Post
Topic
Board Electrum
Re: How do you protect your wallet and backup file?
by
goldsun
on 09/12/2014, 01:18:16 UTC
First, sorry for the late answer, didnt have the time for a length reply earlier. I see you got the partial quotes now Smiley

It's all good! I haven't been active here myself because I feel that I am getting a bit tired of just reading threads and watching the btc charts.

Yes, I used a different machine for that because I wanted to test how it would perform on old mobile hardware. Not as cold storrage but as a form of semi cold storrage but with a dedicated machine. I still think its as secure as it gets on a daily use computer, but as daily use computers go there is a higher risk for infections. That might not even be my fault. My main machine is also used by guests or family members, it takes USB devices from different people and not all of them know what they are doing when it comes to virusprotection. It is something I want to prepare for, but since I dont have that much to worry about cold storrage yet, I though about a dedicated machine. Another reason for testing armory was that it allows multisig and AFAIK its the only wallet thats currently supporting this. Would be nice to set up an address for the family that would require multiple passwords/keys to spend the funds.

So with armory, you can set up a address that require you to type multiply passwords before you want to spend the funds? Extra security right?

Well the more addresses the more painfull it is to check the pages manually. I wrote a little Javaprogramm [1] a while back that is looking up a list of addresses via the blockchain.info API. Its basically just checking the site for you for each of the addresses and creates a file where it lists all balances
per address. Not sure if this is usefull for you, but it should be still downloadable via mega and the source is included.
I will try to check it out and see if it will suite me.

I use a new address for every source of bitcoin. E.g. each signature campaign that paid me got its own address, the address in my profile changes from time to time. That way I know where the coins came from when I check in bitcoin core. IIRC electrum has something like this as well. Its just a little label because I wouldnt be able to remember the address string either. This also helps a bit with privacy, because if I gave everyone the same address theyd know how much I received and spend etc.

Yeah, it's a bit more privacy than having all your coins transfered to one address. Maybe it will blend in with everyone elses transactions but I still prefer a bit more security. But I don't understand the signature thing.

Yes, trezor would do this for you. The idea of hot and cold wallet is that you have two machines. One called cold because it is offline, where you have the private keys and one call hot because it is online, but it only knows the addresses not the private keys. Thus you have one wallet - the hot one - that knows how much bitcoin you can spend and one wallet that is actually able to confirm the spending of the coins. The way bitcoin works is that if you want to spend bitcoin you need to sign the transaction with your private key in order to make it legit. Otherwise anyone could spend your coins. Now in order to spend both machines have to work together. The cold wallet can not just create a transaction because it does not know how much bitcoin you have etc.; the hot wallet can create a transaction, but cant sign it because it has no access to the private keys. So in order to actually spend coins you have to create a new transaction with the hot wallet, transfer that unsigned transaction to the cold wallet, get it signed and transfer it back to let the network know about it. Trezor would be the cold wallet in this case, connected via USB to the hot wallet. The private keys never leave the device, it gets an unsigned transaction from the computer, signs and returns it. A virus would have to infect the Trezor in order to access your private keys and be able to spend your coins.

So instead of all the hassle with offline transactions etc, it's better to have a Trezor, for example. Or just plug the external hardware into a hot machine and be sure that the machine don't have any malwares or viruses. Because even I don't understand this so much even though you explained it well. So how could average joe understand this lol.

There is no actual wallet, as in software. Most - if not all - wallets can however import the private key that is on paper. Its similar to the cold wallet idea. You have a private key on paper, so its offline and can not be attacked by a virus. You could lose it, it could burn in a fire, etc. Its not 100% either but it protects against all digital attacks. You can use the address to send coins there as much as you want without the need for the private key, only when you want to spend the coin you will type the private key into a secure and clean machine and create a transaction. It is very important that this transaction has to spend all the coins on the paperwallet, because the way bitcoin works there is something called change and not all wallets handle it the same, which could result in a loss. Let me try to explain change with an analogy. Bitcoin you receive is like a lump of gold. This lump can only be used entirely, if its worth 1 BTC and you want to spend 0.5 you need to melt it down and create two entirely new lumps of gold. One for the person you want to pay and one for you. Now some wallets just return your lump to the address it "came" from. The problem with this is that bitcoin does not use addresses on a protocoll level, its just an abstraction to help us humans understand what is happening. So back to the paperwallet. You have 1 BTC on it, want to spend 0.5 and the change either goes "back" or to a new address depending on the wallet software you use to do this. In any case your paperwallet should not be used again, but its better to create a new one and send the change there.

So a paper wallet don't have an actual wallet. It's just the private keys, taken apart and put on a printed paper. And when I want to use it, I also need to remember the wallet address if I need to send coins to my paper wallet, but the private keys aren't needed.

Electrum wallet handles it the way it should, right? Because that change think, does it only go for paperwallets?

BTW, you mentioned bitcore and armory, do you use them instead of electrum, or are they just alternatives to electrum?