Mycelium Bitcoin Wallet

[trasla]

Concerning spending unconfirmed coins: this is at the moment possible when cold spending. But it's risky, cause transaction malleability still exists and those attacks do take place, and if you get hit by it a transaction based on 0 confirmation outputs will never confirm - and you will not know why. And will blame us.

[Kazimir]

We already coded and tested a setting which allows adjusting the fee. It will be contained in the next release, and allow three fee lvls. Standard: 0,1 mBTC like now, economic: 0,01 mBTC (ten times lower), and priority: 0,2 mBTC - in case the transaction volume spikes extremely before block size gets increased, and you need to make sure your TX confirm fast.

Awesome!

Concerning spending unconfirmed coins: this is at the moment possible when cold spending. But it's risky, cause transaction malleability still exists and those attacks do take place, and if you get hit by it a transaction based on 0 confirmation outputs will never confirm - and you will not know why. And will blame us.

OK, yeah, I see your point. I am not up to speed with the current state of the malleability issue, any idea if and how this will be taken care of indefinitely in Bitcoin-Core (or should that be protocol level?) any time soon?

[Kazimir]

One more, small, simple request. Can you make Mycelium for Windows Phone as well?

Seriously, it would be totally awesome if people can have a proper wallet app like Mycelium on Windows Phone.

[StevenS]

I had to restore my wallet today. I had one HD accounts and 2 legacy addresses, and restored them all. The only thing missing is the Local Trader account. I had one before, and it was associated with one of the legacy addresses, but I don't remember which one. How can I determine that, or should I just create a new Local Trader account? (I didn't actually make any trades with it, because I ended up using LocalBitcoins.com.)

[molecular]

I have a question: I'm in a trade conversation. About 2 minutes after I send a message, I get an alert saying there's trading activity. I cannot find any indication of any activity though. This seems to happen consistently (2 times now). Is that a bug or a feature?

[Rassah]

I had to restore my wallet today. I had one HD accounts and 2 legacy addresses, and restored them all. The only thing missing is the Local Trader account. I had one before, and it was associated with one of the legacy addresses, but I don't remember which one. How can I determine that, or should I just create a new Local Trader account?

When creating an LT account, give it one of your addresses. If it pops up with your nick and imports your LT account, that's the right one. If it asks you to set up a new account, exit and try again. At least I think that should work.

Regarding spending unconfirmed amounts, since you have HD, just send half of your own money to your own HD account, and you'll have your coins split between two addresses. It will pick whichever one isn't used next time you need to spend twice within the same block.

I have a question: I'm in a trade conversation. About 2 minutes after I send a message, I get an alert saying there's trading activity. I cannot find any indication of any activity though. This seems to happen consistently (2 times now). Is that a bug or a feature?

It's a feature provided by Google, since we use them for notifications. So we don't really have a way of troubleshooting it. Sorry if it's annoying

[StevenS]

When creating an LT account, give it one of your addresses. If it pops up with your nick and imports your LT account, that's the right one. If it asks you to set up a new account, exit and try again. At least I think that should work.

That worked! Thank you!

[trasla]

Regarding spending unconfirmed amounts, since you have HD, just send half of your own money to your own HD account, and you'll have your coins split between two addresses. It will pick whichever one isn't used next time you need to spend twice within the same block.

This is not necessary.
Change can be spend without confirmations. (it's been like that since way before 2.0) You can spend from the same account as often in a row as you want.

[IamNotSure]

I've searched without succes an answer to my question :

If my phone is stolen, how fast an attacker can crack my PIN and spend my coins ? Is there a fastest way for an attacker to grab my seed (or the private key of non HD addresses)

Could the bip 39 mnemonic backup be imported in electrum, or a web wallet to quickly salvage to coins before the thief gets access to them ?

[elasticband]

i was in the process of swapping over to a new mobile phone.

I took note of my seed by going through the process required.

On the new phone i enter the seed, word for word, but my wallet is not restored.... i still have the copy on my old phone luckily.

edit: i use seeds often with different electrum wallets and never had this problem

[StevenS]

If my phone is stolen, how fast an attacker can crack my PIN and spend my coins ? Is there a fastest way for an attacker to grab my seed (or the private key of non HD addresses)

Once the thief has cracked your phone's lock screen, if he was specifically looking for a phone with Mycelium, meaning that he already had the tools needed, he would copy the data from your phone and use a cracking program to try all 1,000,000 PINs.

Since a very small percentage of stolen phones have Mycelium installed, it's much more likely that the thief would simply wipe your phone and sell it. In other words, he would have to be stalking Bitcoin users to have an attack ready for Mycelium.

Without this, it would not be realistic to guess a 6-digit PIN, which would give you lots of time to recover the wallet and transfer the coin.

Could the bip 39 mnemonic backup be imported in electrum, or a web wallet to quickly salvage to coins before the thief gets access to them ?

It could be imported by any wallet that implements BIP32/39/44.

[trasla]

i was in the process of swapping over to a new mobile phone.

I took note of my seed by going through the process required.

