Can a factory reset computer be used for cold storage?

[KidPoker]

I need to buy a new laptop anyway so I was wondering if I completely wipe my current laptop (It's a sony vaio) could I then use it as my cold storage laptop? I plan to make a large investment in bitcoins very soon and was wondering if factory resetting my current laptop would be sufficient in terms of security? Cheers.

[SpanishSoldier]

I need to buy a new laptop anyway so I was wondering if I completely wipe my current laptop (It's a sony vaio) could I then use it as my cold storage laptop? I plan to make a large investment in bitcoins very soon and was wondering if factory resetting my current laptop would be sufficient in terms of security? Cheers.

1. Disconnect the laptop from internet.

2. Run Bitcoin-QT or some program to generate your address.

3. Send the wallet to an USB.

4. Remove the USB.

5. Ctrl+Shift+Del your wallet details from the laptop. If possible, format it once.

6. Connect your laptop to the internet and send bitcoin to your address, whose details are in USB.

7. Just keep the USB detouched from all internet connections... and you are safe

[KidPoker]

Cheers for the reply. I know about generating wallets/addresses safely and clean booting from ubuntu/tails etc but I want a watch only wallet on my new laptop and have armory installed on my cold laptop. I was under the impression that apart from paper wallets, this is the best option? So I wasn't sure if factory restoring my laptop was be sufficient enough in terms of security to do this?

[b!z]

Remove the wireless card and don't plug anything into it

[melvinparham556]

I need to buy a new laptop anyway so I was wondering if I completely wipe my current laptop (It's a sony vaio) could I then use it as my cold storage laptop? I plan to make a large investment in bitcoins very soon and was wondering if factory resetting my current laptop would be sufficient in terms of security? Cheers.

you can try something else to check just turn off and turn on...then try again

[b!z]

I need to buy a new laptop anyway so I was wondering if I completely wipe my current laptop (It's a sony vaio) could I then use it as my cold storage laptop? I plan to make a large investment in bitcoins very soon and was wondering if factory resetting my current laptop would be sufficient in terms of security? Cheers.

you can try something else to check just turn off and turn on...then try again

and what will that do?

[Samthing]

I need to buy a new laptop anyway so I was wondering if I completely wipe my current laptop (It's a sony vaio) could I then use it as my cold storage laptop? I plan to make a large investment in bitcoins very soon and was wondering if factory resetting my current laptop would be sufficient in terms of security? Cheers.

1. Disconnect the laptop from internet.

2. Run Bitcoin-QT or some program to generate your address.

3. Send the wallet to an USB.

4. Remove the USB.

5. Ctrl+Shift+Del your wallet details from the laptop. If possible, format it once.

6. Connect your laptop to the internet and send bitcoin to your address, whose details are in USB.

7. Just keep the USB detouched from all internet connections... and you are safe

No need to use the Bitcoin-QT and send the dat to a USB. All he need is vanitygen.

[Brantley]

I need to buy a new laptop anyway so I was wondering if I completely wipe my current laptop (It's a sony vaio) could I then use it as my cold storage laptop? I plan to make a large investment in bitcoins very soon and was wondering if factory resetting my current laptop would be sufficient in terms of security? Cheers.

1. Disconnect the laptop from internet.

2. Run Bitcoin-QT or some program to generate your address.

3. Send the wallet to an USB.

4. Remove the USB.

5. Ctrl+Shift+Del your wallet details from the laptop. If possible, format it once.

6. Connect your laptop to the internet and send bitcoin to your address, whose details are in USB.

7. Just keep the USB detouched from all internet connections... and you are safe

No need to use the Bitcoin-QT and send the dat to a USB. All he need is vanitygen.

Vanitygen don't allow you to convert it to paper wallet or am I wrong? I believe bitaddress.org is the best for cold storage.

[shorena]

I need to buy a new laptop anyway so I was wondering if I completely wipe my current laptop (It's a sony vaio) could I then use it as my cold storage laptop? I plan to make a large investment in bitcoins very soon and was wondering if factory resetting my current laptop would be sufficient in terms of security? Cheers.

To answer your question: Yes, a wiped machine with disabled WiFi (as someone allready posted) can be used as cold storrage. Just make sure you format all drives before (or durring setup) installing the new OS.

[Zawamiya]

I need to buy a new laptop anyway so I was wondering if I completely wipe my current laptop (It's a sony vaio) could I then use it as my cold storage laptop? I plan to make a large investment in bitcoins very soon and was wondering if factory resetting my current laptop would be sufficient in terms of security? Cheers.

Yes you can do that, and be sure to keep some backup for your wallet..

[notlist3d]

It could I would get rid of the crap they include with most computer's.

Also I would still put a good anti-virus on it and malaware protection before moving in.

[KidPoker]

Thanks for the advice everyone, greatly appreciated.

[lamaze]

I need to buy a new laptop anyway so I was wondering if I completely wipe my current laptop (It's a sony vaio) could I then use it as my cold storage laptop? I plan to make a large investment in bitcoins very soon and was wondering if factory resetting my current laptop would be sufficient in terms of security? Cheers.

1. Disconnect the laptop from internet.

2. Run Bitcoin-QT or some program to generate your address.

3. Send the wallet to an USB.

4. Remove the USB.

5. Ctrl+Shift+Del your wallet details from the laptop. If possible, format it once.

6. Connect your laptop to the internet and send bitcoin to your address, whose details are in USB.

7. Just keep the USB detouched from all internet connections... and you are safe

By the way, is this 100% safe?

