custody survivability failures. It does not attempt to document all Bitcoin losses or security incidents. Submit a case
← All cases
Framework references
Terms guide
Survives
Access remained possible under the reported conditions.
Constrained
Access remained possible, but only with delay, dependence, or significant difficulty.
Blocked
Access was not possible under the reported conditions.
Indeterminate
There was not enough information to determine the outcome.
Single-person knowledge
Recovery depended on information or capability held by one individual who was unavailable.
Institutional dependence
Recovery depended on a third-party institution or service that was inaccessible or uncooperative.
Documentation gap
Recovery depended on instructions that were missing, incomplete, or unclear.
Authority mismatch
The person with legal authority to act did not have operational access, or vice versa.
Original text
Rate this translation
Your feedback will be used to help improve Google Translate