Blockchain.info and Blockchain.com wallets are one of the largest pools of old, recoverable
Bitcoin still in existence. People created web wallets between 2012 and 2017, saved a
wallet.aes.json backup or an old recovery phrase, then lost access when a password, a
second password, an email account, or a laptop disappeared.
If you still have the wallet backup, or enough account material to identify the wallet, recovery is often possible without guessing blindly.
Situations I recover from
Forgotten main password. Blockchain.info wallets can be attacked offline from an encrypted backup. The hard part is not the hardware, it is building a realistic password search out of your memory: words you used in that era, substitutions, endings, dates, keyboard patterns, and fragments you reused elsewhere.
"Decrypt failed" on a file you know is yours. A wrong password and a corrupt file produce the same message. So does the wrong format version. Sorting those apart is the first hour of the job, and it is the difference between a viable case and wasted GPU time.
Second-password lockout. If you can log in, see a balance, and cannot send, the outer wallet decrypted and the keys did not. That is a separate password and a separate problem.
A backup file that will not open at all. Files named wallet.aes.json, exported
backups, and old email attachments are usually enough to begin. Do not upload the file to
anything. Make a copy and ask first.
Legacy mnemonic confusion. Some old Blockchain.info recovery phrases are not BIP-39 seed phrases and will never restore in a modern wallet. A phrase that "does not work" is not proof the coins are gone; frequently it is proof the phrase was never the way in.
A phrase that restores the wrong wallet. Right words, wrong account index or address type. The balance you are looking for may be one derivation path away.
What to do right now
- Make a copy of the backup file and put the copy somewhere safe. Work only from the copy from here on.
- Stop running tools against it. Repeated failed attempts teach you nothing new and some tools rewrite the file.
- Do not upload it anywhere. The file plus a password is total control of the coins.
- Write down the password material while you still remember it: the era, the length, themes, substitutions, endings, and anything reused from other accounts of that time.
- Note whether there was a second password, and treat it as a separate memory exercise.
- Find any receiving address you know belonged to the wallet, so candidate keys can be checked against the right target.
- Ask for a free assessment before sending secret material to anyone, including me.
- Check whether the file is even intact, free and without a password, using the Blockchain.com backup file checker. It runs in your browser, uploads nothing, and tells you whether "decrypt failed" is about your password or about a truncated file. Worth doing before step 7, because it changes what there is to assess.
The technical background, free
Two guides cover this ground in full and neither requires hiring anyone:
Blockchain.com backup file won't decrypt? wallet.aes.json, "decrypt failed", and legacy
phrase fixes walks the diagnostic in
order: identifying what you actually have, what wallet.aes.json contains, the common
causes of "decrypt failed" ranked by frequency, the second-password trap, and what to do
when a legacy phrase restores an empty or wrong wallet.
How I brute force Blockchain.info wallets is the working detail: the v1, v2, and v3 backup formats, PBKDF2 iteration counts and what they mean for time-to-crack, why a well-built token list matters far more than raw hashing speed, and a real run with real numbers.
How the recovery works
The process is the same five steps I use for every recovery: an honest assessment, a written contract, secure transfer of the backup file if the case is viable, the recovery work itself, and return of your coins to an address you control. You pay nothing unless I succeed. The fee is published openly: 15% of the recovered amount for wallets under 100 BTC. Before you send anything, read what happens to your wallet file once you send it, from transfer through to destruction.
This page is the service path. You will know exactly who is responsible for the job: David Veksler, working through a Colorado-registered LLC with a physical address, a written contract, and a published PGP key. If your password memory is too thin to build a real search from, I will say so rather than bill you to find out.