How do we define "airgap" around here?

[LoyceV]

Unlike 32-bit or 64-bit, it's harder to check actual CPU instruction compatibility of the app or OS.

For what it's worth: I never ran into this problem with different older laptops. If you do, maybe Gentoo will work if you just compile the entire OS without that CPU instruction.

Since it's not mentioned yet, you can enter your own or custom entropy when using iancoleman. Just tick/click "Show entropy details", choose the format (such as hex, binary or even dice) and enter the entropy on the text box.

The reason I'd prefer to do this manually, is that I don't want to trust Ian's software to really use my own entropy. A compromised version of the software could just produce a predefined key. If I flip coins or throw dice, I want to be able to manually verify my seed phrase is made out of this.

[NotATether]

My preference for computers is old laptops. If I securely reinstall a barebones linux distro, or run Tails, do you folks consider this airgapped, even if at some point this computer was online?

Just now I opened an old laptop with Linux Mint, shut off the WiFi module (bluetooth was never enabled), opened my copy of iancoleman on Firefox and generated account zpubs for my sites' donation checkout.

When I was done, I rebooted the laptop.

I think this will provide sufficient security for most people even if they don't have hardware devices.

If you want to make a seed with dice rolls offline, go here: https://bitmixlist.org/diceware.html

I would never trust Windows with crypto wallets

[BlackHatCoiner]

An old laptop running Tails offline is okay, but if you want a bulletproof airgap without supply chain anxiety, just build a SeedSigner. It's totally stateless (forgets everything when powered off) and built from generic off-the-shelf Raspberry Pi parts.

It has a native feature to input your dice rolls directly and calculates the 24th checksum word for you on the device itself. Way safer and easier than messing with iancoleman scripts on an old laptop.

[LoyceV]

just build a SeedSigner.

How did we get from from "not your seed, not your coins" to "juist build your own hardware"?