Bitcoin Forum
May 04, 2024, 11:27:21 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1] 2 »  All
  Print  
Author Topic: Backup of encrypted wallets: are they encrypted, too?  (Read 1480 times)
giacecco (OP)
Newbie
*
Offline Offline

Activity: 3
Merit: 0


View Profile
July 15, 2015, 09:29:53 AM
 #1

Hi All,
I'm using Bitcoin Core 0.10.2 and a wallet that is encrypted using Bitcoin's native encryption.

Something that is not clear to me and could not find described anywhere is if the file created using backupwallet is encrypted, too, or not. Moreover, is there a reason to use backupwallet rather than simply copying the wallet.dat file? (apart from the convenience of not having to stop bitcoind).

Thanks,

Giacecco
1714865241
Hero Member
*
Offline Offline

Posts: 1714865241

View Profile Personal Message (Offline)

Ignore
1714865241
Reply with quote  #2

1714865241
Report to moderator
1714865241
Hero Member
*
Offline Offline

Posts: 1714865241

View Profile Personal Message (Offline)

Ignore
1714865241
Reply with quote  #2

1714865241
Report to moderator
TalkImg was created especially for hosting images on bitcointalk.org: try it next time you want to post an image
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714865241
Hero Member
*
Offline Offline

Posts: 1714865241

View Profile Personal Message (Offline)

Ignore
1714865241
Reply with quote  #2

1714865241
Report to moderator
1714865241
Hero Member
*
Offline Offline

Posts: 1714865241

View Profile Personal Message (Offline)

Ignore
1714865241
Reply with quote  #2

1714865241
Report to moderator
1714865241
Hero Member
*
Offline Offline

Posts: 1714865241

View Profile Personal Message (Offline)

Ignore
1714865241
Reply with quote  #2

1714865241
Report to moderator
runpaint
Sr. Member
****
Offline Offline

Activity: 518
Merit: 250



View Profile
July 15, 2015, 10:07:56 AM
 #2

backupwallet is the same as copying wallet.dat

encrypting the wallet means encrypting the private keys.

If you have made a backup, and then you encrypt your wallet, you need to make a new backup because the old one will not work anymore.

Anyway that's my understanding, someone please correct me if I'm wrong.  And I'm sure I've missed some important points.

GoldenCryptoCommod.com
jabo38
Legendary
*
Offline Offline

Activity: 1232
Merit: 1001


mining is so 2012-2013


View Profile WWW
July 15, 2015, 11:29:52 AM
 #3

backupwallet is the same as copying wallet.dat

encrypting the wallet means encrypting the private keys.

If you have made a backup, and then you encrypt your wallet, you need to make a new backup because the old one will not work anymore.

Anyway that's my understanding, someone please correct me if I'm wrong.  And I'm sure I've missed some important points.

I am by no means an expert, but I have been playing with Bitcoin for over a year and that is how it seems to work to me.

neurotypical
Hero Member
*****
Offline Offline

Activity: 672
Merit: 502


View Profile
July 15, 2015, 12:08:49 PM
 #4

Simple solution: put your encrypted wallet.dat file inside a .7z (7zip) encrypted file with the same password you used on your wallet.dat file, so you don't forget it.
batesresearch
Legendary
*
Offline Offline

Activity: 2424
Merit: 1147


View Profile WWW
July 16, 2015, 07:20:11 AM
 #5

I don't believe the file is encrypted as well just protected by the passphrase you protected with (If you added one)

The Backup Wallet feature is just a much less technical way for a user to backup their wallets without having to navigate through user folders and temp folders etc.

I do believe a routine 'Please Backup Your Walket' message should appear in the Bitcoin client or something similar in design.

Visit Satoshi's Place, a Bitcoin Hub based in Bury, Manchester, UK.
Website: https://satoshisplace.co.uk
Goals: Educate & Onboard users in to Bitcoin. Lightning network⚡️
turvarya
Hero Member
*****
Offline Offline

Activity: 714
Merit: 500


View Profile
July 16, 2015, 07:25:06 AM
 #6

backupwallet is the same as copying wallet.dat

encrypting the wallet means encrypting the private keys.

If you have made a backup, and then you encrypt your wallet, you need to make a new backup because the old one will not work anymore.

Anyway that's my understanding, someone please correct me if I'm wrong.  And I'm sure I've missed some important points.
Wrong.
The wallet.dat is designed to fit in every installation of Bitcoin Core.

Your scenario just means, you made an unencrypted backup, before encrypting it, so your encryption was pointless if somebody finds the backup.
If you encrypt your wallet, you should delete all unencrypted backups(so all backups, that were made before the encryption)

https://forum.bitcoin.com/
New censorship-free forum by Roger Ver. Try it out.
runpaint
Sr. Member
****
Offline Offline

Activity: 518
Merit: 250



View Profile
July 16, 2015, 12:05:24 PM
 #7

That makes more sense.  I knew there was something wrong with the way I said it.

