Ok, renaming the dat file reset the account with fresh address and keys and wallet not encrypted etc. I will just do this. Make his new account, then rename the dat file, rename mine back to wallet.dat. Cheers.

Yeah the 2x fork. I'm hoping for a 95%+ miner consensus (Last segwit2x reached 97%) to scrap a side chain and we just update Bitcoin Core like it should be done. Transactions need scaling aye.400 BTC pending transaction fees is ridiculous.

So I disconnected from the internet, output priv key, veracrypt the key onto two usb sticks, killed client, deleted .dat file and unplugged usb sticks from computer, reconnected. I think using a web browser and a 3rd party website to create a wallet for cold storage is a silly idea. I wouldn't even do that, web browsers are a big target for sniffers/stingrays. If I wanted a further layer on above, I'd do it all through an encrypted VM instance, then kill it.

I've got the security and redundancy bit down pat. Thanks for the Core client help, worked a treat.

Cheers.