Author

Topic: Safe use of WEB Wallet (Read 347 times)

brand new
Activity: 0
Merit: 0
September 06, 2018, 06:51:59 AM
#30
Announcing MyEtherWallet v3.24.00: Difficulty Bomb&Updating blockchain

Due to the complexity of the Bomb and the increased risk of hacking, we pushed a rather drastic update that implements a number of changes and improvements, including enhancement of efficiency and scalability of the blockchain, acceleration of transaction speed, and additional security in the form new formats private keys which will help protect users against hacking.
If you are using private key or UTC, then you need to go into the wallet and update manually, otherwise they risk being unprotected.

How do i update my Ethereum wallet?

1. Go to our website /]MyEtherWallet.com
2. Unlock your wallet using your Keystore File (UTC / JSON) or simply use your private key.
3. Click Unlock and wait for the update.

Please note that you need to manually update your wallet, failure to do so may result in funds being lost.

We are taking these measures to protect both you and our network from phishing and malicious attacks.

Thank you for your cooperation and understanding!
MyEtherWallet Security Team.

If you use other methods, then ignore this message.
hero member
Activity: 3024
Merit: 680
★Bitvest.io★ Play Plinko or Invest!
August 06, 2018, 03:21:22 AM
#28
Bookmarking the website is easy, simple and safe.

It only take few secs to check the website if there are some unwanted characters or misspelled letters because some letters contains dots so check it thoroughly.

But if you don't want to feel safer, use a hardware wallet.
newbie
Activity: 26
Merit: 0
August 06, 2018, 01:55:44 AM
#27
- Advantages of wallet Wallet:
Enhanced security features, such as 2-step verification.
You can choose whether your balance is reflected in your local currency.
The user interface design is intuitive and can be easily navigated.
As a security measure, Blockchain automatically creates a new wallet address after each crypto transaction.

- To protect yourself against future incidents, you should remind yourself of the following:
Disconnect immediately if anything is different from the one you are accessing (for example, an unsecured connection message).
Make sure the site you visit has a secure encryption icon. Especially the websites that you send personal information, money (eg ETH, Bitcoin, trading platform, e-commerce site ...) must always have encryption symbols to ensure information is secure.
Limit use of web-accessible wallets such as MyEtherWallet, which uses add-ons like MetaMask or wallet applications like Eidoo. Still, it is possible for these wallets to be compromised but still safer for MEW.
If you still want to use the MEW wallet, you can view the MyEtherWallet User Guide on your hard drive and offline.
newbie
Activity: 56
Merit: 0
August 05, 2018, 10:40:27 PM
#26
Web wallet website is bookmarked on my computer for safe.I also use Metamask to connect between them. We do not use private key many time.
member
Activity: 166
Merit: 11
ABLE: The New Era of Crypto Finance
August 05, 2018, 10:07:15 PM
#25
I would rather use a hardware wallet instead of a WEB one. It's very easy to  compromise your PC if it's your work station connected to the world web.
newbie
Activity: 126
Merit: 0
July 31, 2018, 09:28:58 AM
#24
You need to make sure you are logged on to the real (authentic) site.
Then, you must be mindful of prop ups asking for unwarranted details.
You also need to install anti-spy, among others.
Save your private keys securely.
Don't use easy-to-get password.
Use two-factor authentication, if possible.
Do not reply suspicious messages asking for any info.
member
Activity: 149
Merit: 34
💡 Websites, scripts for BTC web4crypto.xyz
July 31, 2018, 08:45:50 AM
#23
It is better to store coins in offline wallets (cold wallets). For example you can save your private keys in password-encrypted files and backup on USB, paper, etc. Alternatively you can buy a Trezor or Ledger hardware wallet.

Then you can use coinb.in (in the case of bitcoin) or import the private key into MEW (ethereum) or download the clients (bitcoind and geth) to generate transactions only when needed.

If you still want to use a web wallet, make sure to check the URL (it is better to bookmark the URL or type it exactly) and the SSL certificate (click on the lock next to the URL bar) every time you use the wallet. If you use Windows, make sure to use anti-virus software to avoid viruses that can steal your bitcoin. If you use OSX or Linux you probably dont need this. In addition ignore all emails or social media messages that ask for your private key. This is a phishing attack that tries to steal your bitcoin. You never need to send your private key anywhere, apart from when you import it into a trusted wallet.
sr. member
Activity: 250
Merit: 250
July 28, 2018, 11:24:56 PM
#22
For using MEW you can use some addon on your browser.those addon would help you from getting out the pishing site. MEW already support some addon and they also tell us to install those add-ons for our safety. as a reference:



I am using this addon: https://chrome.google.com/webstore/detail/cryptonite-by-metacert/keghdcpemohlojlglbiegihkljkgnige
jr. member
Activity: 227
Merit: 1
July 28, 2018, 09:56:19 PM
#21
Is it safe to assume the best wallets are the core wallets?

