Authorized recovery tool

Prepare an Ethereum wallet audit

Extract the password-audit hash from an encrypted Ethereum JSON wallet without installing a local converter. Use it only within an approved recovery or security assessment.

Extract the wallet hash Review data handling

Upload an encrypted Ethereum wallet

The converter supports common Ethereum JSON wallet formats and produces output compatible with ethereum2john and Hashcat workflows. Source files are deleted after extraction.

Output formats

Depending on the wallet, the result can use PBKDF2-HMAC-SHA256, SCRYPT or legacy pre-sale parameters. The format identifies the work factor so an auditor can plan a realistic test.

Keep wallet backups offline and document authorization before any password testing.

Ethereum wallet hash formats

The extractor relies on ethereum2john from the John the Ripper project and accepts a wallet file with no extension or a .json extension. A sample wallet is available to test the converter. Three kinds of output can be generated.

Ethereum wallet, PBKDF2-HMAC-SHA256 - Hashcat mode 15600

$ethereum$p*262144*3238383137313130353438343737383736323437353437383831373034343735*06eae7ee0a4b9e8abc02c9990e3730827396e8531558ed15bb733faf12a44ce1*e6d5891d4f199d31ec434fe25d9ecc2530716bc3b36d5bdbc1fab7685dda3946

Ethereum wallet, scrypt - Hashcat mode 15700

$ethereum$s*262144*1*8*3436383737333838313035343736303637353530323430373235343034363130*8b58d9d15f579faba1cd13dd372faeb51718e7f70735de96f0bcb2ef4fb90278*8de566b919e6825a65746e266226316c1add8d8c3d15f54640902437bcffc8c3

The scrypt variant is more resistant, as it is very slow to attack.

Ethereum pre-sale wallet, PBKDF2-HMAC-SHA256 - Hashcat mode 16300

$ethereum$w*e94a8e49deac2d62206bf9bfb7d2aaea7eb06c1a378cfc1ac056cc599a569793c0ecc40e6a0c242dee2812f06b644d70f43331b1fa2ce4bd6cbb9f62dd25b443235bdb4c1ffb222084c9ded8c719624b338f17e0fd827b34d79801298ac75f74ed97ae16f72fccecf862d09a03498b1b8bd1d984fc43dd507ede5d4b6223a582352386407266b66c671077eefc1e07b5f42508bf926ab5616658c984968d8eec25c9d5197a4a30eed54c161595c3b4d558b17ab8a75ccca72b3d949919d197158ea5cfbc43ac7dd73cf77807dc2c8fe4ef1e942ccd11ec24fe8a410d48ef4b8a35c93ecf1a21c51a51a08f3225fbdcc338b1e7fdafd7d94b82a81d88c2e9a429acc3f8a5974eafb7af8c912597eb6fdcd80578bd12efddd99de47b44e7c8f6c38f2af3116b08796172eda89422e9ea9b99c7f98a7e331aeb4bb1b06f611e95082b629332c31dbcfd878aed77d300c9ed5c74af9cd6f5a8c4a261dd124317fb790a04481d93aec160af4ad8ec84c04d943a869f65f07f5ccf8295dc1c876f30408eac77f62192cbb25842470b4a5bdb4c8096f56da7e9ed05c21f61b94c54ef1c2e9e417cce627521a40a99e357dd9b7a7149041d589cbacbe0302db57ddc983b9a6d79ce3f2e9ae8ad45fa40b934ed6b36379b780549ae7553dbb1cab238138c05743d0103335325bd90e27d8ae1ea219eb8905503c5ad54fa12d22e9a7d296eee07c8a7b5041b8d56b8af290274d01eb0e4ad174eb26b23b5e9fb46ff7f88398e6266052292acb36554ccb9c2c03139fe72d3f5d30bd5d10bd79d7cb48d2ab24187d8efc3750d5a24980fb12122591455d14e75421a2074599f1cc9fdfc8f498c92ad8b904d3c4307f80c46921d8128*f3abede76ac15228f1b161dd9660bb9094e81b1b*d201ccd492c284484c7824c4d37b1593

Responsible use

Hashcat and John the Ripper are powerful and can be misused. Use them only with permission, and follow local laws and organizational security policies. Misuse can have serious legal consequences.

Credits and disclaimer

Credits go to the John the Ripper project.

OnlineHashCrack cannot be held responsible if a wallet is lost, stolen or opened by a third party. You are solely responsible for uploading your file, whether on this site or on any other website or forum.

Need a complete password audit?

Use the extracted value in an authorized test with OHC’s GPU-accelerated recovery service.

Discuss an authorized recovery