Which seed should i choose?

[I_love_Crypto]

Hello everyone:)

I own some BTC that are stored ATM in an exchange (yes, i know it is bad....).
I would like to store them offline for the very very long term. My aim would be to
create a brand new wallet, with for instance Electrum, and move the funds
into it. Since the Electrum Software would be installed on a Ubuntu live session,
i only plan to carefully write the seed on a piece of paper (or better engrave
the seed on steel) before leaving. That being said, i noticed that Electrum
said that BIP39 seed might no longer be supported in the future, and, one the other hand, if i
create an Electrum seed it might not be accepted on other devices. Since my
aim is obviously to have access to my BTC later, i'm puzzled. How can i predidict the
standards in ten years?

Perhaps saving the master private key as a QR code might be a better idea...

I know that a ledger wallet might be better, but i read that the code source is not
open and i'm concerned about the data that might be collected by them (who knows
if they don't keep information about all the transactions of their users).

Any though?

Thanks a lot.

[1715361670]

1715361670

[1715361670]

1715361670

[ranochigo]

The good thing about anything open source is that it is easy for everything to be replicated and backwards compatibility is hardly an issue. Besides, it is highly unlikely that backwards compatibility would be broken with any well-defined standards. BIP39 is considered a Bitcoin standard and it is likely that it would be supported by wallets far in the future. Storing it in anything other than mnemonics is a hassle and highly unnecessary if you're concerned about compatibility; you'll be able to recover them easily even if they are not supported by Electrum in the future.

Electrum maintains compatibility with even their pre-Electrum 2.0 seeds. I doubt that Electrum would drop the support any time in the future since it doesn't hinder the development, just a nice to have. Tldr; Electrum or BIP39 seeds are both okay.

[promise444c5]

I know that a ledger wallet might be better, but i read that the code source is not
open and i'm concerned about the data that might be collected by them (who knows
if they don't keep information about all the transactions of their users).

Ledger is an HD(hardware) wallet and since you don't trust it there're other HD wallets if you want a bitcoin-only, Trezor supports it so you can try it out
Also, here's a list of HD wallets from @dkbit98  you can try....
https://bitcointalk.org/index.php?topic=5288971.msg55583288#msg55583288

[Zaguru12]

i only plan to carefully write the seed on a piece of paper (or better engrave
the seed on steel) before leaving. That being said, i noticed that Electrum
said that BIP39 seed might no longer be supported in the future, and, one the other hand, if i
create an Electrum seed it might not be accepted on other devices. Since my
aim is obviously to have access to my BTC later, i'm puzzled. How can i predidict the
standards in ten years?

Perhaps saving the master private key as a QR code might be a better idea...

One of the importance of seed phrase is the ease to back one’s wallets without having to store the master private key or any key at all. I get where you’re concerned about, like electrum not been in existence again, currently there is a BlueWallet that is said to support the custom seed phrase from electrum wallet.

But aside that should they stop to build/develop the wallet again, another developer could easily build it up since its source codes are open.

But also if at a time there is no wallet that supports the seed phrase, you can still generate the master private key from the seed phrase using tools because the method it uses to generate its seed is not that different from the Bip39 seed phrase. So there is nothing to worry about

[I_love_Crypto]

The good thing about anything open source is that it is easy for everything to be replicated and backwards compatibility is hardly an issue. Besides, it is highly unlikely that backwards compatibility would be broken with any well-defined standards. BIP39 is considered a Bitcoin standard and it is likely that it would be supported by wallets far in the future.

I hope so too...

Storing it in anything other than mnemonics is a hassle and highly unnecessary if you're concerned about compatibility; you'll be able to recover them easily even if they are not supported by Electrum in the future.

But, in that case you should know which derivation path the software used in order to recover the address where the funds are located, aren't you?

[I_love_Crypto]

One of the importance of seed phrase is the ease to back one’s wallets without having to store the master private key or any key at all. I get where you’re concerned about, like electrum not been in existence again, currently there is a BlueWallet that is said to support the custom seed phrase from electrum wallet.

But aside that should they stop to build/develop the wallet again, another developer could easily build it up since its source codes are open.

But also if at a time there is no wallet that supports the seed phrase, you can still generate the master private key from the seed phrase using tools because the method it uses to generate its seed is not that different from the Bip39 seed phrase. So there is nothing to worry about

I agree, but it could be stressful. My aim is to choose the easiest and the safest solution to store BTC. Btw, is it possible to convert a Bip39 seed phrase into an Electrum seed and vice versa?

Cheers:)

[ranochigo]

But, in that case you should know which derivation path the software used in order to recover the address where the funds are located, aren't you?