As long as your computer have no malware. The hardware wallets are the only one that are truly safe, I suggest investing in one.
But many people still aware about this, they think because web wallet are easy to using doesn't it best safe to secure their money. For me, invest buy hardware wallet its worth because it is for saving our money forever.
legendary
Activity: 2296
Merit: 1014
July 28, 2018, 08:37:45 PM
#20
How to use WEB wallet to not fail like me.
Blockchain.info is pretty reliable in terms of not gettin hacked, but they had technical difficulties in past.
So overall there is no online wallet that is secure and reliable. You can always be your own bank and choose software wallet like multibit or electrum etc.
member
Activity: 336
Merit: 15
Mining. Hosting. Cloud Mining.
July 28, 2018, 02:37:52 AM
#19
100% safety is almost impossible to reach, so the first rule: be paranoid.

If you visit MEW daily (without login in) you will increase the chance that you subconsciously notice if something is 'off'

Use Metamask (don't keep it open, just login when necessary)

Keep coins / tokens you don't intend to trade soon on a hardware wallet.

Don't follow links. Always type the url.

Keep your computer clean (virusscanners / anti-malware software)

legendary
Activity: 1568
Merit: 1031
July 28, 2018, 01:49:19 AM
#18
Is it safe to assume the best wallets are the core wallets?

As long as your computer have no malware. The hardware wallets are the only one that are truly safe, I suggest investing in one.
member
Activity: 308
Merit: 22
July 27, 2018, 11:18:40 PM
#17
Web wallets are a pleasure to use but prone to phishing attacks. If you bookmark MEW and access it ONLY from that bookmark, you are quite safe. But bookmarks can be hacked too I guess, never heard of it but why not. Next level of protection would be using hard wallet like Ledger or Trezor. You can connect it to MEW easily and can almost guarantee your safety. Just make sure you're sending to the right address and you now 99.999% safe.
legendary
Activity: 3472
Merit: 10611
July 27, 2018, 10:29:34 PM
#16
the only way to stay safe is always going to be using cold storage!

using MEW actually allows you to do it in a somewhat easy way. here are the steps:
1. download the source to the website https://github.com/kvhnuke/etherwallet (verify if this is the right link yourself)

2. go to send offline tab. all the other steps will also be in this tab


3. (online) enter your address in step 1 which you want to send from. write down gas price and nonce

4. (offline) enter appropriate info in step 2. choose the right option from bottom of this step "How would you like to access your wallet?" (it usually is the last one: private key). enter the right information here and click unlock

5. (offline) move a little lower, click generate transaction and now copy the "Signed Transaction" and transfer it to your online computer

6. (online) go back to https://www.myetherwallet.com/#offline-transaction and scroll to the bottom of the page, step 3. paste the "Signed Transaction" from #5 here and click send.

7. do this as a test first to learn how things work, you can send a small amount and check everything then do it for everything.
member
Activity: 364
Merit: 10
July 27, 2018, 10:20:13 PM
#15
You admit to type your private key at the phishing site, so i recommend you bookmark the legit page https://www.myetherwallet.com/
Bookmark and only use it, don't search on the address bar or google some thing like MEW, myetherwallet, eth wallet... and click on the result links, never do it. The search results are not safe. You can install Metamask, a good and legit ETH and ERC20 wallet extension on Chrome and Firefox, this extension also warn you when you visit a fake MEW website.
Metamask legit extension: https://chrome.google.com/webstore/detail/metamask/nkbihfbeogaeaoehlefnkodbefgpgknn?hl=en
mk4
legendary
Activity: 2870
Merit: 3873
Paldo.io 🤖
July 27, 2018, 10:19:52 PM
#14
Put your private key in a secured place that your the only one who knows were it is. Make a copy or print it to have a back up, which is recomemded. Just be careful cause a lot of hackers will try to steal your private keys.

