[ANN] bitaddress.org Safe JavaScript Bitcoin address/private key

[🏰 TradeFortress 🏰]

bitaddress.org is down due to DDOS attack. I am looking for new hosting.

Consider GitHub Pages? Free hosting, DDoS-protected, and custom domains now support HTTPS.

[pointbiz]

bitaddress.org is back up.

[allten]

Anyone working on adding Segwit?
I could code if it if no one minds.

[dalitsairio]

Anyone working on adding Segwit?
I could code if it if no one minds.

Check out coinglacier.org if you are looking for SegWit support.

[TryNinja]

Anyone working on adding Segwit?
I could code if it if no one minds.

Have you seen this one? https://github.com/coinables/segwitaddress

Looks legit to me.

[caribe700]

Hi everyone, someone could give me a good tutorial to install bitaddress in my web site. Thanks Bye

[longbtcdev]

https://www.mail-archive.com/bitcoin-dev@lists.linuxfoundation.org/msg06929.html

Is bitaddress affected by this?

The founder of segwitaddress said bitaddress still uses jsbn so it is affected?

Thanks in advance for the answer

[scantor]

I tried matching the SHA256 hash of the html with the SHA256 hash in the signed version history and they did not match. I used the online toolsey hash  & validate. First I simply downloaded the page after the keys were generated which produced a file size 86kb with sha256 hash: 1fa1676627770b18d70790d1400645d8f4e1f4ee4663717523c9ebd3c8dc72c3

That didn't match so I downloaded the source which produced a file size 2.2mb with sha256 hash:
fb704af781404d70ea1b659a2fb6ca97f057fcbaf0bc08a895ba5b6ed955f74b
That didn't match either. The instructions say it should be SHA256-dec17c07685e1870960903d8f58090475b25af946fe95a734f88408cef4aa194.html

I'm not an expert verifying files so I assume I must not be checking correctly?

[MrFreeDragon]

Hi! Is bitaddress works correctly? Tried to check where one private key (from vanity address), and it showed the different bitcoin address.

These are the original vanity address and its private key.
Address: 1BTCyxPdP9iBgxj4FPs3KhQ8AB8rN9o1AH
Private Key: 5KY7At1DUPWtmARxaB53L5eU7QVNAaH5jzb6mZiaCCha12hN6U5

But if you put this private key to bitaddress.org (in details), it shows the different BTC address:

<data from bitaddress.org begin>
Bitcoin Address 1EnNMQ7eeHLsetJWtxmDpKuwfJyQLdF94b
Bitcoin Address Compressed 1hm1QFeXzT9MQx259aX4uM4Kia2e5JmZB

Public Key (130 characters [0-9A-F]):
04729B5BA07C186C053DDC518C2FA4CBC4AA6CA12D2E38264544D3EA1D4E85F1F9EDDB172AE2B2A 67BC75E2D6E92D881DD3D2CE204D753B0FF765FF3A7593248E9
Public Key (compressed, 66 characters [0-9A-F]):
03729B5BA07C186C053DDC518C2FA4CBC4AA6CA12D2E38264544D3EA1D4E85F1F9
Private Key WIF 51 characters base58, starts with a '5'
5KY7At1DUPWtmARxaB53L5eU7QVNAaH5jzb6mZiaCCha12hN6U5
Private Key WIF Compressed 52 characters base58, starts with a 'K' or 'L'
L4pJEc7x3tNwTvdAHRSqHDWNfGgCRFsyvmBWThQVWSe4f8ajCCTf

Private Key Hexadecimal Format (64 characters [0-9A-F]): E2A799386D4E83E07F87A928D49703C4E5DA65455BA096E9900068AAEA1136C3
Private Key Base64 (44 characters): 4qeZOG1Og+B/h6ko1JcDxOXaZUVboJbpkABoquoRNsM=
<data from bitaddress.org end>

How is it possible bitaddress.org shows another BTC address?

[MrFreeDragon]

Hi! Is bitaddress works correctly? Tried to check where one private key (from vanity address), and it showed the different bitcoin address.

These are the original vanity address and its private key.
Address: 1BTCyxPdP9iBgxj4FPs3KhQ8AB8rN9o1AH
Private Key: 5KY7At1DUPWtmARxaB53L5eU7QVNAaH5jzb6mZiaCCha12hN6U5
How is it possible bitaddress.org shows another BTC address?

Sorry, everything is clear now. Everybody should be very carefull. The addresses above were actually generated not by bitaddress.org, but by biladdress.org ("l" instead of "t"). I do not know how did I go there... probably some fake link :-(

Now i tested this private key on real bitaddress.org - everything is ok. Shows BTC address: 1BTCyxPdP9iBgxj4FPs3KhQ8AB8rN9o1AH

[kaniho]

we must be careful, look what I found

https://www.reddit.com/r/Bitcoin/comments/czriz8/biladdressorg_phishing_scam_website/

[1982dre]

Just waiting till they got some new paper wallet designs. The one they have is nice but I like the see some more templates to choose from.

[MrFreeDragon]

bitaddress.org is back up.

Does anybody know what happened with this project and its creator pointbiz?
Last time he was active only on July 2, 2018 (more than a year ago).

[Dabs]

Project was last updated December 2016.
2016-12-23 on changelog,   Latest commit on github 72aefc0 on Dec 24, 2016.

Better download the latest zip and keep a local copy, besides you're supposed to use it offline.

I have a bunch of different assorted offline wallet generators including this one.

You can download the zip from Github here:
https://github.com/pointbiz/bitaddress.org/archive/v3.3.0.zip

Or the raw HTML here:
https://raw.githubusercontent.com/pointbiz/bitaddress.org/v3.3.0/bitaddress.org.html

[Financisto]

bitaddress.org is back up.

Does anybody know what happened with this project and its creator pointbiz?
Last time he was active only on July 2, 2018 (more than a year ago).

IMHO I'd say this project is a little obsolete after the advent of some more modern projects like https://iancoleman.io/bip39/ wich you're still able to download and use it offline...

[btcb3g1nn3r]

I have troubles verifying the .zip from github with the provided pgp key... how do you verify this .zip offline in Ubuntu?

[TryNinja]

I have troubles verifying the .zip from github with the provided pgp key... how do you verify this .zip offline in Ubuntu?

What exactly is the issue?

Manually move his public key to the offline device (through a flash drive, etc...) and import it:

Code:

gpg --import ninja_bitaddress.org.txt

Move the .zip, extract it and verify the .html file with the .html.sig file.

Code:

gpg --verify bitaddress.org.html.sig bitaddress.org.html

It should return: Good signature from "ninja <ninja@bitaddress.org>" [expired]

[btcb3g1nn3r]

hmm, but this won't verify just the .html file and all its imported .js files are left unverified? I thought you're gonna verify the entire .zip containing both html and its js libs... or the .js files cannot be changed while the original .html is not touched?

[TryNinja]

hmm, but this won't verify just the .html file and all its imported .js files are left unverified? I thought you're gonna verify the entire .zip containing both html and its js libs... or the .js files cannot be changed while the original .html is not touched?

I believe the bitaddress.org.html file already has all the Javascript code embedded on itself. It doesn't import any outside file, so you don't have to worry about anything else. You can even delete the other files and it will run just fine.

[btcb3g1nn3r]

you're right, even the embedded images, excuse my ignorance of not checking the file before