Hi all,

I am trying to learn more about the best practices and tools to backup the Bitcoin Secure Multisig Setup (BSMS).
When you create a multisig wallet, the coordinator app usually creates a .bsms file with all the descriptors to recreate the wallet. This is described on BIP129: https://github.com/bitcoin/bips/blob/master/bip-0129.mediawiki
But having access to that file reveals the funds of the multisig wallet, so I think is not a good idea to store it in plain text. It should at least be encrypted so you can decide who can access it. Splitting the BSMS content into multiple QRs shares would be ideal, so you can distribute each share in different locations.

SeedHammer offer in my opinion one of the best approaches. They split the BSMS file content into 3 QRs and you need to scan 2 of them in order to recover your wallet. This is called "BCR-2020-010 encoding for Output Descriptors QRs". They show how to do that here:
https://twitter.com/SeedHammer/status/1666875008105295873
Nunchuk supports importing a wallet using those QRs, but not exporting a wallet in that format. So, if you don't have a SeedHammer, you can't use this approach. I created an issue so they implement that on their Nunchuk app: https://github.com/nunchuk-io/nunchuk-android/issues/21
Not sure if there is another tool/app that can export a BSMS file in "BCR-2020-010" format.
Any ideas or opinions?

Thanks

Verifiable Source wallets let you inspect code for flaws, but pre-compiled software lacks a way to verify if it matches the source. Reproducible builds ensure that anyone can recreate identical copies from source code, build environment, and instructions. That's why is important for all wallet users to learn how to build the firmware and verify it before upgrading their wallets.
If not possible for you, at least see if there are proofs of others doing that verification. One good place to find those proofs is https://bitcoinbinary.org

This week on Twitter & Nostr NVK (Coldcard creator) encouraged people to learn how to verify builds. This was a success, a lot of people could learn how to build and verify the Coldcard firmware.

From http://thebitcoinhole.com we want to also collaborate. So, we added a new section "Reproducible Builds" on our website. There you can find for each wallet if they offer reproducible builds instructions and if there are proofs of verification on http://bitcoinbinary.org

We encourage all the hardware wallet manufacturers (or anyone interested) to collaborate and automate proofs of verifications on http://bitcoinbinary.org.

According to our research: Blockstream Jade, Coldcard, BitBox02, Passport Batch 2, Trezor, KeepKey, SeedSigner, and Specter DIY offers reproducible builds instructions and/or proofs of verification.

Remember: #LearnToBuild #donttrustverify

I created a website (https://thebitcoinhole.com/) where I compare more than 30 different hardware wallets. I want to have the most complete and accurate website. The goal is to help you to choose which wallet to buy.
So, I am offering 1000 sats to each person that finds an error on the website.

You can read all the details about the bounty here:

https://twitter.com/thebitcoinhole/status/1669095352165715969

[Lots of discounts to enjoy.]

Lots of discounts to enjoy.

Find these discounts and a comparison of more than 30 hardware wallets at: https://wallets.thebitcoinhole.com/

- Coldcard Mk4: 15% off with coupon code 'noKYCwSE'

- Blockstream Jade: 10% off until Sunday. + 10% off with coupon code 'thebitcoinhole'

- Passport Batch 2: reduced the price to $199

- BitBox02: 10% off + 5% off with coupon code 'THEBITCOINHOLE'

- Keystone: 23% discount beginning at 3pm UTC on May 17th. After that date you can get 10% off with coupon code 'thebitcoinhole'

- Trezor: 15% off until Sunday, May 21

- OneKey: every time you buy one Classic, you will get a OneKey Mini for free. This offer is only good until 24:00 HKT this Friday! + 10% off with coupon code 'thebitcoinhole'

- Ellipal: $5 discount with coupon code 'thebitcoinhole'

- SecuX: 15% off using the BUY NOW button on the website at the end of this post.

- Prokey Optimum: 10% off with coupon code 'TheBitcoinHole'

- Arculus: 10% off with coupon code SECURE10

- Satochip: 5% off with coupon code 'thebitcoinhole-5%'

- D'CENT Biometric Wallet: 20% off with the code 'PrivateKeysArePrivate' until 21st May

- SafePal S1: 5% off with coupon code 'GETSAFEPAL' until May 24

- CoolWallet Pro: $20 discount with coupon code 'SelfCustody'

Find these discounts and a comparison of more than 30 hardware wallets at: https://wallets.thebitcoinhole.com/

[UPDATE]

I wrote an article comparing 32 hardware wallets, comparing them feature by feature.

https://blog.thebitcoinhole.com/best-hardware-wallets-31141ed1aa05

I also included a spreadsheet with the summary:

https://docs.google.com/spreadsheets/d/1-8DLbhxtOcDEBPl8-IAGWaoyx1H02JSz9hADCgAGyCo/edit?usp=sharing


UPDATE
I deprecated the Google Spreadsheet and launched a new website comparing the most popular Hardware Wallets:

https://wallets.thebitcoinhole.com/

The site offers some advantages compared with the spreadsheet:
- Improved usability and look & feel
- Possibility to filter wallets so you can only see and compare the ones you are interested
- Added more contextual information about each compared feature
- Fixed some data errors.

I plan to continue adding more features and wallets to compare.