Topic: Electrum desktop wallet question. (Read 299 times)

I think that's a bit too strong of a statement to make. It's not like Windows is searching for keyloggers and dangerous malware it can infect your machine with. You are right that it's about the environment in the sense that +90% of viruses and malware are created to target Windows users simply because there are so many of them and the OS is easier to work with compared to popular Linux distros. Hence, it's more popular among newbies and security-unconscious individuals.  But if the users stay away from unknown sites, services, files, etc. and stop believing that the rest of the world is there to help them get rich, they will avoid malware and keyloggers.

Bears don't attack joggers wearing Adidas gear more than they attack those wearing Nike. They attack those who came to close, surprised them, scared them, or to protect their younglings. 

Electrum's desktop wallet is a hot wallet (if used as such) just like Greenwallet is. You just run one on a desktop environment and the other on a mobile. They are both good as long as you know what you are doing and can't be tricked easily. If that is not the case, better stick to your HW. 

Electrum itself is safe and runs fine; as others have already mentioned, your environment can be your only issue. There's always the option of a hardware wallet, which is quite affordable nowadays if you feel unsafe. I'm in a similar boat with you after having my Chrome browser infected. Avoid downloading torrents and exposing your wallet. If possible, use a separate computer or laptop for that purpose.

I recently created a similar thread; make sure to check it out because it contains a ton of useful information.

https://bitcointalksearch.org/topic/m.61357747

Ive been using greenwallet on IOS for years never had a problem. Electrum is running on windows 11 did a scan with windows defender no virus's detected or malware

If you have concerns that your computer is infected, you should back up your critical data and wipe your machine with a newly installed OS.  But, I agree that you shouldn't install and use a desktop wallet on a machine you don't trust, even if it is a low-value hot wallet.

If you're in the habit of downloading cracked software, especially games, or browsing websites of questionable morality, then you're likely to encounter malware at some point.  You can always isolate those types of activities by using a different machine or an isolated VM.  


Many malware are designed to hide from virus scanners and other other anti-malware measures.  The best thing you can do is be diligent and avoid any unsafe behavior on a machine which is used for bitcoin.


Electrum can be used many different ways, the software itself is safe.  The security of your coins is largely dependent on how you use the software.  As others have mentioned you should only use it for small amounts, as a hot wallet when installed on an internet-connected device.  If you have a hardware wallet, you can use Electrum to manage those wallets by creating a wallet that requires the hardware wallet to sign transactions.  If you install Electrum on an air-gapped machine, it's great for creating cold-storage seeds, that are about as safe as you can get.

I think it's almost impossible to memorize a private key, so no, you are not going to enter them manually using your keyboard but you are only going to copy and paste them using your mouse. You are right, it seems that you are only paranoid because electrum is one of the most recommended wallet here in cryptos for both desktop and mobile.

If you want to be secure then I think having a good antivirus in your pc can help you detect and remove those hidden malwares in your machine. This should give you a confidence that no one is spying on you whenever you deal with sensitive activities such as opening a crypto wallet.

Both are the same. Actually, it depends on you, if you have an infected pc, electrum wont help you and vice versa, same for mobile wallet.
Remember, "The weakest link in any chain of security is not the security itself, but the person operating it".

---

Btw, Im using mobile hot wallet for years and I never had any problems, coz I know if I dont do anything wrong (clicking random links, downloading untrusted apps, etc), I wont face any brutal consequences.

You are not being paranoid OP; you are security conscious and that is very good. What you have naturally is what some other people are trying to develop (that is the security consciousness).

I don't know how effective this would be, but to avoid being keystroked, you can use the on-screen keyboard function that all computers should have and get a very good antivirus.

Thank you everyone for the replies. I actively use a HWW. I was just wondering if electrum was a better idea than a mobile hot wallet (i.e greenwallet) for small amounts.

In order to be safe:
1. Learn more
2. As already said, if you are capable to do so, use cold storage
3. If you are not tech savvy enough for cold storage, acquire a hardware wallet.

As simple as that.

PS. If you are on hot wallet, it's not only the keyboard strokes that can expose you.

Nothing in particular, just some common sense and general precautions (some already mentioned by the previous posters).

It's pretty obvious you should try to avoid installing new software (especially from unverified sources) on a device which holds your wallet, don't click on/download any attachments from anyone (including your friends and family as their accounts may be compromised too). It would be better to have a separate device for your Bitcoin wallet, with limited or even completely without internet access (or better with no network card at all). Be careful when upgrading your wallet, there have been issues with that before (phishers uploading modified/backdoored versions). If you follow these simple rules you should be pretty safe.

