CustodyStress
Archive › Recovery path × stress › Password Bruteforce — Passphrase Unavailable
Part of the CustodyStress archive of observed Bitcoin custody incidents
Password BruteforcePassphrase unavailable

Password Bruteforce — Passphrase Unavailable

Cases where password bruteforce was the recovery path attempted for a forgotten or lost BIP39 passphrase or wallet encryption password. This is the highest-n recovery × stress combination in the archive.

Password bruteforce is the highest-success recovery path in the archive among cases with a determinate outcome — 74% of determinate cases resulted in access restored. Success depends on the password being a known variation of something the holder previously used.

2
Blocked
5
Constrained
20
Survived
69
Indeterminate

26% of determinate cases resulted in blocked or constrained access.

96 observed cases
Blocked
2 (2%)
Constrained
5 (5%)
Survived
20 (21%)
Indeterminate
69 (72%)
SP4RK7 Locked Out of Protoshares Wallet: Single-Character Password Error, Recovery Bounty Offered
Software wallet
Indeterminate 2013
On November 30, 2013, BitcoinTalk user SP4RK7 posted in the encrypted wallet recovery thread describing a Protoshares wallet locked with encryption that appeare
BitcoinTalk User ez1btc: Encryption Password Transcription Error Blocks Large Bitcoin Wallet
Software wallet
Indeterminate 2012
In the encrypted wallet recovery thread on BitcoinTalk, user 'ez1btc' documented a custody failure rooted in transcription error rather than forgetfulness. At t
Fiyasko's Forgotten Passphrase: Mining Savings Lost to Single Point of Failure (2012)
Software wallet
Indeterminate 2012
In December 2012, a Bitcoin miner operating under the username Fiyasko (also known as JackRabiit) created a dedicated savings wallet to store one month of accum
Brainwallet Passphrase Mismatch — Address Generation Failure After Fund Transfer
Software wallet
Indeterminate 2012
In December 2012, a BitcoinTalk user identified as 'thoughtfan' encountered a critical custody failure after using brainwallet.org to generate a Bitcoin address
Bitcointalk User Locked Out of Encrypted 2011 Wallet — Passphrase Unrecoverable
Software wallet
Blocked 2011
In early 2013, a Bitcointalk user posted in the Bitcoin Technical Support section describing their inability to access an encrypted wallet created approximately
Norwegian Student Successfully Recovered Forgotten Bitcoin Wallet Password From 2009
Software wallet
Survived 2009
In 2009, a Norwegian student purchased approximately $27 worth of Bitcoin as part of an academic exploration of the emerging cryptocurrency. The purchase and wa
Kristoffer Koch Recovers 5000 BTC After Forgotten Wallet Password — 2013
Software wallet
Survived 2009
Kristoffer Koch, a Norwegian engineering student, encountered Bitcoin in late 2009 while researching encryption for his university thesis. Intrigued by the emer
Forgotten Bitcoin Wallet Passphrases: Forum Cases of Successful Third-Party Recovery (2014–2021)
Software wallet
Survived
Between 2014 and 2021, seven Bitcoin holders posted testimonials on a forum documenting their recovery of wallets encrypted with forgotten passphrases. Cases ra
Armory 0.88.1 Wallet Passphrase Loss: 50 BTC Access Blocked
Software wallet
Indeterminate
A BitcoinTalk user posting as vect0rz reported losing access to an Armory version 0.88.1 wallet containing over 50 BTC. The encrypted wallet file and chain code
Lost Passphrase to Ledger BIP39 Hidden Wallet—Seed Phrase Insufficient
Hardware wallet with passphrase
Indeterminate
A Bitcoin holder with existing experience in cryptocurrency set up an advanced feature on their Ledger hardware wallet known as BIP39 passphrase protection. Thi
Wallet Passphrase Rejected Despite Correct Entry: Bitcoin Custody Failure
Software wallet
Indeterminate
In June 2019, a Bitcoin Core user reported that their wallet passphrase was not being accepted during an attempted transaction, despite having written it down c
Passphrase Recovery Success and OPSEC Failure: 2014 WalletRecoveryServices Case
Software wallet
Survived
A Bitcoin holder in 2014 created private keys but lost the passphrase required to access them. The funds remained locked for an unknown duration until the owner
BIP38 Paper Wallet: Seven-Year Inaccessibility Resolved via Single-Character Error
Software wallet
Survived
In 2017, an individual encrypted a paper wallet using BIP38 encryption, protecting it with a passphrase derived from their favorite band—a mnemonic they believe
4 BTC Lost Behind Forgotten Passphrase After Ledger PIN Lockout
Hardware wallet with passphrase
Survived
The user maintained a Ledger Nano S hardware wallet configured with two separate accounts: a primary account secured by a 24-word BIP39 seed phrase stored in co
Stefan Thomas and the IronKey Trap: 7,002 Bitcoin, 2 Attempts Left
Hardware wallet (single key)
Indeterminate
Stefan Thomas, a programmer, received 7,002 BTC in 2011 as payment for creating an animated educational video about Bitcoin. He stored the private keys on an Ir
IronKey Password Recovery: Developer Regains Access to $240M Bitcoin
Hardware wallet with passphrase
Survived
In the early 2010s, a software developer stored Bitcoin on an IronKey encrypted USB drive, securing it with a passphrase generated by RoboForm password manager.
170 BTC Passphrase Lockout: Year-Long Inaccessibility Resolved by Memory Recovery
Software wallet
Survived
In early 2011, an investor acquired approximately 170 BTC at roughly $10 per coin, storing the funds in Bitcoin-Qt, the primary self-custody software wallet ava
BlueWallet Password Lock Prevents Seed Phrase Restoration
Software wallet
Blocked
A BlueWallet user set a password to protect their wallet, then forgot it. Standard custody protocol suggested the recovery seed phrase—held safely in written fo
Major Bitcoin Holder Recovers 58,915 BTC After 7-Year Access Loss
Software wallet
Survived
A Bitcoin holder with substantial holdings lost access to their wallet containing 58,915 BTC approximately 7 years prior to recovery. The loss was caused by a s
Corrupted Encrypted Wallet.dat: 100 BTC Recovery Attempt via Pywallet
Software wallet
Indeterminate
A user identified as chunglam posted on BitcoinTalk seeking assistance recovering approximately 100 BTC stored in a corrupted wallet.dat file protected by Bitco
Bitcoin Core Wallet Passphrase Lost: Professional Recovery at 20% Fee
Software wallet
Constrained
A Bitcoin Core wallet owner lost access to their encrypted wallet.dat file after forgetting the passphrase used to protect it. The user attempted independent re
← PreviousNext →
Recovery path × stress
Terms guide
Survived
Access remained possible under the reported conditions.
Constrained
Access remained possible, but only with delay, dependence, or significant difficulty.
Blocked
Access was not possible under the reported conditions.
Indeterminate
There was not enough information to determine the outcome.
Survivability
The degree to which a custody system maintains the possibility of authorized recovery under stress.
Archive inclusion criteria

