First steps to keep your cryptos safe.

[USBitcoinServices.Com]

If you are new in bitcoin, here are some important steps in order to do transactions with security in mind.

First, you need to save all pieces of information about all your crypto transactions and remember that with crypto any amount you send it is not possible to get it back if it was sent to a wrong crypto address, better to send a small amount first.

Since you probably will use more than one exchange and create accounts on many places here are some steps to keep your info offline and private.


1. Use offline spreadsheets to register your accounts, only use with an offline device (Pc or other) not the best option, but you decide.
2. Use a different password for each account, you might try using password managers.
3. Backup your sensitive info (spreadsheets or better alternative) regularly offline with protected files.
4. When you need to modify profiles, also update your spreadsheets.
5. Keep your information in a single folder, so later you just update the same source.
6. Keep a copy of your protected backup in different safe locations.
7. If you are going to use USB memory flash use the ones with password protection.
8. It is preferable if you use hardware wallets to store your digital assets.
9. Use a private internet connection if possible (VPN).
10. Avoid the use of public internet connection for important transactions.


This list could be bigger, these are just a few of them by now.

[CoinCode_sh]

Hi,
Tips: always use a hardware wallet as a cold wallet.

[LTU_btc]

First of all, it's terrible idea to keep crypto on exchanges. It's not a wallet and you should keep not more than you can afford to lose. Newbies need to know that have to keep crypto on non-custodial wallet, where they have access to private keys and it's not controled by third party.

Hi,
Tips: always use a hardware wallet as a cold wallet.

Offcourse, it would be best option. But maybe we shouldn't expect that people who are just starting with crypto will rush to buy hardware wallets. For cold storage, properly made paper wallet is good enough for them.

[Saint-loup]

10. Avoid the use of public internet connection for important transactions.

I don't understand what you mean by that? The power of Bitcoin is to be able to work publicly unlike bank transactions.
There is no risk with transactions since you don't send your private key, so the amount of funds transferred doesn't matter.

[USBitcoinServices.Com]

10. Avoid the use of public internet connection for important transactions.

I don't understand what you mean by that? The power of Bitcoin is to be able to work publicly unlike bank transactions.
There is no risk with transactions since you don't send your private key, so the amount of funds transferred doesn't matter.

I meant unsecured public internet connections. Those without password protection, anyone can see what the user is sending via internet.

[hatshepsut93]

I meant unsecured public internet connections. Those without password protection, anyone can see what the user is sending via internet.

Password protection isn't a guarantee that a public network is safe, the password can be weak or the owner might be malicious. What you should do instead is always check that the important sites that you visit have HTTPS enabled, and that their address is valid (use bookmarks instead of typing the address directly). HTTPS means that the communication between you and the site is encrypted, so third parties from the local network can't steal your data.

[mk4]

1. Use offline spreadsheets to register your accounts, use 1 raw for each account.

Can you expound more on what you actually mean by this? If you meant saving your login credentials on spreadsheets then that's definitely a big no.

[joniboini]

Can you expound more on what you actually mean by this? If you meant saving your login credentials on spreadsheets then that's definitely a big no.

Looks like it's what he actually meant. The 4th tips explicitly mentioned an update of the spreadsheet when there's a change in the profile.  It's basically a way of backing up sensitive information.

Using an open-source password manager is probably better than this.

[mk4]

Looks like it's what he actually meant. The 4th tips explicitly mentioned an update of the spreadsheet when there's a change in the profile.  It's basically a way of backing up sensitive information.

Using an open-source password manager is probably better than this.

If that's actually the case then that's the worst advice ever. The only was I'd suggest storing passwords is through password managers. I mean, spreadsheets aren't even encrypted by default. Passwords and plaintext shouldn't really go together in whatever case.

[Findingnemo]

If you want your cryptos to be safe, never store your wallet credentials in digital format by this you can avoid phishing attacks or whatever methods by anyone without accessing your device. If you want to keep them in digital then keep them in a Pendrive which is highly durable and connect to the system whenever needed without internet connections.

