Bitcoin Forum

I don't know about the Json file when opening a new crypto wallet until I want to buy a project that runs on a separate standalone network days ago, to cut the story short, the wallet is only available on windows and after opening it gave me recovery seed and it automatically downloads .json file to my PC, this is the problem, I never want to copy or download anything crypto wallet to my PC because I believe writing down my recovery seed is a lot safer but now I got a JSON file

So what's the problem?

Are you sure it's a json file too? Some places might download backup files as json.aes or aes.json (which are json files encrypted with your password - didnyou input one?). If it did autodownload without making you set a password, I'm not sure I'd trust the wallet/website you're using.

As long as your computer is free from viruses and malwares, I believe you have you nothing to worry about, by the way, if you didn't want anything crypto related file on your computer, then you shouldn't have downloaded a crypto wallet on the said computer, the wallet you downloaded is already a file on it own, even to add, there are several other files which your wallet will download to your computer in the background without you knowing it, so if really you didn't want anything crypto file related download on your computer, then indeed, you messed up big time.

What wallet are you using and where did you download it from?
A JSON file or keystore is just another way to backup your wallet and many wallet apps support this format (blockchain.com, mew, metamask..). The keystore is nothing but your wallet keys encrypted with your password. You can use it to restore your wallet anytime as long as you have the password to decrypt it.

The most important thing now is to be sure the wallet you are using is legit and you downloaded it from its official website.

There is no safe place if you use your PC online and are always connected to the internet.

If you want to make sure that your wallet is safe then run it on a PC with no internet connection and never connect it online after that generate a wallet seed and JSON file backup.
Save them to any storage that is never connected to the internet for safety purposes.

Don't worry about JSON file if you added a password recently when generating a wallet it should be encrypted but if someone stole it they have a chance to brute force the wallet.
So offline wallet or cold storage wallet would be the best and most secure for any online attacks.

First of all OP, you should let us know here what windows wallet you have installed so that those who know more can confirm and check if it is safe and if the download of the JSON file needs to be automatic. As far as I know, there are such things as your backup file for recovery in case you misplace the copy of your 12 seed phrase. It is better that you perform a scan with your updated anti-virus to allay your fears in case your device is infected.

Did you write down your recovery seed as a backup for that wallet?

You can have different backup of a same wallet in different formats. For example, with Myetherwallet (https://www.myetherwallet.com/wallet/access), you can have different formats for backup as well as access your wallet: Keystore file, Mnemonic seed phrase, Private key and more.

---

One of most important things in crypto are

• Learn how to and practice to back up your wallet
• Test that backup's utility (sometimes you will make a unusable backup by typos when writing down seed phrase, etc.
• If you can use your backup to import that wallet (same as when you need to recover it) successfully, you can use it to store your coin
• If you follow these steps, you will never feel panic that you lose access to your wallet by forgetting password, don't have usable backup

Don't understand the fuss, what's the problem with having two backups? Still you have choice of deleting it anyway.

I think that the wallet you have use just auto create a file for your wallet and it can be unlocked using the password you set if you did set a password just like electrum. Wouldn't be good if you have two back up like the back up in your pc and also the recovery seed you have written in a piece of paper. Well, if you don't want a json file then why not delete it anyway?. Try to provide what wallet you have used then maybe we can clear what you think you have messed up.

I remember those stories where bounty hunters complained that the wallets offered by some tokens contained viruses.
Try to learn about virtual machines. Take VirtualBox, for example. Thus, you will be protected from downloading files and wallets that you doubt in your main system.

https://www.virtualbox.org/

Correct me if I'm wrong, is the recovery seed inside the .json file? If it is, you can open it via notepad or any text editor you have to see what it contains. AFAIK .json file are not a virus and not an executable file that will put a malware on your computer without your consent.

Writing down a recovery seed also has some risk because there is a possibility that you will misplace it or someone in your house might throw it away so keep it properly and make multiple copies of it.

I think Vvang wanted to store their seed only on a piece of paper but their Wallet downloaded a JSON file and now they are worried their wallet could be compromised due to the JSON being digitally stored.

Vvang, I suggest you create a new wallet with Electrum or Bitcoin Core and move your coins to it.  I am not aware of any non custodial Wallet that generates JSON's automatically and I strongly recommend using a non custodial wallet to avoid unnecessary problems like your funds being frozen.  Anyway, back to your JSON file.  I had one before and when I lost my wallet, I tried using the JSON file as recovery but it was encrypted so I had some trouble getting to my coins.  Did you encrypt it with a strong password when creating your wallet?  If so, chances are your wallet is secure since even if someone gets to steal it, they will have to crack the password before accessing your coins.

