Electrum Multi-Sig with Hardware Wallets - Problem

[o_e_l_e_o]

-snip-

Your steps aren't completely clear to me. Just to clarify - you are connecting your Trezor only to your airgapped computer and interacting with it via Electrum, signing transactions on your Trezor, and then moving those transactions from your airgapped Electrum to your live Electrum to be broadcast?

That's certainly one of doing it and is very secure. An alternative solution for the future would be to use a hardware wallet which is already airgapped and does not need to connect to a computer at all, such as a Passport.

Dear o_e_l_e_o, Electrum is used only for BTC, could you tell me whether there is a way to make an an airgapped wallet for ETH?

Absolutely no idea, I'm afraid. I don't use ETH or any other pre-mined shitcoins. Maybe you are able to do it with Trezor Suite itself?

[Yamane_Keto]

Electrum is used only for BTC, could you tell me whether there is a way to make an an airgapped wallet for ETH? I have tried at least 10 different wallet softwares, but failed. I only have some basic knowledge about cryptocurrency, and python.

Ethereum is an account based system (not like Bitcoin UTXO), so cold storage is similar to paper wallets in Bitcoin. All the steps are almost the same, the best wallet for this is https://www.myetherwallet.com and you can connect it to the Trezor device.

https://trezor.io/learn/a/myetherwallet-and-trezor
https://help.myetherwallet.com/en/articles/6167899-how-to-create-a-cold-wallet-a-k-a-paper-wallet

The only difference is that you do not need the master public key, but rather copy the address and search for it in any block explorer such as Etherscan.io.

[dkbit98]

The multisig is good, but I am worry that if I suddenly die, my wife could not find back the money. So maybe multisig is not a good choice for me.

Well yeah, you could also die without multisig and it would be the same IF you don't write recovery instruction letter for your wife.
Making more complications means it's going to be harder for anyone to recover your coins.

PS
Try to use correct quotes in forum...

[lyw]

Ethereum is an account based system (not like Bitcoin UTXO), so cold storage is similar to paper wallets in Bitcoin. All the steps are almost the same, the best wallet for this is https://www.myetherwallet.com and you can connect it to the Trezor device.
The only difference is that you do not need the master public key, but rather copy the address and search for it in any block explorer such as Etherscan.io.

Thanks, I have tried myetherwallet, again and again. I found that MEW Offline version was like a cold wallet, but could not connect to Trezor or other kinds of hardware wallets. Its online version could connect hardware wallets. Ethereum offline version is also a cold, and could be connected to trezor. So, there are two defense lines, and it is quite safe. MEW wallet can not do it. Am I right?

Your steps aren't completely clear to me. Just to clarify - you are connecting your Trezor only to your airgapped computer and interacting with it via Electrum, signing transactions on your Trezor, and then moving those transactions from your airgapped Electrum to your live Electrum to be broadcast?
That's certainly one of doing it and is very secure. An alternative solution for the future would be to use a hardware wallet which is already airgapped and does not need to connect to a computer at all, such as a Passport.

Yes, that was what I did. I do not find a similar method for USDT or USDC. Maybe I have to use online versions for them. Two hardware trezors are used only for BTC with airgapped method, and two hardware wallets (Ledger and Trezor) are used only for USDT and USDC through a third-party software, like MetaMask.

Well yeah, you could also die without multisig and it would be the same IF you don't write recovery instruction letter for your wife.
Making more complications means it's going to be harder for anyone to recover your coins.

Yes, I must prepare one for her, immediately.  The airgapped method with electrum software and trezor are quite safe for BTC. I do not have other asset, for the moment
. Maybe I will consider multisig wallets for USDT and USDC two years later.

[lyw]

I’ve spent a great many hours looking into best practices for setting up a multi-sig configuration with hardware wallets and Electrum. I just can't seem to find a safe, agreeable setup.

After practicing for about one month, maybe some useful opinions are:
     A multisig wallets with a Ledger and a Trezor, and working at airgapped environment.
     Reasons:       
            1. Messages showed by Ledger can be checked (>95%). Some are public key (xpub of two hardware wallets, you can get them by sparrow wallet software), and others are transaction addresses and fees . I have checked.
            2. Ledger nano s plus is more cheap.
            3. Airgapped method can give the triple defense.