[jossiel]

I meant unsecured public internet connections. Those without password protection, anyone can see what the user is sending via internet.

I've seen a video on youtube and there are these people that are allowing people to connect to their free wifi connection. And this is what you meant right? those transactions that went through that connection of theirs, they managed to collect data including bank accounts.

And so with crypto, private keys, mnemonic phrases and so on, the most important ones and it's better not to access any of those important accounts when you're on a public area.

[Saint-loup]

10. Avoid the use of public internet connection for important transactions.

I don't understand what you mean by that? The power of Bitcoin is to be able to work publicly unlike bank transactions.
There is no risk with transactions since you don't send your private key, so the amount of funds transferred doesn't matter.

I meant unsecured public internet connections. Those without password protection, anyone can see what the user is sending via internet.

No sniffers can only see what an IP/MAC address is sending. But as soon as you disconnect from the network this IP/MAC address doesn't identify you anymore and is useless. So if you didn't send unencrypted personal information through the network during the session(ie without https) your identity isn't compromised.That is to say sniffer will only get the datas you can find on the blockchain finally.

[Annisa_crypto]

As everyone has already mentioned so many steps but still I will share some of my opinions-

• Don't keep your funds on the respective exchange if that particular exchange will hack then you will lose your money.
• Try to keep your funds some trustable wallet which is operated by you.
• Use some popular and trustable exchanges where you can do hassle free trading.

[hd49728]

About passwords:

Don't change your password too often.
Set up your password as strongest as possible, and stick with it. Don't change it regularly. Only change your passwords if you find risks.

I agree that don't use the same passwords for different accounts. It is also very important to don't reuse your passwords for same account.

[The Cryptovator]

I am pretty confused, is OP talking about secure crypro or account safe? Spreadsheet or whatever offline isn't safe on your device. All password and private keys shouldn't store into your device. Because when your will connect your device with internet then hacker can see everything on your device if incase you attacked. So all the personal details including password, private keys should write on hard papers and keep safe place. Better option write on multiple papers and keep on different place.

However, for keep safe your crypto I would like to encourage everyone for use hardware wallet like Ledger. We should practice best way regarding crypto currency uses. A single mistake could steal our crypto currency.

Anyway, this isn't new anything (except remind). All the things had been discussed on the forum previously. Try to write more information that had not been discussed.

[Reatim]

As everyone has already mentioned so many steps but still I will share some of my opinions-

• Don't keep your funds on the respective exchange if that particular exchange will hack then you will lose your money.

yeah only those noob are doing such action because with many exchanges being hacked and Users become a victim also?(thinking that there might be an inside job happen about the hackings)so better keep away from doing that.

• Try to keep your funds some trustable wallet which is operated by you.

and thats what we are doing now that is why there are some others using Ledger or even paper wallet to keep funds safe.

• Use some popular and trustable exchanges where you can do hassle free trading.

this applied to daily traders because Long term holders know which exchange to use whenever they plan of selling out their currencies.

[BrewMaster]

10. Avoid the use of public internet connection for important transactions.

is it just for privacy reasons or do you have any security concerns too? because i can not think of any security risk that could be because of connecting to a public internet connection like using a public WIFI, worse case scenario is that they can figure out you are using bitcoin (sending a tx for example) but they can't do much else like seeing your private key hence no security risk.

[20kevin20]

is it just for privacy reasons or do you have any security concerns too? because i can not think of any security risk that could be because of connecting to a public internet connection like using a public WIFI, worse case scenario is that they can figure out you are using bitcoin (sending a tx for example) but they can't do much else like seeing your private key hence no security risk.

Oh man, connect to a non-encrypted WiFi that acts like a man-in-the-middle by a hacker who made it look like it's a public wireless connection (say you're in a mall and the hacker names the WiFi "FREE Internet_Mall" with malicious intents and the damage can be huge. That's giving your data to a hacker for free and is a security risk if you're going to use cryptocurrencies over their connection.

