Bitcoin Forum

Bitcoin => Bitcoin Discussion => Topic started by: Hatchy on July 11, 2023, 01:41:38 AM



Title: Storing Private Keys with Colors, how safe is this?
Post by: Hatchy on July 11, 2023, 01:41:38 AM
I recently came across an interesting new tool developed by Bitcoin developer Entero Positivo on GitHub (https://github.com/enteropositivo/bip39colors/) This tool claims to offer a different way of storing Bitcoin seed phrases using Bip39colors. According to the developer,
Quote
you can convert a 12-word phrase into 8 colors (or a 24-word phrase into 16 colors) and then convert them back to the original seed

However, I personally have reservations about this idea of storing seed phrases as colors. It raises concerns about the safety of the conversion process and the risk involved in using an online tool to handle sensitive information like seed phrases. Instead, I believe it's safer to stick to the traditional method of storing seed phrases.
I would like to hear your thoughts on this matter. Do you trust this new approach, or do you prefer the old method of storing seed phrases? Let's  share our opinions on this


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: ImThour on July 11, 2023, 01:54:34 AM
Do whatever you want with your private keys, just do not store it in a notepad file on a system connected to Internet or in your emails or in any place which is connected to Internet.
Make sure your private key stays offline. Register it down or write it down and store it in a locker. Also, do not ever store your private keys in a phone app which says it will keep it protected.

Anything that is connected to internet can surely giveaway your private key. Making an encryption like this and storing it doesn't save it either. Someone will crack it down.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: HoferBit on July 11, 2023, 02:00:20 AM
Do whatever you want with your private keys, just do not store it in a notepad file on a system connected to Internet or in your emails or in any place which is connected to Internet.
Make sure your private key stays offline. Register it down or write it down and store it in a locker. Also, do not ever store your private keys in a phone app which says it will keep it protected.

Anything that is connected to internet can surely giveaway your private key. Making an encryption like this and storing it doesn't save it either. Someone will crack it down.

agree, do whatever you want, do not forget how to recover, keep it offline.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: blue Snow on July 11, 2023, 02:03:47 AM
However, I personally have reservations about this idea of storing seed phrases as colors. It raises concerns about the safety of the conversion process and the risk involved in using an online tool to handle sensitive information like seed phrases. Instead, I believe it's safer to stick to the traditional method of storing seed phrases.
I would like to hear your thoughts on this matter. Do you trust this new approach, or do you prefer the old method of storing seed phrases? Let's  share our opinions on this
you can do that If you feel it's safe. but for me, I don't want to do it if it's not up to standard. The mnemonic seed and the private key is very sensitive case and word. You can be lost your Bitcoin if just put a little bit wrong word. In this case, if you use color, may can't be read correctly if the media like your phone storing that mnemonic is old or have the newest version. or maybe have the biased colors


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: SquirrelJulietGarden on July 11, 2023, 02:25:03 AM
I recently came across an interesting new tool developed by Bitcoin developer Entero Positivo on GitHub (https://github.com/enteropositivo/bip39colors/) This tool claims to offer a different way of storing Bitcoin seed phrases using Bip39colors. According to the developer,
Quote
you can convert a 12-word phrase into 8 colors (or a 24-word phrase into 16 colors) and then convert them back to the original seed

you trust this new approach, or do you prefer the old method of storing seed phrases? Let's  share our opinions on this
I want something simple to store my wallet private keys, mnemonic seeds. If you complicate the backup method, what will happen if at the end, you can not use the backup for wallet recovery?

It is not only about you but for your loved ones if they need to recover your wallet if you suddenly pass away. It will be nightmare if you pass away and your wife, kids can not recover your wallet. If they need to find helps from other people, they will have more risk to lose your bitcoins. It is hard to trust anyone to recover a wallet from backup. If they have your keys, they can steal your coins and your wife or kids don't have anything to prevent it.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: Cantsay on July 11, 2023, 02:41:49 AM
At least this one is more innovative than others that suggested storing private key by composing songs and children poems.

I have tried the tool with a randomly generated secret phrases, and I got my secret phrases in hex color code and was able to revert it as well, But you have to realise that secret phrase storage is not something that we shoud take lightly, just because a method seems fun does not mean we should use it. Anything that has the possibilty of compromising the security of your coins should never be put to use. Afterall the tool is still very new, Uploaded two weeks ago, no one has been to use and analyse it properly to see if there are any cons in using it.

If anyone is looking for a fun and secure way to store their private key/secret phrases then, they should try that of fillippone: Securing Your Seed Phrase with Washers (https://bitcointalk.org/index.php?topic=5389446).



Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: mamesso on July 11, 2023, 02:56:15 AM
Do whatever you think is comfortable, safe and easy, there are many ways you can do to store private keys before Entero Positivo developed a method of storing private keys using Bip39colors. I'm still thinking about doing this new method, because so far I've been very comfortable with the old method of storing seed phrase. The old, more traditional methods can sometimes be relied upon rather than the new methods which are still complicated, you also need to prioritize saving seed phrases so that the people closest to you can access your wallet when you are in an emergency.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: Despairo on July 11, 2023, 04:23:17 AM
It's just an another way you convert your private key into something that Average Joe wouldn't know if it's contain your private key. Safe or not, quite similar like how you hide and store your private key in a safe place. I think you're must write down the HEX code if you want to store it offline because if you print out the colors, there's a chance the color you printed isn't same due to int quality, paper quality, etc, using color picker will give your different HEX code.

See, both of the colors are same if we see with our eyes, but the HEX code are different.