GoldenCryptoCommod.com
LiteCoinGuy
Legendary
*
Offline Offline

Activity: 1148
Merit: 1010


In Satoshi I Trust


View Profile WWW
July 16, 2015, 04:02:11 PM
 #8

correct me if iam wrong but when you use a passphrase your wallet should be safe because an attacker has to know that passphrase. only the wallet.dat is useless.

to be even more safe: you can encrypt that wallet.dat too with software tools.


(i know there should not be any keyloggers on your pc)

batesresearch
Legendary
*
Offline Offline

Activity: 2424
Merit: 1147


View Profile WWW
July 16, 2015, 04:05:13 PM
 #9

correct me if iam wrong but when you use a passphrase your wallet is safe because an attacker has to know that passphrase. only the wallet.dat is useless.

to be even more safe: you can encrypt that wallet.dat too with software tools.


(i know there should not be any keyloggers on your pc)

That's correct, so before you backup your wallet enter a very strong passphrase and encrypt it! Then you can encrypt with a third party encryption tool (I won't name any!)

Visit Satoshi's Place, a Bitcoin Hub based in Bury, Manchester, UK.
Website: https://satoshisplace.co.uk
Goals: Educate & Onboard users in to Bitcoin. Lightning network⚡️
odolvlobo
Legendary
*
Offline Offline

Activity: 4298
Merit: 3214



View Profile
July 16, 2015, 04:47:03 PM
 #10

backupwallet is the same as copying wallet.dat

encrypting the wallet means encrypting the private keys.

If you have made a backup, and then you encrypt your wallet, you need to make a new backup because the old one will not work anymore.

Anyway that's my understanding, someone please correct me if I'm wrong.  And I'm sure I've missed some important points.
Wrong.
The wallet.dat is designed to fit in every installation of Bitcoin Core.

Your scenario just means, you made an unencrypted backup, before encrypting it, so your encryption was pointless if somebody finds the backup.
If you encrypt your wallet, you should delete all unencrypted backups(so all backups, that were made before the encryption)

Wrong. Wink
When you add a passphrase to Bitcoin Core, it throws out all unused addresses in the pool, so any previous backups are no longer valid because they have the wrong keys. You must back up the wallet after adding a passphrase, just like the instructions say.

Join an anti-signature campaign: Click ignore on the members of signature campaigns.
PGP Fingerprint: 6B6BC26599EC24EF7E29A405EAF050539D0B2925 Signing address: 13GAVJo8YaAuenj6keiEykwxWUZ7jMoSLt
turvarya
Hero Member
*****
Offline Offline

Activity: 714
Merit: 500


View Profile
July 16, 2015, 04:51:04 PM
 #11

backupwallet is the same as copying wallet.dat

encrypting the wallet means encrypting the private keys.

If you have made a backup, and then you encrypt your wallet, you need to make a new backup because the old one will not work anymore.

Anyway that's my understanding, someone please correct me if I'm wrong.  And I'm sure I've missed some important points.
Wrong.
The wallet.dat is designed to fit in every installation of Bitcoin Core.

Your scenario just means, you made an unencrypted backup, before encrypting it, so your encryption was pointless if somebody finds the backup.
If you encrypt your wallet, you should delete all unencrypted backups(so all backups, that were made before the encryption)

Wrong. Wink
When you add a passphrase to Bitcoin Core, it throws out all unused addresses in the pool, so any previous backups are no longer valid because they have the wrong keys. You must back up the wallet after adding a passphrase, just like the instructions say.
So, adding a passphrase creates new address and send all funds from previously created addresses to the new addresses?

https://forum.bitcoin.com/
New censorship-free forum by Roger Ver. Try it out.
runpaint
Sr. Member
****
Offline Offline

Activity: 518
Merit: 250



View Profile
July 16, 2015, 04:53:46 PM
 #12

Shit, I knew I was right the first time before I said I was wrong

GoldenCryptoCommod.com
Amph
Legendary
*
Offline Offline

Activity: 3206
Merit: 1069



View Profile
July 16, 2015, 05:50:24 PM
 #13

never bothered with encripting it, i know it is useful in the case you wallet is stolen, but i prefer to have access to my fund in the fastes way posssible, i want to cover more the security of my machine and no the wallet itself

having a machine that is not infected in the first place(one can argue that you never know if it infected, well he is wrong, you can.. with a simple "trap wallet" and with the fact that i don't DL anything without a sign) is the most important thing for me
odolvlobo
Legendary
*
Offline Offline

Activity: 4298
Merit: 3214



View Profile
July 17, 2015, 12:44:49 AM
 #14

When you add a passphrase to Bitcoin Core, it throws out all unused addresses in the pool, so any previous backups are no longer valid because they have the wrong keys. You must back up the wallet after adding a passphrase, just like the instructions say.
So, adding a passphrase creates new address and send all funds from previously created addresses to the new addresses?

