Brainwallet specialist

🧠 Recover brainwallet · BTC without file

A brainwallet is a memorized passphrase converted (via SHA-256 or other KDFs) to a Bitcoin private key. If you remember approximately the phrase, recovery is viable. This guide explains how brainwallets work, common algorithms (SHA-256, WarpWallet, BIP39, Electrum 1.x/2.x), and cases where the GPU cluster finds lost brainwallets.

⚡ Complex case? Professional service /wallet-recovery/ · USD 35 diagnostic, success fee only if we recover.

What is a brainwallet (vs HD wallet with seed)

A pure brainwallet: you choose a passphrase (e.g. "correcthorsebatterystaple2017"), apply SHA-256 → you have a Bitcoin private key. No file, no backup. The phrase is EVERYTHING.

A HD wallet with BIP39 seed: software (MetaMask, Electrum) generates 12 random words, you write them down. Better security but requires physical backup.

Brainwallets were popular 2011-2015 among cypherpunks. Today considered bad practice (humans generate predictable keys), but there are millions of USD in BTC in brainwallets where people forgot the exact phrase.

Most common brainwallet KDF algorithms

Simple SHA-256 ("brainwallet.io" classic, 2011-2015): 1 SHA-256 round. Crackable at 50 GIGA/sec on GPU. If your phrase had structure and was 2013, recovery trivial with wordlist.

WarpWallet (Maxwell, 2014): scrypt + PBKDF2. Designed anti-GPU. ~1,000 attempts/sec on RTX 3090. Much more resistant.

BIP39 "electrum" seed: 12-24 words from specific wordlist, applied PBKDF2-2048. Modern standard.

Electrum seeds 1.x (legacy 2011-2015): 12 words from proprietary wordlist. Crackable if you remember some words.

Diceware: 5-7 random words from 7,776-word wordlist. More secure than random brainwallet but memorable.

SHA-256 brainwallet: most common recovery case

If you remember approximately the phrase (words, length, language), recovery is feasible:

# Generate candidates with variations

echo "correcthorsebatterystaple" > base.txt

crunch 25 30 -t "correcthorse@@@@@@@" >> candidates.txt

hashcat -m 28200 hash.txt candidates.txt

The strategy: generate base candidates with all reasonable variations (capitalize, reverse, leet, append year, swap chars), then GPU processes everything.

Throughput: 50G/sec allows testing TRILLIONS of candidates per hour. Wordlist of 100M variants processes in 30 seconds.

When brainwallet phrase is "random"

If your brainwallet used genuinely random phrase (Diceware 6-words, password manager output), recovery is almost impossible:

Diceware 5 words: 7,776^5 = ~28 billion combinations (feasible cluster month)
Diceware 6 words: 217 billion (feasible cluster year)
Diceware 7+ words: trillions (not viable)

Your best chance: remember AT LEAST 1-2 words + position + type. Reduce keyspace from 7,776^7 to something manageable.

GPU cluster for brainwallet hunting

Our 5×RTX 3090 cluster is optimized for brainwallet hunting:

SHA-256 brainwallet: 250 GH/s combined (250 billion attempts/sec)
WarpWallet: 5,000 a/sec
BIP39 partial: depends how many words missing

We use specific curated wordlists (RockYou + LATAM-specific dictionaries + cypherpunk-era phrases). Plus custom mutation rules developed observing millions of real brainwallets.

Famous cases of recovered brainwallets

WarpWallet challenges 2014: Wuille and Maxwell published several brainwallets with bounty for cracking. Some recovered in years (testing Diceware 5 words).

Public AR case 2023: user recovered 3.2 BTC with brainwallet "Argentine song lyric + year" after 4 months cluster.

Public USA case 2024: user recovered 14 BTC from 2013 brainwallet "first line of favorite book + numeric suffix". 8 days cluster with literary wordlist.

RECOVERABLE brainwallets always had semantic pattern (something memorable). GENUINELY random ones never recover.

Frequently asked questions

Difference brainwallet vs paper wallet?

Brainwallet: only in your head (memorized phrase → SHA-256 → private key). Paper wallet: private key printed on paper. Paper wallet recovery only needs the paper. Brainwallet recovery needs to remember the phrase.

How do I know if my wallet was brainwallet or BIP39?

BIP39 = exactly 12 or 24 words from standard BIP39 wordlist (public list of 2,048 words). Brainwallet = any phrase you chose, no predefined structure.

Does GPU cluster accept any brainwallet algorithm?

Yes. Hashcat supports SHA-256, WarpWallet, BIP39, Electrum 1.x/2.x, etc. For exotic brainwallets (custom algorithm), we do custom CUDA code.

Realistic time for 4 known words + 2 unknown?

If 2 unknown are from BIP39 wordlist: ~4M combinations × 12s/attempt = hours-days. If 2 unknown are random text: feasible 30-90 days cluster.

Is the service discreet?

100% NDA from first payment. Your phrase, your addresses, balance — nothing shared outside cluster. Deleted 72h post-recovery. We maintain limited list of operators with access.

Complex case? We can help

5×RTX 3090 GPU cluster + ML engineer. USD 35 diagnostic, USD 2000 AI Scan, success fee 30-40% only if we recover.

🔐 Wallet Recovery →