This archive documents cases where a legitimate owner, heir, or authorized party encountered barriers accessing or recovering Bitcoin due to a failure in the custody arrangement. The central question for inclusion is: did the custody structure fail a legitimate access or recovery attempt?

A case must satisfy all three of the following to be included:

  1. Legitimate access attempt. The person attempting to access or recover the Bitcoin was the owner, a designated heir, an executor, a legal authority, or another party with a legitimate claim — not a thief, attacker, or unauthorized third party.
  2. Custody structure failure. The failure was caused by a property of the custody arrangement — missing credentials, structural dependencies, documentation gaps, knowledge concentration, legal barriers, or institutional constraints — not market conditions, individual-level fraud or theft, or protocol-level issues. Platform-level failures that block legitimate user access are in scope regardless of their cause.
  3. Documentable outcome or access constraint. The case must have a stated or inferable outcome: access blocked, access constrained, access delayed, or access eventually achieved through a recovery path. Cases with entirely unknown outcomes are included only where the structural failure is documented and the constraint is unambiguous.
  • Owner death or incapacity — Bitcoin held in self-custody that becomes inaccessible to heirs or designated parties because credentials, documentation, or operational knowledge were not transferred
  • Passphrase loss — BIP39 passphrase forgotten or unavailable, blocking access to a funded wallet even where the seed phrase is present
  • Seed phrase or wallet backup unavailable — no independent recovery path existed or the backup was destroyed, lost, or never created
  • Device loss without independent backup — hardware wallet, phone, or computer lost or destroyed with no recovery path outside the device
  • Documentation absent or ambiguous — heirs or executors cannot determine that Bitcoin exists, which wallet holds it, or how to access it
  • Knowledge concentration — only one person knew the procedure, passphrase, or access method; that person is dead, incapacitated, or unreachable
  • Multisig quorum failure — a threshold signature arrangement cannot be completed because signers are unavailable, uncooperative, incapacitated, or have lost their keys
  • Legal authority / access mismatch — a court order, probate ruling, or power of attorney establishes legal entitlement but provides no technical path to access
  • Institutional custody barrier — exchange or platform hacks, insolvency, regulatory seizure, or operational failure that caused a access constraint or failure for legitimate users, whether temporary, prolonged, or permanent. The failure of the custodian to remain available or solvent is itself the in-scope event.
  • Forced relocation or geographic constraint — physical access to a device or location required for recovery is blocked by displacement, border restrictions, or political circumstances
  • Coercion — the holder was compelled under threat to transfer Bitcoin or disclose credentials during an access event
  • Hidden asset discovery — heirs or executors locate a wallet or account but cannot access it due to missing credentials or operational knowledge
  • Market losses, investment losses, yield scheme losses, or Ponzi scheme losses
  • Hacks or theft targeting an individual's personal security (phishing, SIM swap, social engineering, malware) where the custody architecture itself did not fail
  • Unauthorized transfers where the holder's custody system was not the cause of the failure
  • Ordinary transaction mistakes — wrong-address sends, fee errors, mistaken amounts
  • Protocol-level failures — cryptographic vulnerabilities, consensus bugs, firmware integrity failures
  • Deliberate burns or tribute burns
  • Cases where the stated loss is unverifiable and no structural custody failure is described

Cases are drawn from public sources including forum posts, news reporting, court documents, academic research, and direct submissions. Each case is reviewed against the inclusion criteria above before publication. Source material is retained and available on request for documented cases.

The archive is observational and descriptive. It does not attempt to document all Bitcoin custody failures — only those meeting the criteria above with sufficient documentation to describe the structural failure and its outcome.

Original text
Rate this translation
Your feedback will be used to help improve Google Translate