Electrum and Bitcoin Core are available on multiple platforms and they do not download any JSON in your computer.  But, they will generate a 'wallet.dat' file instead that you can find in your AppData folder if you are on Windows.  You will want to encrypt your Wallet with a strong, random password and maybe even use a seed passphrase if you want extra layers of security in order to avoid negative events such as your .dat file being stolen together with your coins by some malware.

Or, get yourself a Trezor and use a Passphrase with it.  It is the safest option long term and there is no digital storage of any sensitive information about your wallet.

-
Regards,
PrivacyG

Create a new account off windows OS, id use my android instead then send the coins to the new wallet.

As far as I know, json files are like an extra layer of security on your BTC wallet address as it stores them in an encrypted file which allows users to safely keep their BTCs. Unless you downloaded something that contains malware from an untrusted network, you should be fine.

Just to be safe, you can post the wallet link for users to check if the file you downloaded is free from any malware/viruses. Like some also mentioned, as long as your antivirus on your PC is working, then you should not worry about anything.

I would be very brief about this, is your coin (asset) you have in the wallet you talking about missing? Well since you didn’t mention it missing then you don’t have a problem, so long you have access to your asset, I would recommend you make use of wallet you are more familiar with really, for me my present wallet which is electrum is less complicated and so far has been very secured.

You won't have it unless you decided to click the download button anyway it's okay but make sure its not kept in the PC for long time just better move it to an offline storage and then you no need to worry about phishing attacks or anything.

The name of the wallet is aleph zero and my browser downloaded the JSON file automatically, since the windows OS was still very new I just deleted the JSON file off my computer and write down the recovery seed instead.

I'm not particularly familiar with the Aleph Zero wallet, but I don't think you should worry. Since you said that your Windows OS was still very new at that time, we can assume that you did not have any malware on your computer that could steal the data contained in the json file. Did you use any kind of antivirus at that time? Most relevant antiviruses will successfully detect and block trojans, keyloggers and similar attacks.

For absolute safety, I recommend creating a new wallet, writing down a new recovery seed, and saving it in a safe place offline, then transferring all funds from the old wallet to the new wallet.

In the past I used to avoid any download that had only JSON file option without mnemonics. Good a thing that present apps have different options now.

---

I doubt that. Once you're on the internet, your computer is susceptible to viruses and malware. You can't completely avoid that, and that's one thing that disgusts me with PCs and desktops. I think it's a bit controlled with mobile phones.

That site's interface doesn't look nice. I hope the owner works on it to make it more appealing to visitors and users.

What's wrong? This is a regular site offering software downloads. Namely, a virtual machine. I do not think that there are any embellishments needed, as in our forum. The site justifies its paramount importance. For example, the Electrum wallet download site also offers software downloads. What else is needed?

Well, I'm one for aesthetics and ease of navigation on sites I visit. May be that's why I found that site not appealing or could it be that it's beautiful but it's just me not seeing that because I'm viewing from an android phone? Yes, I'm conversant with the electrum wallet site and I've to agree with you that its too isn't that fine. Perhaps, it's a thing with such sites as you've mentioned. I think I will leave it at that now.

If you did not want a digitally stored copy of your wallet, I hope you do not believe that by deleting it, it is gone forever.  In order for a file to be completely gone, you have to overwrite your entire hard disk, something some Linux distributions offer as an option upon install.  Maybe there are easier solutions to overwrite the free space on a Windows device that I am not aware of though.

Then if we are talking about Windows, browsers, Aleph Zero (never heard of this wallet by the way?) and Internet.  Just because your Windows OS is a new install does not make it safe.  Especially if your Windows copy is not legitimate, if your browser does not have random invasive add-ons, if you have not downloaded, opened and/or installed random things off the Internet, if Aleph Zero is a legitimate open source wallet and, last but not least, if the Internet connection you have is secure at all.

There are just so many things to consider when you are talking about digital safety and security.  If you want that JSON copy to be useless, create a new wallet in Electrum and write down that seed just on a piece of paper by your own hands.  No printers!

-
Regards,
PrivacyG

This kind of site is not designed to win beauty contest awards, but to provide visitors with the information they are looking for. This site has a simple, clean appearance with some useful and relevant information. Its design may be outdated, but I don't think it's important. The most important thing is the software.

The wallet seed is all you need to recover your wallet. So if you have written it down on a piece of paper and stored it in a safe place, deleting the JSON file is not a big problem, if this is what you are worried about.
I never heard of aleph zéro before to be honest but here is what I found on their support page which confirms what I said above (bold part):