It's pretty much plastered all over the internet and it is quite unbelievable for it to ever disappear, especially for something so important. If you're scared of it, just write down your derivation path.

Btw, is it possible to convert a Bip39 seed phrase into an Electrum seed and vice versa?

No.

[Medusah]

Btw, is it possible to convert a Bip39 seed phrase into an Electrum seed and vice versa?

No, Electrum and BIP39 represent two separate mnemonic standards.  It's not feasible to input a BIP39 seed phrase into a function to generate an Electrum seed phrase that generates the exact same addresses from the BIP39 seed phrase. 

I'd opt for Electrum.  Since it's widely used for storing bitcoin by many, it's extremely likely that it will remain accessible in the future. 

[I_love_Crypto]

Ok, thanks for the answers. So, to sum-up here is my plan:

1) Generate (and carefully save) a BIP39 mnemonic code (offline) using this:
https://github.com/trezor/python-mnemonic
Indeed, Electrum wallet doesn't generate Bip39 mnemonic and i would prefer
to have one.
I tested the few lines of code and it worked.
Still there is something i don't understand:
entropy = mnemo.to_entropy(words)
I guess the aim of this line is to check the randomness of the list of words.
However, i got this:
>>> entropy = mnemo.to_entropy(words)
>>> entropy
bytearray(b'\x18\xe2\xa9=\x82\xd4$\x915D\x98....................................\xb4\x7f\x02\x90f\xdf\x8b')
>>>
How this should be understood?

P.S.: I read that a 12 words list is enough and a 24 words list do not improve safety. So i will
go for a 12 words list.

2) Create a new (offline) wallet by importing the mnemonic into Electrum. Generate a "receiving" address

3) Send the BTC from the exchanges to this address.

Am i doing something wrong?

Cheers:)

[Synchronice]

Hello everyone:)

I own some BTC that are stored ATM in an exchange (yes, i know it is bad....).
I would like to store them offline for the very very long term. My aim would be to
create a brand new wallet, with for instance Electrum, and move the funds
into it. Since the Electrum Software would be installed on a Ubuntu live session,
i only plan to carefully write the seed on a piece of paper (or better engrave
the seed on steel) before leaving. That being said, i noticed that Electrum
said that BIP39 seed might no longer be supported in the future, and, one the other hand, if i
create an Electrum seed it might not be accepted on other devices. Since my
aim is obviously to have access to my BTC later, i'm puzzled. How can i predidict the
standards in ten years?

Perhaps saving the master private key as a QR code might be a better idea...

I know that a ledger wallet might be better, but i read that the code source is not
open and i'm concerned about the data that might be collected by them (who knows
if they don't keep information about all the transactions of their users).

Any though?

Thanks a lot.

Mate, first of all, remember that Ledger wallet is the worst idea because this company is shady, they were telling us that it was impossible to get data from their secure chip but then they offered Ledger Recovery service that in fact gets data from their secure chip. I wouldn't trust them after this accident and if you are aiming for hardware wallet, you better buy Coldcard or Passport.

BIP39 and BIP39 wordlist will be supported by Electrum, at least in the next few years. I think it will be supported for almost forever because there is simply no reason to not use it, it's secure as hell and writing down some words is better than writing down 010101.

If you are still afraid of BIP 39, you can use a vanity address generator and generate a bitcoin address where you'll get address (custom if you wish) and private key that you can later import in any wallet.

P.S. My advice would be to not worry over something that you don't have to worry. Anyway, if something changes, you can always use an old version of software, create a new wallet in new software and send Bitcoins from old to new address.

[ranochigo]

1) Generate (and carefully save) a BIP39 mnemonic code (offline) using this:
https://github.com/trezor/python-mnemonic
Indeed, Electrum wallet doesn't generate Bip39 mnemonic and i would prefer
to have one.
I tested the few lines of code and it worked.
Still there is something i don't understand:
entropy = mnemo.to_entropy(words)
I guess the aim of this line is to check the randomness of the list of words.
However, i got this:
>>> entropy = mnemo.to_entropy(words)
>>> entropy
bytearray(b'\x18\xe2\xa9=\x82\xd4$\x915D\x98....................................\xb4\x7f\x02\x90f\xdf\x8b')
>>>
How this should be understood?

The entropy is the raw bytes before it was converted into your mnemonics. It is not useful to you.

Entropy is random, and you cannot exactly measure randomness, or at least to any accurate extent. Seemingly random strings can be deterministic and vice-versa. You can safely stop at generating the mnemonics without going further.

