Mastering Bitcoin Security: Tips, Tools, and Best Practices

FinneysTrueVision

sr. member

Activity: 1680

Merit: 379

Top Crypto Casino

Quote from: mk4 on October 07, 2023, 01:21:01 AM

Quote from: pooya87 on October 07, 2023, 01:04:55 AM

Apart from the fact that MetaMask is an altcoin wallet not a "shield"; technically you should keep your bitcoin offline so that getting your online system infected wouldn't affect them. And if you want protection install uBlock Origin and a decent Anti Virus on your system that has net protection.

I know a lot of people here dislike Ethereum, MetaMask does have a feature of potentially showing a warning if the user opens a phishing site, which I don't think uBlock Origin has that feature.

There's this one plugin that's made exclusively for blocking phishing sites though, so it should be a better pick than MetaMask. I forgot the name of the plugin.

Most browsers already have built in phishing protection. uBlock Origin also offers additional protection against this. The default lists are already good enough for most people but if someone really wants to use Metamask's domain filter it can be imported into uBO by going into the dashboard and pasting the URL to the hosts.txt file from their GitHub. https://raw.githubusercontent.com/MetaMask/eth-phishing-detect/main/src/hosts.txt

hugeblack

legendary

Activity: 2702

Merit: 4002

This is a collection of some of the strangest pieces of advice I heard this month. What do you mean by locking your keys tightly? Hardware wallets from Ledger no longer have that good reputation. Why do you need two-factor authentication applications? You can create a multi-signature wallet. Browser Shields means first-line wallets and therefore a greater possibility of losing your money. It's also bad for privacy.

_act_

legendary

Activity: 1064

Merit: 1298

Lightning network is good with small amount of BTC

Quote from: mk4 on October 07, 2023, 01:21:01 AM

I know a lot of people here dislike Ethereum, MetaMask does have a feature of potentially showing a warning if the user opens a phishing site, which I don't think uBlock Origin has that feature.

Trustwallet and some other wallet that I can not point to people to use also have that, but I do not think it is working in a way that it is pointing to phishing sites, I think it is pointing to new created sites.

I have seen new created legit site for presales that would be first tagged as 'may not be legit' on these web3 wallets, but legit. As the site grows older, the warning message will not appear again if the site is legit.

But why should wallet become a browser? That browser called web3 is now majorly used by scammers to make novice to connect to their fake website, we can see people complaining everywhere and including some member on this forum about their wallet that they connect to fake website and all their money stolen.

Metamask is not a shield in anyway. If you have your coins there, there would not be warning if a hacker have access to someone's metamask wallet and know the person seed phrase or able to transfer the coins on it. Metamask can be as vulnerable as other online wallets.

pooya87

legendary

Activity: 3472

Merit: 10611

Quote from: mk4 on October 07, 2023, 01:21:01 AM

I know a lot of people here dislike Ethereum, MetaMask does have a feature of potentially showing a warning if the user opens a phishing site, which I don't think uBlock Origin has that feature.

uBlock Origin is not a simple "ad-block", it blocks a whole lot of stuff including potentially threatening websites (ads, trackers, coin miners, popups, annoying anti-blockers, malware sites, etc.). And that's by default, you can modify it to block a lot more from adding custom lists to the outright blocking of all scripts (like NoScript plugin).

mk4

legendary

Activity: 2870

Merit: 3873

Paldo.io 🤖

Quote from: pooya87 on October 07, 2023, 01:04:55 AM

Apart from the fact that MetaMask is an altcoin wallet not a "shield"; technically you should keep your bitcoin offline so that getting your online system infected wouldn't affect them. And if you want protection install uBlock Origin and a decent Anti Virus on your system that has net protection.

I know a lot of people here dislike Ethereum, MetaMask does have a feature of potentially showing a warning if the user opens a phishing site, which I don't think uBlock Origin has that feature.

There's this one plugin that's made exclusively for blocking phishing sites though, so it should be a better pick than MetaMask. I forgot the name of the plugin.

pooya87

legendary

Activity: 3472

Merit: 10611

Quote from: Weezenhofnar on October 05, 2023, 08:15:24 AM

Best Practice #1: 2FA, You Know?
Turn on that 2-factor authentication, mates. It's like a digital bouncer at your Bitcoin club. Keep the riff-raff out!

This suggests using centralized services in first place like exchanges and custodial wallets that have a 2FA option. Using these services is discouraged to begin with...

Quote

Tool #2: Browser Shields
For our non-native pals, browser shields like MetaMask can help spot scammy sites. They're like your online bodyguards, savvy?

Apart from the fact that MetaMask is an altcoin wallet not a "shield"; technically you should keep your bitcoin offline so that getting your online system infected wouldn't affect them. And if you want protection install uBlock Origin and a decent Anti Virus on your system that has net protection.

hd49728

legendary

Activity: 2044

Merit: 1018

Not your keys, not your coins!

Quote from: Plaguedeath on October 06, 2023, 06:34:15 AM

Yeah most of people only focus about the general thing related to Bitcoin wallet, but they forget if security is started from the device and internet connection you use.

If people are still use Windows, even you subscript official version, this operating system is a spyware. Using chrome is also same, a spyware. That's why when someone need to protect their security, they must learn about computer first.

They should learn to set up an air gap wallet and they must maintain a rule: don't store all bitcoins in one device.

By storing bitcoin in some devices, in some different wallets, they will have less risk to lose all their bitcoin with a single accident. Nothing can be considered as completely safe so if they can diversify their bitcoin storage methods and reduce risks to lose all at once, they have good practice.

Backups of their wallets should be in different forms too like on paper, metal sheet as at the end, if a backup is usable, it's good and it is not a matter it is in a paper or metal form.

Plaguedeath

hero member

Activity: 854

Merit: 663

Quote from: digaran on October 05, 2023, 06:27:22 PM

Are we now the masters of Bitcoin security after reading 2 tips, 2 tools and 2 best practices? This forum has been active ever since Bitcoin was released by Satoshi, even after 14 years of activity we can't call anyone a master of security.

Yeah most of people only focus about the general thing related to Bitcoin wallet, but they forget if security is started from the device and internet connection you use.

If people are still use Windows, even you subscript official version, this operating system is a spyware. Using chrome is also same, a spyware. That's why when someone need to protect their security, they must learn about computer first.

CryptopreneurBrainboss

legendary

Activity: 2408

Merit: 4282

eXch.cx - Automatic crypto Swap Exchange.

Quote from: Weezenhofnar on October 05, 2023, 08:15:24 AM

Best Practice #1: 2FA, You Know?
Turn on that 2-factor authentication, mates. It's like a digital bouncer at your Bitcoin club. Keep the riff-raff out! 🕺

2FA are very important on our accounts as they can prevent hackers from gaining access to our account or carryout out unapproved transaction. They're a second layer of security but when using them, make sure you don't use a centralized 2FA from a centralized service like Google, Authy is better or any other decentralized authenticator app that don't store your keys online (on a centralized server). Also be sure to keep your backup keys safely in an offline manner that hackers can't get access to.

Quote

Tool #2: Browser Shields
For our non-native pals, browser shields like MetaMask can help spot scammy sites. They're like your online bodyguards, savvy?

Metamask isn't a recommended wallet to use and in regards to browser shield, using Brave Bowser offers you that protection and it's a more recommendable browser to use instead chrome, avoid anything related to Google, they're not the best when it comes to privacy and security.

adaseb

legendary

Activity: 3808

Merit: 1723

Yeah I never liked hardware wallets for that reason. They are considered new technology and most likely will experience some bugs. Some might not be as bad but others might lead to getting your coins lost or if a thief finds it they might be able to bypass the PIN.

Another issue like mentioned above is the closed source code. You have no idea if it’s safe or not. Just like it was pointed out where Ledger decided to extract your private seed and keep on some cloud somewhere offline. If it was open source we wouldn’t of have bothered with the wallet due to this one reason alone.

digaran

copper member

Activity: 1330

Merit: 899

🖤😏

Are we now the masters of Bitcoin security after reading 2 tips, 2 tools and 2 best practices? This forum has been active ever since Bitcoin was released by Satoshi, even after 14 years of activity we can't call anyone a master of security.
Anyways my amigos! Never use closed source wallets, or install unofficial shields(whatever that means), once you give access to your private keys to any third party, you better be ready to say good bye to your funds at any moment.😉

taufik123

legendary

Activity: 2716

Merit: 1855

Rollbit.com | #1 Solana Casino

Quote from: Weezenhofnar on October 05, 2023, 08:15:24 AM

Bitcoin security ain't no joke, mates! Let's get our crypto game on lockdown mode and shield our precious Bitcoins like a pro!

