Recover an Old Zcash Wallet Before the Sprout Freeze: wallet.dat, zc Addresses and Sprout Recovery

Technical Support
1

DON’T PANIC!

If you still have an old Zcash wallet from the early days, now is a good time to find it.

You have a bit of time before the Sprout pool is frozen. Just over one month.

NU7 Mainnet is currently targeted for November 5th 2026. This Zcash protocol upgrade disables V4 transactions, which means the legacy Sprout pool of ZEC will be frozen at that date. No more migrations out.

If you are trying to recover an old Zcash wallet, restore an old wallet.dat, recover ZEC from a Sprout zc... address, or work out whether some forgotten Zcash from 2016-2018 is still spendable, this post is for you.

Sprout is the original Zcash shielded pool. If your old shielded address begins zc..., it is a Sprout address.

A lot of early Zcash users will not necessarily remember the word “Sprout”. They may remember using zcashd / zcash-cli, Zcash Swing, Zcash Desktop GUI, Zcash4Win, Zcash4Mac, WinZEC, ZecWallet Fullnode or an old computer which simply had “my Zcash wallet” on it.

In most of those cases the important thing to find is not necessarily the old application.

It is the wallet.dat, complete old Zcash datadir, a z_exportwallet backup, or an exported Sprout spending key.

So before doing anything else:

BACK IT UP.

Make copies.

Do not experiment on your only copy of wallet.dat.

And never paste a private key, wallet file or seed phrase into a website, forum post or chat.

ZecHub has put together a recovery page here:

Recovering Zcash funds / old wallets:

And a detailed field guide here:

ZecHub ZEC Pool Migration Field Guide:

Direct PDF:

The guide is specifically written for Sprout and Sapling-era holders trying to locate legacy keys and move their ZEC safely into the modern shielded pool.

More in the next post about what to look for on an old computer.

Sprout → Sapling → Ironwood.

Remmbr, all migration paths lead to the Ironwood pool.

5 Likes
2

A zc... address on its own is not enough. It tells you the address is Sprout, but you still need the private spending material which controls the ZEC.

There is some good news.

Recovering old Sprout ZEC has become easier recently.

The ZecHub migration guide now covers two practical Sprout recovery routes. For somebody with an old wallet.dat or standalone Sprout spending key who simply wants to recover the funds, the Argos rescue wallet can read legacy zcashd wallet files directly. There is also the more involved zcashd sidecar route for people who want or need that method.

The traditional route can require a lot of disk space, synchronization and time.

So don’t blindly start downloading hundreds of gigabytes of blockchain data before checking what you actually have.

Be aware that the clock is ticking. You have just over one month from NOW.

If you are lucky and can use the Argos migration tool, expect hours at best, and days if things go slower.

If you decide to use the Zebra constrained zcashd sidecar, expect days to weeks to restore your ZEC.

Here it is again - a direct link to download the Zcash Pool Migration Guide (1.3Mb PDF):

If you need to restore a corrupt wallet.dat file, consider deep recovery with ZExCavator, or one of the other methods explained here:

4 Likes
3

:seedling::seedling::seedling::backpack:

radbro

4

P.S. One more useful distinction when looking at old Zcash backups.

A wallet from the Sprout era is not necessarily a Sprout wallet.

Old Zcash wallets may contain:

  • Sprout shielded ZEC
  • transparent ZEC
  • or both

So first identify what you actually have.

zc... → Sprout
t1... → transparent P2PKH
t3... → transparent P2SH

An old private key beginning 5... is generally an uncompressed WIF transparent private key, not a Sprout spending key.

A recent recovery case involved exactly this: an old 5... key generated with WalletGenerator.com. Sapling’s introduction in 2018 added a new shielded pool; the existing transparent pool remained in place.

For this type of recovery, Zkool can be used. It was patched in 2026 to import these old uncompressed 5... WIF keys. Zkool supports other forms of transparent recovery material, including transparent xpub/xprv keys from Electrum/BIP32-compatible wallets, BIP44 seed recovery from wallets such as Exodus and Ledger, and exported transparent secret keys.

Older instructions may mention zcashd importprivkey. That did work historically, but stock zcashd is now EOL.

Today, use current recovery tooling: Zkool for this legacy WIF case, Argos for old wallet.dat files, or the constrained zcashd sidecar behind Zebra/Zakura when Sprout-specific legacy wallet functionality is required.