[nakamura12]

It is a good way to use different password in each account to avoid the other account stolen because of the same account. Using password manager helps you remember the passwords that you used. There are many password managers and this password manager have been used by most people here in bitcointalk forum. Try using https://keepass.info/ and this thread for creating strong passwords. https://bitcointalk.org/index.php?topic=5132378.0

[Pmalek]

Try using https://keepass.info/ and this thread for creating strong passwords. https://bitcointalk.org/index.php?topic=5132378.0

If you enter the term "keepass hacked" in Google, or another search engine, there are many articles mentioning hacks and vulnerabilities of Keepass.

I have never used it but I dont like the idea that another software knows all my passwords.

[nakamura12]

Try using https://keepass.info/ and this thread for creating strong passwords. https://bitcointalk.org/index.php?topic=5132378.0

If you enter the term "keepass hacked" in Google, or another search engine, there are many articles mentioning hacks and vulnerabilities of Keepass.

I have never used it but I dont like the idea that another software knows all my passwords.

You have a point there. Keepass password is possible to steal using a tool but I am thinking that if you run keepass in offline mode, would it still be the same?. I have the same reason why I didn't use a program to store my passwords and rather right my passwords in a piece of paper.

[USBitcoinServices.Com]

1. Use offline spreadsheets to register your accounts, use 1 raw for each account.

Can you expound more on what you actually mean by this? If you meant saving your login credentials on spreadsheets then that's definitely a big no.

The idea is to use offline spreadsheets, only if the device where you store your sensitive data is never going to be connected online ever!

[mk4]

Don't change your password too often.
Set up your password as strongest as possible, and stick with it. Don't change it regularly. Only change your passwords if you find risks.

I'd say change your passwords of your more important accounts(PayPal, banking, other finance stuff) at the very least once a year. Just to protect yourself from potential data breaches. And also of course, https://haveibeenpwned.com/

The idea is to use offline spreadsheets, only if the device where you store your sensitive data is never going to be connected online ever!

No. Air-gapped device or not, use password managers not spreadsheets. The extra layer of security from the encryption is essential.

[minairia3]

About passwords:

Don't change your password too often.
Set up your password as strongest as possible, and stick with it. Don't change it regularly. Only change your passwords if you find risks.

Is it more safer if we should always change password regularly. Especially if its related to more of our finance asset such as banks. Even apps using mobile devices are suggesting to do this.

I'd say change your passwords of your more important accounts(PayPal, banking, other finance stuff) at the very least once a year. Just to protect yourself from potential

Once a year isnt bad. But if your having too much accounts that are prone to breached isnt it safe to do it frequently such as quarterly.

[Rafael_Carrero]

"6. Keep a copy of your protected backup in different safe locations." - I wish I knew this recommendation in 2017. I lost a half of my funds because of my bad memory.

[OcTradism]

"6. Keep a copy of your protected backup in different safe locations." - I wish I knew this recommendation in 2017. I lost a half of my funds because of my bad memory.

No one can remember mnemonic seed in crypto or even with simpler stuff like passphrase. With passphrase, you can remember it if you regularly log in your wallet or your accounts. In contrast, if you stop log in your wallets or accounts (as you use to do) for a while, a couple of months, you will forget your passphrases.

Back them up and save them in safe locations where you can find them later.

[Magkirap]

"6. Keep a copy of your protected backup in different safe locations." - I wish I knew this recommendation in 2017. I lost a half of my funds because of my bad memory.

No one can remember mnemonic seed in crypto or even with simpler stuff like passphrase. With passphrase, you can remember it if you regularly log in your wallet or your accounts. In contrast, if you stop log in your wallets or accounts (as you use to do) for a while, a couple of months, you will forget your passphrases.

Back them up and save them in safe locations where you can find them later.

Indeed having a mnemonic phrase for keeping paraphrases will leads you towards losing your wallet or account, no matter how catchy your mnemonic is other thoughts will cover it so best is to have it written in multiple paper every month ang storing it in your cabinet or closet or anywhere you will remember. I am doing that now and so far its a relief for i know i can keep my wallets

[Subbir]

"6. Keep a copy of your protected backup in different safe locations." - I wish I knew this recommendation in 2017. I lost a half of my funds because of my bad memory.

