HOWTO: create a 100% secure wallet

[Xfinity]

This thread is very helpful.  Also I am willing to securely store peoples bitcoins for a small fee so they don't have to worry about wallet security.

+1, this thread is very helpful and reminds me the value of security once again.

[cozie]

thanks for the info! 

[Charm Quark]

thanks

[unclemantis]

What it sounds like is can make this wallet file; save it on an SD card. Lock it up in my closet.  Then deposit coins to the address associated with the wallet.dat file with out having to take it out of its 'spot' UNLESS i want to pull coins out of my savings?  If so this is awesome! I'm looking forward to setting this up.  Thanks for the post!

MassMaster

Be sure to place it in an anti-static plastic bag and then wrap the card and bag up with aluminum foil to prevent electromagetic attack.

[3kP0mR]

Thanks for this. It seems like a good idea. I'm wondering something though. Currently I just have my wallet on my computer. Lets say someone has access to my computer, can they just copy it to an USB stick, and open it at home to do transactions with it?

I'm still trying to figure out how it works, and I haven't done any transactions yet.

[John (John K.)]

Thanks for this. It seems like a good idea. I'm wondering something though. Currently I just have my wallet on my computer. Lets say someone has access to my computer, can they just copy it to an USB stick, and open it at home to do transactions with it?

I'm still trying to figure out how it works, and I haven't done any transactions yet.

It depends if you've encrypted the wallet or not. I would recommend you to use the encryption function that is present in the bitcoin client, and also back up the wallet.dat files after encrypting with a strong password to a pendrive.
If someone takes hold of your unencrypted wallet, they can do transactions with it, much like anyone losing their real wallet.

[AmazonStuff]

It depends if you've encrypted the wallet or not. I would recommend you to use the encryption function that is present in the bitcoin client, and also back up the wallet.dat files after encrypting with a strong password to a pendrive.
If someone takes hold of your unencrypted wallet, they can do transactions with it, much like anyone losing their real wallet.

Thanks, I was going to ask this questions and I saw your answer

[delinquent]

Really sorry to put a downer on the conversation, But seeing as lately there is a problem with residual currents in many brands of RAM, isn't it feasible that by removing the RAm from the PC in use and then accessing it via another medium, theft is still possible?

I've heard of this kind of attack before, Obviously there is a limit on how long the memory can be left after shutdown, but it would make sense to power cycle the PC in question before leaving...

note: This probably isn't something for the average user to worry about, seeing as the thief would mostlikely have to be a friend or family member unless they plan to break into the house immediately after the PC is used. That would beg the question, Why bother? It's just a pointer for people with masses upon masses of coins.

[John (John K.)]

This thread is very helpful.  Also I am willing to securely store peoples bitcoins for a small fee so they don't have to worry about wallet security.

I lol'ed.

[bitcoinville]

very helpful thanx

[bitster]

informative thanks.

[Papina]

thanks for this information

[lsr-can]

Thank you for this resource - it's a great read for a new user.

I have a question about taking a similar approach, but with some slightly different parameters:

1) I don't have an optical drive, but I'm just about to do a full system format and fresh install of Win 7. If I made the general process described in the OP my first task, and then securely wiped the wallet.dat file (and uninstalled the client), I could accomplish largely the same level of security, correct?

2) Suppose I want to undertake the process described above, without ever connecting my OS to the internet, does that work? I presume the the bitcoin client doesn't actually require the whole blockchain to be downloaded in order to simply generate the wallet.dat file.

Thanks!

[Chaplin]

Really sorry to put a downer on the conversation, But seeing as lately there is a problem with residual currents in many brands of RAM, isn't it feasible that by removing the RAm from the PC in use and then accessing it via another medium, theft is still possible?

I've heard of this kind of attack before, Obviously there is a limit on how long the memory can be left after shutdown, but it would make sense to power cycle the PC in question before leaving...

note: This probably isn't something for the average user to worry about, seeing as the thief would mostlikely have to be a friend or family member unless they plan to break into the house immediately after the PC is used. That would beg the question, Why bother? It's just a pointer for people with masses upon masses of coins.

If someone has enough BTC to worry about such a sophisticated/unlikely attack, I hope they converted some coins to pay for a good security system. It is entirely possible if the keys, or a passphrase to them, are in cleartext in memory for any reason.

[John (John K.)]

Thank you for this resource - it's a great read for a new user.

I have a question about taking a similar approach, but with some slightly different parameters:

1) I don't have an optical drive, but I'm just about to do a full system format and fresh install of Win 7. If I made the general process described in the OP my first task, and then securely wiped the wallet.dat file (and uninstalled the client), I could accomplish largely the same level of security, correct?

2) Suppose I want to undertake the process described above, without ever connecting my OS to the internet, does that work? I presume the the bitcoin client doesn't actually require the whole blockchain to be downloaded in order to simply generate the wallet.dat file.

Thanks!

It depends on what you ascertain as the 'same level of security'. If you made sure your OS is clean, and you wipe all traces securely, then yes, your wallet should be secure.
You can generate the wallet.dat file without having to connect to the internet at all.

[lemonzest]

Great thread, thanks.

[P!nk4sand]

thank you for this information

[zorgberg]

Very nice information, thanks friends.

-The zorgberg

[stepkrav]

i downloaded the default client from bitcoin.org, the bitcoin-qt one, but it didnt create 10 addresses for me, just one and also i can't locate the wallet.dat file. Any help with that?

[lsr-can]

Hey all,

Last week I posted 2 quick questions up a bit on this thread:
https://bitcointalk.org/index.php?topic=17240.msg1028921#msg1028921

I'm wondering if someone could glance at them and give my reasoning a sanity / double check?