You don't use your main wallet your desktop wallet because all of your doubts can actually happen because of how advanced the hackers are nowadays, one click from their spam emails can leads you to install some malware that will be going to upload your data to their computers. When you are not careful about protecting your seed phrase and other essential details, you will end up getting hacked like any other who is not carefully using their desktop wallets. Electrum desktop wallet is not a totally useless wallet but you really need to have all the necessary information on how to keep it safe.

The problem you are worried about is entirely reasonable, and if you use a computer with an internet connection regularly, you need to be even more careful. I also use Electrum and my solution is to use a separate computer and run Linux OS (because as far as I know, Linux is harder to attack than other operating systems). This computer I do not use for anything other than storage and it is not connected to the internet very often. In addition, if you feel unsafe using a software wallet, you should buy yourself a hardware wallet, as everyone mentioned.

It is quite fair to be afraid of different keyloggers. You have been given a lot of good advice above; in addition, if you prefer Windows, then this system should not be purchased from any dubious resources. Use licensed Windows. Everything else is up to you. It has been repeated many times that for security on the Internet, the user himself is responsible. By not downloading or visiting dubious resources or reading attachments that come to you from unknown sources, you provide yourself with half the protection. In addition, the use of a high-quality antivirus and sandbox will help. Programs such as Shadow Defender, for example. 

It will not ask you to enter a private key until you want to retrieve it, but it will ask for your password. It is possible for your private key to be compromised despite your best efforts. It is recommended to always check out security settings when using the Electrum desktop wallet. For example, I suggest running adwcleaner, junkware removal tool, and Malwarebytes simultaneously. You should be fine if these don't pick anything up.

How is this better than making a completely separate wallet on your laptop and transferring the minimum amount of funds you need to buy stuff with for the day, such as $500 or possibly even $200?

Don't bring your wallets around and expose it to everyone around.

Public WiFi is risky in security and you can be affected too.

I know everyone has demand to use bitcoin when they are hanging out, not at home. So you should have only one small wallet to use in public locations. For your main capital, store it at home and have backups for it.

I will do like this, I create a wallet for my main capital, make its backup at home. Then I delete that wallet file on my laptop. I only import it if I need to make transaction. When I finished, I delete that wallet file again.

Electrum cold wallet is an option.

If you want a safer option, choose hardware wallets like Ledger, Trezor.

Wallets will not ask you to type in a private key, but rather a seed phrase or a password.

If you're on Windows, I recommend a thorough scan of your PC using the free and latest version of Malwarebytes to make sure that the most common crypto malware is not present on your computer.

You can also try turning off your internet connection while entering your wallet details and signing your transactions (and turn it back on when you want to braodcast it).

Electrum is a stand alone desktop application that has nothing to do with your web browser, meaning any settings in your browser is not going to affect Electrum in any way.

Have a separate machine then for your Electrum a dedicated one if you are really paranoid, sort of making it air gap.

Just one advise though that it's better to used any of the Unix distro, open source, rather than windows version. Disconnect everything, format and then install a fresh new copy of the Unix distro of your choice.

You need to turn off memorize keywords/autofill on your browser.

If you plan to hold bigger amount and long term on Desktop that always connected to internet, it's really a wrong choice. Although Electrum is really safe due to open source and non custodial, but you need to know that anything connected with internet connection are vulnerable to getting exposed. Especially if you're using bad browser e.g. Chrome which is spying your activity, there's a chance Chrome know your seed phrase.

If you plan to use Electrum as cold storage,this is the steps:
1. Verify the signature, you need to know if your wallet is legit or fake
2. Transfer the sotfware to the other device that never connected to internet.
3. Use the other insecure device (connected to internet) for watch only wallet.

If you don't have enough knowledge about wallet and how to set up it, it's better to bought a hardware wallet e.g. Trezor, Ledger.

- Use an onscreen keyboard
- Use a separate device for your wallets, where you don't download and install programs frequently
- Only use software wallets for a minority of your funds. For your long-term investments, use a Ledger/Trezor hardware wallet

The problem is not with desktop wallets, the problem is with your environment. For example if you are using windows and connect to the internet with it, there is a good chance that it gets infected with some sort of malware/keylogger and when you use a bitcoin wallet you can lose your funds (among other risks).

This is why the term "hot wallet" exists. The solution is to use "cold storage" and only use your hot wallet for small amounts.
Cold storage is basically an air-gap system that has never been connected to the outside world (through the internet or otherwise) and never will connect. You can use a dedicated system (like an old laptop) or use a secondary OS (even live Linux).
Another way is to buy a hardware wallet and make things simple on yourself.

https://electrum.readthedocs.io/en/latest/coldstorage.html

I have always been hesitant on desktop wallets because you need to enter the priv key on a keyboard to recover it. How do I know I'm safe and I'm not getting keystroked or my priv key isn't getting exposed?

Is there somewhere I can check on my security settings or am I just being overly paranoid?

 I am trying out electrum but I am not 100% sure I can trust a desktop wallet.