Author

Topic: Password encryption into private key possible? (Read 185 times)

legendary
Activity: 2268
Merit: 18748
September 05, 2022, 05:35:46 AM
#11
I tried the Bitaddress but it won't encrypt a private key that you already generated it only generates it's own private key
Sure it will:

  • Go to "Wallet Details"
  • Enter your private key
  • Tick the box "BIP38 Encrypt"
  • Enter your chosen passphrase
  • Hit the "Encrypt" button
  • Scroll to the bottom to get your BIP38 encrypted private key beginnin with "6P"

Should obviously be done on an airgapped device with a downloaded and verified version of bitaddress.
legendary
Activity: 2450
Merit: 4415
🔐BitcoinMessage.Tools🔑
Is there ever any crypto project that allows user passwords to be encrypted into its private key? I've never heard of such I am just curious and thinking about a possibility.
A private key is supposed to be generated using cryptographically secure PRNG to make it impossible to guess or reproduce by an unfortunate accident. In most cases, the passwords that users generate for different websites aren't as secure as a random 256-bit number, which means encrypting them into a private key only makes your coins vulnerable to a hacker's attack because low entropy takes little time to reproduce in case specialized software is employed. When dealing with cryptographic keys, avoid human brain-generated data at all costs because such a practice doesn't allow cryptography to reach its full potential in protecting sensitive data. Any cryptocurrency project that promises you to make a secure wallet using "convenient" data is likely lying and probably wants to steal your crypto because cryptography is not about convenience and making everything human-readable, it is all about security and robustness. Don't fall into the scams like that, follow standards instead because they were thoroughly tested and proved their reliability.
legendary
Activity: 3374
Merit: 3095
Playbet.io - Crypto Casino and Sportsbook
September 04, 2022, 06:40:13 PM
#9
Based on what I understand I think the OP is looking for software or anything that could encrypt the private key I tried the Bitaddress but it won't encrypt a private key that you already generated it only generates it's own private key Brainwallet and coinb.in also have this option to add a passphrase to encrypt the private key.

Why not use a tool called OpenSSL? This is usually used for encrypting or decrypting private key files(with your private key).
You can encrypt it with aes256 and there is a guide on the youtube how to do it here https://www.youtube.com/watch?v=Ij4hagieFjc
legendary
Activity: 3472
Merit: 3507
Crypto Swap Exchange
September 04, 2022, 12:51:05 AM
#8
Password encryption into private key?

Isn't this taking it to a whole new level?  Grin
I mean, private keys are so hard to memorize and this will lead to poor security practices such as copying and pasting or storing them on cloud because one fears to manually write them down minus making errors.

an excellent way to more easily compromise both things, private keys, and passwords.
It's really hard for me to understand what the purpose of such a possibility that the OP asks would be.
hero member
Activity: 510
Merit: 4005
September 03, 2022, 07:12:56 PM
#7
Is there ever any crypto project that allows user passwords to be encrypted into its private key?
The topic title and this question are both a little confusing, friend. Smiley

Trying to give it a generous reading, and flipping your question around, it seems like you're asking: "Can a private key be derived from a password?"

If that's your question, then the answer is yes and the term you're looking for is "brain" wallet. One obvious technique (there are many) is to simply hash the password to derive the private key (e.g. SHA256("ChosenPassword")). Any sequence of steps that results in an integer > 0 and < N (the group order of secp256k1) will work.

Don't go rushing off and using this however, because the security of any such scheme is limited by the password, and people tend to pick rubbish (low entropy) passwords. Only risk funds on addresses generated this way if you really know what you're doing.
legendary
Activity: 2338
Merit: 1261
Heisenberg
September 03, 2022, 04:31:19 PM
#6
Password encryption into private key?

Isn't this taking it to a whole new level?  Grin
I mean, private keys are so hard to memorize and this will lead to poor security practices such as copying and pasting or storing them on cloud because one fears to manually write them down minus making errors.
legendary
Activity: 1512
Merit: 4795
Leading Crypto Sports Betting & Casino Platform
September 03, 2022, 03:04:59 PM
#5
Is there ever any crypto project that allows user passwords to be encrypted into its private key? I've never heard of such I am just curious and thinking about a possibility.
You can use bitaddress.org on an airgapped device. You can use this guide:

How To Run The Bitaddress.org Tool In A Secure Offline TAILS Temporary Live Boot Session

To generate the encrypted private key while using bitaddress html file
Click on paper wallet, input the randoms characters until it is 100%, click on paper wallet again, check BIP38, input the passphrase and generate. The private key would be encrypted and it stars from 6P.

But I will advice you to just use a seed phrase wallet instead, like electrum. You will run electrum on airgapped device, add passphrase while generating the seed phrase. Adding passphrase is known as salting, not encryption, but it is good as encryption.

You can also use iancoleman.io/bip39/ html file (https://github.com/iancoleman/bip39/releases/latest/) on an airgapped device, you have to include the passphrase, esle it will only generate normal wallet for you. Or you can use any other reputed seed phrase wallet.
legendary
Activity: 2212
Merit: 7064
September 03, 2022, 02:34:30 PM
#4
Is there ever any crypto project that allows user passwords to be encrypted into its private key? I've never heard of such I am just curious and thinking about a possibility.
What exactly is user passwords?
If you are talking about password login details for websites, than this is possible with some hardware wallets but if you lose that wallet or it gets broken, you will lose access to your websites.
You can even use Fido 2FA with Trezor and ledger hardware wallets, but again if you lose wallet you lose access, so it's better to have backup device.
For password managers I would suggest using something like opensource KeePass software, instead of using hardware wallets.
If you want you can generate 12 seed words offline and use them as password for KeePass.

I've heard of using hardware wallets before: https://trezor.io/passwords/
I never tried it because you must install their extension to use it, and it only works for Chrome browser I think  Tongue
legendary
Activity: 2408
Merit: 2226
Signature space for rent
September 03, 2022, 02:25:10 PM
#3
I am really confused. I assumed you want to encrypt your passwords to a private key that you would reveal later on. If this is what you are looking for then no, there is no such service or project. Rather you can encrypt your private keys with a password during create a paper wallet that I always discourage to use. Better use a hardware wallet that allows you to store your passwords like a password manager.
copper member
Activity: 2856
Merit: 3071
https://bit.ly/387FXHi lightning theory
September 03, 2022, 01:35:30 PM
#2
I've heard of using hardware wallets before: https://trezor.io/passwords/

I don't think it'd be that secure to use a private key that controls funds for encrypting and decrypting those as it might be more likely to get compromised (ie if your key is being stored in your computer's memory).

There might be working examples of PGP or RSA being used for this encryption though too (for password managers).
jr. member
Activity: 38
Merit: 18
September 03, 2022, 01:28:43 PM
#1
Is there ever any crypto project that allows user passwords to be encrypted into its private key? I've never heard of such I am just curious and thinking about a possibility.
Jump to: