Bitcoin Forum

Hi. I know desktop wallets are safer but I have a question regarding a web wallet. What is the safest way possible of logging in. Please can you rank these in order of safest to least safest. I see four ways of potentially logging in:

1. HTTPS address + Tor browser + Onion address
2. None HTTPS + Tor browser + onion address
3. HTTPS address + Standard browser + Clearnet link
4. HTTPS address + Tor browser + clearnet link

Thanks a lot buddy, i was also wanted to know the Safest way to login to web wallet. Your post is very helpful for people like me who are looking for this answer. Thanks a lot.

HTTPS is a must. Without it your password/other info would be visible in clear text. You shouldn't have to use Tor/Onion, as you aren't trying to hide which site you are visiting. The most important thing when accessing web wallets is:

1) Make sure you aren't on a phishing site. Always check the address of the website and never use a google search to get to it. I recommend bookmarking the website to avoid phishing links.
2) Ensure your computer is clear of malware. If infected, hackers can install a keylogger which can easily reveal all your passwords.
3) Always enable 2 Factor Authentication. This will GREATLY increase your account security, as the hacker would need both your password AND your phone, something that is extremely unlikely.

At the end of the day you shouldn't be storing too much on web wallets. Anything of significant value should go into a hardware wallet. However if you enable 2FA and avoid phishing sites you are most likely safe from any hacks.

I don't understand why TOR is part of your choices. What are the risks that you are trying to avoid? Perhaps you could list them.

Well, web wallets gotta be secure indeed, a safe way would be using a hardware wallet from a secured computer, using only known links would be safe enough, I don't see the need for Tor...

Using a tor browser is not necessary for log in your web wallet, that will not make more secure to your wallet. Always check your pc everytime if they are malware free. Always check if it is a phising link you are going to visit, better to bookmark in your browser the legit web wallet so that you will only need to click the legit one and activate your 2fa aunthenticator.