HOWTO: create a 100% secure wallet

[xDGDZEx]

So after reading this, I'm still trying to understand how secure different methods are, and the time vs. level of security issue.

If you created a truecrypt file that stored either the wallet.dat or the entire bitcoin program, and then only mounted it when in use (of course on a clean OS install with heavy virus protection), would that provide an acceptable level of security? I guess I don't completely understand where exactly the vulnerabilities exist.

Also, is it possible to put the wallet.dat on a flash drive with an encrypted partition, so that the bitcoin program could reside on your main OS, but would have no access under normal operation to your wallet?

[codymanix]

The current version of the bitcoin client provides wallet encryption. This should be secure enough for normal users, given that you use a secure password and doesn't store it on your pc somewhere.
But at the end - if a hacker had access to your pc - may it remote or physical, he could also install keyloggers or whatever.
The ultimate security would be to use a computer for bitcoin only and use another pc for any other task, so there is not chance for malicious software to get in touch with your wallet.

[theroman61]

Great and informative post! Thanks for the info.

[manderson]

Thank you for good info! 

[blachskies]

You can never better be too safe with your money. It's a lot of extra steps, but i rather take the time to do that than lose everything. Good knowledge for everyone!

[quicklynx]

Great write up! Thanks for the info!

[556j]

Thanks for the write up.

[Travis12345]

Can you put a wallet on a usb

[omo]

Thanks for the info.

[ducktape]

Great thread overall OP, but I could do without the insults throughout...

[andylam]

thanks i been looking for this !!

[altuin]

Great write up! Thanks for the info!

[Nerzahd]

+1

[Foon]

A good post from the OP with sound advice.

FWIW, Ubuntu will install nicely to a USB key (treating it just like any other hard disk); you can full-disk-encrypt with one passphrase, encrypt your homedir within that using a second passphrase, then encrypt your wallet file with a third passphrase.  Sure it's more likely you'll forget your passphrase (there's 3 of them!) but you've effectively got 4-factor authentication - 3 separate (nested) passphrases plus the USB key itself, which you could keep in a box at the bank.

One tip though if you're going to go to such paranoid lengths - create a dozen or so wallet addresses and keep a list of them somewhere easily accessible (unencrypted is fine for addresses).  It can be a pain to start up and log into such a secure system every time you want a new address (for changing pool or whatever).

[TeejFreeman]

Great Read Thanks!

[Cage]

so might be off topic but pleae enlighten my dumbass..how do i purchase bitcoins?

[Libreyseco]

Thank you for this information, it's very interesting because I've heart that there are some people who try to steal your BTC.

[leg3nd]

Good information! Thanks!

[devoblackflag]

I'll do my best to keep safe!

[Sysrq]

Thank you for the informations ! Useful.