Recover a Coinomi wallet.
Coinomi is a popular multi-chain mobile and desktop wallet, with a password-encrypted seed protected by a memory-hard lock.
For a forgotten Coinomi password when you still have the wallet. Its memory-hard lock favors big CPUs.
Yes. Coinomi is one of the formats that reduces to a check-only extract, so the fleet can test passwords against it safely — finding the password never exposes a key that holds funds. CPU-optimal — scrypt at Coinomi's parameters rewards memory bandwidth over raw GPU throughput. You pay 15% only if we recover it, and nothing if we don't.
The Coinomi extract, in detail.
Exactly what the fleet receives for this format — and why finding the password still can't move the funds.
What leaves your machine — and what never does
For a Coinomi wallet, this is the entire check-only extract the fleet receives. It can test a password, but it can never be turned back into a key that spends.
$coinomi$ - the final 32 encrypted bytes of the encrypted master key
- the scrypt salt
- the scrypt N, r, and p parameters
- the rest of the encrypted master key, seed, and private keys — never sent
- your addresses and balances across chains
A correct password derives the scrypt key and decrypts the fragment to the expected padding. The fragment is only a tail of encrypted key material, so it cannot reconstruct the seed or a spendable key.
$coinomi$<encrypted-master-key-tail-hex>$<salt-hex>$<n>$<r>$<p> Illustrative and synthetic — placeholder bytes.
32 encrypted bytes plus scrypt salt, parameters, and a checksum wrapper — not enough to reconstruct the master key.
Coinomi derives its key with scrypt parameters stored in the wallet, commonly N=16384, r=8, p=1. The memory-hard work makes memory bandwidth dominate, so it is CPU-friendly.
A correct password derives the scrypt key and decrypts the fragment to the expected padding. The fragment is only a tail of encrypted key material, so it cannot reconstruct the seed or a spendable key.
$coinomi$ An open, published format. The agent checks every job matches it before running — so a real wallet can't be disguised as an extract.
See the full security model, or how a recovery works end to end.