HEX code:  #ff4017


HEX code:   #ff4219 


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: hd49728 on July 11, 2023, 05:20:37 AM
It's just an another way you convert your private key into something that Average Joe wouldn't know if it's contain your private key. Safe or not, quite similar like how you hide and store your private key in a safe place. I think you're must write down the HEX code if you want to store it offline because if you print out the colors, there's a chance the color you printed isn't same due to int quality, paper quality, etc, using color picker will give your different HEX code.

See, both of the colors are same if we see with our eyes, but the HEX code are different.


HEX code:  #ff4017


HEX code:   #ff4219  
When you make a colorful backup, you will have to back up the HEX code to know what is that color. You can not print a colorful paper piece and use it for recovery if you don't know the HEX code.

I don't see good convenience and safety with this colorful backup style. It is like I have to encrypt my seed phrase to colors which are hidden in HEX codes and later will have to decode it to get seed phrase. It is so complicated and inconvenience.

If something is wrong with one or few HEX codes, the backup will be unusable. LIke if ff4219 becomes blurry, broken like I only can read ff4... and three last numbers are unreadable, I will have to try with so many numbers. With seed phrase, I can simply enter it in a wallet and it will suggest some words for me.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: witcher_sense on July 11, 2023, 05:58:02 AM
However, I personally have reservations about this idea of storing seed phrases as colors.
A seed phrase is just a piece of random information, you can convert it into different formats like text, pictures, emojis, or mp3 files, but that is not going to make it less random, especially if we assume that a good source of entropy was used to create it in the first place.

Quote
It raises concerns about the safety of the conversion process and the risk involved in using an online tool to handle sensitive information like seed phrases.
Obviously, you should never insert your real private keys into any online forms, it is okay, however, to use web applications for testing and demonstration purposes. Fortunately, this tool is fully open source, which means you can verify the code, copy it on your machine and run it locally without risking exposing sensitive information.

Quote
Instead, I believe it's safer to stick to the traditional method of storing seed phrases.
I would like to hear your thoughts on this matter. Do you trust this new approach, or do you prefer the old method of storing seed phrases? Let's  share our opinions on this
When it comes to the security and safety of financial data, it is always better to stick to standard practices that are time-tested, well-reviewed, and widely adopted. For example, two months from now, a malicious developer may decide to slightly change the encoding algorithm to make all existing color backups impossible to decode. Given the low adoption of this encoding scheme, you are risking to lose access to your funds because an old version of code may be unavailable.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: Hyphen(-) on July 11, 2023, 07:09:32 AM
I would like to hear your thoughts on this matter. Do you trust this new approach, or do you prefer the old method of storing seed phrases? Let's  share our opinions on this
Your seed phrases are your personal wallet security information, which is your Bitcoin in this aspect; therefore, making sure the seed phrases are safe is your own duty as a wallet owner.

You have the right to use whatever method you find safe to secure your wallet. If you find the use of colors a safe way for yourself, then go ahead. The advice the forum users always give is to avoid saving your seed phrase online or anything that is connected to the internet to avoid having your wallet compromised.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: satscraper on July 11, 2023, 07:25:30 AM
I'm against converting SEED phrase into color palette.

The consensus among forum community is that metal backup which is resistant to corrosion and fire is the most reliable way for storing SEED phrase. Using it to store color HEX codes would necessitate stamping full six characters for every word converted into color,  which, sure, is a more harder work compared to simply stamping the initial four characters taken from each BIP 39 words in your SEED phrase.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: Cryptomultiplier on July 11, 2023, 08:15:48 AM
I would say this is just being over zealous because no matter how much one should try to keep them keys safe, converting it from one form to another doesn't exactly make it safe.
Unless there are persons who you know have tried doing this and it works perfectly, it is advised against.

You could go ahead and try it, but please leave the wallet empty or with coins you can afford to loose. When it works and upon an observatory period, you can share with us how it performed. This will of course be based on if developers don't make changes to the open source wallet you use.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: BALIK on July 11, 2023, 08:22:52 AM
I also saw this method recently, and I still haven't tried it. But honestly, I'm happy with my old method because I've been safe with it for years with no problems. You can use any solution for your seed phrase as long as you feel it's safe for you, you don't have to follow others. We have many methods of storing seed phrases, but I still choose the most traditional way of writing them down on paper and storing them in places, where I feel safe. Sometimes this method will be safe for you but not for others, so choose the best way for you.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: CryptoHeadlineNews on July 11, 2023, 08:51:29 AM
However, I personally have reservations about this idea of storing seed phrases as colors. It raises concerns about the safety of the conversion process and the risk involved in using an online tool to handle sensitive information like seed phrases. Instead, I believe it's safer to stick to the traditional method of storing seed phrases.
I would like to hear your thoughts on this matter. Do you trust this new approach, or do you prefer the old method of storing seed phrases? Let's  share our opinions on this
For me, this can be a good tool for the developer, but for the fact that it involves we sharing our seed phrase on an online tool, it's kind of risky because only if they could know which wallet belongs to those seed phrases, then we stand the chance of losing all our funds, which is what we all try to avoid & the biggest fear of every crypto holder.
But I just gave the tool a try while using a random seed phrase to see if It could generate any colour, and it didn't as the tool was able to detect it's an invalid seed phrase, as I'm scared to share my true seed phrase, as you can see below.
https://talkimg.com/images/2023/07/11/ZNkd5.jpeg


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: sunsilk on July 11, 2023, 08:58:22 AM
A tool? No thanks.

I don't want to download anything that shall be touching my seeds or private keys. I'm good with the conventional method of just writing it down on a piece of paper and let me handle how I'll keep the paper intact and away from anyone.

I'll not use any tool or app that's going to involve my private keys, this is the reason why some have been hacked when they think that they'll have a better way of keeping it than the usual one we does.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: o_e_l_e_o on July 11, 2023, 09:11:03 AM
It's a terrible idea.

