Bitcoin Forum

Bitcoin => Bitcoin Technical Support => Topic started by: Uniex on November 16, 2017, 08:25:39 AM



Title: Any guides how to secure your bitcoins on server ?
Post by: Uniex on November 16, 2017, 08:25:39 AM
From time to time we hear that some exchange service being hacked, but after time we dont hear about security breach that was exploited.

My question - is there any best practices on the Internet how to build more or less secure web application with bitcoin server ?


Title: Re: Any guides how to secure your bitcoins on server ?
Post by: onnz423 on November 16, 2017, 01:33:49 PM
Well i would suggest keeping the bitcoin wallet somewhere else than the server. You can send RPC calls to external wallet too.
What kind of service are you hosting? That would help with the question.
If you don't want to use RPC calls to some other server, then the advised config would be something like this simply:

Code:
daemon=1
server=1
rpcuser=somelongstring
rpcpassword=reallylongpasswords
rpcallowip=127.0.0.1
rpcport=some unused port

It's pretty simple, however if storing huge amount of coins, then it's advised to hire someone reputable to make it more secure.


Title: Re: Any guides how to secure your bitcoins on server ?
Post by: ranochigo on November 16, 2017, 01:43:36 PM
A lot of the times, the reason why the exchange gets hacked is because of the owner wanting to run away. Either that or there is an inside job by people who have access to the server.

The main thing you have to do is to host a server offsite, from datacenters. Anyone could pretend to be you to get your service provider to reset the password for you. Has happened before and social engineering is not exactly preventable.

You have to secure your server with a password, that only selected people know. Other than that, you do have to get a cold storage. Its the only bulletproof way of storing the majority of Bitcoins.