Archive › Structural patterns › Forgotten Passphrase
Part of the CustodyStress archive of observed Bitcoin custody incidents
Forgotten Passphrase
Cases where a Bitcoin wallet passphrase was forgotten. Forgotten passphrases are the most common single trigger in the archive — distinct from passphrases that were never recorded or that were recorded but lost. In these cases, the holder knew the passphrase at setup but could not recall it when needed.
The forgotten-passphrase pattern reveals a specific custody failure dynamic: the passphrase was set during onboarding — often as a required step in hardware wallet setup — and never tested or documented. Most forgotten-passphrase cases occur years after setup, when the passphrase has faded from memory and no written record exists. Password bruteforce recovery is the most commonly attempted path, with success rates that depend heavily on how much the holder remembers about their original passphrase construction.
111 cases match this pattern in the archive. Among cases with a determinate outcome, 48% resulted in permanently blocked access, 43% in recovered access, and 10% in constrained recovery. 69% of cases in this pattern involved software wallet. Hardware wallet cases account for 4% of forgotten-passphrase incidents; software wallet cases account for 69%.
57% of determinate cases resulted in blocked or constrained access.
111 observed cases
Forgotten wallet.dat Password: 13.8 BTC Locked Since 2013
Software wallet
Indeterminate
2018
On 2 March 2018, a Bitcoin holder identified as fabriciofenenga posted to the Bitcoin Technical Support forum seeking password recovery assistance for a wallet.
131 BTC Inaccessible: Forgotten Wallet Password, No Recovery Mechanism
Software wallet
Indeterminate
2018
In December 2018, a BitcoinTalk user known as 'jackang' posted a public plea for help recovering access to a wallet containing 131 BTC. The wallet had been crea
MultiBit Classic Password Lock: Recovery Through Backup Key File Import
Software wallet
Survived
2018
A BitcoinTalk user (cluuze130) deposited Bitcoin into MultiBit Classic approximately one year before attempting withdrawal in February 2018. At the time of depo
BitcoinTalk User: Encrypted Wallet.dat Passphrase Lost, Recovery Deemed Infeasible
Software wallet
Indeterminate
2018
In January 2018, a BitcoinTalk forum user identified as moztec reported an access failure involving a wallet.dat file encrypted with Bitcoin Core. The user had
Encrypted Wallet, Forgotten Passphrase: Self-Custody Encryption Without Backup
Software wallet
Indeterminate
2018
On January 14, 2018, BitcoinTalk user AsJoshScreams posted a recovery plea for an encrypted cryptocurrency wallet. The user had encrypted their private key with
MultiBit 0.5.15 Forgotten Passphrase: Desktop Wallet Access Lost
Software wallet
Indeterminate
2017
On November 3, 2017, a pseudonymous BitcoinTalk forum user identified as 'dny18' posted a help request in the MultiBit archival section, stating they had forgot
Inherited Encrypted Bitcoin Wallet from 2012: Passphrase Lost After Parent's Death
Software wallet
Indeterminate
2017
Following his mother's death in late 2017, a BitcoinTalk user (umadbro) recovered hard drives from his parent's defunct desktop computer and discovered wallet.d
Dash Core Wallet Passphrase Forgotten: Permanent Access Loss
Software wallet
Blocked
2017
In April 2017, a BitcoinTalk forum user identified as 'Ramchandra' posted describing a custody failure involving a Dash Core software wallet. The user had encry
Blockchain.info Second Password Loss: Vendor Lockout Without Recovery Mechanism
Exchange custody
Indeterminate
2017
In January 2017, forum user ericblogs reported inability to execute transactions on a Blockchain.info hosted wallet after forgetting the account's second passwo
Forgotten Bata Wallet Passphrase Recovered by Professional Service
Software wallet
Survived
2017
On August 1, 2017, a BitcoinTalk user operating under the handle InvestMeDaddy posted a recovery request after losing access to a Bata desktop cryptocurrency wa
David Vu's Blockchain.info Wallet: Trapped With 2 BTC, Secondary Password Forgotten