[shorena]

-snip-

1. Disconnect the laptop from internet.

2. Run Bitcoin-QT or some program to generate your address.

3. Send the wallet to an USB.

4. Remove the USB.

5. Ctrl+Shift+Del your wallet details from the laptop. If possible, format it once.

6. Connect your laptop to the internet and send bitcoin to your address, whose details are in USB.

7. Just keep the USB detouched from all internet connections... and you are safe

By the way, is this 100% safe?

Nope, an advanced trojan could be transmitted to the offline system via USB, snatch your private keys and call home when possible (e.g. using your online machine to broadcast the signed TX). So this might be compromised the moment you try to spend the bitcoins (e.g. connect the USB stick to an online machine). You also have a single point of failure (the USB stick) if it breaks your coins are gone.

On the other hand: nothing is 100% safe.

[KidPoker]

-snip-

1. Disconnect the laptop from internet.

2. Run Bitcoin-QT or some program to generate your address.

3. Send the wallet to an USB.

4. Remove the USB.

5. Ctrl+Shift+Del your wallet details from the laptop. If possible, format it once.

6. Connect your laptop to the internet and send bitcoin to your address, whose details are in USB.

7. Just keep the USB detouched from all internet connections... and you are safe

By the way, is this 100% safe?

Nope, an advanced trojan could be transmitted to the offline system via USB, snatch your private keys and call home when possible (e.g. using your online machine to broadcast the signed TX). So this might be compromised the moment you try to spend the bitcoins (e.g. connect the USB stick to an online machine). You also have a single point of failure (the USB stick) if it breaks your coins are gone.

On the other hand: nothing is 100% safe.

So if your private keys are air gapped and if even using a usb to sign transactions isn't 100% safe, what is the alternative to signing transactions from an offline computer?

[shorena]

-snip-

So if your private keys are air gapped and if even using a usb to sign transactions isn't 100% safe, what is the alternative to signing transactions from an offline computer?

#1 QR Code, e.g. the bither app uses them
#2 sound [1]
#3 type the TX by hand, which is IMHO the safest way, unless your brain was hacked [3].  That level of security is almost never needed. On the other hand its not that hard unless you create a TX with 100 outputs/inputs. The nasty part would be the signed TX, which is just hex code and typos can happen easily.
#4 floppy [2]
#5 CD/DVD which is costly and has the similar problems USB has

Edit: In case this wasnt clear, I think for the majority of bitcoin users an USB stick is fine to transport data from cold to hot wallet. Not everyone needs/has a tinfoil hat.


[1] https://bitcointalk.org/index.php?topic=735111.0
[2] https://bitcointalk.org/index.php?topic=813295.0
[3]

[KidPoker]

-snip-

So if your private keys are air gapped and if even using a usb to sign transactions isn't 100% safe, what is the alternative to signing transactions from an offline computer?

#1 QR Code, e.g. the bither app uses them
#2 sound [1]
#3 type the TX by hand, which is IMHO the safest way, unless your brain was hacked [3].  That level of security is almost never needed. On the other hand its not that hard unless you create a TX with 100 outputs/inputs. The nasty part would be the signed TX, which is just hex code and typos can happen easily.
#4 floppy [2]
#5 CD/DVD which is costly and has the similar problems USB has

Edit: In case this wasnt clear, I think for the majority of bitcoin users an USB stick is fine to transport data from cold to hot wallet. Not everyone needs/has a tinfoil hat.


[1] https://bitcointalk.org/index.php?topic=735111.0
[2] https://bitcointalk.org/index.php?topic=813295.0
[3] http://www.turnkeylinux.org/files/images/blog/i-know-kung-fu.jpg

What a fantastic post. The sound option is fascinating to read about. Thanks a lot!

[Dabs]

Some malware have been known to cross or bridge the air gaps. But those are extreme.

To answer the question, I would probably nuke the old computer using DBAN (Darik's Boot and Nuke), with at least 1 full pass. Then I would create partitions or format it fresh.

I would not use a factory reset. I will just use a linux CD/DVD/ISO or even WinXP/7/8.1.

It's not ever going to connect to the internet right? So you don't need any other drivers. You don't even need the anti-virus stuff. The nice thing about ISO files is you can check the SHA256 or MD5 and know the installation media is clean. More or less.

[KidPoker]

Some malware have been known to cross or bridge the air gaps. But those are extreme.

To answer the question, I would probably nuke the old computer using DBAN (Darik's Boot and Nuke), with at least 1 full pass. Then I would create partitions or format it fresh.

I would not use a factory reset. I will just use a linux CD/DVD/ISO or even WinXP/7/8.1.

It's not ever going to connect to the internet right? So you don't need any other drivers. You don't even need the anti-virus stuff. The nice thing about ISO files is you can check the SHA256 or MD5 and know the installation media is clean. More or less.

Thanks for the DBAN tip and idea to just use a linux CD after verifying the sha256. That sounds like a much better idea. Yeah it's never going to connect to the net.

[neurotypical]

-snip-

1. Disconnect the laptop from internet.

2. Run Bitcoin-QT or some program to generate your address.

3. Send the wallet to an USB.

4. Remove the USB.

5. Ctrl+Shift+Del your wallet details from the laptop. If possible, format it once.

6. Connect your laptop to the internet and send bitcoin to your address, whose details are in USB.

7. Just keep the USB detouched from all internet connections... and you are safe

By the way, is this 100% safe?

Nope, an advanced trojan could be transmitted to the offline system via USB, snatch your private keys and call home when possible (e.g. using your online machine to broadcast the signed TX). So this might be compromised the moment you try to spend the bitcoins (e.g. connect the USB stick to an online machine). You also have a single point of failure (the USB stick) if it breaks your coins are gone.

On the other hand: nothing is 100% safe.

Thats extremely far fetched. What are the chances?

A laptop with wifi turned off (dont even need to remove the actual card for fuck sakes) will be safe unless you are someone like fucking Asagne or something.