You may also find K... or L... WIF keys, which indicate that the related transparent secp256k1 public key uses compressed encoding. These are the normal compressed form of Zcash transparent WIF keys and are generally easier to recover than legacy 5... keys.

Import or sweep K... or L... using a current wallet that supports transparent WIF keys, such as Zkool, and verify that the derived t1... address matches the address holding the ZEC before moving the funds.

One important warning:

Do not convert a 5... key to compressed form and assume it controls the same t1... address.

Same underlying secret, different public-key encoding, different address.

Old wallet.dat files can also contain a mixture of transparent keys and Sprout keys.

And an old seed phrase does not mean Sprout. Some pre-Sapling mobile wallets, including Coinomi and Jaxx, supported transparent ZEC only, and other transparent wallets used BIP44 seed derivation.

Zkool specifically supports BIP44 recovery for wallets such as Exodus, Ledger, and other transparent wallets. A seed phrase by itself is therefore not evidence of Sprout; seed-based shielded recovery is Sapling or later.

So:

“Sprout-era” describes a date.

“Sprout” describes a shielded pool.

They are not the same thing.

And of course:

NEVER POST THE REAL PRIVATE KEY OR SEED PHRASE.

Describe the format only, by posting its prefix only. Remember, if you post a full transparent address it exposes your public transaction history and balance.

Happy hunting, Zcasher!

1 Like
5

are old legacy trezor T1 transparent address will have eny effect on them ?

6

No, transparent coins are not in the Sprout shielded pool

2 Likes
7

As Shawn says, the transparent pool is separate from the shielded pools.

The transparent pool is NOT being put on ice. Only Sprout.

For old Zcash recovery, these are the transparent address and private-key prefixes to look for:

  1. t1... - normal transparent Zcash address from launch in 2016. Bitcoin-style P2PKH using secp256k1. Examples: early miners, exchanges, Trezor/Ledger users, Jaxx, Coinomi and Zcash4Win.
  2. t3... - transparent P2SH/multisig address from launch. Much less common. Examples: zcashd multisig, custody or scripted setups.
  3. 5... - old uncompressed WIF (Wallet Import Format) private key for a t1... address. Common in early paper wallets, key generators, and zcashd exports (of an imported one). If you swept one into Exodus, the funds moved to the Exodus seed, so check both.
  4. K... / L... - compressed WIF private keys for t1... addresses. These can appear in key exports from Jaxx/Coinomi-era and later transparent wallets such as ZecWallet.

If one of these transparent addresses or keys controls your ZEC, it is not being put on ice. There is no current transparent-pool deadline, but you may want to recover it into a modern wallet and/or move it into the Ironwood shielded pool. The Orchard pool is now exit-only.

Be aware that very old wallet software may still build V4 transactions. Under the current NU7 plan, V4 transactions will no longer be accepted by consensus, so old software could stop being able to send even transparent ZEC. Older wallets may also run into fee-policy problems because they predate ZIP 317’s action-based fees, introduced after the spam attacks, or do not set the correct consensus branch ID.

The transparent ZEC itself is not frozen and remains spendable using modern transaction formats. You may need to restore an old mobile/hardware-wallet seed, import a WIF private key, or recover an old wallet.dat using current software.

A seed phrase may recover transparent ZEC and, in later wallets, Sapling ZEC.

(For Sprout a seed phrase alone is not a substitute for an old zcashd wallet.dat. Sprout requires the original Sprout spending key, which may be in an old wallet.dat or preserved separately as an exported, written-down or printed SK... key. Keep the original wallet.dat because the v4.7.0 recovery phrase does not cover every older or imported key.)

So, Sprout-era does not always mean Sprout.

BUT… an old wallet.dat or wallet export from 2016-2018 may contain transparent ZEC, Sprout ZEC, or both. Sprout addresses start with zc... and Sprout spending keys with SK.... Check what it actually controls before Sprout is put on ice. (See links above.)

1 Like
8

A fire hose of information I know. But my aim is to have a much detail as possible here so folk can find it in one place, and migrate their ZEC before the Sprout pool is frozen in ice.

TL;DR:
The transparent pool is NOT being put on ice. Only Sprout, as of Nov 2026.

An old wallet.dat or wallet export from 2016-2018 may contain transparent ZEC, Sprout ZEC, or both. Sprout addresses start with zc... and Sprout spending keys with SK.... Check what it actually controls before Sprout is put on ice.

