Conundrums Galore: Lost passwords lock millionaires out of Bitcoin fortunes

Stefan Thomas, a programmer living in San Francisco, has two guesses left to figure out a password that is worth, as of this week, about $220 million. The password will let him unlock a small hard drive, known as an IronKey, which contains the private keys to a digital wallet that holds 7,002 Bitcoin. While the price of Bitcoin dropped sharply on Monday, it is still up more than 50 percent from just a month ago, when it passed its previous all-time high of around $20,000. 

The problem is that Thomas years ago lost the paper where he wrote down the password for his IronKey, which gives users 10 guesses before it seizes up and encrypts its contents forever. He has since tried eight of his most commonly used password formulations — to no avail. Bitcoin, which has been on an extraordinary and volatile eight-month run, has made a lot of its holders very rich in a short time, even as the coronavirus pandemic has ravaged the world economy. 

But the cryptocurrency’s unusual nature has also meant that many people are locked out of their Bitcoin fortunes as a result of lost or forgotten keys. They have been forced to watch, helpless, as the price has risen and fallen sharply, unable to cash in on their digital wealth. Of the existing 18.5 mn Bitcoin, around 20 percent — currently worth around $140 bn — appear to be in lost or otherwise stranded wallets, according to cryptocurrency data firm Chainalysis. Wallet Recovery Services, that helps find lost digital keys, said it had gotten 70 requests a day from people who wanted help recovering their riches, three times the number of a month ago. 

Bitcoin owners who are locked out of their wallets speak of endless days and nights of frustration as they have tried to get access to their fortunes. Many have owned the coins since Bitcoin’s early days a decade ago, when no one had confidence that the tokens would be worth anything. The dilemma is a stark reminder of Bitcoin’s unusual technological underpinnings, which set it apart from normal money and give it some of its most vaunted — and riskiest — qualities. With traditional bank accounts and online wallets, banks like Wells Fargo and other financial companies like PayPal can provide people the passwords to their accounts or reset lost passwords. 

But Bitcoin has no company to provide or store passwords. The virtual currency’s creator, a shadowy figure known as Satoshi Nakamoto, has said Bitcoin’s central idea was to allow anyone in the world to open a digital bank account and hold the money in a way that no government could prevent or regulate. 

This is made possible by the structure of Bitcoin, which is governed by a network of computers that agreed to follow software containing all the rules for the cryptocurrency. The software includes a complex algorithm that makes it possible to create an address, and associated private key, which is known only by the person who created the wallet. 

The software also allows the Bitcoin network to confirm the accuracy of the password to allow transactions, without seeing or knowing the password itself. In short, the system makes it possible for anyone to create a Bitcoin wallet without having to register with a financial institution or go through any sort of identity check. But the structure of this system did not account for just how bad people can be at remembering and securing their passwords.