Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [wallet-security]

How to keep wallets safe.

Filter by
Sorted by
Tagged with
0 votes
0 answers
80 views

Is it safe to share half of the private key in WIF format?

Assuming I would generate my keys on https://www.bitaddress.org. Is it safe to share the following four pieces of data? One half of the private key. The public key. An SHA512 hash of the private key. ...
Ohumeronen's user avatar
0 votes
1 answer
87 views

What's the point of Multi Signature Addresses?

When an attacker has access to the private key of the wallet, he can dump the private keys of every address used for the multisign address(es). So, what's the point of multi sign addresses when there'...
Otijun's user avatar
  • 3
1 vote
0 answers
36 views

Securing Digital Heritage

I would like to bequeath my digital assets in a secure way. I am the sole custodian of my bitcoins. I would like to release or pass custody conditionally, like upon death. This has to happen in a ...
superAnnoyingUser's user avatar
11 votes
3 answers
4k views

How can I manually (on paper) calculate a Bitcoin public key from a private key?

I am interested in generating a Bitcoin address by hand for security's sake. After I choose/generate a private key, how do I generate the public key? From there, how would I double check my work? ...
Peter Bergman's user avatar
0 votes
1 answer
90 views

The practical security implications of an exposed 24 word seed phrase with "blanks"

I want (a substantial amount of) the strength in numbers of a self-custody 24 word Bitcoin wallet, but I don't want to memorise all 24 words; laziness prevails. My idea: create a note (probably ...
pjlangley's user avatar
  • 101
2 votes
0 answers
41 views

Receiving funds in multisig - is it enough to confirm the receive address on every signing device?

If I confirm the receive address displayed in my software wallet matches on EVERY signing device in my multisig setup, can I be confident that any funds sent to that address belong to an address I ...
chaulmianmints's user avatar
4 votes
3 answers
489 views

Which hardware wallets are technically capable of exporting the private key?

In light of recent events with Ledger, are all other hardware wallets susceptible to being able to export the private key as well, possibly with a firmware update? If the former answer is true for ...
Cigarette Smoking Man's user avatar
1 vote
0 answers
54 views

Is there a way to make a provably non-fake HW wallet?

With the current hardware wallets, there is AFAIK no way for a customer to verify if the HW wallet indeed generates secure, private addresses. All checks actually just use various methods to verify ...
Aleš Janda's user avatar
-1 votes
1 answer
59 views

COIN FILTERING OF 10% [duplicate]

I recently hired a 3rd party to trace and retrieve my investment which was being scammed. They said they were able to retrieve and sent the investment to an exchange. When I tried to withdraw, the ...
Fidel Wayara's user avatar
0 votes
2 answers
212 views

Is multisig less secure than single sig, since only one xpub needs to be swapped by an attacker to lose funds?

Scenario: (2 of 3 multisig) one of the hardware wallets is running malware and uses an attackers xpub instead of the one derived from the recovery phrase. This swapped xpub is reported to all the ...
chaulmianmints's user avatar
2 votes
1 answer
145 views

What are business cases with hardened child derivation (bitcoin)? What wallets support it?

Looks like many widely used wallets do not support hardened child key derivation. E.g. Sparrow, Electrum, etc. If so, why has it made into the standard, what would be good case examples? Speaking ...
Meglio's user avatar
  • 289
1 vote
1 answer
291 views

Xpriv can be calculated from the xpub + child private key?

I heard Michael Flaxman say that if an attacker obtains your xpub key as well as any one of your child private keys, they can calculate your master private key? Why is this not a huge deal? Where are ...
chaulmianmints's user avatar
1 vote
1 answer
142 views

Bitcoin Core wallet: two people with the same passphrase?

I set up the Bitcoin Core wallet and set up a passphrase to access the wallet. It seems to be the only way/needed input to access my wallet. The passphrase was NOT randomly autogenerated as I was ...
commstark's user avatar
4 votes
1 answer
1k views

Muun Wallet - All Funds Stored On-Chain?

I've read so far all official Muun articles about the submarine swaps and emergency kits, but one thing still has me confused. Let's say I receive $500 worth of Bitcoin on-chain to my Muun wallet. ...
Neo's user avatar
  • 43
0 votes
1 answer
86 views

Security issues and theft of money from the wallet

A transaction was sent from my node night CTransaction(hash=27aac94405, ver=2, vin.size=7, vout.size=1, nLockTime=762357) CTxIn(COutPoint(85d4e6a81c, 0), scriptSig=, nSequence=4294967294) ...
localhost01's user avatar
1 vote
1 answer
481 views

How secure are the private keys on a hardware wallet?

