Recovery guide · Bitcoin Core
wallet.dat recovery: opening an old Bitcoin Core wallet in 2026
A wallet.dat file from 2011, 2013, or 2016 still holds the same private keys it did the day you backed it up — Bitcoin itself hasn't changed. What's changed is the software around it: modern Bitcoin Core, more aggressive encryption defaults, and 10+ years for you to forget the passphrase. This guide covers the realistic paths to getting funds out, and the cases where you should stop guessing and call a specialist.
First, make copies. Before opening the file in any software, copy wallet.dat to two separate offline drives. Bitcoin Core can rewrite the file on first open; a fresh copy is your insurance against a bad attempt.
Step 1 — Open it in a current Bitcoin Core
Install the latest Bitcoin Core on an offline machine. Place a copy of your wallet.dat in the data directory's wallets/ folder, then run bitcoin-cli loadwallet "<name>". If the wallet is unencrypted or you remember the passphrase, you can sweep funds with dumpprivkey and import the keys into Electrum without waiting for a full blockchain sync.
Step 2 — If the passphrase is forgotten
Bitcoin Core encrypts the master key inside wallet.dat with AES-256-CBC, with the encryption key stretched from your passphrase by tens of thousands of SHA-512 rounds. There is no backdoor — but there's an enormous gap between "no backdoor" and "impossible". The right tool is btcrecover, run offline:
- Extract the encrypted master key with
extract-bitcoincore-mkey.py— this produces a tiny blob you can search against without ever exposing the rest of your wallet. - Write a "token file" describing what you remember: rough length, words you might have used, common substitutions, capitalization patterns, numbers you append.
- Run btcrecover against the extracted blob. Realistic search spaces (10⁹ to 10¹²) are tractable on a modern GPU in hours to days.
- When the correct passphrase is found, decrypt the original wallet.dat in Bitcoin Core and sweep.
Step 3 — If the file is corrupted
A truncated or partially overwritten wallet.dat often still contains intact key records — Bitcoin Core uses a Berkeley DB structure where each key is stored individually. The pywallet tool can walk the raw file and recover surviving private keys even when Bitcoin Core itself refuses to open it. For drives that have been reformatted, deleted, or partially overwritten, forensic tools can carve wallet.dat-shaped blocks out of unallocated disk space — this is one of the cases where bringing in a specialist genuinely matters.
When this stops being a DIY job
Most wallet.dat cases that reach us are the messy ones — the ones where the easy path didn't work.
- You've tried every passphrase you can think of and Bitcoin Core still says "wrong passphrase".
- The wallet.dat is on a dead laptop, a SATA drive in a drawer, or an old Time Machine backup you can't mount.
- You think you deleted the file but never reused the drive for much.
- Bitcoin Core throws a Berkeley DB error and refuses to load the wallet at all.
- The passphrase is in a language other than English, or you used a custom keyboard layout.
These are exactly the cases we work. The right combination of GPU-accelerated passphrase search, forensic disk recovery, and patience handles the overwhelming majority of "lost forever" wallet.dat files. We never take custody of your coins and we only get paid if we recover them.
Stuck on a wallet.dat?
Send us the details — confidentially.
A real person reviews every intake within 24 hours, under NDA. No upfront fees.
Begin a confidential intakeGeneral educational information about Bitcoin Core wallet.dat recovery. Not financial advice. We are not affiliated with the Bitcoin Core project.