It would be a good idea if you would read OP's post first before commenting on it.
hero member
Activity: 1946
Merit: 502
July 27, 2018, 09:58:38 PM
#13
Put your private key in a secured place that your the only one who knows were it is. Make a copy or print it to have a back up, which is recomemded. Just be careful cause a lot of hackers will try to steal your private keys.
hero member
Activity: 1232
Merit: 738
Mixing reinvented for your privacy | chipmixer.com
July 27, 2018, 06:57:09 PM
#12
To be fair, MEW domain was "taken over" for some users due to the temporary DNS hack.
there is an official MEW Chrome Extension you can use to increase your security
However, I'm not quite sure if this Chrome Extension would protect you in such case above?
but this extension would definitely help you from falling into phishing sites Cool
legendary
Activity: 2758
Merit: 6830
July 27, 2018, 10:40:55 AM
#11
To be fair, MEW's domain was "taken over" for some users due to the temporary DNS hack. Which means that some users who accessed the MEW domain where accessing a phishing website (even if it was showing as insecure).

The definitive solution is to download MEW's source code[1] and run it locally on your computer.

[1] https://github.com/MyEtherWallet
full member
Activity: 406
Merit: 100
Market Integration Platform
July 27, 2018, 10:19:09 AM
#10
Use hardware wallets otherwise you can never be safe, that is also recommend by the wallet you use Roll Eyes so still entering private keys is nonsense and you accept losing coins.
mk4
legendary
Activity: 2870
Merit: 3873
Paldo.io 🤖
July 27, 2018, 09:59:38 AM
#9
MyEtherWallet wasn't taken over(at least recently). You got hacked because of user error. You most likely clicked on a phishing link when you Googled "myetherwallet". The thing is, hackers can pay ads to Google for listing a phishing site version of the original MEW. So this wasn't MEW's fault. Unfortunately you learned the hard way; hopefully your losses wasn't that much.

Next time when using MEW, type the URL "myetherwallet.com" accurately on your browser's address bar intead of Googling it.
hero member
Activity: 1190
Merit: 534
July 27, 2018, 08:33:13 AM
#8
As far as you have your keys on any website including web wallet service provider, don't expect security for your wallet. Crypto is all about self-responsibility and hence we should take enough security precautions to keep our crypto funds safe. I would recommend you to keep your funds in offline wallets such as a securely generated paper wallet or reputed hardware wallet. Web wallets are convenient but I don't expect security from them.
member
Activity: 96
Merit: 10
July 27, 2018, 08:14:48 AM
#7
Next time, access those web wallets from a saved/bookmarked link instead.

On a side note: None of the web wallets are safe.

Is it safe to assume the best wallets are the core wallets?
legendary
Activity: 2310
Merit: 2073
July 27, 2018, 08:02:21 AM
#6
I suggest to go only through the bookmark on the official website of the MEW Wallet. When you open the site, check all the address symbols (often change "a" to "á"). I apologize for my English.
legendary
Activity: 2968
Merit: 3406
Crypto Swap Exchange
July 27, 2018, 06:50:06 AM
#5
Next time, access those web wallets from a saved/bookmarked link instead.

On a side note: None of the web wallets are safe.
member
Activity: 742
Merit: 19
July 27, 2018, 06:48:33 AM
#4
The other day, MEW 's wallet was taken over.

Apparently, I seem to have written a private key at the phishing site.


How to use WEB wallet to not fail like me.
Please tell me what you are doing, such as when you use or save PW.
The first thing is don't put your private keys anywhere like airdrops and bounties. Next one is checking twice the official Myetherwallet website or not and keep in touch with Myetherwallet social media updates. In my opinion is you can use Metamask in your web browser. You can use Metamask safer than Myeterwallet.
legendary
Activity: 1568
Merit: 1031
July 27, 2018, 06:40:34 AM
#3
All phishing attacks seem to target Myetherwallet domain name, use MyCrypto instead, It's the same with more features.

If you ever type your private keys, or upload your JSON file at a phishing site, you're basically at the mercy of the attacker, there is nothing that can be done to protect yourself from that, just be vigilant.
legendary
Activity: 3122
Merit: 1398
For support ➡️ help.bc.game
July 27, 2018, 05:51:24 AM
#2
The other day, MEW 's wallet was taken over.

Apparently, I seem to have written a private key at the phishing site.


How to use WEB wallet to not fail like me.
Please tell me what you are doing, such as when you use or save PW.

I think you pretty save your Private Key on a safe note.

However, you admit that it seems you are a victim of a phishing site. No matter how secure our private key or password is, if you input it on a phishing site then there is a chance that it will be compromised.

Next time be aware on what site you are inputting your important credentials.
member
Activity: 128
Merit: 10
July 27, 2018, 04:55:45 AM
#1
The other day, MEW 's wallet was taken over.

Apparently, I seem to have written a private key at the phishing site.


How to use WEB wallet to not fail like me.
Please tell me what you are doing, such as when you use or save PW.
Jump to: