Topic: my simple way to store bitcoin - is it any good - page 2. (Read 416 times)

The 12 words you create are the seed for your wallet. If you lose them, you lose all these Bitcoin addresses you want to copy. The only thing you should ever give someone is the Bitcoin address. Not the private keys, not the seeds. These two should only be known and seen by you. Think of the seed and private keys as the key to your house.

Remember that once you give someone an already used Bitcoin address, they will be able to verify your balance and past transactions. That means, they'll know that the address should be yours. They will only be able to watch your Bitcoin address though. To use it in actions such as message signing and spending coins, they'll need the seed and/or private key(s).

If you want to follow the replies before me and go after an airgapped wallet, then remember that the "text address" you were talking in the third row I quoted from your message is the same address you should insert into the "watch-only" wallet. But I repeat, your Bitcoin address, not the privkey or seed.

One thing I would suggest is that you use USB sticks and microSD cards between devices as least as possible. USBs are one of the easiest ways you could get a device that contains your Bitcoin wallet infected, and plugging an infected USB into your airgapped device to only plug it back into an unsafe PC is a risk. Rather than using an USB to copy addresses, you could just use QR codes with Electrum and a webcam instead.

Personally, I would first transfer only a few bucks and make sure they're going to the right place before moving all my funds to the airgapped device. Better be safe than sorry.

If you import your master public key to the watch only wallet, then it will generate every address your seed phrase can generate, rather than just copying a single address. This will be useful if you want to top up the wallet at a later date so you can use a new address for your deposit, which is good for privacy.

If it were me, I'd probably use both. Download Ian Coleman and Electrum, verify them both, and transfer them to my airgapped computer. Use Ian Coleman to create a seed phrase, make a note of the master public key and the first address, restore the seed phrase in Electrum, and check the first address matches.

for starters it is written in JavaScript and runs inside your browser. it can never be as secure as a stand-alone desktop application such as Electrum that is also written in python. additionally you need more features such as signing transactions when you want to spend coins, etc. so you need to have a wallet anyways. only focusing on one thing (Electrum) is better than having two different software, one to create the mnemonic and another to create the wallet.

besides Electrum mnemonic algorithm is not complicated at all, you can always reproduce it if you needed. and if you want to migrate to another wallet other than Electrum you must always send the coins to a new wallet created by that new software instead of importing the seed into it.

To avoid scammer known your wallet type (BIP39 or Electrum seed), it's not necessary to a "watch-only" wallet, you have free to not download the wallet. you can enter your address into an explorer or use address watcher to see if bitcoins are there.

If you really wan't to be secure then avoid third parties, at the same time its online , all of the wallet has their own weaknessim pretty sure about that
there should be the main thing that you should do is choose a wallet that if something happens you will have a solution to retrieve it, i will not suggest any wallet, and what you're doing is correct exchange wallet is not the right place to store your coin

This is what I wanted to suggest.
@nomad647 What you are describing is a paper wallet. You don't need to download and install any software to create one. You can just use an offline tool like the iancoleman page for that  https://github.com/iancoleman/bip39/releases/latest/ Moreover you'll get a real BIP39 seed as NeuroticFish said.
Then you'll be able to check your funds on a blockchain explorer or a watchonly wallet thanks to your public key.  

Wasn't Electrum seed work only with Electrum?
Why not download Ian Coleman git source code and run that for the seed? ( https://github.com/iancoleman/bip39 )
That will work in Electrum and other current or future HD wallets too.

ok, thanks for help.

so i think i get it now.

use electrum to create 12 words
use electrum to copy a bitcoin address to text file on usb

go to exchange, send bitcoin to that text address, (not to any online type wallet)

then get a 'watch-only' wallet, enter the address and see if bitcoins are there

and never enter the 12 words on any wallet that goes online..

You need an online device and the Master Public Key of your wallet that was in the offline device. You will also need a removable device that will use to transfer files from online device to offline device and vice versa.

Create the watch only wallet using the master public key of your wallet in the online device.
Create the transaction you want and export the file. And take the unsigned file in the removable device.
In the offline device open the wallet, have the removable device connected with the offline device.
Load the file in the wallet and sign the tx then export the signed file in the removable device.
Connect the removable device to the online device.
Load the singed file in the watch only wallet and broadcast the tx.

Your wallet is not going online in any step if you follow above every time you need to send bitcoin to another wallet.

It's a good idea in theory but there a few mistakes in your implementation.

First of all, the wallets you have chosen. You are choosing third party, online, and closed source wallets. These should be avoided. Far better to use an open source wallet do this, such as Wasabi or Electrum. (Caveat with Electrum - the seed it generates will not be a BIP39 seed, and so will need to be restored to Electrum in the future).

Second of all, testing your seed phrase by restoring it to a wallet on an internet enabled computer exposes it to the internet, and so it is no longer safe to use.

The best way to solve this is to use a computer which will be permanently airgapped - i.e. never go online again. An old laptop you have lying around would be perfect. Format it, install a clean OS, transfer your chosen wallet software to it via USB drive, create a wallet, back up the seed phrase, send your funds to the first address (double triple check the address!), and then delete the wallet (and for extra security, format or even destroy the hard drive).

Correct.

Absolutely not. Lets say you follow my instructions above and use Electrum to create a new wallet on a permanently airgapped device. That wallet will generate for you a number of addresses. You can either scan those addresses with a QR reader or simply copy and paste them in to a text file and save it on USB drive. That way, you can transfer the addresses to your internet enabled phone or computer. Then you can use them in a transaction to send your funds to. Alternatively, you can export the master public key which will provide you with all of the address in that wallet, rather than just copying individual ones.

thank you for replies.

so what does it mean "as long as you don't broadcast what it is for"

so are you saying, the seed words created in a coinbase wallet are not secure

and if i use electrum wallet to create the 12 words,
how do i get my funds into the seed words without going online
do i use the coinbase wallet with the electrum seed words?

Yes you can do that too but just make sure you didn't share your 12 words to anyone but to yourself or else your bitcoin will be gone. You can also do what Royse777 guide to have a wallet that is not exposed to the internet yet. I also used electrum too but mostly I use my local wallet to received bitcoin.

Coinbase, Blockchain.com type wallets are already online.
When you are creating a wallet in an online service or when a wallet is online then you are already on the cloud :-P

Download electrum , make sure you verify the downloaded file. Disconnect internet from the device and never go online from the same device unless you reset the window. You can also take the software in an offline device which will never go online in the future. Install it.

Create a wallet. The wallet you have now is safe since there are no online connection since you have created it. Write down the seed in a paper, or do something so that you can get them for restoring the wallet anytime you want in an offline device. Delete the wallet from the device.

Now you have a wallet that has not gone online.

Yeah it's safe, from online attacks. As long as you dobt broadcast what it's for, you produce the phrase from an offline computer and test its reproducibility (apsi make a note of the derivation path anywhere as there are a few different standards).

hi, i'm new, no experience, i'm buying bitcoin on exchanges

i want to cold store without using hardware wallet.
(i've tried keepkey and it is too complicated for me)

my idea is to use, say a coinbase wallet,
keep 12 words safe & not upload backup to cloud
then transfer all my bitcoins from exchanges to wallet
then delete the wallet

then all i need to do is keep my 12 words safe for many years on metal plate
i tested by opening another different wallet  (bitcoin.com),
then, using these words, all my bitcoins appeared
is this safe to do and still work again in say 10 years