Ethereum Keystore Recovery Service

An Ethereum keystore (UTC/JSON) file is an encrypted private key, usually created by Geth, MyEtherWallet or another Ethereum client, and recovery means testing password candidates against its scrypt or PBKDF2 encryption.

What you are actually dealing with

• The keystore is a small JSON document that holds the encrypted private key: an address, a crypto object with the cipher and ciphertext, the key derivation function (kdf), its parameters and a checksum. The password is not stored anywhere in the file.
• Two encryption schemes are in use: scrypt (most clients) and PBKDF2 (older MEW files). Fewer iterations mean candidates test faster, which is why the wallet's age is a useful clue.
• There is no reset button and no support ticket: the password can only be found by testing candidates against the file's encryption, on a copy.

When password search is realistic

• The file exists and the password is forgotten: recovery is a password search against that same encryption, always on a copy of the file.
• The file came from an older wallet that used PBKDF2 - fewer iterations than scrypt, so more candidates fit in the same time.

What is impossible

• No file and no backup: there is nothing to test. An address alone cannot be turned back into a key.
• Coins already sent away cannot be reversed. The keystore opens what it opens.

How we work with your file

You never send the file through forms or chat. After a free assessment and a written agreement (NDA on request), we work on a copy of the keystore in a controlled offline environment, test candidates against its encryption, and hand access back to you. You open the wallet and move your ETH yourself.

Practical notes

• Never upload a keystore file to a website or "checker". Work only on copies, offline.
• If you get access back, create a fresh wallet and move the funds - an old keystore with a reused password is a risk.