Post
Topic
Board Bitcoin Technical Support
Merits 3 from 3 users
Re: Why has my newly created Bitcoin address already been used?
by
LoyceV
on 10/05/2020, 07:52:01 UTC
⭐ Merited by o_e_l_e_o (1) ,Heisenberg_Hunter (1) ,vapourminer (1)
Excuse me I did not generate the key on Bitaddress.org, but on https://bitcoinpaperwallet.com/bitcoinpaperwallet/generate-wallet.html#
I've used that site several times, but never since it changed ownership. I still have it's source from years ago, and that's what I use. I do the same with bitaddress.org: I don't trust newer versions, even though I have no reason not to trust them, there's also no need to "upgrade".
If bitcoinpaperwallet.com really turned into a scam, it would be very nice if someone can find hard evidence in the (open) source.

Quote
and I did not download it, I ran it directly on the web.
But why? The whole point of creating a paper wallet is to have COLD storage. That means the private key can never have touched the internet, and can never have been on a computer that has been online without being wiped after creating the wallet. See:
* Download and use offline. Use for example Ubuntu or Knoppix from a LIVE DVD without ethernet/Wi-Fi

It's even better not to trust any site's random generator. You can for instance create a private key throwing a dice (read up how to properly do this!), or combine 2 random generators by creating a split key vanity address on a different system, then combining it with the original. This is a lot more work and prone to failure if you're not sure what you're doing.
Another option would be to get a private key from Bitcoin Core and use that as a paper wallet.

One last suggestion: test your paper wallet (again: on an offline system) before funding it. Make sure you have the correct private key to access the address.