Unable to send from Toast wallet

[miicker]

So I want to exchange my XRP for BTC, so I want to remove the XRP I have from my Toast wallet. Here comes the issue. I forgot the passphrase.

I do have the backup code (I used it to restore my wallet). I also do know the 6 digit code, but I don't know the passphrase. I tried to reset it and I've entered the backup code, but it's not working. Am I doing something wrong here?

[BillyOckham]

The names of all these ‘codes’ across all the software is confusing.

That ‘backup code’...  does it start with an ‘s’ and then a long string of alphanumeric characters?

If so, then that is your XRPLedger Account  secret key and any wallet software can use that to access your XRP.

The current community favourite wallet is the XUMM wallet which I have used myself.  Toast is no longer supported (no new updates will be made) but should still work if it’s on a device.

 

If you have the ‘s’ key then you can start fresh in any wallet software by “importing” that key.  When you start fresh like that you can take more care creating and recording passwords and the like...

 

Do not delete the Toast wallet if it’s your only access and you don’t have the ‘s’ key since it is no longer in the iOS App Store to download (that I can see...  perhaps I’m wrong?).  You will just need to keep trying to remember the password.

 

So...   don’t show it here but do you have that ‘s’ key?

 

 

[miicker]

3 minutes ago, BillyOckham said:

The names of all these ‘codes’ across all the software is confusing.

That ‘backup code’...  does it start with an ‘s’ and then a long string of alphanumeric characters?

If so, then that is your XRPLedger Account  secret key and any wallet software can use that to access your XRP.

The current community favourite wallet is the XUMM wallet which I have used myself.  Toast is no longer supported (no new updates will be made) but should still work if it’s on a device.

 

If you have the ‘s’ key then you can start fresh in any wallet software by “importing” that key.  When you start fresh like that you can take more care creating and recording passwords and the like...

 

Do not delete the Toast wallet if it’s your only access and you don’t have the ‘s’ key since it is no longer in the iOS App Store to download (that I can see...  perhaps I’m wrong?).  You will just need to keep trying to remember the password.

 

So...   don’t show it here but do you have that ‘s’ key?

 

 

Thanks for the reply, my backup key is a 1264 character key. It stats with an "a", contains stuff like "walletversion", "pindata", "ppdata", etc. Everything in it seems to be salted.

[BillyOckham]

2 hours ago, miicker said:

Thanks for the reply, my backup key is a 1264 character key. It stats with an "a", contains stuff like "walletversion", "pindata", "ppdata", etc. Everything in it seems to be salted.

Ah ok that sounds like a backup of the wallet.  So that won’t help because it will result in exactly what you already have.  (Unless you changed passwords in toast as some point and know the old but not the new?...   unlikely)

 

The six digit code you refer to is the one to access the app when it is locked on entry or at timeout to locked,  yeah?

So that doesn’t help either.

At the most basic level you are trying to access the XRPL and there is only one critical bit...  the secret key.  That starts with an ‘s’.   (Other forms of that exist but Toast used the s system)  If you’ve got that then you are sweet.

 

If you don’t, and the only form of it that you have is encrypted inside Toast then you will need to access Toast.  The only way Toast will sign or use anything is with the pass phrase.  Sorry but it doesn’t sound good.

 

On the up side...  does Toast have a ‘ten tries then delete’ setting?  I don’t recall.  If it does,  and you did NOT set that on,  then you can just write down variations on what your password might be and try them all.  Good luck with it.

 

[miicker]

6 hours ago, BillyOckham said:

Ah ok that sounds like a backup of the wallet.  So that won’t help because it will result in exactly what you already have.  (Unless you changed passwords in toast as some point and know the old but not the new?...   unlikely)

 

The six digit code you refer to is the one to access the app when it is locked on entry or at timeout to locked,  yeah?

So that doesn’t help either.

At the most basic level you are trying to access the XRPL and there is only one critical bit...  the secret key.  That starts with an ‘s’.   (Other forms of that exist but Toast used the s system)  If you’ve got that then you are sweet.

 

If you don’t, and the only form of it that you have is encrypted inside Toast then you will need to access Toast.  The only way Toast will sign or use anything is with the pass phrase.  Sorry but it doesn’t sound good.

 

On the up side...  does Toast have a ‘ten tries then delete’ setting?  I don’t recall.  If it does,  and you did NOT set that on,  then you can just write down variations on what your password might be and try them all.  Good luck with it.

 

Toast does not lock me out, I tried already a bunch of passwords with no luck. Think I won't be able to ever log on to it again unfortunately..

[BillyOckham]

3 hours ago, miicker said:

Toast does not lock me out, I tried already a bunch of passwords with no luck. Think I won't be able to ever log on to it again unfortunately..

Sorry to hear that.  The great strength of crypto is also one of its biggest dangers to users...   it’s impregnable.

( This is more about the Toast wallet impregnability but the principle applies. )
 

So just to confirm the situation...  you have Toast wallet and you can open it and even start a send transaction but then it asks for a password that you do not have.  Is that correct?

