--passwordlist when you already know what the full password candidates look like, as opposed to a token list where you know only fragments.
Password lists vs. token lists
| Password list | Token list | |
|---|---|---|
| Input | Complete passwords, one per line | Fragments (tokens) you remember |
| Use when | You have a set of whole password guesses | You remember parts but not the full password |
| Combinations | Each line is tried verbatim (unless typos are added) | BTCRecover combines fragments to build guesses |
| Flag | --passwordlist FILE | --tokenlist FILE |
If your password contains non-ASCII characters, add
--utf8 to enable Unicode support.Basic usage
passwords.txt:
passwords.txt
Reading from stdin
If you specify--passwordlist without a filename, BTCRecover prompts you to type passwords interactively, one per line:
Piping from another tool
Because BTCRecover can read from stdin, you can pipe output from another password generator directly into it:- Linux / macOS
- Windows
Combining with typo simulation
Password lists work with all--typos-xxxx options. Each password in the list is treated as a base, and BTCRecover generates variations of it:
Embedded options in the password list file
To store command-line options alongside the password list, add them to the first line of the file, beginning with#--:
passwords.txt
#--, it treats the remainder of that line as additional command-line arguments. Options on the command line still take precedence if the same option appears in both places.
The options
--passwordlist, --tokenlist, --performance, and --utf8 are not permitted inside the file for security reasons.Previewing candidates with —listpass
Use--listpass in place of --wallet FILE to print all passwords that would be tested — useful to verify typo combinations before committing to a full run:
Autosave and restore
For large password lists that may take a long time, use--autosave to periodically save progress to a file. If the run is interrupted, resume it with --restore:
Manual resume with —skip
If you didn’t have autosave enabled and your run was interrupted, note the last password number printed and restart with--skip:
Compressed password lists
Password list files can be gzip-compressed. BTCRecover detects and reads.gz files automatically: