Questions tagged [wallet-security]
How to keep wallets safe.
182
questions
0
votes
1
answer
59
views
What's the point of Multi Signature Addresses?
When an attacker has access to the private key of the wallet, he can dump the private keys of every address used for the multisign address(es).
So, what's the point of multi sign addresses when there'...
- 3
1
vote
0
answers
30
views
Securing Digital Heritage
I would like to bequeath my digital assets in a secure way. I am the sole custodian of my bitcoins. I would like to release or pass custody conditionally, like upon death. This has to happen in a ...
10
votes
3
answers
3k
views
How can I manually (on paper) calculate a Bitcoin public key from a private key?
I am interested in generating a Bitcoin address by hand for security's sake. After I choose/generate a private key, how do I generate the public key?
From there, how would I double check my work?
...
- 205
0
votes
1
answer
66
views
The practical security implications of an exposed 24 word seed phrase with "blanks"
I want (a substantial amount of) the strength in numbers of a self-custody 24 word Bitcoin wallet, but I don't want to memorise all 24 words; laziness prevails.
My idea: create a note (probably ...
- 101
2
votes
0
answers
36
views
Receiving funds in multisig - is it enough to confirm the receive address on every signing device?
If I confirm the receive address displayed in my software wallet matches on EVERY signing device in my multisig setup, can I be confident that any funds sent to that address belong to an address I ...
4
votes
2
answers
394
views
Which hardware wallets are technically capable of exporting the private key?
In light of recent events with Ledger, are all other hardware wallets susceptible to being able to export the private key as well, possibly with a firmware update?
If the former answer is true for ...
1
vote
0
answers
54
views
Is there a way to make a provably non-fake HW wallet?
With the current hardware wallets, there is AFAIK no way for a customer to verify if the HW wallet indeed generates secure, private addresses. All checks actually just use various methods to verify ...
- 41
0
votes
0
answers
22
views
I don't understand why Wallet keys are only a little over a kilobyte when the transaction signatures are extreme in size [duplicate]
I'm asking this question related to bitcoin security. There's a general consensus that it's nearly impossible for a %51 attack on the bitcoin blockchain which isn't generally considered a risk that ...
- 1
-1
votes
1
answer
46
views
COIN FILTERING OF 10% [duplicate]
I recently hired a 3rd party to trace and retrieve my investment which was being scammed. They said they were able to retrieve and sent the investment to an exchange. When I tried to withdraw, the ...
0
votes
2
answers
135
views
Is multisig less secure than single sig, since only one xpub needs to be swapped by an attacker to lose funds?
Scenario: (2 of 3 multisig) one of the hardware wallets is running malware and uses an attackers xpub instead of the one derived from the recovery phrase. This swapped xpub is reported to all the ...
2
votes
1
answer
130
views
What are business cases with hardened child derivation (bitcoin)? What wallets support it?
Looks like many widely used wallets do not support hardened child key derivation. E.g. Sparrow, Electrum, etc.
If so, why has it made into the standard, what would be good case examples?
Speaking ...
- 287
1
vote
1
answer
197
views
Xpriv can be calculated from the xpub + child private key?
I heard Michael Flaxman say that if an attacker obtains your xpub key as well as any one of your child private keys, they can calculate your master private key?
Why is this not a huge deal? Where are ...
1
vote
1
answer
108
views
Bitcoin Core wallet: two people with the same passphrase?
I set up the Bitcoin Core wallet and set up a passphrase to access the wallet. It seems to be the only way/needed input to access my wallet.
The passphrase was NOT randomly autogenerated as I was ...
- 43
4
votes
1
answer
908
views
Muun Wallet - All Funds Stored On-Chain?
I've read so far all official Muun articles about the submarine swaps and emergency kits, but one thing still has me confused.
Let's say I receive $500 worth of Bitcoin on-chain to my Muun wallet. ...
- 43
0
votes
1
answer
82
views
Security issues and theft of money from the wallet
A transaction was sent from my node night
CTransaction(hash=27aac94405, ver=2, vin.size=7, vout.size=1, nLockTime=762357)
CTxIn(COutPoint(85d4e6a81c, 0), scriptSig=, nSequence=4294967294)
...
1
vote
1
answer
439
views
How secure are the private keys on a hardware wallet?
Specifically two questions are interesting to me:
Are private keys ever accessible?
When are they generated and how can we know/prove this?
In more detail:
Is my understanding correct that even ...