 

If so you have little chance without the password...  but it might be possible for a brute force password attack to get at it if the password was not a strong one.  How you go about getting a script or software to do that is beyond me I’m afraid...  

 

[miicker]

6 hours ago, BillyOckham said:

Sorry to hear that.  The great strength of crypto is also one of its biggest dangers to users...   it’s impregnable.

( This is more about the Toast wallet impregnability but the principle applies. )
 

So just to confirm the situation...  you have Toast wallet and you can open it and even start a send transaction but then it asks for a password that you do not have.  Is that correct?

 

If so you have little chance without the password...  but it might be possible for a brute force password attack to get at it if the password was not a strong one.  How you go about getting a script or software to do that is beyond me I’m afraid...  

 

That's a pitty. I really tought I've created a backup of everything I needed. The information I need is probably in my crypto Excel file (xlsx), which I've encrypted with a password, which, you guessed it, I forgot...

[BillyOckham]

1 hour ago, miicker said:

That's a pitty. I really tought I've created a backup of everything I needed. The information I need is probably in my crypto Excel file (xlsx), which I've encrypted with a password, which, you guessed it, I forgot...

I don’t want to give false hope but...   I think you might have a chance of getting it.

 

Its been many years since I last did this,  but I have used programs in the past that effortlessly broke MS Office passwords.  So maybe MSOffice has beefed up since then...   but maybe not.  I’m not the person to ask,  so I will mention some others that might be able to help.

 

Can anyone suggest a safe MSExcell password breaker?  Is that still possible these days?

@xrptoolkit @kanaas @tulo 

I can’t remember who the coders and power users are on here...  any suggestions for this problem are most welcome.

 

[BillyOckham]

1 hour ago, miicker said:

That's a pitty. I really tought I've created a backup of everything I needed. The information I need is probably in my crypto Excel file (xlsx), which I've encrypted with a password, which, you guessed it, I forgot...

Also...  I asked but you didn’t say if I had the situation correct when I said you could get a payment started but then fail at the password?  Is that the situation?

[tulo]

The backup code should work...especially if you already used it to restore the wallet?
What's wrong with that?

[miicker]

2 hours ago, BillyOckham said:

Also...  I asked but you didn’t say if I had the situation correct when I said you could get a payment started but then fail at the password?  Is that the situation?

 

11 minutes ago, tulo said:

The backup code should work...especially if you already used it to restore the wallet?
What's wrong with that?

 

Just to clarify it:

I bought some XRP a long time ago. I changed phones in the meantime. I lost my Toast wallet. I was able to recover the wallet because I have a backup code which looks likes this:

This restored my wallet and I also remembered the 6 digit code I need to enter my wallet. I can see the amount of XRP I have and my wallet address:

 

Then, when I try to send out transfer I can fill in all the details:

 

When I click "Send", it asks for a passphrase, which I do not know.

 

I tried basically all passwords I know and none of them seem to work. When I try to reset my passphrase its asking me for my old passphrase or my recovery passphrase. Entering the backup code here does not work.

 

I have an Excel xlsx file, I don't know exactly what kind of information I've put in that file, but I guess stuff like recovery passphrases.... And I don't know the password of that file either..

[BillyOckham]

Yeah ok...  that’s exactly as I thought.

I asked around and a helpful user here told me this...

Quote

In simple terms. Office 2007 and above uses 128bit or better, so not trivial to crack. I think 2016 onwards is 256bit.  Prior to that the encryption was vulnerable.

So if you are very lucky and the excel was from really old MS Office then you can probably get in using a cracking program.  But I’m a bit on in years and it seemed to me like not long ago that I was doing that “opening with a password cracker” but apparently it was ages ago.

So it’s unlikely that your Office software was old enough to be cracked.  XRP itself hasn’t been around long enough.

If you do get in please let us know here.  Good luck with it.

[Triceratops]

First make a backup of your excel file.

You should be able to rename your excel filte to .zip. Then unzip it into its xml parts, somewhere in xl -> worksheets -> <sheet name> should be a <sheetProtection algorithmName=”SHA-512″ hashValue=“ ...." > tag, search for it and delete the whole line, including everything between the "<" opening and ">" closing characters. Afterwards save the changes and rename the root folder back to .xlsx.

The protection should now be removed.

Edited March 25, 2021 by Triceratops

[BillyOckham]

50 minutes ago, Triceratops said:

First make a backup of your excel file.

You should be able to rename your excel filte to .zip. Then unzip it into its xml parts, somewhere in xl -> worksheets -> <sheet name> should be a <sheetProtection algorithmName=”SHA-512″ hashValue=“ ...." > tag, search for it and delete the whole line, including everything between the "<" opening and ">" closing characters. Afterwards save the changes and rename the root folder back to .xlsx.

The protection should now be removed.

Nice!   I’ve never looked in the file...  that’s great and might sort him out.  Well done you!

 

@miicker the post above might have your solution.

 

Edited March 25, 2021 by BillyOckham
Added tag to OP so they see it.

[Triceratops]

@miicker did it work?