1 Like
9

thank you for the information .
I have my Zec in a trezor wallet since launch almost .
I am getting mixed messages in the post .
I understand that its ok no problem with them .
then I also read that they might experience problem with them .
does that mean I need to buy new hardware wallet ?

10

@dbfusion if you’ve had the same Trezor since, say, 2017, it will be a Model One. (The other from this era is the Model T released in 2018.)

For Zcash, the important point is that Trezor supports transparent ZEC (t addresses) only. It does not support shielded Zcash addresses/transactions.

So if your ZEC has been held on your Trezor, it should be transparent ZEC and is NOT in the old Sprout shielded pool. The Sprout freeze therefore isn’t a reason on its own for you to buy a new hardware wallet.

If you are happy with it where it is in the transparent pool, Trezor do have a history of keeping these devices working for transparent ZEC, so you don’t need to act now.

Both the Model One and Model T are discontinued from sale, but Trezor says they will receive basic maintenance until at least 2031 and critical security fixes until at least 2036.

1 Like
11

thank you very much for the clear and straight to the point answer . , yes I have the old trezor one and I am quite content with it I don’t have much zec , but I am a believer since launch and support it .
just for any one reading I am not making a ton of cash or anything , I was there when it costed around 800 USD .
its just I am a diamond hand who really believe in the project . more than BTC .

2 Likes
12

Hi, Does Argos need to support anything that it currently doesn’t?

We also released Argos 1.3.1 that added some quality of life improvement for people doing sprout recovery.

1 Like
13

Thx, usefull information. If I understand it correctly after one month you cannot move funds any longer from a Z-adresd, is that correct? Personally I find it rather bad to to have any deadlines. If you own funds, you should always be able to spend/recover them even if that would force sending them to transparent address or Ironwood. I mean, the point of a blockchain is to always be in self custody of your coins and not only if you keep up to date to protocol changed and migrate within a certain time frame. Just my opinion.

1 Like
14

No, that is incorrect.

This change only applies to legacy Sprout pool addresses (starting with letters ZC), this does not apply to any other Z-addresses.

15
Shielded Pool Address Status
Sprout zc... Pool frozen at NU7 (~Nov 5th 2026). Migrate now.
Sapling zs1... Still works; will be retired eventually (no date yet).
Orchard u1... Withdrawals only since NU6.3. Migrate to Ironwood.
Ironwood u1... Current shielded pool. Final destination pool (for now).

Orchard and Ironwood addresses look the same. Since NU6.3, funds sent to Orchard land in Ironwood automagically.

For more details on the hows and whys of pool retirement, see the Pool Migration Guide PDF.

2 Likes
16

The reasons for pool retirement, are explained in the migration guide. It’s not done lightly, or for trivial reasons. One reason is that older pools cannot be made quantum resistant.

Sprout deprecation has happened in stages. It’s been on the cards for more than 6 years.

Oct 2016: Early evolution warning.
Before launch, Zcash designers publicly warned that future upgrades might require action to move dormant funds. This established that coins in old pools would not remain spendable forever.

May 2019: Sprout-to-Sapling migration tool released.
Nov 2020: The ability to add new value to the Sprout pool balance is disabled.
Mar 2026: Sprout-to-Sapling migration rounds are accelerated from every 500 blocks to every 100 blocks, and the average amount above 1 ZEC rises from about 5 ZEC to about 500 ZEC. This shortens the time needed to migrate

ZIP 211, deployed with Canopy in Nov 2020, made the pool exit-only and explicitly described this as a step toward removing Sprout from consensus.

Removing Sprout from consensus at NU7 means putting it on ice. The Sprout transaction set will become a historical archive frozen in time. See the migration guide which describes possibilities for the future.

2 Likes
17

P.S. Just to be clear I think your concern is completely reasonable.

Unfortunately shielded pools are not just address formats. They are complex cryptographic protocols that must remain a live part of consensus, and keeping every old pool spendable forever has security consequences.

The older pools don’t have Ironwood’s quantum-recovery mechanism, and are intended to be retired rather than retrofitted. i.e. existing notes (coins) cannot be retroactively given Ironwood’s quantum-recovery property.

It’s a bit painful to migrate from Sprout to Sapling. But Sapling to Ironwood, and Orchard to Ironwood, is a lot easier due to the sterling efforts of the wallet developers, who have made the migration UX smooth and almost one-click.

