Wallet online for Bitcoin

[Welsh]

I agree but it is definitely safer than wallets online or the application. Trezor has the big advantage of confirming the trolls by clicking the mechanical button.

I still stand by generating private keys on a offline computer running a live cd/usb version of Linux. But, hardware wallets have proven to be enough for the general user when they need to access the funds regularly. Although, this doesn't mean you shouldn't keep things tight when it comes to security.

[1715117164]

1715117164

[1715117164]

1715117164

[bob123]

Trezor has the big advantage of confirming the trolls by clicking the mechanical button.

Each hardware wallet needs mechanical confirmation (pressing buttons).
If it didn't have one it wouldn't be a second factor authentication at all.
Trezor and Ledger do not differ much in this point.

Currently you can condider both (ledger and trezor) wallets as secured. It is personal preference which one wants to choose.

[ranochigo]

The Nano s from ledger does not have any bugs.
The previously found 'vulnerabilities' did not lead to any theft.
Each software has bugs. It is just a question wether they have been found yet.

If you think trezor is 100% secure i have to disappoint you. You can't have 100% security. 
The goal should be to minimize the risk as much as possible through appropriate measurements and common sense.

I'm not sure if I've said it on this thread but yes I do agree with your point. However, the main point is, are they going to downplay the severity of the attack and say that Ledger is still safe to use? Even if none of the coins were stolen, it doesn't mean that the device wasn't secure at some point and the proof of concept doesn't work.

I personally wouldn't purchase anything from a company that advertises their product as having "robust safety features" while not being serious about the security of the wallet.

[Skieleton]

The Nano s from ledger does not have any bugs.
The previously found 'vulnerabilities' did not lead to any theft.
Each software has bugs. It is just a question wether they have been found yet.

If you think trezor is 100% secure i have to disappoint you. You can't have 100% security.  
The goal should be to minimize the risk as much as possible through appropriate measurements and common sense.

I'm not sure if I've said it on this thread but yes I do agree with your point. However, the main point is, are they going to downplay the severity of the attack and say that Ledger is still safe to use? Even if none of the coins were stolen, it doesn't mean that the device wasn't secure at some point and the proof of concept doesn't work.

I personally wouldn't purchase anything from a company that advertises their product as having "robust safety features" while not being serious about the security of the wallet.

The truth is that everything will be safer than online wallet. I do not have an offline comp. TREZOR must be enough for me. Tomorrow, I should have him in place.

[HCP]

It's possible for bugs to exist everywhere. However, for a product like Ledger, security should be their top priority. With the recent case, a researcher has disclosed the vulnerability to them responsibly. The vulnerability is serious in the sense that the device could be compromised and tampered if any entity wants to do it or if the seller wants to. They dismissed the claim and gave everyone a false impression that a device that has been proven to be insecure is still secure.

Saying they "dismissed the claim" is not quite true... They weren't claiming that the vulnerability didn't exist, what they were arguing was that the vulnerability was not an "end of the world" scenario... and it required some very specific things for an attacker to pull it all off. The guy who disclosed the vulnerability wasn't happy with the way Ledger were handling the situation and went quite public about it all.

After reading the technical documents, I'd have to side with Ledger on this one. Granted the exploit was very clever... but it did require physical access to the device... and would be completely eliminated if the device was updated with a new firmware.

Additionally, there were claims made that this vulnerability could allow an attacker to "extract the seed/private keys"... which was in my opinion quite sensationalistic and pretty much false. Sure, the attacker could know what the seed generated by the exploit was going to be and then use that to generate private keys... but that was because the attacker would already what the seed generated by the exploit would be! After all, they put it there

There was still no way to install the exploit and then extract an existing seed/keys from a device.

I personally wouldn't purchase anything from a company that advertises their product as having "robust safety features" while not being serious about the security of the wallet.

If they weren't serious, they wouldn't have bothered releasing any updates for that or the other vulnerabilities that were fixed... or for providing the bug bounties to encourage people to try and "break" their device.

[Skieleton]

It's possible for bugs to exist everywhere. However, for a product like Ledger, security should be their top priority. With the recent case, a researcher has disclosed the vulnerability to them responsibly. The vulnerability is serious in the sense that the device could be compromised and tampered if any entity wants to do it or if the seller wants to. They dismissed the claim and gave everyone a false impression that a device that has been proven to be insecure is still secure.

Saying they "dismissed the claim" is not quite true... They weren't claiming that the vulnerability didn't exist, what they were arguing was that the vulnerability was not an "end of the world" scenario... and it required some very specific things for an attacker to pull it all off. The guy who disclosed the vulnerability wasn't happy with the way Ledger were handling the situation and went quite public about it all.

After reading the technical documents, I'd have to side with Ledger on this one. Granted the exploit was very clever... but it did require physical access to the device... and would be completely eliminated if the device was updated with a new firmware.

Additionally, there were claims made that this vulnerability could allow an attacker to "extract the seed/private keys"... which was in my opinion quite sensationalistic and pretty much false. Sure, the attacker could know what the seed generated by the exploit was going to be and then use that to generate private keys... but that was because the attacker would already what the seed generated by the exploit would be! After all, they put it there

There was still no way to install the exploit and then extract an existing seed/keys from a device.

I personally wouldn't purchase anything from a company that advertises their product as having "robust safety features" while not being serious about the security of the wallet.

There is no device without defects. Unfortunately, everything can go bad. We would not buy anything with this track. It's about minimizing risk and not looking for the ideal.
If they weren't serious, they wouldn't have bothered releasing any updates for that or the other vulnerabilities that were fixed... or for providing the bug bounties to encourage people to try and "break" their device.

[MrCrank]

So far, I keep everything in ETH. The BTC exchange time is coming. Which wallet to choose online? What is the safest? Please help me:).

