Find exposed seed phrases and private keys from images
BitShot is software made to find screenshots, images and photos containing crypto wallet mnemonics and private keys. It makes a full scan of hard drives, disks and folders recursively and outputs your findings — whatever matched the typical visual representation of a mnemonic phrase or private key, with a validity check.
Linux & Windows · 30-day licence, up to 100 machines · Monero payments only, no account or email required · Fixed price
In what scenarios BitShot can be used
Personal usage — You want to make a security audit of your image gallery, camera roll, screenshots or whatever pictures you took and keep on your hard drive or any devices, to make sure none of your crypto wallet mnemonics or keys are stored anywhere.
Forensics and auditing — BitShot is suitable for investigating and working with large datasets and large amounts of files, folders and paths. The results will be precise and no image containing secrets will be missed. Reports containing all important metrics, including seed phrase and private key contents, are provided in CSV and JSON formats.
Research and OSINT — It can be utilized to mass-scan images found in open sources. One such example is described in this article. You can get BitShot, scrape any sources for a big amount of images and find mnemonics and private keys in them.
BitShot can work offline after activation — no data is being shared and no connection is needed. Turn off any internet connection while running the scans for extra security.
Point it at a folder. Get back a list of found wallets.
Simple setup: pick a folder, choose what to look for, and let it run.
-
1
It scans everywhere, including subfolders
Point BitShot at a single folder or an entire C:\ drive. It goes through every subfolder on its own — you don't have to sort or organise anything, and non-image files are skipped. Five hundred pictures or five hundred thousand, it will work the same way.
-
2
It checks for seed phrases, private keys, and QR codes
Photos of handwritten notes, screenshots of wallet apps, notes apps, command lines and typed lists — all of it will be found. An additional feature lets you decode all QR codes to see if any of them contains mnemonics or private keys inside. Both the QR code finder and the private key finder can be turned off to speed up the scan, if you are looking only for mnemonics.
-
3
It's fast enough to run on average machines
Desktop or laptop, BitShot works through thousands of images in minutes rather than hours. It runs entirely on the CPU, so no graphics card or special hardware is needed. An old laptop will be slower, but it will finish.
-
4
You get exact files
An image only appears in your results if BitShot actually read a valid seed phrase or key on it (some false positives are possible, but no true positives will ever be skipped). What you get back is a list of exact file paths and names, with a preview menu in the app so you can check the results yourself. Matched images will be copied into a result folder beside the report files.
Precision, speed and security in focus.
Fully offline
No internet connection is required for the scan to start or finish. The only time BitShot goes online is the one-off licence activation when you first install it on a machine.
Formats that matter
Seed phrases of 12, 15, 18, 21, 24, 25, and 33 words — covering Bitcoin, Ethereum, Monero and anything else built on the same standards. Wordlists cover BIP39 plus several other common and less common standards. Seed phrases must be in English, but the screenshot itself can be in any language. Private keys in raw hex, Ethereum 0x format, WIF, encrypted BIP38, and extended keys. Additionally the formats used by Solana, Cardano, Tezos, Stellar, XRP, Sui, Mina and Qubic.
User-Friendly application
Setup, Scan and Results open in BitShot's own window — sortable, with previews, in grid or list view. Go through your findings while the scan is running or after it's done.
QR codes
Some wallets encode your seed phrase or private key as a QR code so you can scan it with another device. Turn QR scanning on and BitShot will decode and show them to you.
CLI support
The app runs headless — you can run the CLI in a terminal with all the same functionality as the GUI. There is a --help menu with a detailed presentation of the flags and their usage.
Safe and simple purchase
You buy with Monero and get a licence key for a month and 100 machines. When your month is over you come back and buy it again. If you want to install it on more machines — buy another key. No account or email is required.
System requirements
.exe — no installer, nothing in the registry
- Tested on Debian 12, Fedora 44 and Linux Mint. Also runs on Ubuntu 19.04+, Debian 10+, Fedora 30+, RHEL / Rocky / Alma 9+, openSUSE Leap 15.2+, Arch, Manjaro, Pop!_OS, Zorin and elementary.
- Ubuntu 22.04 and later may need
libfuse2installed before an AppImage will run. Most other distributions already have it. - ARM is not supported. Raspberry Pi and ARM laptops will not run it.
The app itself.
Fixed price
0.1 XMR / 30 days
Pay securely and anonymously in Monero.
- Full scanning, no limit on library size
- One licence covers up to 100 machines — enough for a household, a lab or a small company
- Linux or Windows build, by your choice
- Licence key is your only credential — nothing tied to your identity
Questions you might ask:
How fast is it?
Minutes for a few thousand images on an average machine. On an 8-core laptop, my folder of roughly 2,500 mobile screenshots scans in under 5 minutes. A library of 10,000 mixed photos, downloaded images and screenshots takes about 15 minutes. A large collection on a slow drive can take longer — you can pause the scan in the app and resume later from the same place.
Does BitShot change or delete anything?
No. It reads your images and writes a results file. Nothing is moved, renamed, or deleted. Whatever you decide to do about a file, you do yourself.
How results are stored?
Everything is written to a folder you choose, or next to the app if you don't pick one. Each scan gets its own timestamped folder holding a results file — CSV or JSON or both, whichever you selected — and a copy of every image that matched, sorted by confidence. Nothing is uploaded to any server, you can cut off your internet to be sure; the results will stay on your disk until you delete them.
Will it find a photo of handwriting?
Usually. A clear phone photo of a written seed phrase reads fine. Bad lighting, sharp angles, and messy handwriting all make it harder, the same way they would for a person.
Why does it need internet to activate?
It only needs it once, to check your licence key is real and tie it to your machine. After that it never needs to connect again — scanning works with the network off entirely.
Why Monero only?
For simple and secure payments, so you can remain anonymous.
What if I lose my licence key?
There's no account to recover it from — the key is the credential. Save it when you get it, along with the order link from the payment page. Contact support if any problems appear.
Can I use it on two computers?
Yes. One licence activates on up to 100 machines, so you can cover every computer you own without buying again. The one limit is the platform: a licence is for either the Linux build or the Windows build, chosen when you download, so running both means buying twice.
Will it show me things that aren't wallets?
Sometimes, and how often depends entirely on what's in your library. An image is only reported when the text on it forms a valid seed phrase or key, but any list or grid of ordinary words can line up with a wordlist by chance. Word games, language-learning notes and tables of common nouns are the usual causes. Every result opens in the preview panel with the words it read, so you can check it yourself to sort out false positives.
What happens after 30 days?
Scanning stops until you buy another licence key. Results you already have stay where they are, no images or result files will be removed from your machine.