Post
Topic
Board Development & Technical Discussion
Re: Is there any malware that captures your recovery seed when shown or typed?
by
BlackHatCoiner
on 16/02/2024, 11:57:45 UTC
See what the developer of the airbitz wallet (rebranded for Edge) says about mnemonics and that he considers it an insecure backup method. I agree with him, although mnemonics make life a lot easier, it is very easy to have your coins stolen if you have malware that captures mnemonic phrases or scans your clipboard if you copy them.
If you are concerned on screen recording malware during seed generation and keyloggers during seed recovery, then create an airgapped device. I really don't see how seed phrases are less secure on an Internet connected device. Less comparably to what? A Bitcoin Core wallet file? A malware affected device can compromise Bitcoin Core itself.

Also as the wallet is on airgapped computer, alternative backup like encrypting the seed phrase or the wallet file on a new and yet formated USB stick is also an option.
That is unnecessarily complicated. Just back the seed phrase up in a piece of paper, or if secured for the long term, use washers. Encrypting the seed phrase just adds an additional private key that you need to be aware of.