There’s a particular jolt that comes with finding old Bitcoin: a card with twelve odd words in a box of tax papers, a hardware wallet at the bottom of a drawer, a wallet app on a retired phone, a wallet.dat on a laptop that last booted years ago. Half your brain is computing what it might be worth. The other half is already typing the words into a search box “just to check”. Stop that half — that instinct is exactly how found Bitcoin gets lost.
The honest shape of the situation: if coins are there, they’ve sat safely for years. Nothing here is urgent except your own excitement. The chain doesn’t expire keys — a 2013 address spends as well today as the day it was funded. The only new risk in the room arrived when you did, so this page is ordered to stop you from becoming the threat.
TL;DR. Don’t type the seed into anything — no website, no app, not “just to check”. Check the balance with addresses on a public explorer, never with the seed: a site that asks for your words is a harvester, and found money is what it farms. If there’s a balance, restore the found seed on a hardware wallet — on the device itself — and sweep everything to a brand-new seed.
wallet.datgoes into Bitcoin Core on your own machine, never to a “recovery service”. While you wait, put a movement alarm on the addresses — if you’re not the only one holding a copy, you find out within the hour on the free tier, within minutes on paid.
Step 0 — hands off the seed. Establish what you have
Different finds, different playbooks. Sort yours into one of four boxes:
- Seed words. Twelve, eighteen, or twenty-four English words on paper, card, or steel — almost certainly a BIP-39 seed phrase. Highest stakes: the words are the money — anyone who reads them holds every coin on every address the wallet ever derived. Its job now is to sit untouched until the sweep step below.
- A hardware wallet. The coins aren’t “in” the device — it holds keys behind a PIN. A forgotten PIN isn’t fatal if the seed backup made with it survives (check the box it came in). No PIN and no seed is the hard case; either one is enough.
- An old wallet app on a phone or computer. The app is a window, not a vault. If it still opens, its receive history is your address list for the balance check — no seed required.
- A
wallet.datfile. Bitcoin Core’s wallet file, possibly predating seed phrases entirely — a pool of independent private keys, maybe behind a passphrase you set a decade ago. Different playbook, covered below.
And don’t “validate” the words anywhere online. If you’re wondering whether the find is even a real seed, the answer arrives safely at the sweep step — a hardware wallet’s recovery flow checks the checksum on the device itself. Our BIP-39 validator exists for practice and recovery-drill checksum checks and runs entirely in your browser — but a found seed that might guard real money shouldn’t be typed even there, or anywhere.
Check the balance — with addresses, never with the seed
The fact that makes the safe path possible: addresses are public, keys are not. The whole world can already see every balance on the chain, so the balance check is an address hunt, not a seed operation:
- Collect addresses — from the old app’s receive history, from notes and emails of the era (“your withdrawal to 1A1z…”), from the paper itself; people often jotted a first address next to the words. If handwriting has mangled a string, our address validator will tell you whether it’s even well-formed.
- Look them up on mempool.space. You’ll see the full history: in, out, remaining. A zero balance with an outgoing sweep years ago is a common ending — past-you may have already sold it. At least you’ll know.
- Have the hardware device and its PIN? Plug it into the vendor’s official companion app and look — the keys never leave the device. Skip firmware-update prompts until you’ve seen the balance and made a plan.
- Only words, no addresses? Then patience: the safe balance check happens during on-device recovery on a hardware wallet, which is step one of the sweep anyway. Reconstructing the wallet on your daily computer to peek three days early is not worth it.
Why so strict? Nothing can “check” a seed without deriving its private keys, so any site offering the check is deriving your keys on someone else’s computer. “Old wallet balance checker” sites exist because people keep finding old wallets — they cost nothing to run, wait patiently, and sweep the good finds once the finder relaxes. The chain waited ten years for you; the thief only needs you impatient for one minute.
There’s money on it — the sweep playbook
Balance confirmed? Now finish properly. The goal isn’t just to access the coins — it’s to get them onto a key whose entire history you control. That means sweep, don’t import: move everything in a normal on-chain transaction to a brand-new seed generated today, inside a hardware wallet, by you. Why not keep using the found seed? Because you can’t audit its past — who read those words in ten years, whether a photo synced to some cloud, whether the 2014 software that generated them had a weak random-number generator. A sweep costs one fee and deletes every question: once it confirms, every copy of the old seed anywhere opens an empty wallet.
The clean sequence with one device:
- Buy the hardware wallet new, direct from the vendor — never a marketplace reseller. Set it up with a fresh seed generated on the device, write down that backup, get a receive address, verify it on the device’s own screen, and copy it somewhere safe.
- Wipe the device and restore the found seed — words entered on the device itself, through its recovery flow, never a computer keyboard. This is the one legitimate place a found seed ever gets typed. The wallet syncs; you finally see the full balance.
- Send everything to the new wallet’s address from step 1, checked character-for-character.
- Wipe again and restore the new seed from its backup. Coins confirmed — and you’ve just run a recovery drill on your backup as a bonus: you now know it works.
Two step-2 dead ends that aren’t. If the device rejects the words as an invalid seed, they may be an Electrum-format seed rather than BIP-39 — same-looking English words, different checksum. Restore them in Electrum itself (downloaded from electrum.org and verified, ideally on an offline machine) and sweep from there; rejection doesn’t mean the words are worthless, and it never means try a website. And if the restore succeeds but shows a zero balance where the explorer showed coins, they aren’t gone — check every account and address type in the companion app, and consider that the original wallet may have used a passphrase on top of the seed.
