Bitcoin Forum

Plus is it still trustworthy, or are there currently better ways to create cold storage-paper wallets?

Can everyone also confirm that this is the correct link, and Github repository?

https://www.bitaddress.org/
https://github.com/pointbiz/bitaddress.org
https://github.com/pointbiz/bitaddress.org/archive/v3.3.0.zip

Asking for a friend. 8)

It is still secure to use. There isn't much development because it does what it is supposed to do and nothing else. I would recommend you to just use the github repo link and download from there instead of using/downloading the website offline.

I would prefer to have Segwit paper wallets but it isn't too difficult to convert it from that website after generating the private keys, downside being it won't be a simple process.

...

I have never created a paper wallet before, nor do I have the programming skills to assess Github or the risks of trying to create one while connected to the internet.

But, what if you use a VPN and TOR?  Would a user still face the same kinds of risks addressed above (and elsewhere)?

I have two hardware wallets, but am curious if a VPN and TOR would make paper wallets reasonably safe...

Yes it is still good and Yes that is the correct GitHub repository. However I would recommend using a better method to generate a paper wallet. My suggestion is using Electrum, and here is why:
1. It doesn't run in your browser and it is not written in JavaScript which are both two big advantages
2. You can generate both individual private keys (generate a new wallet then export a single key) or a mnemonic which means you can have many addresses derived from it which solves the address reuse issue with paper wallets with a single key on them
3. It is a well known wallet used by many and it doesn't have any bugs when it comes to key generation.

You should always create the paper wallet offline, so there is no usage for VPN or TOR.

It should never interact with the internet and thus it shouldn't matter if the user is using VPN or Tor.

Care to elaborate? I find browsers risky given the fact that there could be exploits surrounding the extensions or the plugin which could compromise the security. In that aspect, when generating the funds the main factor should be the randomness of the private keys being generated. From what I can tell, it takes the entropy from multiple sources which should be sufficient to ensure the security of the seeds.

...

pooya87, ranochigo,

Thanks guys.

Yes. Below is a step by step way to securely generate a paper wallet using bitaddress.org...

1. Download BitAddress.org JS code from https://github.com/pointbiz/bitaddress.org.

2. Run it in an offline computer and generate Address + Private Key.

3. Copy the Address in a text file and write down the Private Key by hand in your notebook.

4. Write the Private Key from your notebook to the text file by typing and run it through BitAddress.org JS code to see whether it generates back the same Address in the text file.

5. Now remove all traces of the Private Key, save the text file with Address and wipe out the temporary cache from your browser.

6. Download Coinb.in JS code from https://github.com/OutCast3k/coinbin/ and use it to sweep fund received at the generated Address.

I believe this guide is the best, and the safest, also the easiest for just cold storage in my opinion. Plus it gives the user an option for signing a transaction without breaking the cold storage if he/she chooses, https://electrum.readthedocs.io/en/latest/coldstorage.html

Thanks pooya87. 8)

It depends on the application, I prefer Electrum wallet in general, but there are aspects in which BitAddress excels in it, especially if we are talking about small amounts and people who do not have experience with cryptocurrencies.
If you want to print the papers in a cute way, the amounts are small, and the environment in which you are generating the keys is safe then yes, you can use that site.
The safe environment is the open source operating system, the latest update, the disconnection of the network card, the offline network.

I wouldn't ever generate a paper wallet using a browser-based software and/or javascript.

Just run any reputable wallet (e.g. electrum) completely offline and write down the mnemonic code + address and private key (if necessary).




Neither a VPN nor Tor would help you in any way.
You would still face all the risks mentioned, yes.