Questions tagged [wallet-security]

How to keep wallets safe.

Filter by
Sorted by
Tagged with
0 votes
1 answer
87 views

The practical security implications of an exposed 24 word seed phrase with "blanks"

I want (a substantial amount of) the strength in numbers of a self-custody 24 word Bitcoin wallet, but I don't want to memorise all 24 words; laziness prevails. My idea: create a note (probably ...
0 votes
1 answer
4k views

Is the public address for Tesla's wallet known?

I understand if this isn't likely the place. It has been all over the news that Tesla has bought 1.5 billion in bitcoin. I'm curious if tesla's public wallet address(es) are known? If they are not ...
3 votes
1 answer
289 views

How to check that I control an address

I recently created a bunch of bitcoin addresses (public starting with 1, PK starting with 5) from a paper wallet, that I downloaded from their github (https://github.com/walletgeneratornet/...
0 votes
0 answers
78 views

Is it safe to share half of the private key in WIF format?

Assuming I would generate my keys on https://www.bitaddress.org. Is it safe to share the following four pieces of data? One half of the private key. The public key. An SHA512 hash of the private key. ...
1 vote
2 answers
270 views

Suggestion for Airgap Bitcoin Core - Comments?

Lesson learned the hard way: I lost a small value of bitcoins due to foolishly backing up private keys to a file which was uploaded to a cloud server. My wallet used to be bitcoin core. Right now my ...
1 vote
1 answer
61 views

Reuse air gapped Raspi used for seed generation?

Would it be wise for an air gapped RasPi used for seed generation be used again online with a new micro SD card? Am i missing anything?
4 votes
3 answers
475 views

Which hardware wallets are technically capable of exporting the private key?

In light of recent events with Ledger, are all other hardware wallets susceptible to being able to export the private key as well, possibly with a firmware update? If the former answer is true for ...
0 votes
1 answer
85 views

What's the point of Multi Signature Addresses?

When an attacker has access to the private key of the wallet, he can dump the private keys of every address used for the multisign address(es). So, what's the point of multi sign addresses when there'...
4 votes
3 answers
328 views

How can I safely store and trade Bitcoin and other crypto currencies?

How can I safely store Bitcoin? Exchanges require me to deposit to trade, is this safe? If I can't trust exchanges, what is the best way to safely store my cryptocurrency and transact it?
11 votes
3 answers
4k views

How can I manually (on paper) calculate a Bitcoin public key from a private key?

I am interested in generating a Bitcoin address by hand for security's sake. After I choose/generate a private key, how do I generate the public key? From there, how would I double check my work? ...
1 vote
1 answer
203 views

Manual work as source of entropy

Working on an opensource air-gapped crypto vault, in which I have the regular method of relying on OS to provide cryptographically secure random source and use that to generate the mnemonic phrase. ...
1 vote
0 answers
34 views

Securing Digital Heritage

I would like to bequeath my digital assets in a secure way. I am the sole custodian of my bitcoins. I would like to release or pass custody conditionally, like upon death. This has to happen in a ...
2 votes
0 answers
39 views

Receiving funds in multisig - is it enough to confirm the receive address on every signing device?

If I confirm the receive address displayed in my software wallet matches on EVERY signing device in my multisig setup, can I be confident that any funds sent to that address belong to an address I ...
1 vote
0 answers
54 views

Is there a way to make a provably non-fake HW wallet?

With the current hardware wallets, there is AFAIK no way for a customer to verify if the HW wallet indeed generates secure, private addresses. All checks actually just use various methods to verify ...
0 votes
0 answers
22 views

I don't understand why Wallet keys are only a little over a kilobyte when the transaction signatures are extreme in size [duplicate]

I'm asking this question related to bitcoin security. There's a general consensus that it's nearly impossible for a %51 attack on the bitcoin blockchain which isn't generally considered a risk that ...
-1 votes
1 answer
56 views

COIN FILTERING OF 10% [duplicate]

I recently hired a 3rd party to trace and retrieve my investment which was being scammed. They said they were able to retrieve and sent the investment to an exchange. When I tried to withdraw, the ...
-1 votes
1 answer
384 views

Import private key in HSM Luna SA

I need some clarification on how keys are imported into a HSM Luna SA. I should import BIP 32 private keys of multisign wallets. There are currently two keys: one for the user and one held by the ...
0 votes
2 answers
198 views

Is multisig less secure than single sig, since only one xpub needs to be swapped by an attacker to lose funds?

