BTC security

[btcethgold]

Hello all BTC hodlers here.

I have some queries about Btc security.

1. Those using Trezor, what additional security they can do to make sure they are safe apart from trezor PIN

2. It sounds weird but when one creates 12 keys in any btc wallet then either user knows his 12 words or this wallet knows these 12 words.
Is it it possible to hack this 12 word from btc wallet software.

ANY OTHER tips for making trezor safe.

Thanks

[Charles-Tim]

1. Those using Trezor, what additional security they can do to make sure they are safe apart from trezor PIN

Protect your wallet (Trezor one or Trezor T) from physical theft. A physical attack on it can be used to reveal its seed phrase. Or best to use a passphrase to generate the keys and addresses along with the seed phrase.

2. It sounds weird but when one creates 12 keys in any btc wallet then either user knows his 12 words or this wallet knows these 12 words.
Is it it possible to hack this 12 word from btc wallet software.

If another person knows your seed phrase, the person can use an online wallet to have access to your coins and spend it.

[Apocollapse]

PIN only good to make someone else can't use your hardware wallet, but it's not protecting against if someone know your seed phrase.

The first step is you need to verify the signature https://trezor.io/learn/a/download-verify-trezor-suite

For the second question, you can add an extended seed/passphrase https://blog.trezor.io/passphrase-the-ultimate-protection-for-your-accounts-3a311990925b

So you will have two separate wallets:
1. Dummy wallet that contains small amount of coins (12 words)
2. Your main wallet that contains a lot coins (12 words + passphrase)

In case someone know your 12 words, they only can access your dummy wallet.

[pinggoki]

1. Those using Trezor, what additional security they can do to make sure they are safe apart from trezor PIN

Don't tell anybody that doesn't need to know that you've got a Trezor wallet, in fact it's a good practice to learn all you need to know about setting up a Trezor wallet instead of asking a person how to set up one so you're comfortable knowing that no one knows that you've got a Trezor wallet. Shutting up about why you've got this bitcoin or crypto related stuff is the best thing that you can do.

2. It sounds weird but when one creates 12 keys in any btc wallet then either user knows his 12 words or this wallet knows these 12 words.
Is it it possible to hack this 12 word from btc wallet software.

I don't think it's possible if it's brute forcing each word from the seed phrase, I mean it's doable but you're more likely to see the death of the universe than ever seeing that from happening because it takes a long time to do so.

[martinex]

ANY OTHER tips for making trezor safe.

If you have activated the passphrase feature, avoid information leaks and this is usually a non-technical factor due to our own negligence or someone else taking it without our knowledge. Even if there are other devices that can be used but can still be hacked, it means that the wallet software is considered weak in terms of function and security.

[Churchillvv]

The Trezor PIN is more like security for only the hardware so you will have to use further security method which is the passphrase.

So if you've got a passphrase the next security tips is for you to protect yourself from physical attack and protect your passphrase like your life depends on it because if slightly exposed your whole assets is at a very big risk.

Why this passphrase is so important is that it's required for a transaction to be carried out if your Trezor hardware is stolen or it's compromised the theft will have to need your passphrase to initiate a TX.

[mk4]

• There was an instance back then where a person managed to extract the private keys off the device. Make sure only you have access to the Trezor device.
• Store the 12-24 word backup physically, not digitally.
• Don't enter the 12-24 word backup anywhere online.

https://chainsec.io/checklist

[Darker45]

You've got a Trezor. You've now learned to use a passphrase in addition to your PIN. Perhaps what matters next is about safekeeping. No funds are probably hacked from a Trezor. But there might have been funds kept in a Trezor that were stolen. It's not about a question of storage; it's about a question of keeping the storage safe.

It's pointless, for example, to keep your funds in a Trezor but also entered the seed phrase on an application somewhere. The storage may be good but if you're keeping the key to that storage in the open, accessible by anybody, it is of no value. The same is true when you are keeping your money in a Trezor but saved the seed phrase in your mobile phone's photos or in Google Drive.

