This is my first post here. I'm not sure if this is the right forum to ask. If not, please feel free to move it.
I don't have a hardware wallet. I use Electrum and other similiar wallets on my desktop computer which never leaves my house. I make sure to always save the individual wallet files on a usb stick offline so there are no copies of the wallet files on the computer. The wallet files are also encrypted which I decrypt each time I need to access it. I don't use the usb stick for any other purpose other than storing and accessing cryptos and it stays offline when not in use.
1. Is this a pretty safe way of storing cryptos?
2. Does accessing wallet files via usb stick leave some sort of a trail or a temporary copy of the wallet files on the hard drive somehow that a hacker can later access? I don't move the files to the hard drive, I just open the files directly from the usb drive.
3. I have a paid antivirus software and a firewall on my computer. I checked for every way I know but did not find any indication of malware or hacking so hopefully, my computer is currently safe. However, if it were hacked unknown to me, the only way the hacker could steal my coins would be to catch me at the exact moment that I access my coins from the usb and watch my keystrokes for decryption passwords of my wallet files and also make a copy of my wallet files during the short duration of time that I'm accessing my wallet before unplugging the usb. Is this correct? Can a hacker possibly do all this such as copying a file from my usb drive while it's plugged in and send it to his personal machine? If so, would this be about the only case where a hardware wallet is safer than my method? My understanding is that the decryption part happens on the airgapped hardware device itself so even if the computer is hacked, the hacker would not have access to the wallet file nor the decryption password. Is this correct?
Thanks.
I'd say that this is alright for everyday transactions, however your private keys will be susceptible to viruses at some point or the other becayse no antivirus can save them.
I would suggest you go for cold storage or try a paper wallet since storing your private keys offline is the safest way, as long as you keep a backup and store your wallet in a safe and secure environment.