Specifically two questions are interesting to me: Are private keys ever accessible? When are they generated and how can we know/prove this? In more detail: Is my understanding correct that even ...
MManke's user avatar
  • 212
0 votes
2 answers
132 views

can MITM read my metamask seed phrase when I click "Reveal Secret Recovery Phrase" in the wallet? [closed]

I worry someone is leaching my WiFi and potentially trying to do a MITM attack. If I click "Reveal Secret Recovery Phrase" in my metamask wallet extension, will they be able to read it via ...
Oxi Defi's user avatar
0 votes
1 answer
39 views

Is it Possible to Create Signature Chains for Private Keys to Sign Transactions with? Similar to how Certificate Authorities Use Intermediate Certs?

I am wondering if it is possible to implement this flow with bitcoin private keys, similar to how certificate authorities have a root cert and an intermediate cert used to sign csr's. It would be ...
bobandweave's user avatar
0 votes
2 answers
187 views

Wallet phrase recovery

I already have 12 phrase for my wallet but they are not in order.Is there any program to re-arrange the wallet phrase?
kaung pyae soan's user avatar
3 votes
2 answers
211 views

What are the best practices for managing empty, unwanted wallets?

If I have a deterministic wallet which previously held bitcoin but is now empty and is no longer needed, what information should I keep? I think there are three options: keep nothing keep the master ...
Steve's user avatar
  • 171
2 votes
2 answers
1k views

Does a 12 word recovery phrase offer the same security as 24 words?

Watching this Q&A with andreas he states that a 12 word recovery phrase offers the same amount of security as a 24 word seed phrase as the output is 128 bits either way. If this is the case, why ...
bosch-0's user avatar
  • 41
0 votes
1 answer
43 views

For mobile wallets that don't ask for a password, how are keys encrypted on your device?

I've used wallets that give a seed phrase, but don't ask for a password to send coins (signing a transaction). I can't imagine they encrypt with the seed phrase since you don't ever re-enter the seed ...
drdo's user avatar
  • 3
1 vote
0 answers
29 views

How to secure exchange hot wallet keys

Am currently working on an exchange, am building the hot wallet using bitcoinjs-lib. I generate my wallet pub /sec keys and addresses using this library (I don't want to use wallet.dat file). Now is ...
Chisom Maxwell's user avatar
2 votes
2 answers
109 views

If you wanted to privately receive bitcoin from someone, how would you do that?

I do not like to be tracked when receiving or sending bitcoins. How do you make a secure wallet? If you wanted to privately get bitcoin from someone, how do you get it? How do you get the address to ...
BitBit's user avatar
  • 21
2 votes
1 answer
141 views

From a security standpoint, why might a desktop c-lightning user need an additional lightning wallet?

Many c-lightning tutorials on YouTube walk their listeners through the process of setting up a c-lightning node followed by the installation of a wallet like Spark-wallet. I just don't get it why do I ...
John Smith's user avatar
1 vote
1 answer
187 views

Is it possible to recover a wallet from Address and Password?

I had an Electrum wallet on my laptop that broke, contrary to the usual "forgot my password" questions, I do have my password but I don't have the seed and the laptop is on repair and the ...
32421243's user avatar
1 vote
1 answer
54 views

"Do not buy hardware wallet from a 3rd party seller" security tip, does it apply if authorized in the official website?

"Do not buy hardware wallet from a 3rd party seller" It's a well-known security guideline for newbies. I wonder though, does it apply for 3rd party sellers that are listed on the official ...
ZenVentzi's user avatar
  • 113
1 vote
0 answers
46 views

What do people mean when they say that Bitcoin are "unconfiscateable"? [duplicate]

So all my Bitcoin are on an encrypted wallet.dat inside a VeraCrypted USB memstick inside a fireproof safe. While this might stop random a burglar, how does it stop the government from confiscating ...
Q. Bresnahan's user avatar
1 vote
1 answer
109 views

Crossing borders: security scheme ideas

More and more airports force you to decrypt your data, they will also dump your stuff keeping a backup. This could happen in just about any border you try to cross. It is only safe to expect this to ...
walamagic's user avatar
3 votes
2 answers
983 views

Why is it bad to split up a wallet seed redundantly?

I have been reading a lot about wallet security and this seems to be universally considered a bad idea (see for example this video or this answer), but I am struggling to see why it is not a good ...
Steve's user avatar
  • 171
0 votes
1 answer
101 views

Are Satoshi's satoshis less secure than they should be?

So, Satoshi mined a bunch of BTC early on (but not in a "pre-mine" way), and has not moved them ever since. Doesn't that mean that his coins thus uses the very earliest "format", ...
Joevan T.'s user avatar
8 votes
1 answer
2k views

Should I share my seed phrase to earn airdrop tokens?

Someone on Face Book said I could earn free crypto by appying for an airdrop. He told me to download Blockchain from app store to my phone. I did this and created my account with a password. I also ...
coiningandcombing's user avatar
0 votes
1 answer
48 views

Is there any statistical evidence that 2 of 3 wallets are indeed the most common one?