You are completely dependent on this one implementation for it to work. If that implementation disappears, would you remember how to recreate the process and recover your seed phrase from your color palette? Probably not.

You cannot print out your colors, since no printer will print the exact accurate hex color and no scanner will scan in the exact accurate hex color, meaning any printed back up is worthless. This limits you to either storing the hex colors electronically which is a security risk, or writing them down by hand. If you are going to write something down by hand, it is much safer to write down a human readable seed phrase where one or two incorrect characters is still easily recoverable, than it is to write down a string of hex numbers where one or two incorrect characters may lead to permanent loss of your funds.

No one should use this.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: sokani on July 11, 2023, 09:38:23 AM
I recently came across an interesting new tool developed by Bitcoin developer Entero Positivo on GitHub (https://github.com/enteropositivo/bip39colors/) This tool claims to offer a different way of storing Bitcoin seed phrases using Bip39colors. According to the developer,
Quote
you can convert a 12-word phrase into 8 colors (or a 24-word phrase into 16 colors) and then convert them back to the original seed

Using a third party tool to store your seed phrase or private keys is not advisable. I see no difference between Entero's colour seed phrase backup and Ledger Nano X seed phrase backup as both involves using a third party agent. The safety of the tool is highly questionable. An hacker can exploit the application and steal one's seed phrase and I believe the colour backup can also be cracked to reveal the seed phrase as well. Writing your seed phrase down on a piece of paper or on a metallic steel and keeping it somewhere safe is still the best and safest method.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: big kid on July 11, 2023, 10:17:18 AM
Sounds great, I think. At least while you're keeping it offline and safe. I'm used to regular seed phrase that I'm keeping in my wardrobe on a list of paper.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: Z390 on July 11, 2023, 10:23:49 AM
Your private seed, your problem, you are free to do whatever you want with it, just be cautious, because any single mistake from the user it's gone, I still prefer writing them down or carving on a clean silver steel and keep that in a safe, somewhere far from strangers and families reach, this is money we talking a bout, even your family can betray you and rob you, I know some have good family, you are lucky and blessed, not every homes are made of loyal people.

1. Say no to strangers in your private space.

2. Talk less about crypto investment in front of people.

3. Stay away from cloud storage and written recovery seed in your email account.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: BenCodie on July 11, 2023, 10:32:12 AM
I recently came across an interesting new tool developed by Bitcoin developer Entero Positivo on GitHub (https://github.com/enteropositivo/bip39colors/) This tool claims to offer a different way of storing Bitcoin seed phrases using Bip39colors. According to the developer,
Quote
you can convert a 12-word phrase into 8 colors (or a 24-word phrase into 16 colors) and then convert them back to the original seed

However, I personally have reservations about this idea of storing seed phrases as colors. It raises concerns about the safety of the conversion process and the risk involved in using an online tool to handle sensitive information like seed phrases. Instead, I believe it's safer to stick to the traditional method of storing seed phrases. 

If the tool is open source and can be operated offline, and has no capability to connect or send any data to and from the internet, then it's a fine solution. If you want to be super cautious, run it offline in an isolated environment (separate user/VM) and/or from flash storage, do what you have to do, then remove the software. That's enough to remove the trust factor.

Do whatever you want with your private keys, just do not store it in a notepad file on a system connected to Internet or in your emails or in any place which is connected to Internet.
Make sure your private key stays offline. Register it down or write it down and store it in a locker. Also, do not ever store your private keys in a phone app which says it will keep it protected.

Anything that is connected to internet can surely giveaway your private key. Making an encryption like this and storing it doesn't save it either. Someone will crack it down.

Agreed. Anything connected to the internet poses risk, and storing in an unencrypted file on a PC that is being used daily is a permanent risk.

A locker on the other hand...I wouldn't usually opt for this. Something at home that's obviously not a private key is enough, with a backup elsewhere. The color solution OP doesn't seem like a bad idea.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: DaveF on July 11, 2023, 10:54:07 AM
At this point why don't we start using Steganography https://en.wikipedia.org/wiki/Steganography

Not saying that since this is the way we have done it, it is the way it should be done. But, if there is not an active BIP on this being discussed which means a lot of eyes on it for discussion, there is always the possibility that something was missed by the person who came up with the idea.

It SOUNDS interesting but without more people who are familiar with this kind of thing I would stay away.

It's money, be safe, not creative.
Humor, but why do people still look for buried pirate treasure? Because, instead of using normal maps the pirate captains got creative, and then when something happened to them nobody could figure out what they did to make the maps.

Do you want your grand-kids searching for the lost treasure of Hatchy?

-Dave


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: _act_ on July 11, 2023, 11:28:27 AM
I believe it's safer to stick to the traditional method of storing seed phrases.
I would like to hear your thoughts on this matter. Do you trust this new approach, or do you prefer the old method of storing seed phrases? Let's  share our opinions on this
I prefer the old way to store my seed phrases. I have passhrase with them all which is enough for me. If anyone knows my seed phrase, the 21 character passphrase I used with it with upper cases, lower cases, numbers and sign characters is enough against any brute force attack.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: Ndabagi01 on July 11, 2023, 11:29:45 AM
Do you trust this new approach, or do you prefer the old method of storing seed phrases? Let's  share our opinions on this

The seed phrase is highly sensitive information that must be kept secret and not shared with any third parties. What makes you think this colour tool will be dependable in the long run? What if it stops working, or if the developer makes changes that contradict the original and affect the original seed phrase saved before using this method? Since it is a third-party notion, it can be readily compromised by him or anyone else who gets their hands on them.

The word is still there; do not save your seed phrase online or connect it to the internet in any way. We live in a technological environment, and what you don't appear to expect or understand can happen at anytime. Stick to the initial method of saving, don’t fall prey of all this no matter how simple they can be to store your seed phrase.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: NotATether on July 11, 2023, 11:49:40 AM
I think its risky to store it like that. If the color codes are scratched out, then there's no way you'll be able to figure out what most of the color codes are from the color, unless you are a color scientist that is.

And in the case where the color codes can be discerned just by looking at them, don't you think thieves will be able to use the same trick to discover so-called "hidden" seed phrases?


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: 20kevin20 on July 11, 2023, 11:50:42 AM
No! Just no!

I had a thought to reinvent seed storage by creating a new method. I used numbers to replace the letters of every word and I was supposed to revert from numbers back to letters once I needed the seed again.

Long story short, I wrote the idea on a paper by writing an example down of how a sheet of metal would look, convinced I’ll never forget how to revert due to how simple it seemed. I found the paper half an year later and I still own it with no clue how the hell to revert numbers to letters. Fortunately, I had no balance on the seed.

Don’t do it. The more unique the method, the more likely you’ll lose your coins. What happens if you die and a relative finds your colors? They’ll likely just throw it in the bin or they won’t even know where to start. Who do you ask about what a string of colors could mean, besides an artist? Because no way in hell your relative’d think it’s a Bitcoin related thing :D


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: CarnagexD on July 11, 2023, 03:47:07 PM
I believe it's safer to stick to the traditional method of storing seed phrases.
I would like to hear your thoughts on this matter. Do you trust this new approach, or do you prefer the old method of storing seed phrases? Let's  share our opinions on this
I prefer the old way to store my seed phrases. I have passhrase with them all which is enough for me. If anyone knows my seed phrase, the 21 character passphrase I used with it with upper cases, lower cases, numbers and sign characters is enough against any brute force attack.

Yes. It's still the preference of the user and they use it. Because regardless of how simple or complicated the security of the storage, if the user or investor cannot keep it properly and privately then it will be no sense. If you still give your seed phrases or color scheme on scam website, you still cannot protect your own funds in a wallet.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: Dr.Bitcoin_Strange on July 12, 2023, 05:37:18 PM
OP, I would prefer to store my seed phrase on paper, perhaps in four or five different papers, laminate it, and store it in a very safe, dry place in different locations. Also, I could store it on a stainless steel sheet, and I consider these two methods to be the best and most simple way to safely store my private key or seed phrase. Other Bitcoin users could have their preferred means, but I don't consider converting my seed phrase to colours as a safe means; rather, I feel it's more complicated for me. Everyone has a choice.



Cheers 🥂, Dr.Bitcoin_Strange 👺👺


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: famososMuertos on July 12, 2023, 09:57:12 PM
...//...::

Another rhetorical question in the context, that is, perhaps this way of "storing", "protecting" the seeds that you bring us is useless, without hesitation, then should not be asked the question, how safe is this? 0.

Do not get complicated and do not stick to topics that what they do is distort the simple idea of protecting your phrases, these kinds of things are the way to phishing.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: blue Snow on July 13, 2023, 03:25:16 AM
but I don't consider converting my seed phrase to colours as a safe means; rather, I feel it's more complicated for me. Everyone has a choice.
I don't know if we can get color blind when we are getting old and have Retina damage. it's definitely going to be a big problem to distinguish colors. Better to do normally by writing in text or embossed letters on steel to deal if have problem with eye.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: Yamane_Keto on July 15, 2023, 12:35:55 PM
It is not storing Private Keys with Colors, it is about BIP39 wallet seed and we can say that it is safe if the code is safe.

I think it adds more complications, as storing these colors digitally is a problem, as it is difficult to print and recognize them visually, and therefore the HEX format must be printed and the resulting code protected from weather factors, earthquakes, shocks, fires, ... etc. these options are available in wallet seed style not color syle.

Do not forget that you must trust the code, as managing it offline does not mean that you are safe, and given the number of simple revisions, this is an additional problem. It's a lot of complications for no benefit, since you can buy a metal seed and put it inside a case that hides the effect of such a thing.



Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: m2017 on July 15, 2023, 01:06:21 PM
I recently came across an interesting new tool developed by Bitcoin developer Entero Positivo on GitHub (https://github.com/enteropositivo/bip39colors/) This tool claims to offer a different way of storing Bitcoin seed phrases using Bip39colors. According to the developer,
Quote
you can convert a 12-word phrase into 8 colors (or a 24-word phrase into 16 colors) and then convert them back to the original seed

However, I personally have reservations about this idea of storing seed phrases as colors. It raises concerns about the safety of the conversion process and the risk involved in using an online tool to handle sensitive information like seed phrases. Instead, I believe it's safer to stick to the traditional method of storing seed phrases.
I would like to hear your thoughts on this matter. Do you trust this new approach, or do you prefer the old method of storing seed phrases? Let's  share our opinions on this
I would not recommend storing a seed-phrase with colors on a PC (with an Internet connection), because in the event of a data leak, attackers will be able to deconvert the wallet using the same program which you indicated in link.

Storing a seed-phrase with colors in a printed form, for example on paper, is fraught with consequences such as fading of colors, which is why you will not be able to restore the original private keys in the future. Change for a couple of tones - and you have lost access to your wallet.

If look closely at the bip39colors code (https://github.com/enteropositivo/bip39colors/#javascript), we can see the color codes. Here is an example: let colors = ['#613911', '#7C5809', '#B8E412', '#225531', '#01AB63', '#3E8775', '#98BDC1', '#E3AFE8']

It is possible to write down the seed-phrase in this form (color codes), but how is it different from the usual storage of the seed-phrase? Few. Of course, this will make it a little more difficult for attackers to decrypt if they have access to your mnemonic phrase, but I don’t think it will be very much.

In general, this method has the right to exist, but you should take into account the additional risks of converting and deconverting to a color palette, although you will not get any outstanding benefits from using it.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: Z-tight on July 15, 2023, 01:44:11 PM
Yes. It's still the preference of the user and they use it. Because regardless of how simple or complicated the security of the storage, if the user or investor cannot keep it properly and privately then it will be no sense. If you still give your seed phrases or color scheme on scam website, you still cannot protect your own funds in a wallet.
It is a permissionless network, so the user is always free to choose or decide what they want to do, but the correct method has to be pointed out for those who do not know what to do. You are right that without great opsec one can lose their funds, even if they store their seed phrase in the right way, but there are ways you shouldn't store your seed phrase, because you can lose it even with good opsec.

You'll either lose it because you obscured it and you can no longer remember the correct order, or you'll lose it because you memorized it. Funds don't have to be hacked before it can be stolen, many people lock themlseves out of their funds because they tried to be too clever wth their back up.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: ringgo96 on July 15, 2023, 02:54:26 PM
If indeed this is a new regulation that is applied then there is nothing wrong for those of us who store our assets to follow, as long as the security applied is the same as in prasa, and using colors must have a special storage area because not all applications will be easy to store the color code, whatever the changes without any problems then we can try it for the security of our assets.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: Bananington on July 15, 2023, 05:00:27 PM
I would like to hear your thoughts on this matter. Do you trust this new approach, or do you prefer the old method of storing seed phrases? Let's  share our opinions on this
There are several safe methods of keeping your seed phrase, and of all the options, you have to carefully consider the one that you are comfortable with before you decide. Because this is a new method, thieves who are not keeping up with technology will find it difficult to discover or notice your seed phrase even if it is seen by them in colors. It is new and should be safe until maybe scammers, thieves and cybercriminals find a way to hijack it. It is safe, but not what I will like to try yet, my method of storing my seed phrase is still safe for me.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: yudi09 on July 15, 2023, 05:13:28 PM
I would like to hear your thoughts on this matter. Do you trust this new approach, or do you prefer the old method of storing seed phrases? Let's  share our opinions on this
I have tried the tool (https://enteropositivo.github.io/bip39colors/) which is shared on the Twitter account @enteropositivo[1].
When I turn off the internet connection and insert the Seed Phrase into the available column and press the Generate Colors button, the results will appear with 8 different colors.

https://talkimg.com/images/2023/07/15/ZcaQI.jpeg

Its use is easy as described, but I am not very sure to save a personal key or seed phrase with the color method offered by the developer Entero Positivo.

I don't want to believe it even though the tool is considered sophisticated.
I am safer to store in my own way without an internet connection even though positivo says he is worried if storing on paper or other physical objects when the thief searches the house and will find it[2].


[1]. https://twitter.com/EnteroPositivo/status/1673041550585069568
[2]. https://cointelegraph.com/news/bip39-converts-crypto-wallet-seed-phrases-colors-art


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: Cricktor on July 15, 2023, 09:01:46 PM
I wouldn't want to rely on security by obscurity. Either I'm able to securely store my BIP39 recovery words and make sure no other eyes can find or see them or I use an additional security layer like the optional BIP39 passphrase which of course needs to be stored separate from the recovery words.

I don't buy the so called selling point of BIP39Colors to obfuscate their meaning. It might work but with some adoption it wouldn't be such an obfuscation anymore. That order isn't important is interesting and a nice feature, but I don't consider it the killer feature.

The need to process your recovery words again with another digital tool sounds totally crazy to me. You're supposed to store the recovery words in an analog offline manner, not another digital tool. It would potentially destroy the security a hardware wallet tries to setup when the recovery words are once shown at setup of the wallet for analog backup.

BIP39 recovery words are an easy human readable representation of a large binary secret that no human would directly be able to backup safely if it were not encoded human friendly.
Colors as hex codes are not suitable for this in my opionion. This doesn't make anything easier and proper analog backup is more error prone due to the hex codes.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: SamReomo on July 16, 2023, 06:22:13 AM
Nah, you should never do that because changing the way of your seed words won't be a good thing and if you are doing it with an online tool then you are easily giving your private key to the owners of that site because they can save your private keys and if they ever get access to your wallet address then they or some hackers that can grab the database of the site can easily access your wallet and transfer funds from it. It's always better to keep your private key secret and never let it lie on a system that is connect to internet, and you should never share it on internet not even for fun.

The changing of your seed words into colors doesn't make sense to me and that's why I recommend you to avoid such useless thing because if an hacker is also aware of the method then they can easily decrypt your colors based seed words to their original form and empty your account funds as soon as they get access to it.


The best and most safe path for your wallet safety is to write the private key using a pc that isn't connected to internet and it should also lack all those hardware that can make it possible to connect internet. You should also keep in your mind that the storage device you are using to store your text file would never be able to entered into a pc that's connected to internet, and that way no body will ever be able to hack or access your private key.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: ranochigo on July 16, 2023, 07:46:40 AM
Steganography is not particularly new and the method of using it is quite well-known and have been utilized in quite a few instances. As mentioned, this is a form of security by obscurity where most people wouldn't know that a picture contains a wallet seed or a private key. Of course, it is not meant to be store unencrypted, if anyone catches wind of you doing so, then it wouldn't be too difficult to steal your keys.

Sure, it is safe if you know what you're doing. The only scenario where this is useful is if you require absolute plausible deniability where you are afraid of people trying to steal your Bitcoins. Though, in terms of resistance to the $5 wrench attack, not so much.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: Cricktor on July 16, 2023, 11:29:41 AM
OK, I relativize my initial assessment regarding this new color encoding scheme. To be fair and honest I didn't look at it very closely before my first response to it.

Encoding from BIP39 words and decoding back is totally doable by hand or at least with some calculator that support decimal<->hexadecimal conversion, that's all you basically need. Of course to play it safe you should well save and backup the procedure so that you're not screwed should the Github repo disappear in the future. The simplicity is actually nice and I still like the fact that a mnemonic word's position is encoded, so it doesn't matter if you mix up the ordering of the colors as long as you of course retain all colors.

What I still don't like is the attempt to sell security by obscurity. It might work, but you can't be sure it does. We have seen such a failure e.g. with brainwallets. You might argue it's not comparable with brainwallets and you're not too wrong with that. My point is basically what @ranochigo said before about steganography. I don't feel safe with obscurity at all.

BIP39colors kind of animates to do unsafe things with your mnemonic recovery words on digital devices, particularly when those originated from hardware wallets. That's my main critic. Yes you can prevent unsafe things if you're knowledgeable and know the pitfalls which newbies commonly don't.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: Woodie on July 16, 2023, 11:37:32 AM
I have seen people store data in a song,in a pdf, in a picture you name it, but storing a private key in form of colors isn't going to be me!

What happens, if the color contrast, or sharpness changes  ???
My guess is as good as yours, the private key is likely to change which means there is a possibility of generating a private key which isnt yours..But love the idea of this as it's hiding information in plain sight  8)


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: Cricktor on July 16, 2023, 12:33:02 PM
What happens, if the color contrast, or sharpness changes  ???

It is not supposed to save the color patches alone without the hex color codes, of course. Nobody wants to jump into the rabbit hole of color management, color accuracy, color longevity, color fading, you name it. It would be crazy to only rely on the color alone but that's not what this new proposal is about.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: Lorence.xD on July 16, 2023, 01:49:58 PM
I recently came across an interesting new tool developed by Bitcoin developer Entero Positivo on GitHub (https://github.com/enteropositivo/bip39colors/) This tool claims to offer a different way of storing Bitcoin seed phrases using Bip39colors. According to the developer,
Quote
you can convert a 12-word phrase into 8 colors (or a 24-word phrase into 16 colors) and then convert them back to the original seed

However, I personally have reservations about this idea of storing seed phrases as colors. It raises concerns about the safety of the conversion process and the risk involved in using an online tool to handle sensitive information like seed phrases. Instead, I believe it's safer to stick to the traditional method of storing seed phrases.
I would like to hear your thoughts on this matter. Do you trust this new approach, or do you prefer the old method of storing seed phrases? Let's  share our opinions on this

Well you already said that it would be better to stick to traditional method of storing seed phrases, I have seen a lot of ways in storing their own seed phrase but I don't know I just find it making it complicated for themselves. You could just write down and store it in a safe place that's it. Still it's up to you, you can do whatever you want since it's your assets that your risking. Just do not save your seed phrase online where hackers or scammers could access it. Plus do not click any link cuz it might be a drainer to your wallets. If colors is the way you could remember those seed phrase then go for it. Just be cautious because it's your assets at risk.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: southerngentuk on July 16, 2023, 07:32:45 PM
Storing your private key offline and not on Internet-connected systems is the best way to keep it safe. Store your private key in a secure locker, you ensure that no one can access it through the Internet.

Also, it's a smart idea to avoid storing private keys in phone apps or anywhere else connected to the Internet. You need to ensure that your private key is not remotely accessed or stored on any platform for its safety.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: erep on July 16, 2023, 08:11:33 PM
Storing your private key offline and not on Internet-connected systems is the best way to keep it safe. Store your private key in a secure locker, you ensure that no one can access it through the Internet.
I agree with your opinion, why do we need a tool to convert phrases to colors or other tools if we have various offline or traditional ways to store phrases or private keys safely without anyone knowing, I doubt every tool works to convert phrases even if the code of the development tool exists on github, but I don't use the phrase main wallet other than accessing on the official wallet app.

I still implement the method of storing phrases using traditional methods because guaranteed wallet access will be safe compared to you giving access to third parties to fill in your phrase code in the word column to be converted, if you don't realize that the phishing web will lose all your assets in the wallet .


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: The Cryptovator on July 16, 2023, 08:13:38 PM
I absolutely refuse to toy with my seed phrase under any circumstances. I am adamantly against using any online tools to convert my seed into color names, as storing your seed phrase in any online storage is strongly discouraged. I will adhere to the conventional method of using a seed phrase and ensure it is securely stored in a safe location. Why would we take the risk of jeopardizing our seed when there is a clear danger involved?


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: panganib999 on July 16, 2023, 08:15:36 PM
Do whatever you want with your private keys, just do not store it in a notepad file on a system connected to Internet or in your emails or in any place which is connected to Internet.
Make sure your private key stays offline. Register it down or write it down and store it in a locker. Also, do not ever store your private keys in a phone app which says it will keep it protected.

Anything that is connected to internet can surely giveaway your private key. Making an encryption like this and storing it doesn't save it either. Someone will crack it down.
Exactly. Nowadays people overcomplicate security when all they really have to do is make sure that no one gets to it that you don't allow. You don't want to write it down or you're too lazy to type it out letter for letter so you don't want to use a paper wallet? jot it down to a notepad and save it on your local hard drive. You're a nerd who wanted to make sure nobody really gets into it? By all means buy one of those overpriced cold wallets if that's what will make you feel safe. Just don't save it on OneDrive, your personal email, or your personal DMs on FB and Twitter or whatever social media you usually use. Do this and you're safe from anyone who's trying to get a hold of your coins no problemo.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: nakamura12 on July 16, 2023, 08:23:22 PM
It's up to you on what you want to do when storing a seed phrase. Whatever method you are comfortable with the go with it. The point for the developer is if you want another method of storing seed phrase then he has something to offer for that and as I have said, it is up to you on what you decide to do either you use the said method or you go with the traditional one. If you are not use if it's safe or okay to use then never use it but if it's safe and you still don't want to use then that's also fine after all, it's your seed phrase and not someone else.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: Forever101 on July 16, 2023, 09:46:18 PM
There idea look nice but not too good and  cannot be relied on as means of storing private keys and mnemonics . If a system is designed to convert private keys which are combination of words to color, I believe another means can be generated to decode those color. Remember we are in an ever growing technological world.  So it can become easy to decode what a particular color refers to of access is granted to the wrong hand.

It is best to think of storing your private keys in the best form you can ever think and also do your bitcoins stuff behind the scene so that you won't attract attackers or scammers.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: ranochigo on July 17, 2023, 02:58:29 AM
What I still don't like is the attempt to sell security by obscurity. It might work, but you can't be sure it does. We have seen such a failure e.g. with brainwallets. You might argue it's not comparable with brainwallets and you're not too wrong with that. My point is basically what @ranochigo said before about steganography. I don't feel safe with obscurity at all.
Brainwallet isn't security by obscurity, because it isn't intended to be obscure. Brainwallet can work if the keys are long and random enough, with enough key stretching. Storing seeds as words isn't the failure of it, but allowing user to compromise on the entropy would be.

I would argue that it could work, provided that the security model fits the threat. There is no safe that can't be cracked with a matter of time, but if you were to hide a perfectly normal looking art piece, or an image file for that matter beside the safe, then there is no good reason why the adversary won't be trying to crack your safe instead. All is given with the fact that your adversary doesn't have prior knowledge of it.

Both the passphrase and your safe are susceptible to $5 wrench attack so there is that.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: Cricktor on July 17, 2023, 08:34:31 PM
I would still argue that a too easy, call it lazy, brainwallet is kind of security by obscurity. You hide your too easy, too bad, maybe lazy, easy to remember phrase behind a hash and hope it's not found by "crackers". People tried to cut corners to be able to remember some random looking secret when in fact it wasn't hidden well enough.

You can have a perfectly safe brainwallet, but not derived from publicly available data or publicly available words which probably only need some amount of mixing. We all know how this turned out for many brainwallets.

The thing with this scheme is somewhat similar. You could try to make some abstract digital painting with only 8 or 16 colors. Would that attract suspicion? It depends, you can't be sure. Decoding the colors' hex values, transforming them to decimal could raise suspicion again because you could notice that all colors have at their front two digits monotonically rising in a quite unusual way.

I'd say, it's not an easy puzzle to solve but not well enough hidden, too. For hidden in plain sight, I believe, it's a gamble. With this, I don't like to gamble.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: Silberman on July 17, 2023, 09:09:27 PM
I recently came across an interesting new tool developed by Bitcoin developer Entero Positivo on GitHub (https://github.com/enteropositivo/bip39colors/) This tool claims to offer a different way of storing Bitcoin seed phrases using Bip39colors. According to the developer,
Quote
you can convert a 12-word phrase into 8 colors (or a 24-word phrase into 16 colors) and then convert them back to the original seed

However, I personally have reservations about this idea of storing seed phrases as colors. It raises concerns about the safety of the conversion process and the risk involved in using an online tool to handle sensitive information like seed phrases. Instead, I believe it's safer to stick to the traditional method of storing seed phrases.
I would like to hear your thoughts on this matter. Do you trust this new approach, or do you prefer the old method of storing seed phrases? Let's  share our opinions on this
All things being equal it is better to keep things as simple as possible in order to reduce that chances of making a mistake and losing your coins, and while you can do this if you want I think it is a bad idea to add this additional step as I do not see it adding too much security to your coins and instead I see it as an additional headache and point of failure, after all what can be more simple than to just write your seed words on a notebook and keep several backup copies in the case of an emergency?


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: JoyMarsha on July 17, 2023, 11:43:47 PM
If the seed phrase is what is to be shared or shown to people, I would say it will be beautiful for someone to have his or her seed phrase beautifier with colors so that people would see how beautiful their seed phrase looks with colors. But in this case, the seed phrase is not to be shared or shown to people, beautifying it with colors doesn't make sense since the seed phrase is meant to be stored and written down on a piece of paper where eyes can not see or touch it except you.

The old method will remain the best for me, I won't try on the new approach of color beautifying of seed phrase because, to me, it doesn't make sense since am not showcasing my seed phrase to anyone


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: ranochigo on July 18, 2023, 02:38:10 AM
I would still argue that a too easy, call it lazy, brainwallet is kind of security by obscurity. You hide your too easy, too bad, maybe lazy, easy to remember phrase behind a hash and hope it's not found by "crackers". People tried to cut corners to be able to remember some random looking secret when in fact it wasn't hidden well enough.

You can have a perfectly safe brainwallet, but not derived from publicly available data or publicly available words which probably only need some amount of mixing. We all know how this turned out for many brainwallets.
Humans are bad sources for entropy. By brainwallet's scheme, if I were to generate a key that is sufficiently long and has sufficient entropy, it would never get cracked. Note that brainflyer cracks the keys at a pretty fast speed but it is very far from exhausting the entire space of SHA256.

The thing with this scheme is somewhat similar. You could try to make some abstract digital painting with only 8 or 16 colors. Would that attract suspicion? It depends, you can't be sure. Decoding the colors' hex values, transforming them to decimal could raise suspicion again because you could notice that all colors have at their front two digits monotonically rising in a quite unusual way.

