Author

Topic: Electrum Multisig question. (Read 131 times)

?
Activity: -
Merit: -
October 29, 2024, 06:31:20 AM
#9
The difference between the two options mainly revolves around how you manage your seed phrase and your hardware wallet's interaction with it.

When you choose "I already have a Seed," you're essentially importing your seed phrase into the software. This means the software has access to your private keys, which could be less secure if the device or software gets compromised.

On the other hand, "Use a Hardware Device" means you're connecting your hardware wallet to the software. In this case, your seed phrase remains securely stored on the hardware device, and the software merely facilitates the transaction. The signing process occurs on the hardware device itself, ensuring that your private keys are never exposed to the computer or software, which is much safer.

So, while entering the seed manually is possible, it's generally recommended to use the hardware device for better security. I hope this clears things up!
legendary
Activity: 2534
Merit: 6080
Self-proclaimed Genius
October 28, 2024, 10:41:04 PM
#8
Is it the same procedure as the Foundation Wallet? ( via .json file )
Or how exactly do I connect the Specter to Electrum via SD
Use ".psbt" export option on your Electrum watch only wallet (created with your xpub, notes below)
as described here: https://bitcoinelectrum.com/creating-a-cold-storage-wallet-in-electrum/

Transfer that to Specter Shield via SD card, sign it and import it to Electrum with "Tools->Load Transaction...".
Now, this is where it may not work, the signed raw transaction should be compatible with Electrum, else, the broadcast button wont be clickable even though the transaction is fully signed.

If it doesn't work and you're really up to it, you can convert the exported base64 psbt text (signed) to serialized hex string
with Bitcoin Core command: finalizepsbt , it should output a hex string if the psbt is fully signed.
With that, you should install Bitcoin Core in the air-gap machine, using that command wont require a wallet nor syncing, just use its console if you do not want to use CLI (Window->Console).


Notes: If Specter Shield can export an Electrum-compatible skeleton wallet like what Coldcard does, use it.
If you have no other option but through xpub and your addresses aren't legacy, you should convert it first to a different format (e.g.: zpub, ypub) using convert_xkey command in the console (View->Show Console).

Sample commands (testnet):
Legacy to Native SegWit:
Code:
convert_xkey(xkey="tpubDEVePGDqQ8LvBfvr6FcwScddR8cqubztoFHhW8VBdvFEXJDfiUtovx26FuuvyyCxjT88nhEnKVacd7yurPLjMEW34gDSvLBCRvaw2Nt1eeu",xtype="p2wpkh")
Result: vpub5aTVFh4KPVJWDHMkyM4bpX7Fk5EJ2yWqRPexaneGXzjafovW8wibYP2yyTuyTewt8GMcgAXns53 UANGB28fTsKgYGQ5J4yszJWsEV9pVfCL

Legacy to Nested SegWit:
Code:
convert_xkey(xkey="tpubDEVePGDqQ8LvBfvr6FcwScddR8cqubztoFHhW8VBdvFEXJDfiUtovx26FuuvyyCxjT88nhEnKVacd7yurPLjMEW34gDSvLBCRvaw2Nt1eeu",xtype="p2wpkh-p2sh")
Result: upub5FdDx2PQEom2MzAe8zGycS1ka75r6MXLWH8joPkP9zMhci7GtHZ2vKNqxFxPTkHxidEovgwEQQg vH5ecJSFT55zwQ4NsV54W2nob6dNm9aS

Native SegWit to Legacy:
Code:
convert_xkey(xkey="vpub5aTVFh4KPVJWDHMkyM4bpX7Fk5EJ2yWqRPexaneGXzjafovW8wibYP2yyTuyTewt8GMcgAXns53UANGB28fTsKgYGQ5J4yszJWsEV9pVfCL",xtype="standard")
Result: tpubDEVePGDqQ8LvBfvr6FcwScddR8cqubztoFHhW8VBdvFEXJDfiUtovx26FuuvyyCxjT88nhEnKVa cd7yurPLjMEW34gDSvLBCRvaw2Nt1eeu
member
Activity: 106
Merit: 49
October 28, 2024, 08:15:26 AM
#7
"Use a master key" (import an extended (master) public key) or import a "skeleton wallet" exported from the hardware wallet opens for the following transaction signing options:
  • Via QR Code, the hardware device has to produce and accept the base43 encoded transaction data contained in the compatible QR code with Electrum. (AFAIK Shield uses UR2.0)
  • Via "Micro SD" transaction export, it should be compatible as long as it's in "PSBT" format (usigned) and serialized hex raw transaction (when signed).

Perfect, thank you very much,
So QR Code doesn't work in the same way as with the SeedSigner.
USB doesn't work either because there's no plugin.
The only option is to try using microSD.

Is it the same procedure as the Foundation Wallet? ( via .json file )
Or how exactly do I connect the Specter to Electrum via SD
legendary
Activity: 2534
Merit: 6080
Self-proclaimed Genius
October 27, 2024, 10:54:09 PM
#6
What exactly is the difference between:
I already have a Seed & Use a Hardware Device?
-snip-
I would like to use the hardware wallet (Specter Shield), unfortunately it is not compatible with Electrum, but if I enter the Specter Shield seed manually into Electrum, I could still use the Specter Shield as a signing device, right?
"Use a hardware device" requires a specific transaction-signing protocol that's unique to the hardware wallet to be implemented in Electrum (usually as plugin)

"Use a master key" (import an extended (master) public key) or import a "skeleton wallet" exported from the hardware wallet opens for the following transaction signing options:
  • Via QR Code, the hardware device has to produce and accept the base43 encoded transaction data contained in the compatible QR code with Electrum. (AFAIK Shield uses UR2.0)
  • Via "Micro SD" transaction export, it should be compatible as long as it's in "PSBT" format (usigned) and serialized hex raw transaction (when signed).

Using "I already have a seed" will create a wallet containing the seed that can derive all of your keys for signing.

Quote from: Bitcoiner2023
PS:
I think I'm making a mistake in my thinking, if I use a MultiSig with Electrum Coldwallet + Specter Shield and I enter the seed from the Specter Shield manually into Electrum, then I don't need the shield at all, since I can sign with both seeds with Electrum
Yes, if you want separate signing devices; the alternative is to use your hardware wallet's master public key and see if you can export PSBT transaction.
sr. member
Activity: 504
Merit: 279
October 27, 2024, 08:20:16 AM
#5
I think I'm making a mistake in my thinking, if I use a MultiSig with Electrum Coldwallet + Specter Shield and I enter the seed from the Specter Shield manually into Electrum, then I don't need the shield at all, since I can sign with both seeds with Electrum

Exactly you don’t need the specter shield for signing because what is needed for signing the transaction is your private key which is already on the electrum wallet since you imported the seed phrase already. The only time you need a hardware wallet for signing is when you connect your electrum wallet to it and on that the seed phrase is not known by the electrum wallet.

What you’re doing is not actually multi sig but rather still a single sig wallet. What you need if you have imported the seed phrase to an electrum wallet on an airgapped device is to simply set up a watch only wallet on an online device by importing the cold wallet public key to the online wallet. This way you only sign transactions using the airgapped device, the watch only wallet will create the transaction and after you have signed will be used to broadcast the same transaction
staff
Activity: 3500
Merit: 6152
October 27, 2024, 08:15:38 AM
#4
OK, so it's just a matter of the computer knowing the seed when I enter it manually?

Could I still sign on the hardware device?

You can still sign on the hardware device if you initiate a transaction from the hardware device, yes. But if you restore the seedphrase on the PC, then the signing is not going to happen on the device.

Or, if you go the "Use hardware device" route, then you would also be able to sign transactions from the device directly.

Hope this make sense.

I will only use Electrum on an airgap computer, so it makes no difference whether the seed stays on the device or I enter it manually on an airgap computer.

I would like to use the hardware wallet (Specter Shield), unfortunately it is not compatible with Electrum, but if I enter the Specter Shield seed manually into Electrum, I could still use the Specter Shield as a signing device, right?

There will be no connection between the device and Electrum in this case, because you're just restoring the seed. I'm not familiar with the device you mentioned, but I don't see how you would be signing from it.

It sound like you're trying to achieve something like this but using hardware wallets instead?

https://electrum.readthedocs.io/en/latest/coldstorage.html

I also see that you're mentioning "multisig" in the title... so you're trying to setup a multi signature wallet here?

member
Activity: 106
Merit: 49
October 27, 2024, 07:53:46 AM
#3
Use a hardware wallet -> You will link your device without exposing the seedphrase. Any transaction you make will need to be authorized from the physical device itself. This is basically the same as using the device's software (such as Trezor suite or Ledger live).

"I already have a seed" -> You will be restoring your hardware wallet (or any wallet) into Electrum. Doing so would make the device pretty useless afterwards.
OK, so it's just a matter of the computer knowing the seed when I enter it manually?

Could I still sign on the hardware device?

I will only use Electrum on an airgap computer, so it makes no difference whether the seed stays on the device or I enter it manually on an airgap computer.

I would like to use the hardware wallet (Specter Shield), unfortunately it is not compatible with Electrum, but if I enter the Specter Shield seed manually into Electrum, I could still use the Specter Shield as a signing device, right?


PS:
I think I'm making a mistake in my thinking, if I use a MultiSig with Electrum Coldwallet + Specter Shield and I enter the seed from the Specter Shield manually into Electrum, then I don't need the shield at all, since I can sign with both seeds with Electrum
staff
Activity: 3500
Merit: 6152
October 27, 2024, 07:45:17 AM
#2
Use a hardware wallet -> You will link your device without exposing the seedphrase. Any transaction you make will need to be authorized from the physical device itself. This is basically the same as using the device's software (such as Trezor suite or Ledger live).

"I already have a seed" -> You will be restoring your hardware wallet (or any wallet) into Electrum. Doing so would make the device pretty useless afterwards.
member
Activity: 106
Merit: 49
October 27, 2024, 07:40:53 AM
#1
Hello everyone,

What exactly is the difference between:
I already have a Seed & Use a Hardware Device?

Isn't it the same if, for example, I simply enter the seed from the device manually under:
I already have a seed

Or does signing via the hardware device no longer work because I haven't entered it under:
Use a Hardware Device?
Jump to: