Important: This guide is for recovering access to a BIP38-encrypted private key that you own or are explicitly authorized to recover. Never attempt to access a wallet or key that belongs to someone else.
1. What Is BIP38?
BIP38 is a Bitcoin standard for encrypting a private key with a passphrase. It is not a wallet format and it does not hold coins by itself. A BIP38-encrypted private key usually appears as a long string starting with 6P. BIP38 password recovery means trying to find the passphrase that decrypts that 6P key.
2. What You Need Before You Start
Before starting this zero-basic BIP38 password recovery tutorial, prepare the following:
- The BIP38-encrypted private key, usually starting with
6P. - Any password hints, old notes, backups, or likely password patterns.
- A dedicated offline computer, preferably an air-gapped laptop.
- A trusted open-source BIP38 recovery or decryption tool.
- A safe place to record progress without exposing the key.
- Patience, because BIP38 recovery can be slow.
3. Understand the Two Common BIP38 Modes
BIP38 keys commonly fall into two categories:
- Non-EC-multiply keys: The passphrase directly decrypts the private key. These are the simpler case for beginners.

- EC-multiply keys: These may involve additional owner information or lot and sequence details. Always read your tool's instructions carefully before testing passwords.
4. Step-by-Step for Complete Beginners
Step 1: Verify What You Have
Confirm that you have a BIP38-encrypted private key starting with 6P, not a 12-word or 24-word seed phrase. BIP38 recovery does not directly apply to BIP39 seed phrases. If you only have a seed phrase, use a normal wallet restoration process on an offline device.
Step 2: Work Offline
Disconnect the recovery computer from the internet. Do not paste your encrypted key, private key, or password candidates into random websites. BIP38 recovery should be done locally with trusted software.
Step 3: Make a Safe Backup
Create an offline backup of the encrypted key before testing anything. Keep it separate from your password candidate list. Do not store unencrypted private keys in cloud notes, email, or chat apps.
Step 4: Install a Trusted Tool
Use well-reviewed open-source software and follow its official instructions. Some beginners use Python-based BIP38 libraries, but you must verify the source before installing anything. For example, a common library is bip38, but only install packages from trusted sources after checking their reputation and documentation.
Step 5: Build a Password Candidate List
Write down possible passwords based on real memories and hints. Include likely variants such as:
- Old passwords you commonly used.

- Capitalization changes, extra spaces, and punctuation variations.
- Names, dates, and places that were meaningful when the key was created.
- Keyboard patterns and simple leetspeak substitutions.
- Typos or spelling mistakes you may have made.
Save candidates in a plain text file with one candidate per line. Keep this file offline.
Step 6: Test Candidates Carefully
Open your trusted BIP38 tool on the offline machine. Load the encrypted key and test your candidate list according to the tool's documentation. Record which candidates have been tested so you do not repeat work. If the tool supports progress saving, use it. Do not run recovery on a cloud server or an online password-checking website.
Step 7: Confirm and Secure the Key
If a password succeeds, the tool will decrypt the private key. Do not keep the decrypted key on an internet-connected computer longer than necessary. Import it into an offline wallet, move the funds to a new wallet with a new seed phrase, and then securely delete temporary recovery files.
5. A Simple Conceptual Workflow
- Copy the
6Pencrypted key to an offline computer. - Open a trusted BIP38 recovery tool.
- Paste the encrypted key into the tool.
- Load your password candidate list.
- Start the check or decrypt process.
- If successful, move funds to a newly secured wallet.

- Wipe temporary files and keep the new backup safe.
6. How Long Does BIP38 Recovery Take?
Recovery time depends on password complexity, hardware speed, tool efficiency, and whether the password is close to your guesses. BIP38 is designed to be slow, so even a modest search can take a long time. If the password was strong and is completely forgotten, recovery may be impossible.
7. Common Mistakes to Avoid
- Uploading a BIP38 key to an online recovery service.
- Confusing BIP38 with BIP39 seed phrase recovery.
- Testing passwords on an internet-connected computer.
- Forgetting to check spaces, capitalization, and typos.
- Ignoring EC-multiply requirements or extra owner information.
- Losing the encrypted key before recovery is complete.
8. Final Safety Checklist
- I own the key or have explicit permission to recover it.
- My recovery computer is offline.
- My software is trusted and open source.
- My candidate list is based on real hints, not random guessing.
- My decrypted key will be moved to a new secure wallet immediately.
Conclusion
This zero-basic BIP38 password recovery tutorial gives beginners a safe path: understand what BIP38 is, isolate the recovery process offline, prepare realistic password candidates, test them with trusted tools, and secure the recovered funds. BIP38 recovery is not magic, but with careful preparation and realistic expectations, it can be a practical way to regain access to your own encrypted private key.