I'd say, it's not an easy puzzle to solve but not well enough hidden, too. For hidden in plain sight, I believe, it's a gamble. With this, I don't like to gamble.
Hiding anything without encryption isn't the best way of doing things anyways. Even a safe can be cracked given time, and most people usually add a layer of encryption ontop of their keys before hiding behind something.

The beauty about this is that there isn't a set way of recovering or encoding your keys. It is perfectly possible for you to choose a unique obfuscation technique that doesn't raise the slightest form of suspicion and people wouldn't bother figuring out how you've encoded it. After all, art is abstract and a bunch of colours mashed together wouldn't raise any suspicion.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: Kakmakr on July 18, 2023, 06:50:02 AM
I think storing Private keys with colors, just adds another process that can be deciphered... if you have the method to do it. I still think the best way to store Private keys are to split them up in a way that only the owner knows how to reconstruct it. (not other people that knows the method)

I can store pass phrases and Private keys online, without anyone being able to identify it. I can leave a template to my friends and family to decipher it, when I am gone.  ;D


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: yudi09 on July 18, 2023, 08:23:06 AM
I absolutely refuse to toy with my seed phrase under any circumstances. I am adamantly against using any online tools to convert my seed into color names, as storing your seed phrase in any online storage is strongly discouraged. I will adhere to the conventional method of using a seed phrase and ensure it is securely stored in a safe location. Why would we take the risk of jeopardizing our seed when there is a clear danger involved?
Storing the seed pharse or private key in a tool made by a random person is not an option we should do. You are right. Why should we trust others when we can store them ourselves in a place that we deem safe offline despite the sophistication of the tools offered by Dev Entero Positivo.
I wouldn't trust it at all because it's still possible that the owner of the device could access it.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: bakasabo on July 18, 2023, 08:50:02 AM
There are pros and cons of such storing method. Someone might think that this is another level of defense, but that might turn into another level of complexity. For example you lose some mobility. User no longer will be able to act as fast as previous. If this is a script, and color palette isnt endless, then one day it can be bruteforced. And in future, for AI, this wont be a insurmountable barrier.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: o_e_l_e_o on July 18, 2023, 09:12:41 AM
After all, art is abstract and a bunch of colours mashed together wouldn't raise any suspicion.
But, as discussed, will also result in your losing your coins. There is absolutely no way you can take 8 colors and print them out, and then later scan them back in and recover the same hex codes. You must include the raw codes or this method is useless. And if you include the raw codes then you need to hide them, because why else would someone have 8 random hex codes written down? And if you can hide them, then you can just hide the seed phrase and not add in all the additional risks of writing down a mistake, using this unreviewed code, being dependent on this code to regenerate your seed phrase, and so on.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: NotATether on July 18, 2023, 10:35:49 AM
After all, art is abstract and a bunch of colours mashed together wouldn't raise any suspicion.
But, as discussed, will also result in your losing your coins. There is absolutely no way you can take 8 colors and print them out, and then later scan them back in and recover the same hex codes. You must include the raw codes or this method is useless. And if you include the raw codes then you need to hide them, because why else would someone have 8 random hex codes written down? And if you can hide them, then you can just hide the seed phrase and not add in all the additional risks of writing down a mistake, using this unreviewed code, being dependent on this code to regenerate your seed phrase, and so on.

Don't forget the case where the scanner or printer reads or writes the colors in greyscale. Or the case where your device's color profile screws up and converts the colors in your image to the "correct" color profile. Or images encoded in an unreadable format such as RAW, with colors auto-converted when turning it into a PNG or something else readable. Or the fact the browsers cannot render any color consistently except for the web-safe colors.

I get that the color space being used is (somewhat?) limited, but we'd still have problems even if this was done with 8-bit colors or web-safe colors only.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: satscraper on July 18, 2023, 02:35:50 PM
Hm, why just limit yourself with colors-pallet.

We can advance further and convert SEED phrase into music.

I have just used Music Sheet Cipher (https://www.dcode.fr/music-sheet-cipher) and converted the following SEED (search where universe puzzle search doctor dumb holiday patch wheel begin detect) - don't use it! - into music notations.


Quote

P.S. Hope everyone will  catch the  subtleties of sarcasm in my post  ;D


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: Flexystar on July 18, 2023, 03:00:20 PM
Unless and until I am not sure about the exact pattern of conversion and also safety standard I may not get involved with modern ways of conversions. I would rather prefer to keep my bitcoins on paper wallet and Store it somewhere safe. I had very bad experience with the software wallets such as mycelium and others when it comes to backing up and importing the previously generated address.

With such coded messages I don’t want to complicate it even further. What if colors are read in wrong way? How many combinations it would generate with just 8 color codings? I don’t know everything seems ambiguous at this stage. But let’s hope they will have full proof System soon. It’s always welcomed.


Title: Re: Storing Private Keys with Colors, how safe is this?
Post by: tbct_mt2 on July 19, 2023, 01:09:16 PM
Hm, why just limit yourself with colors-pallet.

We can advance further and convert SEED phrase into music.

I have just used Music Sheet Cipher (https://www.dcode.fr/music-sheet-cipher) and converted the following SEED (search where universe puzzle search doctor dumb holiday patch wheel begin detect) - don't use it! - into music notations.


Quote
You must have good musical knowledge to understand it. Does the musical sheet contains all seed words and does not include non-seed words?

Because if you hide your seed words, mix them with non-seed words, you will have problems to find whatrl words are from your seed.

It is better if the sheet only contains seed words but what will happen if with this large piece of paper, you will have more risk to see it gets wet, damages by physical threats. I could be wrong but a smaller piece of paper is better for me to store my seed. It is more easily to backup, storage safely and recover in future.