No one can remember mnemonic seed in crypto or even with simpler stuff like passphrase. With passphrase, you can remember it if you regularly log in your wallet or your accounts. In contrast, if you stop log in your wallets or accounts (as you use to do) for a while, a couple of months, you will forget your passphrases.

Back them up and save them in safe locations where you can find them later.

I accept as true with you that we should always copy in every case That's why I usually use a notepad to guard my crypts. in order that if I forget later I can open the notepad and simply log in don't write of an internet site and it's likely to be hacked.

[OcTradism]

I accept as true with you that we should always copy in every case That's why I usually use a notepad to guard my crypts. in order that if I forget later I can open the notepad and simply log in don't write of an internet site and it's likely to be hacked.

Please don't use Notepad or spreadsheet to save your important things: private keys, mnemonic seeds, passwords. They are weakest in terms of security.

There are good softwares for use:
Keepass: https://keepass.info/
Another software: I don't remember now.

If you hesitate to use those softwares, you can save those things off-line. Make sure to check their correctness and re-useability after backup.

[USBitcoinServices.Com]

If you hesitate to use those softwares, you can save those things off-line. Make sure to check their correctness and re-useability after backup.

Good point, always the users need to test their passwords or private keys before sending funds to it. If there is any minimal finder mistake you won't be able to recover your coins, better to test and be sure it works as intended. And never send big amounts on the first tx, always test sending small tx, if all goes fine then send the intended amount. So far in crypto there is no way to reverse a tx.

[OcTradism]

Good point, always the users need to test their passwords or private keys before sending funds to it. If there is any minimal finder mistake you won't be able to recover your coins, better to test and be sure it works as intended. And never send big amounts on the first tx, always test sending small tx, if all goes fine then send the intended amount. So far in crypto there is no way to reverse a tx.

Losing money by using Ctr+C & Ctr+V and being unknowledgeable as well as lazy is very terrible.
How to lose your Bitcoins with CTRL-C CTRL-V. It is for bitcoin but you can apply it for your security (with passwords too). Many people don't check difference between what they copy and what they receive after pasting. Problems come from there.

[Sonu_titu]

About passwords:

Don't change your password too often.
Set up your password as strongest as possible, and stick with it. Don't change it regularly. Only change your passwords if you find risks.

I agree that don't use the same passwords for different accounts. It is also very important to don't reuse your passwords for same account.

It should be other way right? That one should change passwords once in a while so that it is safer.

One more point would be- do not keep same passwords for different accounts/platforms. If the password is compromised somewhere that can affect rest of your accounts.

[Sanugarid]

1. Use offline spreadsheets to register your accounts, use 1 raw for each account.

Can you expound more on what you actually mean by this? If you meant saving your login credentials on spreadsheets then that's definitely a big no.

The idea is to use offline spreadsheets, only if the device where you store your sensitive data is never going to be connected online ever!

This can really help because there are lots of online spreadsheets that can really be hacked because of some important information you have used and it is vulnerable since you are connected to the wireless area network or we can simply say internet. Once you are connected online, you should be careful of the things you are opening online especially websites, links, and ads. That can give the hackers information about you if that is really some suspicious link or website.

If you hesitate to use those softwares, you can save those things off-line. Make sure to check their correctness and re-useability after backup.

Good point, always the users need to test their passwords or private keys before sending funds to it. If there is any minimal finder mistake you won't be able to recover your coins, better to test and be sure it works as intended. And never send big amounts on the first tx, always test sending small tx, if all goes fine then send the intended amount. So far in crypto there is no way to reverse a tx.

This is also one of the things you should consider, this is obviously important but to remind every one of you, this can be great. Because sometimes we are forgetting to save private keys or passwords of your wallet. You should also double-check every information when you are sending funds because one simple mistake, that money cannot be sent to your specified wallet address.