[Zanab247]

2. It sounds weird but when one creates 12 keys in any btc wallet then either user knows his 12 words or this wallet knows these 12 words.

Once that 12 key released to you and you confirmed them as your seeds phrase that you will be using in that particular wallet, nobody will have the same seeds phrase with you or nobody know the numbers apart from you the original owner of the wallet, but if you hard that someone wallets was hacked , just know that the seeds phrase was exposed to people around that person.

Is it it possible to hack this 12 word from btc wallet software.

Yes, is possible when you exposed the seeds phrase to strangers because that is the free access to your coins in your wallet but without someone having the seeds phrase or known the seeds phrase, there is no way he or she can hack your wallet because all the personal details is in your hands.

[Natsuu]

Try enabling a passphrase in addition to your PIN and regularly update the device's firmware. The 12-word seed is a crucial element for wallet recovery and it's stored securely on the device. It's essential to keep this seed offline, never share it like dont overshare what youve got especially online and ensure your Trezor device is acquired from a reputable source to minimize the risk of compromise

[Rockstarguy]

2. It sounds weird but when one creates 12 keys in any btc wallet then either user knows his 12 words or this wallet knows these 12 words.
Is it it possible to hack this 12 word from btc wallet software.

The way you handle your seedphrase will determine if any other person can have access to your wallet or not. You are the one who can secure your wallet proper if only you can store your seedphrase in a place where no eyes can find it. If you are using a good wallet you don't need to be scared if your wallet will be hacked just like that, someone else can only get access to your wallet if only your seedphrase is stored in a way that can be exposed.  

Some people stored their seedphrase in online handle or messages that are easily hacked, when this is done the hacker can get information of you to steal more of your valuable asset. It is better for you to know where is best to save your seedphrase that you alone can have access to it anytime.

[KiaKia]

I don't use Trezor but it's a very good hardware wallet, the only places that damages can come from is you letting another person touch the hardware wallet, they can carry some attack on the wallet itself.

Keep your hardware wallet away from anyone, it should be private, also make sure that your backup is safe and privacy to your access only, avoid telling anyone that you have Bitcoin or any hardware wallet, to avoid attacks.

The recovery seed, either 12 or more can't be brute force, relax, this shit can only be possible if they get their hands on your hardware wallet, keep using your PIN and keep the hardware wallet safe, it's all good.

[btcethgold]

Thanks to all of you

[FatFork]

• There was an instance back then where a person managed to extract the private keys off the device. Make sure only you have access to the Trezor device.
• Store the 12-24 word backup physically, not digitally.
• Don't enter the 12-24 word backup anywhere online.

https://chainsec.io/checklist

All this, plus I recommend using a BIP39 passphrase as an additional layer of security. This way, even if someone gains physical access to your hardware wallet and has the technical know-how to bypass its security measures, their efforts will be futile as the attack is viable only if the passphrase feature does not protect the device.

[darkangel11]

When you set up your hardware wallet there are 3 vital points that you have to hold.
1 - the hardware wallet itself
2 - the seed phrase needed to access coins in case wallet gets destroyed or lost
3 - wallet pin code
 
To access your money through the wallet the attacker will need both the wallet and the pin code.
To access it without the wallet the attacker will need your seed phrase.

As you can see protecting the seed is the most important thing, so don't try to additionally secure your hardware wallet but focus on that seed. You can keep it in a security safe, or you can stam or engrave it on a metal plate and hide somewhere. The wallet itself is pretty secure, but you can also hide it in a safe or a deposit box for additional security.

[jossiel]

The important thing that you can do is to keep your seed phrase from any person. If it's possible that you can keep away from any relative to spot it out, much better.

Do not keep it on any storage where someone may be able to hack or know it. That's why writing it on a plain paper or whatever is provided to write it off is a must.

It doesn't have to be complicated when you are about to keep your seed phrase as long as you're the only person who knows it.