I would imagine that the paranoid darknety bitcoin user has an interest in keeping not only their private keys safe (so nobody can steal their bitcoins), but also has an interest in keeping their public keys safe (so nobody knows what addresses they control). With bitcoin armory, at least by default, a wallet's public information is available without any password protection when you load the program. Is there an option to encrypt all the wallet's information, so you can be safe in case, say, some jerk steals your computer and scrapes it for information about you?
I would get a Tails USB and store the Armory application and wallet files in encrypted storage. That way not only can they not tie your addresses to you, but if you access bitcoin related sites only through Tails, it would be hard to show you even know anything about bitcoin.
Tyler gave the most secure answer, but what I ended up deciding to do is the following:
- Create a wallet and save the backup
- Re-encrypt the backup in an archive (I used 7zip) Update: 7zip has a couple security issues, and I can't recommend using it. It can leave unencrypted copies of encrypted files in temporary folders, and certain ways of adding a file into an encrypted directory can add it unencrypted and decrypt your filenames. The 7z protocol is great, but 7zip itself is shitty at encrypting stuff.
- Delete the backup file with Eraser
- Delete the 2 armory wallet files with Eraser (located in C:\Users\\AppData\Roaming\Armory on windows). One of the files will be named exactly the same thing as your backup, the other will be identical plus a "_backup" at the end of the filename. Make sure you don't delete the files for your other wallets.
Whenever you need to use the wallet:
A. Open the archive and copy out the wallet B. Restore the wallet in Armory C. Use it, and once you're done.. D. Delete the copied out wallet with Eraser, and the 2 armory files as in steps 3 and 4 above
Again, this isn't as safe as Tyler's suggestion of using Tails, since you are copying something to the filesystem, and using a machine that maybe has some kind of virus. I opted to choose convenience over security in that regard here.