Blockchain.info Wallet Backup — Hashcat Mode 12700
TL;DR — Blockchain.info (now Blockchain.com) wallet exports use AES with PBKDF2-SHA1 key derivation. Mode 12700 in Hashcat targets these JSON-format backups. Recovery feasibility depends on password complexity, similar to other modern wallet formats.
What this format is
Blockchain.info offered wallet backup exports in a JSON format with the wallet's private key data encrypted using AES + PBKDF2-SHA1. The iteration count was 5,000 to 10,000 depending on era.
The service later rebranded to Blockchain.com and changed wallet handling. Old backup files in the original format remain in many users' archives.
Recovery characteristics
The relatively low PBKDF2 iteration count makes per-password verification fast on modern GPUs. Recovery is feasible for typical human passwords.
Strong random passwords are out of reach as usual. The free check phase rapidly identifies which case applies.
What to do after recovery
Once recovered, the JSON contains private keys for each address in the wallet. These can be imported into any modern wallet (Electrum, Bitcoin Core, hardware wallets via address transfer).
Note: Blockchain.com's modern web wallet is custodial — your funds are held by them. The exported file recovery applies to the older non-custodial backup format.
Frequently Asked Questions
Is the new Blockchain.com wallet the same?
Will I get my Bitcoin back if I recover?
Related references
Have a wallet to recover?
Start with a free analysis. Encryption format is detected, free check runs first. Pay only if recovery succeeds.
Run a free wallet analysis