Exchange custody
Indeterminate
2017
David Vu discovered a critical access failure in June 2017 when he attempted to withdraw Bitcoin from his Blockchain.info wallet. He retained access to his prim
Blockchain.info Hosted Wallet Recovery Attempt: Partial Password, No Seed Backup
Exchange custody
Indeterminate
2017
In October 2017, a BitcoinTalk user identified as Parodium reported being locked out of a blockchain.info wallet created years earlier. The user retained email
Trezor PIN and Seed Words Forgotten: $30,000 Bitcoin Recovery
Hardware wallet (single key)
Survived
2017
In October 2017, a Trezor hardware wallet user discovered they had forgotten both their PIN and recovery seed words, creating a dual-layer access barrier to app
Lost Electrum Wallet Password (2 BTC) – No Recovery Path Identified
Software wallet
Indeterminate
2016
In September 2016, a BitcoinTalk forum user with username Ashkaan posted a public bounty request seeking professional assistance to recover access to an Electru
Encrypted Wallet Recovery Without Passphrase: pywallet's Hard Limit
Software wallet
Indeterminate
2016
In April 2016, BitcoinTalk user sparkybtc posted about recovering cryptocurrency from a formatted hard drive containing Bitcoin CPU-mined around 2011 and Dogeco
Blockchain.info Wallet Password Loss: No Recovery Options — February 2016
Exchange custody
Indeterminate
2016
In February 2016, a BitcoinTalk user posted on behalf of a friend who had lost the password to a Blockchain.info hosted wallet. The friend retained only an iden
Blockchain.com Wallet (2016): Partial Password Recovery Attempt, Seed Phrase Absent
Exchange custody
Blocked
2016
The subject created a Blockchain.com account in 2016 and deposited approximately 0.03 BTC (valued at roughly $20 at 2016 exchange rates of $600/BTC). Immediatel
Online Wallet Password Lost Without Seed Phrase Backup
Exchange custody
Indeterminate
2016
In November 2017, a BitcoinTalk user (mattmaxx) discovered they had lost access to an online Bitcoin wallet created approximately one year earlier on a laptop t
Blockchain.info Double Encryption Password Lost: Unrecoverable Without Key
Exchange custody
Indeterminate
2015
In February 2015, a BitcoinTalk user identified as ltcgearscammed posted seeking help after losing access to Bitcoin stored in a Blockchain.info wallet secured
Encrypted Bitcoin Core Wallet Loss: Forgotten Passphrase, Selective Key Export Failure
Software wallet
Blocked
2015
In October 2015, forum user phantitox reported recovering a wallet.dat file from a damaged hard drive, only to discover the passphrase protecting the encrypted
Forgotten Blockchain.info Password: Client-Side Encryption Locks €100 Bitcoin Permanently
Exchange custody
Blocked
2015
On September 17, 2015, a Blockchain.info user with the forum username Seporstia posted requesting help recovering access to a hosted wallet after forgetting the
Forgotten Bitcoin Core Passphrase: Third-Party Recovery Service Success — Community Skepticism
Software wallet
Constrained
2015
In July 2015, a BitcoinTalk user (bassride2) discovered that while they had meticulously backed up their Bitcoin Core wallet.dat file multiple times, they had f
Electrum Wallet Password Loss Without Seed Phrase Backup
Software wallet
Indeterminate
2015
In November 2015, a BitcoinTalk user created a password-protected Electrum software wallet for testing purposes and set a password they believed followed the pa
Forgotten Passphrase and Overwritten Wallet.dat: 0.50 BTC Permanently Lost
Software wallet
Blocked
2015
In May 2015, BitcoinTalk user grovearmada discovered they had lost access to an encrypted Bitcoin wallet containing 0.50 BTC (approximately $115–120 USD at 2015
Lost Blockchain.info iOS Wallet Password (2014) — Recovery Attempt via BTCRecover
Exchange custody
Indeterminate
2014
In December 2021, a BitcoinTalk user identified as Quix77 disclosed loss of access to a Blockchain.info wallet created in August 2014 via the iOS Blockchain app
Other structural patterns
Outcome terms
Survived
Access remained possible under the reported conditions.
