I found the safest way to get your 24 word seed phase.

[MisFoxie]

I have been researching about how i can genarate a 24 word of seed phase without a ledger wallet and i found an interesting way to do that. Let me share the detailsso you don't have to waste your time like I did.

First you need a clean device then go to  https://github.com/iancoleman/bip39/releases
And download bip39-standalone.html (if you have clean windows/mac system you can download sparrow wallet it can do the same thing)


Then turn on airplane mode so you can genarate a 24 word seed phase safely.

Open > bip39-standalone.html with chrome or any other browser.

On the genarate section you see 15 make it 24. And click genarate it will genarate random 24 word seed phase. If you scroll down a little you can see coin section it automatically set as Bitcoin you can change it to Ethereum (though It doesn't matter to me I only need seed phase

After you get your seed phase write it down on a paperor a metal. Clear Data of your browser which you used.

Turn on your internet and download any Bitcoin supported wallet (eg: Sparrow wallet, Electrum wallet, blue wallet )

Again turn on the airplane mode (so that all your internet connection get cut off again)

 Write seed phase in any of these wallet and you can see the reciver address (You could see this address in bip39-standalone.html after you genarated the seed phase also)

After you see the address you can copy that address for Receiving you fund leter.

Clear data of that wallet also. ( So that when you go online no one can have any access to them)

If you want to check your fund check it on a block explorar. (Don't use your seed phase online)

[tbct_mt2]

I will not try to do anything manually by myself if I am not an IT guy.

There are many open source and non custodial wallets which are good and trusted with ability to make my wallet creation process more easily and safely. I would like to choose wallet softwares for this task, and avoid exploring manual configuration steps by myself like you recommended.

I want to have a wallet that can store and keep my bitcoin safely, and I don't want any cool thing but less safely.
Recommended wallets.
What are best Bitcoin wallets?

[Patikno]

In fact, the method you found was discussed in a previous thread, and in that discussions, you can also find some safe suggestions for obtaining a seedphrase, or private key. Here, are the reference I am referring to : bitcointalk.org - info about Ian Colman mnemonic ( You need to pay attention to these suggestions, so that you can avoid risks, keep dyor )

In another thread, you can also find it, but regarding a detailed discussion regarding several explanations of the tool, here it is : bitcointalk.org - Need help with iancoleman

There is also a discussion about the official website related to the tool, I hope you read it too, maybe the discussion is quite old, but you need to know, because there may be fake sites in the future : bitcointalk.org - Is Iancoleman BIP39 Site Changed Domain from .io to .ch?

[Kavelj22]

I wouldn't consider this thread as a topic for "beginners and help" because as tbct said above "I would never try a manual setup configuration if I am not an IT guy". I would rather prefer to discuss the major potential risks of relying on this manual setup for a beginner far away from technical expertise. Maybe somebody wants to try it out of curiosity or to learn something new, but this is not the right board to get information from. There is already a great board dedicated only for technical discussions: Development and Technical Discussion

[Cricktor]

While the iancoleman script, after properly verifying the downloaded version (check it matches the hash), is a well known one and it's code is tested, you still rely on the correct Javascript implementation of crypto-safe random generator function therein.

It shouldn't be bad, but hardware wallets usually implement better entropy and most of the times also a hardware random number generator.

Then turn on airplane mode so you can genarate a 24 word seed phase safely.

You don't make an online device suddenly safer when you turn off network connectivity. If your device already had malware on it, the malware can still do its evil things and just wait until you turn off airplane mode. That's not a new trick for malware.

Open > bip39-standalone.html with chrome or any other browser.

How about browser extensions? Did you think about those, if you have some? Many browser extension ask for the right to read anything of your web pages. Guess what this means if your iancoleman script generates something that shouldn't be disclosed to "foreign" parties.

Can you trust the code of your browser extensions?


You need to start a safe and best an agnostic (doesn't persistantly store or remember something) environment to create your mnemonic recovery words. Boot a live Linux which only runs in RAM: if properly verified (check hash of the ISO file), it should be safe and when you shut it down, usually nothing remains on your computer (don't forget to write down your mnemonic recovery words on analog paper, no screenshots, no digital files, no upload anywhere).