I haven't seen the code yet and I can't comment much on it. I would recommend just using another wallet that generates BIP39 instead of going with a less well-known script, or just go with Electrum. No downsides there.

[satscraper]

Any though?

Thanks a lot.

Electrum generated  SEED phrases are safe but not applicable  to other wallets. Thus, if  I were in your case I would  generate  BIP39 SEED phrase  manually without recourse to any wallet by simply using flipping coins or dice methods. Good tutorial on how to do this with dice you may find here.

[I_love_Crypto]

I haven't seen the code yet and I can't comment much on it. I would recommend just using another wallet that generates BIP39 instead of going with a less well-known script, or just go with Electrum. No downsides there.

The Python code is extremely simple and since it is from:
https://github.com/trezor/python-mnemonic
i assumed (wrongly?) that it is the way Trezor wallets generate their Bip39 mnemonic:
>>>from mnemonic import Mnemonic
>>>mnemo = Mnemonic("english")
>>>words = mnemo.generate(strength=128)
>>>print(words)

Is it safe to use?

Thanks:)

[I_love_Crypto]

Any though?

Thanks a lot.

Electrum generated  SEED phrases are safe but not applicable  to other wallets. Thus, if  I were in your case I would  generate  BIP39 SEED phrase  manually without recourse to any wallet by simply using flipping coins or dice methods. Good tutorial on how to do this with dice you may find here.

The link is very interesting indeed. Here is a script:
import random
from datetime import datetime
random.seed(datetime.now().timestamp())
T=[]
for i in range(127):
        x=random.random()
        if x<0.5:
              T.append(0)
        else:
              T.append(1)
print(T)

Not sure if it is better than the previous method though...

[ranochigo]

The Python code is extremely simple and since it is from:
https://github.com/trezor/python-mnemonic
i assumed (wrongly?) that it is the way Trezor wallets generate their Bip39 mnemonic:
>>>from mnemonic import Mnemonic
>>>mnemo = Mnemonic("english")
>>>words = mnemo.generate(strength=128)
>>>print(words)

Is it safe to use?

Thanks:)

The code is from: https://github.com/trezor/python-mnemonic/blob/master/src/mnemonic/mnemonic.py.

Looks okay to me, but I'm not exactly a security researcher. Your code looks okay assuming that the code is working as intended.

The link is very interesting indeed. Here is a script:
import random
from datetime import datetime
random.seed(datetime.now().timestamp())
T=[]
for i in range(127):
        x=random.random()
        if x<0.5:
              T.append(0)
        else:
              T.append(1)
print(T)

Not sure if it is better than the previous method though...

Edit: Please do not use anything that can be easily determined as seed when you're trying to generate something random. Use the secrets module, and if you're unsure about how exactly CSPRNG should be implemented, don't touch it or you might inadvertently generate something insecure.

If you're unsure about the technicalities behind generating a Bitcoin address, you should also refrain from implementing your own. Any errors can result in you being unable to access your funds.

[I_love_Crypto]

Mate, first of all, remember that Ledger wallet is the worst idea because this company is shady, they were telling us that it was impossible to get data from their secure chip but then they offered Ledger Recovery service that in fact gets data from their secure chip. I wouldn't trust them after this accident and if you are aiming for hardware wallet, you better buy Coldcard or Passport.

I don't think they did it on purpose, but i agree it is unacceptable. Also, their customer details has been hacked...

[I_love_Crypto]

The Python code is extremely simple and since it is from:
https://github.com/trezor/python-mnemonic
i assumed (wrongly?) that it is the way Trezor wallets generate their Bip39 mnemonic:
>>>from mnemonic import Mnemonic
>>>mnemo = Mnemonic("english")
>>>words = mnemo.generate(strength=128)
>>>print(words)

Is it safe to use?

Thanks:)

The code is from: https://github.com/trezor/python-mnemonic/blob/master/src/mnemonic/mnemonic.py.

Looks okay to me, but I'm not exactly a security researcher. Your code looks okay assuming that the code is working as intended.

It seems to do the job as i get a 12 words list...

[I_love_Crypto]

Edit: Please do not use anything that can be easily determined as seed when you're trying to generate something random. Use the secrets module, and if you're unsure about how exactly CSPRNG should be implemented, don't touch it or you might inadvertently generate something insecure.

If you're unsure about the technicalities behind generating a Bitcoin address, you should also refrain from implementing your own. Any errors can result in you being unable to access your funds.

Ok, i still need to have a better understanding of this (for my knowledge). Indeed, for me a random number from a computer is always pseudo-random. I found a link that might help me:
https://docs.python.org/3.8/library/secrets.html

[satscraper]

[ for me a random number from a computer is always pseudo-random.