- 212
0
votes
2
answers
114
views
can MITM read my metamask seed phrase when I click "Reveal Secret Recovery Phrase" in the wallet? [closed]
I worry someone is leaching my WiFi and potentially trying to do a MITM attack. If I click "Reveal Secret Recovery Phrase" in my metamask wallet extension, will they be able to read it via ...
- 3
0
votes
1
answer
39
views
Is it Possible to Create Signature Chains for Private Keys to Sign Transactions with? Similar to how Certificate Authorities Use Intermediate Certs?
I am wondering if it is possible to implement this flow with bitcoin private keys, similar to how certificate authorities have a root cert and an intermediate cert used to sign csr's. It would be ...
- 13
0
votes
2
answers
179
views
Wallet phrase recovery
I already have 12 phrase for my wallet but they are not in order.Is there any program to re-arrange the wallet phrase?
3
votes
2
answers
161
views
What are the best practices for managing empty, unwanted wallets?
If I have a deterministic wallet which previously held bitcoin but is now empty and is no longer needed, what information should I keep? I think there are three options:
keep nothing
keep the master ...
- 171
2
votes
2
answers
857
views
Does a 12 word recovery phrase offer the same security as 24 words?
Watching this Q&A with andreas he states that a 12 word recovery phrase offers the same amount of security as a 24 word seed phrase as the output is 128 bits either way.
If this is the case, why ...
- 41
0
votes
1
answer
40
views
For mobile wallets that don't ask for a password, how are keys encrypted on your device?
I've used wallets that give a seed phrase, but don't ask for a password to send coins (signing a transaction).
I can't imagine they encrypt with the seed phrase since you don't ever re-enter the seed ...
- 3
1
vote
0
answers
29
views
How to secure exchange hot wallet keys
Am currently working on an exchange, am building the hot wallet using bitcoinjs-lib. I generate my wallet pub /sec keys and addresses using this library (I don't want to use wallet.dat file).
Now is ...
2
votes
2
answers
104
views
If you wanted to privately receive bitcoin from someone, how would you do that?
I do not like to be tracked when receiving or sending bitcoins.
How do you make a secure wallet?
If you wanted to privately get bitcoin from someone, how do you get it?
How do you get the address to ...
- 21
2
votes
1
answer
135
views
From a security standpoint, why might a desktop c-lightning user need an additional lightning wallet?
Many c-lightning tutorials on YouTube walk their listeners through
the process of setting up a c-lightning node followed by the installation of a wallet like Spark-wallet. I just don't get it why do I ...
- 542
1
vote
1
answer
178
views
Is it possible to recover a wallet from Address and Password?
I had an Electrum wallet on my laptop that broke, contrary to the usual "forgot my password" questions, I do have my password but I don't have the seed and the laptop is on repair and the ...
- 13
1
vote
1
answer
52
views
"Do not buy hardware wallet from a 3rd party seller" security tip, does it apply if authorized in the official website?
"Do not buy hardware wallet from a 3rd party seller" It's a well-known security guideline for newbies. I wonder though, does it apply for 3rd party sellers that are listed on the official ...
- 113
1
vote
0
answers
46
views
What do people mean when they say that Bitcoin are "unconfiscateable"? [duplicate]
So all my Bitcoin are on an encrypted wallet.dat inside a VeraCrypted USB memstick inside a fireproof safe.
While this might stop random a burglar, how does it stop the government from confiscating ...
- 21
1
vote
1
answer
106
views
Crossing borders: security scheme ideas
More and more airports force you to decrypt your data, they will also dump your stuff keeping a backup. This could happen in just about any border you try to cross. It is only safe to expect this to ...
- 51
3
votes
2
answers
742
views
Why is it bad to split up a wallet seed redundantly?
I have been reading a lot about wallet security and this seems to be universally considered a bad idea (see for example this video or this answer), but I am struggling to see why it is not a good ...
- 171
0
votes
1
answer
94
views
Are Satoshi's satoshis less secure than they should be?
So, Satoshi mined a bunch of BTC early on (but not in a "pre-mine" way), and has not moved them ever since.
Doesn't that mean that his coins thus uses the very earliest "format", ...
8
votes
1
answer
2k
views
Should I share my seed phrase to earn airdrop tokens?
Someone on Face Book said I could earn free crypto by appying for an airdrop. He told me to download Blockchain from app store to my phone. I did this and created my account with a password. I also ...
0
votes
1
answer
48
views
Is there any statistical evidence that 2 of 3 wallets are indeed the most common one?