Proper computer safety isn't convenient and easy, sorry!

[MisFoxie]

Then turn on airplane mode so you can genarate a 24 word seed phase safely.

You don't make an online device suddenly safer when you turn off network connectivity. If your device already had malware on it, the malware can still do its evil things and just wait until you turn off airplane mode. That's not a new trick for malware.

thanks for your genuine reply, I agree with you that even if im offline malware can steal my information but I already said that you need a clean device. and by clean I mean a device that doesn't have any malware or have been compromised.

Open > bip39-standalone.html with chrome or any other browser.

How about browser extensions? Did you think about those, if you have some? Many browser extension ask for the right to read anything of your web pages. Guess what this means if your iancoleman script generates something that shouldn't be disclosed to "foreign" parties.

Can you trust the code of your browser extensions?

well browser extension can cause problems, a clean device should not have a extension though.

You need to start a safe and best an agnostic (doesn't persistantly store or remember something) environment to create your mnemonic recovery words. Boot a live Linux which only runs in RAM: if properly verified (check hash of the ISO file), it should be safe and when you shut it down, usually nothing remains on your computer (don't forget to write down your mnemonic recovery words on analog paper, no screenshots, no digital files, no upload anywhere).

Proper computer safety isn't convenient and easy, sorry!

This method is quite interesting. I also tried this one by making my usb pendrive a bootable pendrive. it works quite well. this could be hard for some users, so I didn't give the instructions

[nc50lc]

Is there any particular reason why you suggested to use IanColeman's BIP39 tool to generate the seed phase
instead of just letting the wallet create the seed phrase natively?

Because, if it's about the number of words, most Bitcoin wallets can create 24 words with either command or option in the GUI.

[tech30338]

This is too technical for newbies and it makes more dangerous for the users that is getting started, if there is an easy and secure way, why would you go in length just to have that, at the end of the day once your computer has been compromised everything on that computer might be expose, this is why backing up early of seed phrase is very important, if you want to keep your bitcoin in your wallet, you don't have to open it every day, as you said you can just look at it at bitcoin explorer, the reason why we compromise are computer is because we are so curious we do lots of experiments, and going to sites that we should not, opening emails that we should not even dare to touch.

[apogio]

I always suggest newbies to simply buy a trezor, because:

- it's a product that's established for many years
- it's an easy-to-use product
- it has a good price
- there's ton of support from the company, or from youTube.

Then, make sure to keep your laptop clean and safe and you'll be in a very good position with a trezor device, especially compared with those who (a) don't know what they're doing and (b) keep money on exchanges.

[ABCbits]

Is there any particular reason why you suggested to use IanColeman's BIP39 tool to generate the seed phase
instead of just letting the wallet create the seed phrase natively?

I also wonder about it. In addition, people perceive secure RNG generated by browser as less secure than application which can access system secure RNG.

[hugeblack]

So how will you be able to broadcast the transaction? 

This method is not secure, not suitable for beginners, and offers no advantage compared to burning tails to a USB drive, booting from it, and managing your electrum wallet.

[OcTradism]

This method is not secure, not suitable for beginners, and offers no advantage compared to burning tails to a USB drive, booting from it, and managing your electrum wallet.

It's a dangerous method and I don't like to use it for myself.

TailOS is a good choice for people who don't have hardware wallet, don't have their personal computers and the following topic is a guide on How to Install Tails OS on USB flash drive for Wallet Purpose.

[nc50lc]

Is there any particular reason why you suggested to use IanColeman's BIP39 tool to generate the seed phase
instead of just letting the wallet create the seed phrase natively?

I also wonder about it. In addition, people perceive secure RNG generated by browser as less secure than application which can access system secure RNG.

Too bad OP still haven't posted an answer,
Perhaps he already assessed that my reply's second sentence already made the whole tutorial pointless.