Constrained
Access remained possible, but only with delay, dependence, or significant difficulty.
Blocked
Access was not possible under the reported conditions.
Indeterminate
There was not enough information to determine the outcome.
Assessment terms
Survivability
The degree to which a custody system maintains the possibility of authorized recovery under stress.
This archive documents cases where a legitimate owner, heir, or authorized party encountered barriers accessing or recovering Bitcoin due to a failure in the custody arrangement. The central question for inclusion is: did the custody structure fail a legitimate access or recovery attempt?
Inclusion requirements
A case must satisfy all three of the following to be included:
- Legitimate access attempt. The person attempting to access or recover the Bitcoin was the owner, a designated heir, an executor, a legal authority, or another party with a legitimate claim — not a thief, attacker, or unauthorized third party.
- Custody structure failure. The failure was caused by a property of the custody arrangement — missing credentials, structural dependencies, documentation gaps, knowledge concentration, legal barriers, or institutional constraints — not market conditions, individual-level fraud or theft, or protocol-level issues. Platform-level failures that block legitimate user access are in scope regardless of their cause.
- Documentable outcome or access constraint. The case must have a stated or inferable outcome: access blocked, access constrained, access delayed, or access eventually achieved through a recovery path. Cases with entirely unknown outcomes are included only where the structural failure is documented and the constraint is unambiguous.
In scope
- Owner death or incapacity — Bitcoin held in self-custody that becomes inaccessible to heirs or designated parties because credentials, documentation, or operational knowledge were not transferred
- Passphrase loss — BIP39 passphrase forgotten or unavailable, blocking access to a funded wallet even where the seed phrase is present
- Seed phrase or wallet backup unavailable — no independent recovery path existed or the backup was destroyed, lost, or never created
- Device loss without independent backup — hardware wallet, phone, or computer lost or destroyed with no recovery path outside the device
- Documentation absent or ambiguous — heirs or executors cannot determine that Bitcoin exists, which wallet holds it, or how to access it
- Knowledge concentration — only one person knew the procedure, passphrase, or access method; that person is dead, incapacitated, or unreachable
- Multisig quorum failure — a threshold signature arrangement cannot be completed because signers are unavailable, uncooperative, incapacitated, or have lost their keys
- Legal authority / access mismatch — a court order, probate ruling, or power of attorney establishes legal entitlement but provides no technical path to access
- Institutional custody barrier — exchange or platform hacks, insolvency, regulatory seizure, or operational failure that caused a access constraint or failure for legitimate users, whether temporary, prolonged, or permanent. The failure of the custodian to remain available or solvent is itself the in-scope event.
- Forced relocation or geographic constraint — physical access to a device or location required for recovery is blocked by displacement, border restrictions, or political circumstances
- Coercion — the holder was compelled under threat to transfer Bitcoin or disclose credentials during an access event
- Hidden asset discovery — heirs or executors locate a wallet or account but cannot access it due to missing credentials or operational knowledge
Out of scope
- Market losses, investment losses, yield scheme losses, or Ponzi scheme losses
- Hacks or theft targeting an individual's personal security (phishing, SIM swap, social engineering, malware) where the custody architecture itself did not fail
- Unauthorized transfers where the holder's custody system was not the cause of the failure
- Ordinary transaction mistakes — wrong-address sends, fee errors, mistaken amounts
- Protocol-level failures — cryptographic vulnerabilities, consensus bugs, firmware integrity failures
- Deliberate burns or tribute burns
- Cases where the stated loss is unverifiable and no structural custody failure is described
Source and verification
Cases are drawn from public sources including forum posts, news reporting, court documents, academic research, and direct submissions. Each case is reviewed against the inclusion criteria above before publication. Source material is retained and available on request for documented cases.
The archive is observational and descriptive. It does not attempt to document all Bitcoin custody failures — only those meeting the criteria above with sufficient documentation to describe the structural failure and its outcome.