Electrum (seed phrase or wallet file)

Electrum 2.x+ seed phrase

Electrum seeds are not BIP39: the version is hashed into the words. seed-to-master tries both, and derive picks Electrum's paths (m/{change}/{i} standard, m/0'/{change}/{i} segwit).

./blocktools run 'classify /in/electrum-seed.txt'


./blocktools run 'seed-to-master < /in/electrum-seed.txt | derive --chain btc --count 1'

Electrum wallet file (~/.electrum/wallets/...)

The password goes in secrets/electrum.pw (first line, can be empty). read-file joins the password and the file because the sealed image has no shell. Test file: the btcrecover Electrum 4.4.3 fixture.

./blocktools run 'read-file /secrets/electrum.pw /in/electrum-wallet | electrum-read | seed-to-master | derive --chain btc --count 1'

Electrum 1.x wallet file (2011–2014, seed_version: 4, a Python dict)

classify reports electrum_wallet. electrum-read decrypts the 32-hex-char seed and derives the "old" scheme keys itself (uncompressed P2PKH, receive m/0/i and change m/1/i, --count N per branch). It refuses the file unless the derived master public key equals the file's master_public_key. The tested vector is btcrecover's Electrum 1.x wallet. Its first receive and change addresses match the address lists Electrum wrote into that file.

./blocktools run 'read-file /secrets/electrum.pw /in/electrum1-wallet | electrum-read --count 1'


recipes/recover.sh /in/electrum1-wallet - --goal balance --password-file /secrets/electrum.pw

The full sweep of this wallet runs in e2e (mock chain, both codes typed).

Electrum 1.x old seed (12 words from the 1626-word list, or the 32-hex seed)

The paper backup of an Electrum 1.x wallet is 12 words from Electrum's own 1626-word list (not BIP39), or the 32-hex-char seed they encode. classify reports electrum_old_seed; seed-to-master prints the hex seed with "scheme":"electrum-old" (there is no BIP32 master in this scheme); derive then walks the old non-BIP32 keys m/{change}/{i} (receive 0, change 1), uncompressed P2PKH, btc only (--preset electrum-old says the same; any other --chain prints no rows for this line, and an xprv under that preset is refused). The tested vector is Electrum's own test_electrum_seed_old (first receive and change addresses). A 24-word old seed (64 hex) is read the same way; passphrases do not apply.

./blocktools run 'classify /in/electrum-old-seed.txt'


./blocktools run 'seed-to-master < /in/electrum-old-seed.txt | derive --chain btc --count 1'


recipes/recover.sh /in/electrum-old-seed.txt - --goal addresses --count 1

Electrum "encrypt file" wallets (BIE1)

A whole-file-encrypted wallet starts with QklFMQ (base64 of BIE1). electrum-read decrypts it with the wallet password (the same password then opens any field-encrypted seed inside), so recover.sh routes it like any Electrum wallet. Checked against btcrecover's Electrum 2.8 and 4.1 encrypted test wallets and an independent python vector. NOT BUILT: BIE2 files (password derived from a hardware wallet xpub); electrum-read says unsupported_bie2.

recipes/recover.sh /in/electrum-bie1-wallet - --goal addresses --password-file /secrets/electrum.pw

A file that decrypts but has no keystore is refused:

./blocktools run 'read-file /secrets/bie1.pw /in/electrum-bie1-nokeys | electrum-read'