If the amount justifies it, a second device is simpler (one seed each, no wiping) — and the spare is genuinely useful afterwards.
One honest paragraph on fees. Old wallets are often a pile of small deposits — many little UTXOs — and a sweep spends every one. Fees scale with transaction size in bytes, not value: thirty tiny inputs cost meaningfully more than one big one, and legacy formats pay a bit more per input. Unlike a stolen-wallet race, you’re in no hurry — pick a quiet window on mempool.space or our fee estimator and sweep at a low rate. If a dusty UTXO is worth less than the fee to spend it, leaving it behind isn’t a mistake — it’s arithmetic.
wallet.dat and other museum pieces
A wallet.dat means Bitcoin Core, possibly from the pre-seed era — a pool of individual private keys, often encrypted with a passphrase. The no-scam playbook:
- Copy the file first. Twice, to two places. Every experiment happens on a copy; the original never gets touched again.
- Open it with Bitcoin Core on your own machine and let it rescan. It takes time and disk; a very old file may need Core’s built-in legacy-wallet migration — or an intermediate older version — before a current release accepts it. Slow on your own hardware beats fast on someone else’s.
- Forgotten passphrase? Your memory plus offline open-source tooling. btcrecover runs on your machine, against your copy, brute-forcing variations of passwords you half-remember. Most recovered passphrases come from the owner’s own habits — an old pattern plus a year, the keyboard walk you always used — not from magic.
- What not to do: upload the file to a web “checker” or email it to a “recovery service” that advertises to people in your exact situation — the file plus a cracked passphrase is the money. The recovery-scam economy that circles theft victims works found-wallet forums with the same script: upfront fees, urgency, requests for the one thing that must never leave your machine. A small legitimate specialist niche exists for large sums — but you find them, verify a real legal identity, and never let one party hold both the file and a payout path.
Old apps: if one still runs and syncs, it can usually send — treat that as a one-way exit ramp to your new hardware seed, not a wallet to keep living in. If it’s dead but you have its backup phrase, the hardware-restore route above covers it.
While you wait and decide — put an alarm on the addresses
Between “found it” and “swept it” there’s a gap — a shipping wait, a decision you’re sleeping on. The uncomfortable thought for that gap: you just proved this seed was findable. Whoever helped set it up, whoever moved those boxes, whatever cloud a phone photo synced to in 2016 — you can’t rule any of it out, and a copied seed makes no sound until the day it spends.
So make the silence visible. Put the found addresses on our Watchtower: it’s watch-only — addresses, never keys, so it couldn’t touch the coins even in principle — the free tier watches an address with no signup, and it emails you when anything moves, plus a weekly “still untouched” heartbeat. If something moves before your sweep, you know within the hour — within minutes on the paid tier — that someone else holds a copy — and your calm sweep becomes the stolen-Bitcoin playbook, where speed is everything. An alarm can’t block a spend; what it buys is knowing now instead of at the next family reunion.
After the sweep — make the next decade boring
The coins survived years of neglect; don’t let them depend on luck for the next stretch:
- The new seed exists in exactly two places: inside the hardware wallet, and on a physical backup — steel beats paper, and paper beats a phone photo by a mile. Never photographed, never typed, ever.
- The old seed is retired, not archived. Once the sweep confirms, destroy the old backups — future-you finding it again in 2036 helps no one.
- Run the self-custody score — eight questions, two minutes, and it names the weakest layer of your new setup while everything is fresh.
- Keep the alarm — move the Watchtower watch from the old addresses to the new ones. The lesson of this episode is that unwatched Bitcoin drifts out of mind; a weekly heartbeat email is the cheapest fix.
- Bigger find than one device should hold? The cold storage guide walks the upgrade paths — and the Trezor Safe 5 walkthrough covers first boot to first receive.
FAQ
Can I check the balance without typing my seed anywhere?
Yes — that’s the only safe way. Addresses are public: paste them into an explorer and you risk nothing. Get them from old receive histories, notes, or emails; or plug in the old hardware device. No addresses at all? The safe check happens during on-device recovery at the sweep step.
Are seed checker sites safe?
No. A site can’t check a seed’s balance without deriving your private keys, so any site asking for your words holds the coins the moment you finish typing. These sites farm exactly one crop: people who just found old wallets.
Sweep or import?
Sweep. An imported seed carries ten years of unverifiable history — every person, camera, and computer that might have touched it. A sweep costs one fee and moves the coins to a key that has never existed outside your new hardware wallet.
Old wallet.dat, forgotten password — options?
Copies first, then Bitcoin Core on your own machine, then offline open-source tools (btcrecover) fed with your half-remembered password habits. Never upload or email the file — it plus the password is the money.
Are wallet recovery services legit?
The ones that contact you: no — the direction of contact is the tell. Legitimate help is open-source tools you run yourself, or, for large sums, verifiable specialists you sought out who never control both file and payout.
Do old addresses still work?
Yes — Bitcoin has never expired a key or invalidated an address format. Old software dies; coins don’t. Any modern wallet that can use your keys can spend outputs from 2011 as easily as yesterday’s.
Related reading
- Is your seed phrase compromised? — “who could have seen these words”, for judging how urgent your sweep is
- My Bitcoin was stolen — what now — the emergency companion, if the balance check shows a spend you didn’t make
- BIP-39 recovery phrase — the security bible — how the new seed should live: steel, threat models, passphrases
- Cold storage in 2026 — hardware vs multisig vs SeedQR, when the find deserves an upgrade
- Bitcoin Watchtower — the movement alarm: an email if a watched address moves, weekly proof of silence