Scenario: (2 of 3 multisig) one of the hardware wallets is running malware and uses an attackers xpub instead of the one derived from the recovery phrase. This swapped xpub is reported to all the ...
2 votes
1 answer
144 views

What are business cases with hardened child derivation (bitcoin)? What wallets support it?

Looks like many widely used wallets do not support hardened child key derivation. E.g. Sparrow, Electrum, etc. If so, why has it made into the standard, what would be good case examples? Speaking ...
0 votes
1 answer
86 views

Security issues and theft of money from the wallet

A transaction was sent from my node night CTransaction(hash=27aac94405, ver=2, vin.size=7, vout.size=1, nLockTime=762357) CTxIn(COutPoint(85d4e6a81c, 0), scriptSig=, nSequence=4294967294) ...
1 vote
1 answer
280 views

Xpriv can be calculated from the xpub + child private key?

I heard Michael Flaxman say that if an attacker obtains your xpub key as well as any one of your child private keys, they can calculate your master private key? Why is this not a huge deal? Where are ...
1 vote
1 answer
139 views

Bitcoin Core wallet: two people with the same passphrase?

I set up the Bitcoin Core wallet and set up a passphrase to access the wallet. It seems to be the only way/needed input to access my wallet. The passphrase was NOT randomly autogenerated as I was ...
24 votes
3 answers
17k views

Is it safe to reuse a Bitcoin address?

Besides the obvious privacy implications, and (according to a bitcointalk.org forum post) the fact that once an address is used your coins that rest on it safety depend entirely on the ECDSA safety (...
4 votes
1 answer
1k views

Muun Wallet - All Funds Stored On-Chain?

I've read so far all official Muun articles about the submarine swaps and emergency kits, but one thing still has me confused. Let's say I receive $500 worth of Bitcoin on-chain to my Muun wallet. ...
1 vote
1 answer
109 views

Crossing borders: security scheme ideas

More and more airports force you to decrypt your data, they will also dump your stuff keeping a backup. This could happen in just about any border you try to cross. It is only safe to expect this to ...
0 votes
2 answers
186 views

Wallet phrase recovery

I already have 12 phrase for my wallet but they are not in order.Is there any program to re-arrange the wallet phrase?
1 vote
1 answer
480 views

How secure are the private keys on a hardware wallet?

Specifically two questions are interesting to me: Are private keys ever accessible? When are they generated and how can we know/prove this? In more detail: Is my understanding correct that even ...
0 votes
2 answers
131 views

can MITM read my metamask seed phrase when I click "Reveal Secret Recovery Phrase" in the wallet? [closed]

I worry someone is leaching my WiFi and potentially trying to do a MITM attack. If I click "Reveal Secret Recovery Phrase" in my metamask wallet extension, will they be able to read it via ...
2 votes
2 answers
996 views

Does a 12 word recovery phrase offer the same security as 24 words?

Watching this Q&A with andreas he states that a 12 word recovery phrase offers the same amount of security as a 24 word seed phrase as the output is 128 bits either way. If this is the case, why ...
1 vote
1 answer
186 views

Is it possible to recover a wallet from Address and Password?

I had an Electrum wallet on my laptop that broke, contrary to the usual "forgot my password" questions, I do have my password but I don't have the seed and the laptop is on repair and the ...
2 votes
3 answers
4k views

Using a dedicated phone as "hardware wallet"

Is there anything inherently insecure about using a dedicated Android phone as a "hardware wallet"? A dedicated phone implies: a clean ROM without gapps, e.g. GrapheneOS, Lineage OS without ...
3 votes
2 answers
942 views

Why is it bad to split up a wallet seed redundantly?

I have been reading a lot about wallet security and this seems to be universally considered a bad idea (see for example this video or this answer), but I am struggling to see why it is not a good ...
0 votes
1 answer
39 views

Is it Possible to Create Signature Chains for Private Keys to Sign Transactions with? Similar to how Certificate Authorities Use Intermediate Certs?

I am wondering if it is possible to implement this flow with bitcoin private keys, similar to how certificate authorities have a root cert and an intermediate cert used to sign csr's. It would be ...
1 vote
0 answers
1k views

Forgot password multibit

this is two weeks I am trying to crack my MultiBit portfolio, I do not remember my password recorded in July; I have no old file save my wallet, the word must be no more than 15 characters and must ...
3 votes
2 answers
201 views

What are the best practices for managing empty, unwanted wallets?