I read the following statement: 2 of 3 wallets are the most common multi-signature wallets created. In this case, the wallet requires three signatures, but only two are needed to authorize a ...
Shweta Aggrawal's user avatar
0 votes
3 answers
244 views

Why do we need miners

I know everyone says that we need mining to solve the double spending issue, but why? OK I am Alice and I want to send Bob some money, but double spend that money. This is the part where you say ...
nedrobme's user avatar
0 votes
0 answers
180 views

Which app generates stronger mnemonic seed?

Mnemonic phrase, mnemonic seed, or seed phrase are defined as a secret group of words that represent a wallet. When used in sequence they allow access to the cryptocurrencies stored within. “Mnemonic” ...
AirGap's user avatar
  • 25
1 vote
1 answer
80 views

What a completely-decentralized cryptocurrency might look like

It occurred to me that a more useful cryptocurrency would be one which didn't require a network to validate transactions. It would consist of some kind of (self-mined?) token that can be proven to be ...
Tom Russell's user avatar
1 vote
1 answer
50 views

If I buy crypto on a third party site, such as Coinbase or any other sites, how do I safely transfer my wallet into an external 'cold wallet'?

By cold wallet, I mean any type of encrypted USB etc. If this isn't possible how would I buy crypto and then be able to store it on a USB in the first place? This may be a stupid question but I'm kind ...
crytposhadow's user avatar
1 vote
1 answer
109 views

Is it actually possible to secure your coins while also allowing access to "near and dear" when you die?

I have my wallet.dat files encrypted, stored on a computer which in turn is encrypted. All storage devices where the files are backed up to are also encrypted. I strongly doubt that any human could ...
user118918's user avatar
1 vote
0 answers
80 views

Generating HD wallet seed phrase

got a new hardware wallet and thinking of using my own set of bip39 words instead of wallet generated one, combined with a passphrase.
Anand Kumar's user avatar
1 vote
0 answers
54 views

How to store hd wallet seed in production server

I've developed a cryptocurrency payment gateway, which is a web application that generates new addresses for users, I've developed a HD wallet as a hot wallet for my application, and all addresses for ...
farzin fattahi's user avatar
0 votes
0 answers
64 views

Bitcoin Core Security

Is there any site or resource where I can learn how to do security transactions while trading on bitcoin testnet
user15320943's user avatar
0 votes
1 answer
136 views

Someon offered me btc mine trough his mining device

Someone from the social network offered me a btc mine through his mining device. He asked me for an email address so he could create a mining wallet address for me. I gave it to him. I don't know what ...
Nesib's user avatar
  • 3
0 votes
1 answer
256 views

Connecting a Hardware wallet to a full node

I'm trying to connect my hardware wallet to my personal full node for the sake of privacy. I need to know the node's IP, port, and RPC credentials. The first two are easy, I can see my full node in ...
Pishi's user avatar
  • 13
0 votes
1 answer
4k views

Is the public address for Tesla's wallet known?

I understand if this isn't likely the place. It has been all over the news that Tesla has bought 1.5 billion in bitcoin. I'm curious if tesla's public wallet address(es) are known? If they are not ...
tuskiomi's user avatar
  • 125
0 votes
1 answer
66 views

Is our hardware wallet safe if the PC or Mac has 3rd party apps?

For example, our PC or Mac might have 3rd party apps installed, such as Pixelmator, GIMP, or VLC player. They are usually considered to be safe apps. However, is it true that when using a hardware ...
nonopolarity's user avatar
-1 votes
1 answer
320 views

is there some one expert with the btc recovery tool?

trying to use btc recovery tool , installed every thing , python 2.7 and all the required pibs . followed tutorials . actually i need to find second password so am using the command i.e c:\python27\...
UmaiR NawaZ's user avatar
1 vote
1 answer
118 views

How do wallets work?

It may seem like a vague question, but what I understand so far is, you have a public key (address) which people can send coins too, and then you have the private key which you need to send coins to ...
Martin Bradley's user avatar
0 votes
1 answer
92 views

Do Coinbase, Coinbase Pro, Robinhood, Gemini, GBTC count as Web Wallet?

According to a 99Bitcoins video and some writing, Web Wallets are to be avoided because they are not secure. Does that mean when you buy bitcoins on Robinhood, Coinbase, Coinbase Pro, Gemini, or even ...
nonopolarity's user avatar
0 votes
1 answer
67 views

Security concerns with walletpassphrase

I have some security concerns with walletpassphrase: If it stores the passphrase for some unit of time. ie. so you can send funds, surely if the server is compromised, within that timeframe, the ...
Anonona's user avatar
  • 215
2 votes
3 answers
1k views

If the "wallet seed keywords phrase" is all that's needed to restore a hardware Bitcoin wallet, isn't backing that up a nightmare security-wise?

I buy a Trezor. I put all my coins on it. It has me type out the "wallet seed", which is a series of English words in the right order, onto a paper. And maybe I even buy a metallic card ...
T S's user avatar
  • 21