Bitcoin Forum

Any guide how to make the safest bitcoin wallet?

1) Get a computer that has never been onlne
2) Install bitcoin qt from usb
3) Send bitcoin
4) Make back-up
5) HODL
6) Profit

Will some cheap windows xp work out?

#2 and #4 could be compromised/attacked. IMHO the safest possible bitcoin "wallet" would be

#1 offline computer with open source OS
#2 deck of cards [1] or other form of sufficient entropy
#3 generate ECDSA key with the libary/tools the OS brings (use #2 for entropy)
#4 generate your address [2]
#5 encrypt everything
#6 never use the machine for anything else, unless you want to spend the coins

Security level: tin foil hat.


[1] see discussion here whether you prefer a DIY set or a bought set https://bitcointalk.org/index.php?topic=706978.0
[2] steps/algos used https://en.bitcoin.it/wiki/Technical_background_of_version_1_Bitcoin_addresses


------------------------


While it makes little difference for an offline machine, if you are concerned about security you should not use an OS that is no longer supported by the developers.

Only conceivable problem I see is when you actually want to spend your hyper-secured coins. You don't have Qt + Armory/Electrum to sign transactions offline (in this scenario) so you have to import the private key onto an online computer at some point which may be dangerous unless you spend the outputs instantly (although this is quite unlikely).

Given this, I'd probably still say that you'd be better off just downloading Qt and Armory and making sure they've been GPG signed and match both sha1 and md5 checksums. Then copy them to a formatted USB and onto an offline computer.

#1 Get an old HDD an old pen drive and a brand new pen drive
#2 Copy bitcoin-qt to the old pen drive
#3 Install windows on the HDD, this windows should never see the internet
#4 Copy bitcoin-qt from the old pen drive to the new windows, after copying remove the pen drive
#5 Open bitcoin-qt and generate a new address/privkey
#6 Insert the new pen drive into the computer and copy wallet.dat to it
#7 Remove new pen drive and format the HDD

The only downsides on this is that you are still vulnerable to physical hacks and a remote possibility the old pen drive could have a virus that infects the new windows then infects the new pen drive, you will still be safe until you want to spend the coins, if this happens you can still sync bitcoin, disconnect the computer from internet insert new pen drive, sign an offline transaction and broadcast it trough blockchain on another computer

Any way to not be vulnerable to physical attacks without using a password to encrypt wallet.dat?

Yes, with increase security comes decreased comfort. One could spend the outputs instantly and use a newly generated (same machine, its there allready, so why not use it again) address for the change or rest.

I was merely suggesting this as a solution since OP asked for the "safest" wallet. :P

Coinbase vault.

I know coinbase is a trusted. Anyway it isn't very good to store it in a third larty wallet. Our control over it is very limited.
Kindly,
         MZ

Any cold storage tutorial for usb or something? :((

LOL. remeber inputs.io? the site that was supposed to be super secure with gpg and 2 factor authentication? guess what happened to it.

I think the most secure way to keep your bitcoin safe is to make it so as few people as possible know that you own bitcoins. They will keep you from being subjected from most attacks

What if i get randomly keylogged or infected? They dont need to know it, they will check it.

You will likely not get keylogged unless an attacker is specifically targeting you so unless there would be some other reason that an attacker would need your keystrokes you should be safe from this if few/no other people knows that you own bitcoin.

I am not sure what you mean by infected. Most viruses only can do very limited tasks on your computer. Very few of them will search your computer and report back their findings.

If your not online the keylogger cant reach you.

I personally think that "keeping" your bitcoin stored on an offline computer is unnecessary. I think the chances are greater that you will suffer losses from price declines of bitcoin then that you would suffer losses from theft of your coins.

Other than just backing up your wallet on a couple different devices (another HDD, USB flash drives, 360KB floppy, w/e), I agree...   except every step that bitcoin takes towards being 'mainstream' you'll get people that are less and less tech savvy/computer knowledgeable in general.  God knows how much crap they have on their computers already from clicking on random Facebook pictures.

... and then there's the whole thing about wireless, esp. in public areas.

What about when you want to send the BTC? You have to connect to internet.

"If I prefer to keep in the bitcoin wallet (purse) online. Not on a personal computer, a potential big loss,"

choose a virtual treasure hoard in bitcoin storage sites as special protection systems available there. online wallet is much safer and reduce the risk of viruses.

  bitcoin wallet was just a number and cryptographic code. I use coinbase and blockchain for me because bitcoin depositary has its own system that can protect against viruses bitcoin,
Once logged in the user is given blockchain usually hidden typer and password. Thus, there is only one risk that could make a bitcoin is lost at the two sites.

"Well if we forget the password account in blockchain yes we lost bitcoinnya. Usually when in the existing e-mail recovery, if at blockchain no. Forgot password or hidden typer so exhausted already, let's just lost,.

using different accounts on two sites. It means having two purses online to protect the currency and not have to worry about virus attacks.

You can sign raw transaction, find more about it here. https://bitcoinarmory.com/about/using-our-wallet/#offlinewallet
Just transfer it to the USB and go to a clean Linux computer. You aren't get infected for just turning on your internet. Your private key would also not be exposed. You can always reset your computer every time when you send the transaction if you are really that scared.