Finally, to you and others in this thread… thank you for being a long term ZEC holder!

18

A ok, my bad. I thought the issue would be for Sapling addresses. Like most poeple I simply think of z addresses and did not distinguish between zc... and zs1...
Although ideally one would always allow spending of past funds forever, 6 years for migration is a reasonable time frame for migration :+1:

19

Thank you for your patience!

This thread is about practical advice for Sprout holders and this deadline. That is the immediate priority: making sure ZEC holders understand what is happening and have the best chance of moving their funds in time.

But there is a deeper issue here.

Now for a personal note…

I will never personally support a situation where unmigrated notes or coins in a retired pool are simply burned, or where their value is somehow “recycled” without a holder’s consent, for example into something like the NSM. Neither of those things has been seriously proposed, and I am not suggesting they have.

But I think the principle is important to state.

This is money, and it should be treated as such.

If somebody legitimately owns value in an old pool, then retiring the technology used by that pool should not mean extinguishing the holder’s claim to that value.

One way I think about this is that removing Sprout from consensus is a bit like removing an old physical banknote from circulation.

The note is no longer usable for ordinary transactions. But that is not the same thing as destroying the holder’s underlying claim.

From time to time old banknotes are withdrawn from circulation while still retaining their face value. In some banking systems, old notes remain exchangeable indefinitely. They may no longer be accepted in a shop, but the value they represent does not simply disappear.

You can go to the national bank and hand them in for new notes. The national bank has experts who can examine an old note, determine whether it is counterfeit, and if it is genuine give you a new one.

I think there is a useful analogy here with Sprout.

Once Sprout transactions are removed from consensus, the Sprout transaction set becomes, in effect, a historical archive frozen in time.

Like an old banknote.

The history still exists. We can preserve the archived Sprout chain and the record of what value existed there.

My personal hope is for a future Sprout redemption mechanism.

That would not mean re-enabling the full Sprout protocol. Maybe a future Sprout redemption circuit could allow somebody to prove ownership and value from the archived Sprout state, and redeem that value into a current pool, without generally turning Sprout transactions back on.

1 Like
20

I also think the quantum issue has an interesting parallel with physical cash.

Older paper notes can become easier to counterfeit as printing, scanning and reproduction technology improves. Governments respond with better security features and, in some countries, by moving from paper to polymer (plastic) notes.

The risk from quantum computing is real.

If sufficiently capable practical quantum computers become a reality, they could break the relevant discrete-logarithm assumptions that the older pools rely on.

And this is not just a Zcash problem. It is shared by many established blockchains. In fact, it is a general problem for computer systems relying on this type of cryptography.

Imagine if a national bank could no longer tell fake old notes from real ones.

Worse, imagine someone could bring a perfect counterfeit into existence just by clicking the copy button on their new super-duper max-colour photocopier.

That is roughly the kind of problem we face if quantum computers become capable of breaking the cryptography we rely on.

That is why Zcash needs new pools as the cryptography evolves. Ironwood gives us quantum recoverability, but it is not itself a fully post-quantum long-term storage solution. Daira-Emma has previously discussed the possibility of a separate long-term cold-storage pool using cryptography designed specifically for that purpose.

Unfortunately, as Zcash users, we have to get used to migrating as the cryptography evolves. Although better wallet UX makes it less painful.

Technology advances. An old form of money becomes unsuitable for normal circulation. We need a way to move to something more secure without unnecessarily extinguishing the legitimate holder’s claim.

There is perhaps some irony in finding that we share a problem with central banks that issue fiat currency.

But maybe that should not surprise us.

If something is used as money - as a medium of exchange and a store of value - sooner or later it has to deal with ageing technology, counterfeiting or cryptographic risk, security upgrades, old instruments and dormant holders.

So for me the important distinction is this:

Removal from consensus can be like removal from circulation. It should not mean destruction of the holder’s claim.

For the moment, Sprout holders need practical help before the deadline.

But beyond that, I hope preserving some form of long-term redemption remains a priority for Sprout, and for other pools as they are forced into retirement as well. A tough problem, but there is no shortage of out-of-the-box problem solvers in this community!

Zcash aims to be better money than fiat. It should not end up being less redeemable over the long term than fiat cash.

Old technology can be retired.

The holder’s claim should survive it.