[un_rank]

3. Airgapped method can give the triple defense.

Airgapped wallets offer the highest level of protection from any online threat, when you combine that with a hardware wallet, either directly using a device like Passport or manually, you have a fairly high level of protection which cannot be breached.

- Jay -

[lyw]

Airgapped wallets offer the highest level of protection from any online threat, when you combine that with a hardware wallet, either directly using a device like Passport or manually, you have a fairly high level of protection which cannot be breached.

How to securely protect Bitcoin, I feel like I've figured it out. But when it comes to securing Ethereum assets, there isn't a particularly good solution. For Ethereum, there are physical isolation solutions like the MEW Offline wallet and AirGAP Vault wallet, but they don't support hardware wallets. I also tried the multi-signature feature of the Gnosis Safe wallet, but there are two serious issues. 1) Transaction information cannot be displayed well on hardware wallets. 2) If a single private key is leaked, although funds cannot be stolen, if a hacker sends an infinite number of invalid transaction requests, it will still result in the funds being stuck and unable to be withdrawn.   Other issue is that transaction fees are too expensive.

If any of you have better suggestions, I hope you can let me know. Thank you very much, everyone.

[Z-tight]

How to securely protect Bitcoin, I feel like I've figured it out. But when it comes to securing Ethereum assets, there isn't a particularly good solution.

This section is generally about BTC and you may not get the best information about Ethereum here as users who are active here probably don't use Ethereum, maybe you can seek solution or help in the altcoin section: https://bitcointalk.org/index.php?board=67.0

[lyw]

Can someone please offer advice or point me in the right direction? How are others actually doing this at present?

At this point I am seriously considering forking out $1800 per year for Casa Keymaster Platinum 3-of-5 multisig. I’d prefer to not have to spend that sort of capital (forgo that many Sats), but I can’t find a reasonably simple multi-sig setup with different hardware vendors that is fully compatible without having serious security flaws at present.

I have already discussed how to securely store Bitcoin. For me, it is impossible to never use USDT.
Now, let's talk about how to securely store the Ethereum token USDT and share my thoughts with everyone here!
One feasible solution is to generate disposable Ethereum wallets. Since Bitcoin operates on a four-year cycle, using two disposable Ethereum wallets per cycle is sufficient. Here is the plan:
Utilize the Passphrase feature of Trezor, which combines a mnemonic phrase and passphrase to generate a disposable Ethereum wallet. This way, you only need to change the passphrase without altering the mnemonic phrase, which is very convenient. Yesterday, I tried two software programs, Metamask and Exodus Wallet, which support the Passphrase feature of Trezor hardware wallets and allow the generation of Ethereum addresses in an offline environment.
The passphrase should be at least 15 characters long. I have tried using an RTX 3090 graphics card to crack WinRAR passwords consisting of numbers and lowercase letters, with an 8-character password taking approximately 1 hour to crack. Considering the hardware and electricity costs, let's assume the expense is 0.1 dollar. The cost of cracking a 15-character password would be significantly higher. To be even more secure, it is recommended to use a completely random password consisting of 20 characters of numbers and letters.

[dkbit98]

I have already discussed how to securely store Bitcoin. For me, it is impossible to never use USDT.
Now, let's talk about how to securely store the Ethereum token USDT and share my thoughts with everyone here!

This is to complicated and it has nothing to do with Electrum wallet.
One alternative for using USDT is with layer-2 Liquid Network and L-USDT token that is backed by Bitcoin and it has much lower transaction fees.
I think that supported hardware wallets are Jade (airgapped) and Ledger, and Green software wallet that should have multisig support.

[lyw]

This is to complicated and it has nothing to do with Electrum wallet.
One alternative for using USDT is with layer-2 Liquid Network and L-USDT token that is backed by Bitcoin and it has much lower transaction fees.
I think that supported hardware wallets are Jade (airgapped) and Ledger, and Green software wallet that should have multisig support.

Huobi, Binance, and OKEx do not support L-USDT. I cannot trade it on these platforms. Thank you. I will seek advice elsewhere regarding this issue.