HOWTO: create a 100% secure wallet

[knives]

Just adding my 0.00002 BTC

I run OSX.  My security is:

1 - Create small truecrypt volume ~ 30mb
2 - Mount truecrypt volume
3 - Install (first time) and run (every time after that) the Bitcoin client from truecrypt volume.
4 - When not using Bitcoin client, simply close application.
5 - After Bitcoin client is closed, dismount truecrypt volume, which then is a highly encrypted file containing wallet.dat and all other Bitcoin app files.

I'd be interested to hear anyone's thoughts on this.  It is very simple, and allows me to store my encrypted file anywhere as a backup online.

I use the same setup. The 'truecrypt container' is synced using drobox so, it's encrypted and always synced and "online" for be to download and open (using my pass-phrase) at all times.

If you have less than 2.000-5.000 BTC I don't understand all this madness described in this post...

[1532266241]

1532266241

[1532266241]

1532266241

[1532266241]

1532266241

[bit-fxtrader]

tnx for the tip

[illphukiir]

Thanks for the tip

[akalyptos]

Thanks, very useful 

[geekssucks]

is it possible to create a boot usb stick and move the wallet to it?

[forgetitman]

Thanks for this, very informative

[mothersuckers]

good how-to and discussion, thanks.

[horheyjack]

Thanks for all the info 
 I will testit

[Mollypockets]

Put it on a stick now, thanks for that advice!

[jaywaka2713]

I think i have a pretty secure wallet setup. I have Google Drive set up on my computer, of which the account has a long complex password. I have a networked drive from Google Drive displayed on my computer. I have TrueCrypt set up on the drive, encrypting my wallet. I then use MultiBit to connect to the Wallet. I want to run MultiBit from the drive, all under the TrueCrypt encryption. I'm just too lazy.

[ainksn]

I feel like this is obvious, but I can not send coin to the address on the hard disk when it is not running on the computer right? whenever you wanna make a deposit, you load up the disk, re install btc client again, deposit your coins from one wallet to the savings wallet, and then copy it back on the disk?

[higuys]

Interdasting.

[jackingjillith]

As a so-called newbie, I'd like to say thanks for putting time into writing this.

[jumbojim]

great info thanks

[jaywaka2713]

I feel like this is obvious, but I can not send coin to the address on the hard disk when it is not running on the computer right? whenever you wanna make a deposit, you load up the disk, re install btc client again, deposit your coins from one wallet to the savings wallet, and then copy it back on the disk?

If you reinstall the btc client you may end up with a whole new wallet. You would need to restore your wallet.dat file in the AppData directory. If you have a savings wallet, it doesn't need to be online to receive Bitcoin. The ONLY times you ever need internet with an offline wallet are to keep an updated blockchain, and Send (purchase, donate, transfer, etc) Bitcoins. You do not need to be online to receive them. But when you are online, you will receive them when your local blockchain file is updated.

[pastrickle]

Thanks a lot for the help, I had a rat on my computer before and they attempted to take my btc but my wallet was secure so it was cool.

[secondupline]

Great thread. Thanks for the advice.

[jaywaka2713]

Thanks a lot for the help, I had a rat on my computer before and they attempted to take my btc but my wallet was secure so it was cool.

That passphrase encryption probably saved you I'm guessing. I use BitDefender on my computer, and have an advanced router setup. On my old computer I had a program that let me know when my computer sent outgoing data and if it detected an interval of which the data was sent to help pinpoint a virus. After my hard drive crashed on the computer (probably because I dropped it way too many times) I lost the program and have been unable to find it. I also use Process Hacker in place of Task Manager because it gives plenty of data. I also never do any banking off of my Bootable USB running Tails. I use my Ubuntu USB when I'm fed up with Tor. I use Spyshelter to hedge against keyloggers (disabled its firewall. Bitdefender's is better). Lastly, if I feel I have something, I use malwarebytes in safe mode to find it. Pretty good setup if you ask me. I use my Windows partition for gaming and endless browsing, but use my Debian Linux partition for hacking and stuff. I plan to eliminate my Windows partition and switch from Debian to Ubuntu when I receive my ASIC.

[noodleman]

Thanks for this guide.its nice to be secure.
And security has to be proportional to the size of the wallet.
No need to get paranoid if someone has a small wallet.
Bigger the investment (time,money e.t.c)  bigger the measures for extra security need to be 

[WUTcoin]

I haven't found much in the literature regarding t-of-n secret sharing whereby one might save a wallet such that having up to t-1 of the secrets maintains security, but that any t together will unlock it.

I'm thinking in terms of maintaining redundancy (losing your wallet doesn't make you SOL if you still have other pieces) while still having security (a paper wallet is still secure if somebody stumbles on one part of it.