Hi brother, when you say crypto is a game, it is a wrong thought.
You must be aware that crypto is not using play money or anything.
It is real digital trading and investment.

Quote from: Weezenhofnar on October 05, 2023, 08:15:24 AM

Tool #2: Browser Shields
For our non-native pals, browser shields like MetaMask can help spot scammy sites. They're like your online bodyguards, savvy?

And for browser protection, you said Metamask can help recognize fraudulent sites.
But in fact, many are fooled by fake Metamask, and sometimes their Devices get infected and steal the Private keys stored in Metamask.

You should protect your device with an antivirus, it will provide comprehensive protection on your device and on the internet, not just your browser.

If you read the news a few weeks ago about Mark Cuban's wallet being hacked via Metamask, he lost about $870k through malware attacks that infected his device and several browser applications such as Metamask, etc.

_BlackStar

legendary

Activity: 1064

Merit: 1228

Playgram - The Telegram Casino

Quote from: The Cryptovator on October 05, 2023, 03:45:09 PM

A hardware wallet is enough to secure your crypto if you can secure your device's seed phrase. Then you don't need to worry much about losing your crypto through an attacker. But you have to make sure your device and seed phrase are secured in a safe place. Though non-custodial wallets are safe, they are not immune to attack. We have seen it previously on Electrum. So I keep believing in hardware wallets, and I have been using them as well.

What we always think is safe is actually not necessarily completely safe for various reasons. I agree that hardware wallets are is one of the best recommendations for security - but holders should also be concerned about any risks that hardware wallets may pose as well as the risk of incorrect use. The most important thing is to secure the seed or seed phrase - then don't just rely on the security of one wallet product for all your bitcoin.

I always remember this warning; Don't put all your eggs in one basket. For me this is important and indeed this is the right step to diversify the risks that may exist. I mean - even though hardware wallets are safe, don't keep all your coins in just one wallet which means having several wallets, especially if you have a lot of coins.

The Cryptovator

legendary

Activity: 2394

Merit: 2223

Signature space for rent

A hardware wallet is enough to secure your crypto if you can secure your device's seed phrase. Then you don't need to worry much about losing your crypto through an attacker. But you have to make sure your device and seed phrase are secured in a safe place. Though non-custodial wallets are safe, they are not immune to attack. We have seen it previously on Electrum. So I keep believing in hardware wallets, and I have been using them as well.

BlackHatCoiner

legendary

Activity: 1512

Merit: 7340

Farewell, Leo

Quote from: Weezenhofnar on October 05, 2023, 08:15:24 AM

Oi, make sure your private keys are locked up tight! Store 'em offline, and don't spill the beans. It's your secret sauce to Bitcoin safety.

Private keys shouldn't be stored anywhere. Seed phrases should.

Quote from: Weezenhofnar on October 05, 2023, 08:15:24 AM

For our non-native pals, browser shields like MetaMask can help spot scammy sites. They're like your online bodyguards, savvy?

How on Earth can MetaMask help you spot scams and malicious sites? Last time I checked, it was nothing but another closed-source, browser-based multi-shitcoin wallet software. It pretty much can't even protect you from itself.

The rest is utter gibberish. What has happened with this board last year? It's almost sad to see content quality dropping so low.

Charles-Tim

legendary

Activity: 1512

Merit: 4795

Leading Crypto Sports Betting & Casino Platform

Quote from: Weezenhofnar on October 05, 2023, 08:15:24 AM

Tip #1: Guard Those Private Keys
Oi, make sure your private keys are locked up tight! Store 'em offline, and don't spill the beans. It's your secret sauce to Bitcoin safety.

I expected you to mention seed phrase and how seed phrase generates private keys and addresses.

Quote from: Weezenhofnar on October 05, 2023, 08:15:24 AM

Tool #1: Hardware Wallets
Tech-savvy peeps, hardware wallets like Ledger and Trezor are your knights in shining armor. They're like those unbreakable safes but digital, innit?

Ledger is a close source and not recommended as the wallet's company does not care about their users' privacy and full control.

Quote from: Weezenhofnar on October 05, 2023, 08:15:24 AM

Best Practice #1: 2FA, You Know?
Turn on that 2-factor authentication, mates. It's like a digital bouncer at your Bitcoin club. Keep the riff-raff out!