On the new phone i enter the seed, word for word, but my wallet is not restored.... i still have the copy on my old phone luckily.

edit: i use seeds often with different electrum wallets and never had this problem

What exactly do you mean with "my wallet is not restored"?
Does the phone crash? Nothing happens? Wallet is restored but balance is wrong?

After importing a backup, the app needs some time to synchronize and can only show your balance after that.
Per default, only the first HD account gets restored, if you had more than one, you need to choose "add HD account" to add the other ones.

Note that as far as I know electrum has not switched to BIP39 yet, so their seeds are not compatible with mycelium / trezor / wallet32 ...

[trasla]

I've searched without succes an answer to my question :

If my phone is stolen, how fast an attacker can crack my PIN and spend my coins ? Is there a fastest way for an attacker to grab my seed (or the private key of non HD addresses)

Could the bip 39 mnemonic backup be imported in electrum, or a web wallet to quickly salvage to coins before the thief gets access to them ?

I cant tell you how long it takes to get to the data.
The thief would need to get through any screen protection you have (like PIN / pattern / password) and then either needs to manually bruteforce your mycelium PIN or manage to extract the app data from the apps secure storage. I personally don't know how sophisticated methods for this are at the moment, and how long it takes.

You cannot yet import the seed into electrum, since as far as I know they have not switched to BIP39 yet. Trezor would work, wallet32 for Android, another install of mycelium of course, there are probably more. We have "providing a desktop tool for extracting keys from word lists" on our list of tasks, but its sitting there together with a lot of other stuff, so I cannot give you an estimation for when to expect it...

[axel2078]

I had to restore my wallet today. I had one HD accounts and 2 legacy addresses, and restored them all. The only thing missing is the Local Trader account. I had one before, and it was associated with one of the legacy addresses, but I don't remember which one. How can I determine that, or should I just create a new Local Trader account? (I didn't actually make any trades with it, because I ended up using LocalBitcoins.com.)

How did you also restore your legacy addresses?  I have one HD account and two watch only accounts.  I deleted the app so I could test the recovery procedure and it did recover my HD account, but I had to manually add my watch only accounts back in.

[Rassah]

If my phone is stolen, how fast an attacker can crack my PIN and spend my coins ? Is there a fastest way for an attacker to grab my seed (or the private key of non HD addresses)

Fast. The PIN is only designed to keep someone from swiping your phone while you are using it, and sending coins to themselves right then and there. You should keep your whole phone encrypted with a password or pin, longer than 4 characters, to be safe from theft.

Could the bip 39 mnemonic backup be imported in electrum, or a web wallet to quickly salvage to coins before the thief gets access to them ?

Electrum does not use BIP39. They have their own custom word list, as does DarkWallet which is trying to be compatible with Electrum. Anything that IS compatible with the BIP39 standard will let you import the coins (such as a Trezor). Electrum claimed they will move to BIP39 eventually, but I don't know when.

i was in the process of swapping over to a new mobile phone.

I took note of my seed by going through the process required.

On the new phone i enter the seed, word for word, but my wallet is not restored.... i still have the copy on my old phone luckily.

edit: i use seeds often with different electrum wallets and never had this problem

Seeds only restore your HD wallets, not your single address wallets. What are the Android versions of the phone you were using? (2.0 / 4.0 / 4.4)

[StevenS]

How did you also restore your legacy addresses?

I used the legacy backups that Mycelium made when I first created those legacy addresses. Mycelium made a PDF file, which I printed out and then wrote down the password that Mycelium showed on the screen.

I assume the current version will still let you backup a legacy address this way, but I didn't try, because I already had the backups.

[gtraah]

I Hope these are on the list for new versions:

1.   Multisig

2,   Offline Signing

3.   NFC Pay tapping - 1 Tap = 1 Pay

This is how you say good bye too all the wallets that ever existed. Competition is over, in fact who needs competition when one wallet does it all

[Zelig]

Is it supposed to create a new private key each time I open the wallet?  Or, I don't know if it's each time, but I have about 15 private keys already.  Why isn't one private key enough? 

Z

[trasla]

Is it supposed to create a new private key each time I open the wallet?  Or, I don't know if it's each time, but I have about 15 private keys already.  Why isn't one private key enough? 

The HD account creates a new private key and address every time you receive coins (new receiving address) and every time you send coins (new change address).
This improves your privacy, because some sending money to you or getting money from you cannot easily see your complete past transaction history.

[Rassah]

I Hope these are on the list for new versions:

1.   Multisig

On the list, but way at the end of the queue.

2,   Offline Signing

Being able to sign while not connected to the web is already implemented, and sending a signed transaction through some other channel (NFC or Bluetooth) is being considered. If you mean something like Armory style completely offline signing, that's not on the list. We hope that a new tech we are looking for will make that unnecessary.

3.   NFC Pay tapping - 1 Tap = 1 Pay

Not possible. At least not with one tap. You need 1 tap to request the address and amount to send to, then the wallet signs, and then one more tap to send the signed transaction. The reason 1 Tap = 1 Pay works with credit cards is because it's the equivalent of tapping to give the merchant your private key, and then having them only pull out what they need.