Are wallets on blockchain.info secure and convenient?

[Dr Bloggood]

So I just discovered you can put up an online wallet on blockchain.info easily.

But is it secure? And if it is, why don't more people use it?

[secbc]

Depends on the level of security you are looking for. The most secure option right now would probably be Armory but that would be a client on your local computer not a hosted/cloud solution.

Blockchain definitely has a decent amount of people using them, at the end of October the were around 500,000 wallets
ref: https://twitter.com/blockchain/status/395190582202470401

As far as specifics about security, this is a post from the Developer of Blockchain.info entitled "How secure is blockcahin.info"
http://bitcoin.stackexchange.com/questions/5249/how-secure-is-blockchain-info/5255#5255

[exstasie]

They do have many options to help with security.  Allow Two Factor Authentication with SMS coding, plus restrict based on IP Address.
They also have the ability to create an offline wallet so that you keep the private key off the internet.

[Dr Bloggood]

Depends on the level of security you are looking for. The most secure option right now would probably be Armory but that would be a client on your local computer not a hosted/cloud solution.

Blockchain definitely has a decent amount of people using them, at the end of October the were around 500,000 wallets
ref: https://twitter.com/blockchain/status/395190582202470401

As far as specifics about security, this is a post from the Developer of Blockchain.info entitled "How secure is blockcahin.info"
http://bitcoin.stackexchange.com/questions/5249/how-secure-is-blockchain-info/5255#5255

Thanks for the links!

Btw, I don't even see my private key anywhere on my wallet - where is it?

[Dr Bloggood]

Allow Two Factor Authentication with SMS coding, plus restrict based on IP Address.

WTF is this!?

They also have the ability to create an offline wallet so that you keep the private key off the internet.

Where is my private key displayed? I can't see it. And I don't find a proper print option either.

If I have my key online, then it has already been online - so hwat's the point of printing it to keep it away from the internet?

[Kaligulax]

Two Factor Authentication

It is highly recommended you enable two factor authentication on your My wallet account. Your wallet data is still only encrypted with your password however a second authentication step will need to be passed before your encrypted wallet data is output. Currently we support Yubikey and email two-factor authentication.
Failed Login Attempts

If you have two factor authentication enabled on your account after 4 failed login attempts your account will be locked for 2 hours at which point no more login attempts can be made. You will be sent an email if your account is locked giving you time to take precautions if necessary.
Secret Phrase

A secret phrase can be set in your "Account Details" panel after login. In the case of lost wallet identifiers, yubikeys or lost email access the secret phrase can be given to us to help verify account ownership. This is reviewed manually on a case by case basis.
Sessions & cookies

For your convenience once two factor authentication is verified this will be remembered for a short time. Yubikey sessions expire in 4 hours, Email Codes expire in 24 hours.


i think that they are secure....

[Dr Bloggood]

Two Factor Authentication

It is highly recommended you enable two factor authentication on your My wallet account. Your wallet data is still only encrypted with your password however a second authentication step will need to be passed before your encrypted wallet data is output. Currently we support Yubikey and email two-factor authentication.
Failed Login Attempts

If you have two factor authentication enabled on your account after 4 failed login attempts your account will be locked for 2 hours at which point no more login attempts can be made. You will be sent an email if your account is locked giving you time to take precautions if necessary.
Secret Phrase

A secret phrase can be set in your "Account Details" panel after login. In the case of lost wallet identifiers, yubikeys or lost email access the secret phrase can be given to us to help verify account ownership. This is reviewed manually on a case by case basis.
Sessions & cookies

For your convenience once two factor authentication is verified this will be remembered for a short time. Yubikey sessions expire in 4 hours, Email Codes expire in 24 hours.


i think that they are secure....

Ok, I see.

How do I put the two-factor identification per e-mail into function? I don't see that anywhere in My Wallet.

I put in my e-mail when I esablished my account and have received some mails from My Wallet.

[hilariousandco]

It is pretty secure. Set up 2-factor authentication on your mobile and have another password for funds to be spent.You can also fix access to your IP or disable access via tor.