People should avoid 2FA that can sync online like Google and Auth 2FA and go for offline ones like Aegis (Android) or Tofu (iOS). Having offline backups is more secure and it should be done in a way it will not be lost.

Quote from: Weezenhofnar on October 05, 2023, 08:15:24 AM

Tool #2: Browser Shields
For our non-native pals, browser shields like MetaMask can help spot scammy sites. They're like your online bodyguards, savvy?

Metamask is an altcoin wallet and not a shield.

dothebeats

legendary

Activity: 3542

Merit: 1352

Cashback 15%

Quote from: Weezenhofnar on October 05, 2023, 08:15:24 AM

Best Practice #2: Stay in the Loop
Stay sharp and informed. Hang out here, share tips, and keep updated on the latest Bitcoin bandits. Knowledge is power, amigos!

Good point here. Sometimes when we are done applying everything we need and installing every tool we can get to ensure our security, we often forget to update after some time. We forget that there are various developments that may cause loopholes and openings for scammers and hackers, hence why we need to stay updated so we can apply changes that can secure us from any possible openings there is that makes our accounts and wallets vulnerable.

348Judah

hero member

Activity: 714

Merit: 521

One needs to be constantly upto date concerning learning about bitcoin, such could help prevent against any loopholes that have already been detected as such found with the use of ledger hardware wallet, am sure if OP had been informed already, he wouldn't make a recomme on using ledger wallet, ere are other hardware wallet that have been approved for recommendations and has no privacy leak like how lerger appears, so we need to be informed of every new developments with the bitcoin network and other security tips to avoid loosing our financial digital assets.

Faisal2202

hero member

Activity: 1386

Merit: 513

Payment Gateway Allows Recurring Payments

Quote from: Weezenhofnar on October 05, 2023, 08:15:24 AM

Tip #1: Guard Those Private Keys 🔑
Oi, make sure your private keys are locked up tight! Store 'em offline, and don't spill the beans. It's your secret sauce to Bitcoin safety.

Yeah, and to enhance the security of those seed phrase, you should encrypt them using any encryption method even a easier one like cipher will do the work, as it depend on the family and friend cycle you have. For example, most of the times, we make friends and but they are not what we think they are and they have bad mind of stealing. And if your friends are techy guy then encrypt your seed phrase with some advance encryption method like AES or DES whatever you want other wise as I aforementioned Cipher is enough.

Quote from: Weezenhofnar on October 05, 2023, 08:15:24 AM

Tool #1: Hardware Wallets
Tech-savvy peeps, hardware wallets like Ledger and Trezor are your knights in shining armor. They're like those unbreakable safes but digital, innit?

We should select from other options as well, because hardware wallet do not end on these two companies which are easier to name.

Quote from: Weezenhofnar on October 05, 2023, 08:15:24 AM

Best Practice #1: 2FA, You Know?
Turn on that 2-factor authentication, mates. It's like a digital bouncer at your Bitcoin club. Keep the riff-raff out! 🕺

2FA is the best guard you can use, I agree with you, but sometimes, it is best to set up your 2FA on different device.

Quote from: Weezenhofnar on October 05, 2023, 08:15:24 AM

Tool #2: Browser Shields
For our non-native pals, browser shields like MetaMask can help spot scammy sites. They're like your online bodyguards, savvy?

I did not understand, what you mean by browser shields like Metamask, I mean, is there any met mask browser shield of which I am not aware of.

hd49728

legendary

Activity: 2044

Merit: 1018

Not your keys, not your coins!

Quote from: Zaguru12 on October 05, 2023, 10:30:14 AM

A little chip in hardware wallet like ledger aren’t much advisable because they are closed source and also they just went over board to splitting of users seed phrase and then transferring the encryption to a custodian third party. This defeats everything related to hardware wallets because definitely your seeds have been exposed to the internet, so o wouldn’t advice on ledger but if you’re looking for another hardware wallets aside Trezo then there is Passport too.

Because of their product changes recent months, theymos erased Ledger from his advice
Reminder: do not keep your money in online accounts

Find open source hardware wallets in
[LIST] Open Source Hardware Wallets

If don't have enough money to buy a hardware wallet, Electrum wallet is a good choice. Open source, available for macOS, Windows, Android, Linux and it's free.
https://electrum.org/#download
The paranoid user's security guide for using Electrum safely.

Topic: Mastering Bitcoin Security: Tips, Tools, and Best Practices (Read 285 times)