I now use www.myetherwallet.com + MetaMask.

Why do you want use online wallet? This is not safety.
I don't think that this is good for big amount.. risk.

[Gufeng]

You may to using it for buying or selling cryptocoins, invest them to ICO, playing on gambling sites, use them for payments in signature camps and etc..

[paul gatt]

After buying BTC or ETH, then how to keep safe, avoid the scams of hackers are always stalking to steal your money. Use an electronic wallet to store your money safely. Use a convenient and convenient online wallet.

[Edsel_Miller]

Thers are so many choice for you about wallet online for Bitcoin, Such as: Bitcoin Knots, Bitcoin Core, Green address, Amori Bither,....

[Skieleton]

So far, I keep everything in ETH. The BTC exchange time is coming. Which wallet to choose online? What is the safest? Please help me:).

I now use www.myetherwallet.com + MetaMask.

Why do you want use online wallet? This is not safety.
I don't think that this is good for big amount.. risk.

Apparently Metamask gives a lot of security. But you're right. I bought TREZOR and www.myetherwallet.com I use only small transactions. I keep everything on offline wallet.

[Wahyud11]

Cryptonator is an all-in-one Bitcoin online wallet that supports various crypto currencies such as Bitcoin (BTC), Litecoin (LTC), Ethereum (ETH) and others. Enables quick and easy direct transactions and allows instant exchange between different crypto currencies in one personal account

[margarita_free]

So far, I keep everything in ETH. The BTC exchange time is coming. Which wallet to choose online? What is the safest? Please help me:).

I now use www.myetherwallet.com + MetaMask.

maybe, it could be strange, but i don't like metamask, cause, its haven't multi-factor authorization

[Sellingaccs]

maybe, it could be strange, but i don't like metamask, cause, its haven't multi-factor authorization

Rarely any wallet has such a thing. Online wallets may do, but most often they are still more insecure than a desktop wallet.

Two factor authentication on a online wallet where you are not the only one having the private keys is very insecure, although alot better than an online wallet without one.

Check out parity if you don't like metamask.

[deevan]

So far, I keep everything in ETH. The BTC exchange time is coming. Which wallet to choose online? What is the safest? Please help me:).

I now use www.myetherwallet.com + MetaMask.

maybe, it could be strange, but i don't like metamask, cause, its haven't multi-factor authorization

If you are keen to use online web wallet with multi-factor authentication then try using NAGA wallet, it allows you to store, send & receive Bitcoin, Litecoin, DASH, BCH, ETH & ERC-20 tokens. It gives you ERC-20 token address that you can use to receive your tokens from ICO's, once the distribution is finished by ICO, the token will be automatically displayed you don't need to put smart contract address. Also Every time you have to provide multi-factor authentication code if you try to send your coins/tokens. The drawback is your private keys are held by NAGA but they claim that private keys are protected using cold storage same as coinbase doing.

[veleten]

try to avoid using online wallets,but if you have no other option -use blockchain.info
I know it is bad,sometimes bugged and not very safe,its fees are random to say the least
but it is the best and the fastest option to keep small change for day to day operations
never use it for sums over ,well you can afford to lose
I don't keep more than 200-300$ there,usually
as different options,you can try: https://bitcoin.org/ru/wallets/web/
out of the wallets represented there,I use Bitgo-https://www.bitgo.com/ it is a decent wallet,with added security

[davidovichviktoria346]

So far, I keep everything in ETH. The BTC exchange time is coming. Which wallet to choose online? What is the safest? Please help me:).

I now use www.myetherwallet.com + MetaMask.

I personally use EXHOS wallet but I advise you to keep bitcoin in off-the-shelf and preferably on a flash drive.

[AnisahSiti]

Hardware wallet is better than an online wallet. But in my opinion, as long as you can protect the private key or phrase, it does not matter.
Now I use Trezor wallet ( to safe my worth coin, I think this is a very secure wallet), Jaxx (this wallet is very flexible, I can buy and sell my coin. But the fees is little high) and MEW.

[teddy5145]

Hardware wallet is better than an online wallet. But in my opinion, as long as you can protect the private key or phrase, it does not matter.
Now I use Trezor wallet ( to safe my worth coin, I think this is a very secure wallet), Jaxx (this wallet is very flexible, I can buy and sell my coin. But the fees is little high) and MEW.

Which in online wallet case you are trusting them to protect your Private Key and your data.
No Guarantee that their security are safe enough to hold user coins, then again as long as you're using reputable wallet it should be safe (I've seen a few complaints directed to Jaxx.io, so I'm not sure what to feel about that).
Also just a heads up, there are DNS attack on MEW wallets, make sure you are safe from those attack.

I personally use EXHOS wallet but I advise you to keep bitcoin in off-the-shelf and preferably on a flash drive.

A more secure method is to have multiple backups of your Private Key or Wallet File in case one of them break/lost/forgotten.

[AnisahSiti]

Which in online wallet case you are trusting them to protect your Private Key and your data.
No Guarantee that their security are safe enough to hold user coins, then again as long as you're using reputable wallet it should be safe (I've seen a few complaints directed to Jaxx.io, so I'm not sure what to feel about that).
Also just a heads up, there are DNS attack on MEW wallets, make sure you are safe from those attack.

I always believe in what they do to protect our funds. Their service appeared to help us. for saving our assets. They have long been dedicated to it, and even to this day. Reasonable many hackers are tempted to hack, but it all depends on us, whether we can protect our private key, our data ourselves?
I use jaxx from 2016 early until now, nothing happens with the security, as long as only we know and save (Phrase and Pin) our funds will be safe.

Yes, I deeply regret that this is related to DNS attack on MEW wallet. I've done bookmarks so at least my funds are safe. Thanks to your warning about DNS attack.