Join an anti-signature campaign: Click ignore on the members of signature campaigns.
PGP Fingerprint: 6B6BC26599EC24EF7E29A405EAF050539D0B2925 Signing address: 13GAVJo8YaAuenj6keiEykwxWUZ7jMoSLt
turvarya
Hero Member
*****
Offline Offline

Activity: 714
Merit: 500


View Profile
July 17, 2015, 06:43:00 AM
 #15

When you add a passphrase to Bitcoin Core, it throws out all unused addresses in the pool, so any previous backups are no longer valid because they have the wrong keys. You must back up the wallet after adding a passphrase, just like the instructions say.
So, adding a passphrase creates new address and send all funds from previously created addresses to the new addresses?
That still doesn't make sense. From the way, I understand Bitcoin Core, it creates 100 addresses at once.
So, I used address 1-10 and than made a backup. The backup contains all 100 addresses. Then I used address 11-20 and came to mind, that I should encrypt the whole thing. According to you, it deleted address 21-100 and creates new addresses. It still has address 1-20 which could contain money and which are in the backup. I could even have given out one of these addresses for let's say weekly payments of a sig campaign here on the forum and would get Bitcoin in the future.
Only money that is send to new addresses is save.

So, I am still right about, deleting your old backups after encrypting your wallet.

https://forum.bitcoin.com/
New censorship-free forum by Roger Ver. Try it out.
peligro
Hero Member
*****
Offline Offline

Activity: 593
Merit: 500


1NoBanksLuJPXf8Sc831fPqjrRpkQPKkEA


View Profile
July 20, 2015, 12:03:29 PM
 #16

backupwallet is the same as copying wallet.dat

encrypting the wallet means encrypting the private keys.

If you have made a backup, and then you encrypt your wallet, you need to make a new backup because the old one will not work anymore.

Anyway that's my understanding, someone please correct me if I'm wrong.  And I'm sure I've missed some important points.

Wasn't there a bug in a previous version of bitcoin-qt where the backup did only back up the first hundred bitcoin addresses so that the ones coming after that were not backed up. Then does this mean the backing up procedure of the wallet.dat did change?
Muhammed Zakir
Hero Member
*****
Offline Offline

Activity: 560
Merit: 506


I prefer Zakir over Muhammed when mentioning me!


View Profile WWW
July 20, 2015, 03:31:42 PM
 #17

backupwallet is the same as copying wallet.dat

encrypting the wallet means encrypting the private keys.

If you have made a backup, and then you encrypt your wallet, you need to make a new backup because the old one will not work anymore.

Anyway that's my understanding, someone please correct me if I'm wrong.  And I'm sure I've missed some important points.

Wasn't there a bug in a previous version of bitcoin-qt where the backup did only back up the first hundred bitcoin addresses so that the ones coming after that were not backed up. Then does this mean the backing up procedure of the wallet.dat did change?

It is not a bug and it is same for latest versions AFAIK.

turvarya
Hero Member
*****
Offline Offline

Activity: 714
Merit: 500


View Profile
July 21, 2015, 09:55:57 AM
 #18

backupwallet is the same as copying wallet.dat

encrypting the wallet means encrypting the private keys.

If you have made a backup, and then you encrypt your wallet, you need to make a new backup because the old one will not work anymore.

Anyway that's my understanding, someone please correct me if I'm wrong.  And I'm sure I've missed some important points.

Wasn't there a bug in a previous version of bitcoin-qt where the backup did only back up the first hundred bitcoin addresses so that the ones coming after that were not backed up. Then does this mean the backing up procedure of the wallet.dat did change?

It is not a bug and it is same for latest versions AFAIK.
Bitcoin Core generates 100 addresses in advance. So, if you back it up, just this addresses get backed up. If you used all 100 addresses, it generates 100 new ones. If you back up now, all 200 are saved.
The problem is(afaik, maybe it changed), that it doesn't tell you, that it generated new addresses und your backup is outdated.

https://forum.bitcoin.com/
New censorship-free forum by Roger Ver. Try it out.
peligro
Hero Member
*****
Offline Offline

Activity: 593
Merit: 500


1NoBanksLuJPXf8Sc831fPqjrRpkQPKkEA


View Profile
July 27, 2015, 01:23:14 PM
 #19

Thank you for the clarification turvarya. Normally i would have thought that the standard client will create the same addresses again. So when 100 are not enough and he creates more 100 then it would not be a problem when there is only a backup for the first 100. The second 100 could be created from seed.

I wonder why that doesn't happen.
turvarya
Hero Member
*****
Offline Offline

Activity: 714
Merit: 500


View Profile
July 27, 2015, 01:33:52 PM
 #20

Thank you for the clarification turvarya. Normally i would have thought that the standard client will create the same addresses again. So when 100 are not enough and he creates more 100 then it would not be a problem when there is only a backup for the first 100. The second 100 could be created from seed.

I wonder why that doesn't happen.
As far as I know, there just wasn't something like this seed passed generation of private keys, as e.g. Mycelium uses, when Bitcoin QT was created.
Bitcoin Core just randomly generated addresses without any connection to each other.

https://forum.bitcoin.com/
New censorship-free forum by Roger Ver. Try it out.
Pages: [1] 2 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!