If I have a deterministic wallet which previously held bitcoin but is now empty and is no longer needed, what information should I keep? I think there are three options: keep nothing keep the master ...
1 vote
1 answer
54 views

"Do not buy hardware wallet from a 3rd party seller" security tip, does it apply if authorized in the official website?

"Do not buy hardware wallet from a 3rd party seller" It's a well-known security guideline for newbies. I wonder though, does it apply for 3rd party sellers that are listed on the official ...
0 votes
1 answer
42 views

For mobile wallets that don't ask for a password, how are keys encrypted on your device?

I've used wallets that give a seed phrase, but don't ask for a password to send coins (signing a transaction). I can't imagine they encrypt with the seed phrase since you don't ever re-enter the seed ...
2 votes
2 answers
108 views

If you wanted to privately receive bitcoin from someone, how would you do that?

I do not like to be tracked when receiving or sending bitcoins. How do you make a secure wallet? If you wanted to privately get bitcoin from someone, how do you get it? How do you get the address to ...
1 vote
0 answers
29 views

How to secure exchange hot wallet keys

Am currently working on an exchange, am building the hot wallet using bitcoinjs-lib. I generate my wallet pub /sec keys and addresses using this library (I don't want to use wallet.dat file). Now is ...
2 votes
1 answer
140 views

From a security standpoint, why might a desktop c-lightning user need an additional lightning wallet?

Many c-lightning tutorials on YouTube walk their listeners through the process of setting up a c-lightning node followed by the installation of a wallet like Spark-wallet. I just don't get it why do I ...
1 vote
0 answers
46 views

What do people mean when they say that Bitcoin are "unconfiscateable"? [duplicate]

So all my Bitcoin are on an encrypted wallet.dat inside a VeraCrypted USB memstick inside a fireproof safe. While this might stop random a burglar, how does it stop the government from confiscating ...
8 votes
1 answer
2k views

Should I share my seed phrase to earn airdrop tokens?

Someone on Face Book said I could earn free crypto by appying for an airdrop. He told me to download Blockchain from app store to my phone. I did this and created my account with a password. I also ...
3 votes
1 answer
435 views

How can Bitcoins be sent without Blockchain.info knowing your private key?

Blockchain.info is a hybrid bitcoin wallet with client-side javascript encryption. I understand that the wallet.aes.json where the private keys are stored is encrypted (client-side). But how can ...
0 votes
1 answer
48 views

Is there any statistical evidence that 2 of 3 wallets are indeed the most common one?

I read the following statement: 2 of 3 wallets are the most common multi-signature wallets created. In this case, the wallet requires three signatures, but only two are needed to authorize a ...
0 votes
1 answer
98 views

Are Satoshi's satoshis less secure than they should be?

So, Satoshi mined a bunch of BTC early on (but not in a "pre-mine" way), and has not moved them ever since. Doesn't that mean that his coins thus uses the very earliest "format", ...
0 votes
3 answers
244 views

Why do we need miners

I know everyone says that we need mining to solve the double spending issue, but why? OK I am Alice and I want to send Bob some money, but double spend that money. This is the part where you say ...
0 votes
0 answers
179 views

Which app generates stronger mnemonic seed?

Mnemonic phrase, mnemonic seed, or seed phrase are defined as a secret group of words that represent a wallet. When used in sequence they allow access to the cryptocurrencies stored within. “Mnemonic” ...
1 vote
1 answer
80 views

What a completely-decentralized cryptocurrency might look like

It occurred to me that a more useful cryptocurrency would be one which didn't require a network to validate transactions. It would consist of some kind of (self-mined?) token that can be proven to be ...
1 vote
1 answer
268 views

RPC security of bitcoind node

If I have a fairly default bitcoin.conf file, let's say: rpcport=8332 txconfirmtarget=6 ie: notably one where I don't specify things like rpcuser, rpcpassword - is this insecure? As I understand, ...
1 vote
1 answer
50 views

If I buy crypto on a third party site, such as Coinbase or any other sites, how do I safely transfer my wallet into an external 'cold wallet'?

By cold wallet, I mean any type of encrypted USB etc. If this isn't possible how would I buy crypto and then be able to store it on a USB in the first place? This may be a stupid question but I'm kind ...