btcrecover icon indicating copy to clipboard operation
btcrecover copied to clipboard

Successfully found Multibit Password, how do I recover the keys?

Open thorlucas opened this issue 3 years ago • 14 comments

So I ran

python3 btcrecover.py --passwordlist ~/Desktop/pwlist.txt  --wallet ~/Desktop/multibit.wallet

and I was able to successfully find the correct password. But how do I actually dump the decrypted contents of the wallet? It says that dump privkeys isn't available for multibit, but clearly it was able to decrypt it given that it found the correct password.

thorlucas avatar Jun 26 '21 08:06 thorlucas

Not really at this time, adding that is on my TODO list with my updated fork here: https://github.com/3rdIteration/btcrecover but there isn't currently an ETA for it.

Your best bet is probably to just run Multibit classic, I have a copy of it on my Github here as well as the latest build jar https://github.com/3rdIteration/multibit (You can just run it all in an offline VM, then export the raw private keys and import them in to Electrum)

3rdIteration avatar Jul 02 '21 13:07 3rdIteration

you can just run openssl enc -d -p -aes-256-cbc -md md5 -a -in ~/Desktop/multibit.wallet -out recovered.txt -pass pass:FOUND_PASSWORD

FabioNevesRezende avatar Oct 16 '21 20:10 FabioNevesRezende

I should be able to put the found password directly into the mutlibit wallet right? I don't understand why it is saying it is incorrect? But btcrecover said it found it.

willcbanks avatar Mar 09 '22 17:03 willcbanks

It should work, but there may also be some non-typeable characters like a newline in there which could be your issue.

3rdIteration avatar Mar 09 '22 17:03 3rdIteration

characters like a

Thanks. How would I know if there was? And how would I type that into multibit?

btcrecover says:

Password found 'xxxxxxx'

Does it export that somewhere into a file? I assume the quotes are not part of the password!

willcbanks avatar Mar 09 '22 17:03 willcbanks

I can't believe that I hit the 1 in 3×10^11 false positive? how unlucky is that? I am hoping maybe the multibit app is the problem? Can i import the wallet into electrum and then just use that to access the wallet?

willcbanks avatar Mar 09 '22 17:03 willcbanks

I should be able to put the found password directly into the mutlibit wallet right? I don't understand why it is saying it is incorrect? But btcrecover said it found it.

Hi, password must work if you find good. but btcrecover have some issue. I crack many wallet . And i have many „false positive”. Maybe you have false positivies. Y can write me an message on telegram: @deloxd

deloxd avatar Mar 09 '22 17:03 deloxd

I should be able to put the found password directly into the mutlibit wallet right? I don't understand why it is saying it is incorrect? But btcrecover said it found it.

Hi, password must work if you find good. but btcrecover have some issue. I crack many wallet . And i have many „false positive”. Maybe you have false positivies. Y can write me an message on telegram: @deloxd

many? wow that sucks. Should I just skip that false positive then and continue?

willcbanks avatar Mar 09 '22 17:03 willcbanks

The quotes aren't part of it, have you tried just using OpenSSL to manually dump it as suggested?

3rdIteration avatar Mar 09 '22 18:03 3rdIteration

I can't believe that I hit the 1 in 3×10^11 false positive? how unlucky is that? I am hoping maybe the multibit app is the problem? Can i import the wallet into electrum and then just use that to access the wallet?

3×10^11???? That's several orders of magnitude too small, also solvable on a decent rig within a month or so.

How did you calculate this?

that's the false positive rate

willcbanks avatar Mar 09 '22 19:03 willcbanks

I just read that the latest version of btcrecover has an improved false positive rate of 1.5 x 10^19 !!!!!! so I really cant believe I am so lucky I found one?!!!

willcbanks avatar Mar 09 '22 20:03 willcbanks

It's very unlikely to be a false positive for a multibit wallet. (The one in 300 billion false positive rate is only applicable if you are using a wallet extract and only have one block of encrypted data)

If you run it with the full wallet file then there is no reason to think it's a false positive.

3rdIteration avatar Mar 09 '22 21:03 3rdIteration

I was using a multibit hash. It gave a false positive. I no longer use this useless software.

willcbanks avatar Apr 02 '22 00:04 willcbanks

This repo is no longer maintained, but if you want to open an issue at my current repo here: https://github.com/3rdIteration/btcrecover and submit a reproducible sample, I can have a look and see what's going on.

3rdIteration avatar Apr 02 '22 00:04 3rdIteration