> the three MetaMask disasters
1. Forgot the password — vault still installed.
2. Uninstalled / reset the extension, no seed backup.
3. Wiped the whole computer, no seed backup.
We handle all three. Success rate drops as you go down the list.
> for case #1: password recovery
We extract your encrypted vault from the browser profile (Chrome, Brave, Firefox all supported), then run GPU-accelerated password cracking against it using hints you provide.
Before we start: DO NOT reinstall MetaMask over the existing profile. That can wipe the vault. Freeze the profile — copy the entire `Local Extension Settings/nkbihfbeogaeaoehlefnkodbefgpgknn/` folder to a USB drive and stop using that profile.
> for cases #2 and #3: forensic extraction
If you've uninstalled MetaMask or wiped the drive, the vault may still exist as LevelDB fragments. This is forensic work: disk imaging, sector recovery, LevelDB reconstruction. Feasibility depends heavily on:
· How long ago the wipe / uninstall happened
· How much you've used the drive since
· Whether SSD TRIM was enabled (bad news) or HDD (better news)
We'll tell you honestly during assessment whether it's worth attempting.
> what to do immediately
1. Stop using the affected computer / browser profile. Every hour of use lowers your odds.
2. If it's an SSD, unplug it if possible.
3. Do NOT reinstall or reset MetaMask.
4. Open a case with the AI agent. Free. 5 minutes.
5. Ship the drive (or provide remote forensics access) once we've agreed on scope.