Bitcoin Forum
May 04, 2024, 09:56:10 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 [20] 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 ... 127 »
  Print  
Author Topic: HOWTO: create a 100% secure wallet  (Read 276149 times)
kam1lly
Newbie
*
Offline Offline

Activity: 48
Merit: 0


View Profile
July 25, 2011, 01:06:14 AM
 #381

useful stuff, I've been trying to find ways to secure my investments
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
pekv2
Hero Member
*****
Offline Offline

Activity: 770
Merit: 502



View Profile
July 25, 2011, 06:14:08 AM
 #382

Cool how-to. Instead of leaving or backing up my wallet on my windows drive, I've created debian-live-6.0.1-amd64-gnome-desktop bootable SD with unetbootin. Going to be using the bootable SD to do my transactions and backing up for now on.

One problem that sucks for I, is the waiting for block count, while doing all of this on my mining machine "only one pc atm". Losing mining time to do transactions, backups etc on the live disk, but safer than sorry, I'd rather loose a few hours of mining than having my wallet somehow taken. I have more than a few years experience with debian based linux distro's. For a very fresh pc user, this how-to will be a challenge for them as a beginner. I recommend using debian live. Ubuntu has gone to garbage.
funkymunky
Sr. Member
****
Offline Offline

Activity: 283
Merit: 250



View Profile
July 25, 2011, 03:38:42 PM
 #383

Live Distros for me  Grin
PBJ
Member
**
Offline Offline

Activity: 84
Merit: 10


View Profile
July 25, 2011, 04:52:30 PM
 #384

This may be a little extreme.

But I personally keep mine on my Ironkey.

Along with my business information.
pekv2
Hero Member
*****
Offline Offline

Activity: 770
Merit: 502



View Profile
July 25, 2011, 05:04:35 PM
 #385

This may be a little extreme.

But I personally keep mine on my Ironkey.

Along with my business information.

It is very extreme & time consuming, I believe this purpose is solely to avoid any trojans/keyloggers/etc/people from accessing your wallet/data etc, even with the proper security of a windows pc, I won't take the chance and will use the extreme practices to keep my wallet safer.

PBJ
Member
**
Offline Offline

Activity: 84
Merit: 10


View Profile
July 25, 2011, 05:36:58 PM
 #386

Actually, with Ironkey it is simple as remembering your pass phrase.
simonk83
Hero Member
*****
Offline Offline

Activity: 798
Merit: 1000


View Profile
July 26, 2011, 04:06:03 AM
 #387

Unfortunately, multiple wallets is somewhat inevitable, and although bitcoin tries to hide the mechanics of all the key management, I think address management is a huge risk. People have a natural tendancy to use the last-known-good address and wait for something to go wrong. I'm sure we all know people who would write one bitcoin address down once, and expect it to always work. That's a really dangerous expectation. By this point, I've installed the client on 4 different machines several times, and although I don't need all of those addresses .. if it's out there .. there's a risk someone will use it.

OK, I need a bit of clarification here.   My setup is as follows.    I have my day to day PC, which is also my mining PC.  On that PC I have Bitcoin installed and my mining proceeds get sent into that wallet. 

I've also setup Ubuntu on a USB stick.  It's not installed on there, it just runs, so it's fresh each time it boots.   On another USB stick I have a copy of the Bitcoin install program, a copy of the TrueCrypt install program, and a copy of the Wuala install program.   What I've done is, last night, booted the Ubuntu stick, installed the above programs and created a new wallet.   I didn't generate any other keys other than the initial one.   I took that key and emailed it to myself.     

On my main PC, I transferred 0.5BTC to this new address (the Ubuntu address).   On the Ubuntu stick I downloaded the entire blockchain and verified that the transaction showed up.   At that point I created a TrueCrypt volume on a second USB stick and moved the wallet.dat file into that encrypted volume.   I also zipped the wallet.dat with -e and uploaded it to Wuala (as a backup backup).  Wuala encrypts all data anyway, but I figured it didn't hurt to zip encrypt it as well Smiley

As the blockchain took bloody forever to download, I also made a copy of that on a separate USB stick.

I then shut down Ubuntu, and restarted it, verifying that everything was gone and fresh, then went through the steps of reinstalling all the above programs and recovering my wallet.dat.   All good, all blocks present, along with the 0.5BTC.

Satisfied that it all worked, I then transferred the total remainder of my BTC from my main PC wallet to this Ubuntu "savings" wallet using the initial address I'd emailed to myself.

Booted Ubuntu, and again verified everything was present, then made a final backup of this wallet into TrueCrypt and Wuala.

So now, whenever I accumulate some BTC on my main PC from mining, I'll just send it to this Savings address (I won't bother checking it worked from now on, other than looking on Block Explorer).


My question, after than long winded blah, is to your point above about only using that one address.   What are the risks/pitfalls of doing that?   If I only ever send my BTC to that one address (which is pointing to a wallet that is encrypted on a disk and only accessed via a LiveCD when I want to spend it), is that a problem?     No-one can do anything with that address, not unless they get through all my crap and get my wallet.dat right?     So why is it better to have multiple addresses?