I read the following statement:
2 of 3 wallets are the most common multi-signature wallets created. In
this case, the wallet requires three signatures, but only two are
needed to authorize a ...
0
votes
3
answers
235
views
Why do we need miners
I know everyone says that we need mining to solve the double spending issue, but why? OK I am Alice and I want to send Bob some money, but double spend that money. This is the part where you say ...
- 11
0
votes
0
answers
174
views
Which app generates stronger mnemonic seed?
Mnemonic phrase, mnemonic seed, or seed phrase are defined as a secret group of words that represent a wallet. When used in sequence they allow access to the cryptocurrencies stored within.
“Mnemonic” ...
- 25
1
vote
1
answer
80
views
What a completely-decentralized cryptocurrency might look like
It occurred to me that a more useful cryptocurrency would be one which didn't require a network to validate transactions. It would consist of some kind of (self-mined?) token that can be proven to be ...
- 151
1
vote
1
answer
50
views
If I buy crypto on a third party site, such as Coinbase or any other sites, how do I safely transfer my wallet into an external 'cold wallet'?
By cold wallet, I mean any type of encrypted USB etc. If this isn't possible how would I buy crypto and then be able to store it on a USB in the first place? This may be a stupid question but I'm kind ...
- 11
1
vote
1
answer
108
views
Is it actually possible to secure your coins while also allowing access to "near and dear" when you die?
I have my wallet.dat files encrypted, stored on a computer which in turn is encrypted. All storage devices where the files are backed up to are also encrypted. I strongly doubt that any human could ...
- 11
1
vote
0
answers
79
views
Generating HD wallet seed phrase
got a new hardware wallet and thinking of using my own set of bip39 words instead of wallet generated one, combined with a passphrase.
- 11
1
vote
0
answers
52
views
How to store hd wallet seed in production server
I've developed a cryptocurrency payment gateway, which is a web application that generates new addresses for users, I've developed a HD wallet as a hot wallet for my application, and all addresses for ...
0
votes
0
answers
64
views
Bitcoin Core Security
Is there any site or resource where I can learn how to do security transactions while trading on bitcoin testnet
0
votes
1
answer
133
views
Someon offered me btc mine trough his mining device
Someone from the social network offered me a btc mine through his mining device. He asked me for an email address so he could create a mining wallet address for me. I gave it to him. I don't know what ...
- 3
0
votes
1
answer
217
views
Connecting a Hardware wallet to a full node
I'm trying to connect my hardware wallet to my personal full node for the sake of privacy. I need to know the node's IP, port, and RPC credentials. The first two are easy, I can see my full node in ...
- 13
0
votes
1
answer
3k
views
Is the public address for Tesla's wallet known?
I understand if this isn't likely the place.
It has been all over the news that Tesla has bought 1.5 billion in bitcoin. I'm curious if tesla's public wallet address(es) are known?
If they are not ...
- 117
0
votes
1
answer
59
views
Is our hardware wallet safe if the PC or Mac has 3rd party apps?
For example, our PC or Mac might have 3rd party apps installed, such as Pixelmator, GIMP, or VLC player. They are usually considered to be safe apps.
However, is it true that when using a hardware ...
- 181
-1
votes
1
answer
303
views
is there some one expert with the btc recovery tool?
trying to use btc recovery tool , installed every thing , python 2.7 and all the required pibs . followed tutorials . actually i need to find second password so am using the command i.e c:\python27\...
1
vote
1
answer
109
views
How do wallets work?
It may seem like a vague question, but what I understand so far is, you have a public key (address) which people can send coins too, and then you have the private key which you need to send coins to ...
0
votes
1
answer
87
views
Do Coinbase, Coinbase Pro, Robinhood, Gemini, GBTC count as Web Wallet?
According to a 99Bitcoins video and some writing, Web Wallets are to be avoided because they are not secure.
Does that mean when you buy bitcoins on Robinhood, Coinbase, Coinbase Pro, Gemini, or even ...
- 181
0
votes
1
answer
66
views
Security concerns with walletpassphrase
I have some security concerns with walletpassphrase:
If it stores the passphrase for some unit of time. ie. so you can send funds, surely if the server is compromised, within that timeframe, the ...
- 215
2
votes
3
answers
937
views
If the "wallet seed keywords phrase" is all that's needed to restore a hardware Bitcoin wallet, isn't backing that up a nightmare security-wise?
I buy a Trezor. I put all my coins on it. It has me type out the "wallet seed", which is a series of English words in the right order, onto a paper. And maybe I even buy a metallic card ...
- 21