About pRNG, the tool's note claimed that it's secure enough to be used for cryptography as long as the browser supports it (a warning will show if it's insecure), and its documentation also claimed it.
It would be interesting to see a discussion between them on why they think it's secure/not secure enough.
The closest that I saw are some related discussions in this forum but it's mostly one-sided.

[YellowSwap]

A newbie messing with IanColeman? The last time I did the same thing I lost my Bitcoin, somehow my keys got leaked and there is forever gone my Bitcoin, I don't think it is a good idea to use that website unless you have the knowledge not just some idea, believe it or not that platform is complicated, if you don't know what you are doing then your money is bye-bye.

The Tails OS tutor link that OcTradism dropped is still the best alternative for newbies that don't want to spend money on hardware wallet or can't afford one, there is nothing complicated about Tails OS, it is very easy to understand.

[Cricktor]

...

I've seen discussions about CSPRNGs in Javascript, some biased, some had good valid points. From my perception some hesitation is grounded on that you're dependent on the concrete Javascript implementation/engine. Often this is some kind of black box where you have to kinda hope that stuff works as intended when few really know the inner details (it's complex).

The "quality" of the same cryptographically safe random generator functions can vary from browser to browser, depending on which Javascript engine is under the hood. I'm not even sure if I understood all the fuss.

A newbie messing with IanColeman? The last time I did the same thing I lost my Bitcoin, somehow my keys got leaked and there is forever gone my Bitcoin, I don't think it is a good idea to use that website unless you have the knowledge not just some idea, believe it or not that platform is complicated, if you don't know what you are doing then your money is bye-bye.

The user might be experienced to an unknown extend. We simply don't know it. He's a Newbie to the forum, this does tell only that he didn't have many posts and has registered likely only recently.

Well, you don't provide any details what and how you did it, so that your general assessment doesn't quite hold water in my opinion.

It should be obvious, that you don't use the online website of iancoleman.io/bip39. I don't know, if you did. Generating mnemonic recovery words and private keys online is definitely a no-go. Your system might have been compromised already, you just didn't know it. Sophisticated malware doesn't scream out loud, it lurks hidden and silent in the background and tries to not make anybody suspicious something fishy is going on.

There are so many ways to screw up when you play around with mnenonic recovery words and "open" private keys. To play safe, you should know your computer safety and security 101.

[promise444c5]

The Tails OS tutor link that OcTradism dropped is still the best alternative for newbies that don't want to spend money on hardware wallet or can't afford one, there is nothing complicated about Tails OS, it is very easy to understand.

Yeah it’s just a typical Linux OS, if you are familiar with Linux it shouldn’t be a problem.. besides, some operations are similar to Windows so it feels somewhat familiar. If it’s just about running Electrum then it’s very easy. Electrum already comes pre-installed , all you have to do is verify before using.

The only potential issue that could arise is when booting into it (your external drive)..it could be missing boot option,where you have to add it manually and maybe change the boot sequence.. not that much of a big deal(unless it the first time, as a newbie)  and it’s not common either.

[suzanne5223]

It shouldn't be bad, but hardware wallets usually implement better entropy and most of the times also a hardware random number generator.

For security cautious, and for the preparation of a quantum attack.
Although there is news that several hardware wallets have integrated post quantum cryptography as preparation for a quantum attack, but I think we shouldn't consider every hardware wallet to generally implement better entropy unless it's an open source hardware wallet that is already tested and confirmed.

[Cricktor]

I wouldn't want to use any closed-source firmware hardware wallet, especially when it's something like Ledger crap. Not many hardware wallets have an open hardware setup where everything is documented so well that you basically could build it yourself if you wanted it (sort of).

Secure element chips are rarely open enough and not under some NDA agreement, too. There are only few exeptions used to my knowledge. Now that Trezor's TROPIC01 secure element got finally in a first hardware wallet to use it as an additional secure element, let's see if other manufacturers pick up on it.

This "integrated post quantum cryptography" mumble jumble some companies talk about in their marketing is ... well, marketing. I didn't dig too deep so far because it felt quite unsubstantial to me. Sounds good on the cover, though.