Bitcoin Forum

 :-\

Relatively new wallet (2-3 months old)
Used for pocket change
Imported priv key that was generated online
Can't remember if I swept it or just added it

If I sweep a priv key into a wallet, does that mean if that key is compromised the entire wallet funds are available?

Anyways, I didn't have any secondary security enabled.

I'm just wondering if the wallet password was compromised or was it that priv key that caused this?

blockchain

The private keys got compromised, blockchain.info is rock solid otherwise

No, that is only when you import. When you sweep, the funds are automatically moved from the private key being swept to an address in your wallet via a transaction.

Your password was probably stolen. Check that you don't have any malware.

I beg to differ. Blockchain.info has had multiple security issues in the past. His private keys were not compromised unless he imported them. He most likely got his password stolen.

A password alone cant get you into a blockchain.info account, if you are trying to sign into your account with a new IP, you need email confirmation

A password alone cant get you into a blockchain.info account, if you are trying to sign into your account with a new IP, you need email confirmation
[/quote]
It depends on your security settings. You don't need to have an email linked to the account and if you did, you could also have it not set to email you. It really just depends on what he set for security, and based upon previous cases, the most common issue is password theft, not private keys being compromised which is insanely difficult and almost impossible to do with a web wallet unless the service is hacked.

It depends on your security settings. You don't need to have an email linked to the account and if you did, you could also have it not set to email you. It really just depends on what he set for security, and based upon previous cases, the most common issue is password theft, not private keys being compromised which is insanely difficult and almost impossible to do with a web wallet unless the service is hacked.

[/quote]

It would be pretty strange if he changed his settings to make his account more vulnerable/ less safe

It would be pretty normal if he didn't sign up with an email, thus that setting would not be enabled by default.

Also, note how he says that


Anyways, this is a pointless argument. Either way, he probably got malware on his computer which stole his password or his private keys, or both.

Blockchain.info is known for this. I'm sorry it happened to you. Don't use online wallets ever. They've had problems in the past and they're going to have problems in the future. I suggest Mycelium for Android and paper wallets.

why not use coinbase, always need email and sms verify if you want use so high security, or just use xapo wallet has ultra tight security and so many verification to withdraw your coin

blockchain.info is good service, without password recovery, so only you who know the password, the 2nd problem are you use same password for your email, other account web ? are you use internet security?

for all blockchain member im recomended using new wallet system from blockchain https://blockchain.info/wallet-beta/#/signup

- IP restriction
- 2fa Sms/google authy
- TOR IP blocked
- 2nd passsword

if you use all security system, im sure your bitcoin is safe

The private key which you said you generated online couldn't have compromised the whole wallet no matter if you imported or swept it, but since it was generated online, the funds stored in its address were already vulnerable. Most likely someone was able to find out your handle and the password of your blockchain.info wallet and like you mentioned you didn't had any second security enabled, who ever got in, wiped it clean.

Advice, do a clean sweep of your hard-disk partition and re-install the OS, install virus/malware scanners and update them, run a scan, if everything seems okay, install SPV based desktop clients such as Electrum, use a password to encrypt the wallet and add 2fa for greater security. Also, make note of your seed somewhere safe.

From your situation it seems like the imported private keys of your get compromised or accessed by some one remotely or physically. You better scan your whole computer for malware. With malware anybody from anywhere can access your all files in your computer. You better have printed those private keys after you import and deleted that pdf file with privatekey. Sorry for your loss.

Why do you people keep having online accounts without email and 2FA verification?

What, are you allergic on having money?

lol

Useless, the safest way to store your bitcoin is store it to cold storage, not into online wallet or exchange wallet service which it have many trouble. Stop using blockchain and exchange wallet.

I dont agree with you that online wallet are not safe, it is upto you that how you are using the security of the web wallet, i am using coinbase web wallet and i have enabled sms and email confirmation security and was using desktop wallet electrum, last 2 or 3 months back i also got hacked due to downloaded a file that was a keylogger, the hacker was able to hack my desktop wallet as i have not enabled the security but he was not able to hack my online web wallet coinbase because i have security of sms and if new ip then email confirmation needed so he as not able to hack my web wallet.

It is upto you that how much security you use of their services.

How if coinbase turn to Mt.gox v2? Are you sure risk your coins there?
Well now electrum have 2fa features. My experience is use web wallet is bad.