Bitcoin Forum

Other => Beginners & Help => Topic started by: Vvang on September 03, 2022, 06:28:43 PM



Title: Password encryption into private key possible?
Post by: Vvang on September 03, 2022, 06:28:43 PM
Is there ever any crypto project that allows user passwords to be encrypted into its private key? I've never heard of such I am just curious and thinking about a possibility.


Title: Re: Password encryption into private key possible?
Post by: jackg on September 03, 2022, 06:35:30 PM
I've heard of using hardware wallets before: https://trezor.io/passwords/

I don't think it'd be that secure to use a private key that controls funds for encrypting and decrypting those as it might be more likely to get compromised (ie if your key is being stored in your computer's memory).

There might be working examples of PGP or RSA being used for this encryption though too (for password managers).


Title: Re: Password encryption into private key possible?
Post by: The Cryptovator on September 03, 2022, 07:25:10 PM
I am really confused. I assumed you want to encrypt your passwords to a private key that you would reveal later on. If this is what you are looking for then no, there is no such service or project. Rather you can encrypt your private keys with a password during create a paper wallet that I always discourage to use. Better use a hardware wallet that allows you to store your passwords like a password manager.


Title: Re: Password encryption into private key possible?
Post by: dkbit98 on September 03, 2022, 07:34:30 PM
Is there ever any crypto project that allows user passwords to be encrypted into its private key? I've never heard of such I am just curious and thinking about a possibility.
What exactly is user passwords?
If you are talking about password login details for websites, than this is possible with some hardware wallets but if you lose that wallet or it gets broken, you will lose access to your websites.
You can even use Fido 2FA with Trezor and ledger hardware wallets, but again if you lose wallet you lose access, so it's better to have backup device.
For password managers I would suggest using something like opensource KeePass software, instead of using hardware wallets.
If you want you can generate 12 seed words offline and use them as password for KeePass.

I've heard of using hardware wallets before: https://trezor.io/passwords/
I never tried it because you must install their extension to use it, and it only works for Chrome browser I think  :P


Title: Re: Password encryption into private key possible?
Post by: Charles-Tim on September 03, 2022, 08:04:59 PM
Is there ever any crypto project that allows user passwords to be encrypted into its private key? I've never heard of such I am just curious and thinking about a possibility.
You can use bitaddress.org on an airgapped device. You can use this guide:

How To Run The Bitaddress.org Tool In A Secure Offline TAILS Temporary Live Boot Session (https://forkdrop.io/running-bitaddress-tool-on-secure-offline-tails-system)

To generate the encrypted private key while using bitaddress html file
Click on paper wallet, input the randoms characters until it is 100%, click on paper wallet again, check BIP38, input the passphrase and generate. The private key would be encrypted and it stars from 6P.

But I will advice you to just use a seed phrase wallet instead, like electrum. You will run electrum on airgapped device, add passphrase while generating the seed phrase. Adding passphrase is known as salting, not encryption, but it is good as encryption.

You can also use iancoleman.io/bip39/ html file (https://github.com/iancoleman/bip39/releases/latest/) on an airgapped device, you have to include the passphrase, esle it will only generate normal wallet for you. Or you can use any other reputed seed phrase wallet.


Title: Re: Password encryption into private key possible?
Post by: JeromeTash on September 03, 2022, 09:31:19 PM
Password encryption into private key?

Isn't this taking it to a whole new level?  ;D
I mean, private keys are so hard to memorize and this will lead to poor security practices such as copying and pasting or storing them on cloud because one fears to manually write them down minus making errors.


Title: Re: Password encryption into private key possible?
Post by: PowerGlove on September 04, 2022, 12:12:56 AM
Is there ever any crypto project that allows user passwords to be encrypted into its private key?
The topic title and this question are both a little confusing, friend. :)

Trying to give it a generous reading, and flipping your question around, it seems like you're asking: "Can a private key be derived from a password?"

If that's your question, then the answer is yes and the term you're looking for is "brain" wallet. One obvious technique (there are many) is to simply hash the password to derive the private key (e.g. SHA256("ChosenPassword")). Any sequence of steps that results in an integer > 0 and < N (the group order of secp256k1) will work.

Don't go rushing off and using this however, because the security of any such scheme is limited by the password, and people tend to pick rubbish (low entropy) passwords. Only risk funds on addresses generated this way if you really know what you're doing.


Title: Re: Password encryption into private key possible?
Post by: examplens on September 04, 2022, 05:51:05 AM
Password encryption into private key?

Isn't this taking it to a whole new level?  ;D
I mean, private keys are so hard to memorize and this will lead to poor security practices such as copying and pasting or storing them on cloud because one fears to manually write them down minus making errors.

an excellent way to more easily compromise both things, private keys, and passwords.
It's really hard for me to understand what the purpose of such a possibility that the OP asks would be.


Title: Re: Password encryption into private key possible?
Post by: BitMaxz on September 04, 2022, 11:40:13 PM
Based on what I understand I think the OP is looking for software or anything that could encrypt the private key I tried the Bitaddress but it won't encrypt a private key that you already generated it only generates it's own private key Brainwallet (https://brainwalletx.github.io/#generator) and coinb.in also have this option to add a passphrase to encrypt the private key.

Why not use a tool called OpenSSL? This is usually used for encrypting or decrypting private key files(with your private key).
You can encrypt it with aes256 and there is a guide on the youtube how to do it here https://www.youtube.com/watch?v=Ij4hagieFjc


Title: Re: Password encryption into private key possible?
Post by: witcher_sense on September 05, 2022, 07:10:23 AM
Is there ever any crypto project that allows user passwords to be encrypted into its private key? I've never heard of such I am just curious and thinking about a possibility.
A private key is supposed to be generated using cryptographically secure PRNG to make it impossible to guess or reproduce by an unfortunate accident. In most cases, the passwords that users generate for different websites aren't as secure as a random 256-bit number, which means encrypting them into a private key only makes your coins vulnerable to a hacker's attack because low entropy takes little time to reproduce in case specialized software is employed. When dealing with cryptographic keys, avoid human brain-generated data at all costs because such a practice doesn't allow cryptography to reach its full potential in protecting sensitive data. Any cryptocurrency project that promises you to make a secure wallet using "convenient" data is likely lying and probably wants to steal your crypto because cryptography is not about convenience and making everything human-readable, it is all about security and robustness. Don't fall into the scams like that, follow standards instead because they were thoroughly tested and proved their reliability.


Title: Re: Password encryption into private key possible?
Post by: o_e_l_e_o on September 05, 2022, 10:35:46 AM
I tried the Bitaddress but it won't encrypt a private key that you already generated it only generates it's own private key
Sure it will:

  • Go to "Wallet Details"
  • Enter your private key
  • Tick the box "BIP38 Encrypt"
  • Enter your chosen passphrase
  • Hit the "Encrypt" button
  • Scroll to the bottom to get your BIP38 encrypted private key beginnin with "6P"

Should obviously be done on an airgapped device with a downloaded and verified version of bitaddress.