Thanks Cheesy
Teofila Husby
Newbie
*
Offline Offline

Activity: 1
Merit: 0


View Profile WWW
July 26, 2011, 09:15:37 AM
 #388

Very good article!   Grin Grin
loukin
Newbie
*
Offline Offline

Activity: 4
Merit: 0


View Profile
July 26, 2011, 05:56:11 PM
 #389

Thank you for the good info.
xcarbon1
Newbie
*
Offline Offline

Activity: 9
Merit: 0


View Profile
July 26, 2011, 08:10:06 PM
 #390

thanks, very useful  Smiley
ianspain
Donator
Full Member
*
Offline Offline

Activity: 164
Merit: 100



View Profile
July 26, 2011, 10:09:15 PM
 #391

great thread, thanks for the info

BlockChain Capital
BitPay Business Solutions
Hero Member
*****
Offline Offline

Activity: 742
Merit: 500


View Profile WWW
July 27, 2011, 08:40:15 PM
 #392

great article!

BitPay : The World Leader in Bitcoin Business Solutions

https://bitpay.com

Does your website accept bitcoins?
gooie
Newbie
*
Offline Offline

Activity: 28
Merit: 0



View Profile
July 27, 2011, 09:55:34 PM
 #393

will do this asap, thanks!
darkstars
Newbie
*
Offline Offline

Activity: 6
Merit: 0


View Profile
July 28, 2011, 06:53:53 PM
 #394

nice guide
Dextro
Newbie
*
Offline Offline

Activity: 16
Merit: 0



View Profile
July 28, 2011, 09:26:44 PM
 #395

Very useful.

I personally love USB flash drives  Grin
simonk83
Hero Member
*****
Offline Offline

Activity: 798
Merit: 1000


View Profile
July 29, 2011, 12:43:28 AM
 #396

Unfortunately, multiple wallets is somewhat inevitable, and although bitcoin tries to hide the mechanics of all the key management, I think address management is a huge risk. People have a natural tendancy to use the last-known-good address and wait for something to go wrong. I'm sure we all know people who would write one bitcoin address down once, and expect it to always work. That's a really dangerous expectation. By this point, I've installed the client on 4 different machines several times, and although I don't need all of those addresses .. if it's out there .. there's a risk someone will use it.

OK, I need a bit of clarification here.   My setup is as follows.    I have my day to day PC, which is also my mining PC.  On that PC I have Bitcoin installed and my mining proceeds get sent into that wallet. 

I've also setup Ubuntu on a USB stick.  It's not installed on there, it just runs, so it's fresh each time it boots.   On another USB stick I have a copy of the Bitcoin install program, a copy of the TrueCrypt install program, and a copy of the Wuala install program.   What I've done is, last night, booted the Ubuntu stick, installed the above programs and created a new wallet.   I didn't generate any other keys other than the initial one.   I took that key and emailed it to myself.     

On my main PC, I transferred 0.5BTC to this new address (the Ubuntu address).   On the Ubuntu stick I downloaded the entire blockchain and verified that the transaction showed up.   At that point I created a TrueCrypt volume on a second USB stick and moved the wallet.dat file into that encrypted volume.   I also zipped the wallet.dat with -e and uploaded it to Wuala (as a backup backup).  Wuala encrypts all data anyway, but I figured it didn't hurt to zip encrypt it as well Smiley

As the blockchain took bloody forever to download, I also made a copy of that on a separate USB stick.

I then shut down Ubuntu, and restarted it, verifying that everything was gone and fresh, then went through the steps of reinstalling all the above programs and recovering my wallet.dat.   All good, all blocks present, along with the 0.5BTC.

Satisfied that it all worked, I then transferred the total remainder of my BTC from my main PC wallet to this Ubuntu "savings" wallet using the initial address I'd emailed to myself.

Booted Ubuntu, and again verified everything was present, then made a final backup of this wallet into TrueCrypt and Wuala.

So now, whenever I accumulate some BTC on my main PC from mining, I'll just send it to this Savings address (I won't bother checking it worked from now on, other than looking on Block Explorer).


My question, after than long winded blah, is to your point above about only using that one address.   What are the risks/pitfalls of doing that?   If I only ever send my BTC to that one address (which is pointing to a wallet that is encrypted on a disk and only accessed via a LiveCD when I want to spend it), is that a problem?     No-one can do anything with that address, not unless they get through all my crap and get my wallet.dat right?     So why is it better to have multiple addresses?


Thanks Cheesy

Bump Smiley
lxFlasHxl
Newbie
*
Offline Offline

Activity: 42
Merit: 0


View Profile
July 31, 2011, 09:07:47 AM
 #397

nice, good to know. Thumbs in the air
g0y
Newbie
*
Offline Offline

Activity: 10
Merit: 0


View Profile
July 31, 2011, 10:37:06 AM
 #398

thank u,useful info,nice post Smiley
Instigator
Newbie
*
Offline Offline

Activity: 4
Merit: 0


View Profile
July 31, 2011, 01:48:13 PM
 #399

good read, thanks
topheroly
Newbie
*
Offline Offline

Activity: 21
Merit: 0



View Profile
July 31, 2011, 09:32:23 PM
 #400

Nice tutorial.  Thanks for the information.
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 [20] 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 ... 127 »
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!