Topic: Setting up a cold storage (Read 491 times)

That question is a stretch.
In that case, how do you know that he will come across a camera issue on his smart phone? You started that route.

All I'm saying is that tool isn't recommended and wont work in the use-case you've initially suggested.
We're getting quite off-topic to the main topic and I think I've given enough response about that tool.

regards,

You've misread(or I wasn't clear enough), as you can see I asked him how he was planning to send his unsigned transaction from his smartphone to his air gapped computer AND how he was planning to send his signed tx from his computer to his smartphone or to another device, for broadcasting it. And I mentioned two (most) common pitfalls he could encounter in relation to that.
You need a working camera to read the QR-code before decoding it so using this Electrum43 tool can't fix a webcam issue. But it allows you to not have to depends on, neither to trust, your Electrum wallet, Electrum servers and the device using it for broadcasting your transaction, while continuing to use a simple QR-code for the transmission. It prevents the leak of the seed into the unreadable QR-code by a malware or a backdoor inside your cold wallet which is a common concern towards hardware wallets using closed/encrypted QR-codes and it allows to check if the transaction hasn't been tampered with another destination address among other things.

I know you're a "Self-proclaimed Genius" but how do you know he has a working camera on his smartphone and he wants to use it for broadcasting his tx while he still hasn't answered my question about that precisely?

Using flash drives is not safe at all, because you can contaminate you air gapped environment with malwares inside them, and seeds can be leaked into them. I strongly advise against this method if you are holding funds you can't afford to lose in your cold wallet, personally.

Running Debian and Tail is good for someone who knows how to do it neatly, I won't trust recommending to someone who isn't very good with computers, they will do something wrong and put blame on you, this have happened between me and a cousin of mine.

What you are looking for is present on ever good hardware wallets out there, you can sign them to a watch-only app and even if you need to make a transaction you need to sign the transaction using your hardware wallet, this is the best feature of a hardware wallet, they are by far superior to all other crypto wallets and ideas.

You don't have to complicate any thing OP, just stick with the Electrum wallet on your Smartphone till you will be able to afford a open source hardware wallet, I recommend...

1. OneKey.
2. Trezor.
3. Keystone.

That contradicts the very reason why you've posted a solution to a problem that isn't raised by the OP:


I rephrase; If he can just use it in the last step, then it's useless in OP's case.

And talking about QR code and camera, the Android Electrum's camera should work so there should be no issue scanning the signed raw transaction's QR code which is what you're suggesting to use the tool for.
If he come across the "webcam issue", it'll be for the transfer of the unsigned raw transaction, it's now in PSBT format which isn't compatible with the tool.
Then he'll need another tool to do that or use the USB flash drive method.
If this topic is just about electrum43 tool, then it's a valid answer to its use-case; but since this is about OP, it's just a solution looking for an issue.

Yes I guess, I didn't say the opposite, I didn't try it either but I trust you.

I didn't talk about what Electrum is expecting, because everyone has been able to see that you can send a signed transaction from an Electrum wallet to another one through QR-codes without encoding issues.

I thought my message along with the quote from the github of this tool was pretty clear, but maybe not enough obviously. If you need or want to broadcast a signed transaction with a broadcast service or another wallet than Electrum, from the QR-code you will need a tool like that to decode it. It is what it is. If you don't want or don't need to use this QR-code, you can copy each character of the signed transaction instead but it's not easy with an air gapped device, you're going to have to do it by hand or to take a picture of it and to use an OCR software to read the characters in the photo. Yet, QR-codes were invented precisely to prevent that.

Actually, Electrum will accept that decoder's "Parsed Result", it's basically what Electrum decodes when it scan the QR code. (try it)

You're probably talking about the "Raw bytes HEX" in the result of zxing decoder, it doesn't work because Electrum is expecting a serialized signed raw transaction if provided a hex string in its "Load transaction" menu.
That hex string in zxing's result is the raw bytes interpretation of the Base43 string contained in the QR code;
In simple words, it represents those letters, numbers and signs, not the transaction itself.

Besides, electrum43 tool is 8years old, in modern Electrum versions, it'll only work on fully signed Electrum transaction's QR codes.
The (unsigned) PSBT's QR Code when decoded into hex string is be incompatible with Electrum (since v4.0.1 - July 2020) since it's expecting either a Base64 or Base43 PSBT string or a RAW PSBT file. (reference)
So, in terms of use-case, that tool is pretty unnecessary since she can only use it at the last step,
The PSBT will have to be transmitted by other means like the simple but effective PSBT file/text method, or find a solution to the webcam. (if it became an issue)

No that's a tool to decode Electrum QR-code format because classic decoders like https://zxing.org/w/decode.jspx don't work for Electrum QR-codes, they don't know this format unfortunately.
Electrum uses a custom base 43 encoding actually, so you won't get a readable hexadecimal string ready to be broadcasted if you try to decode it with a random QR-code decoder.
The tool is open-source, you can find its code on Github, but since the transaction is already signed, there is no way to tamper it, that's why broadcast services are used without worries by the way.
https://github.com/jacoblyles/base43js

I guess its quite too low even you make a transaction of course we need to consider the security of your device which is with the low specs seems outdated with the updates and possible it has a vulnerabilities or sadly becomes compromised already and just waiting to you to make some records to that PC, if you are using a cold wallet base on my experience I haven't get any trouble since I'm using a hardware wallet with Trezor. Just make sure that your seed phrase is safe offline to prevent someone getting access of it.

What is the link you shared, I never knew this one?
Did you mistype it ?

May I ask you how do you plan to send (and receive) your unsigned transaction from your smartphone to your computer and how you plan to send back your signed transaction from your computer to your smartphone or to another device in order to broadcast it?
Unfortunately there are often issues with webcams and Linux distributions. So you may have some troubles to send your unsigned transaction from your smartphone to this set up.
And if you need or want to broadcast your signed transaction from another device or another software, you will need to convert your QR-code because Electrum uses a special format http://electrum43.org/

All Cold-storage setup tutorials tell you to create the wallet in the air-gap device, so in the process, the seed phrase and passphrase are kept "cold" as well.
That makes it "Cold", unless you "accidentally" store it on an online machine.

If you're going for Tails setup, its "Persistent Storage" where you should put the cold-storage wallet's data directory
can be encrypted with a password of your choice, every other generated files will automatically be forgotten in every session.
With that, set a strong persistent storage encryption password (different from your wallet's password and seed phrase's passphrase)
So even if the flash drive is stolen, the thief wont be able to access its contents.

Using a LINUX operating system is much preferable due to their security factors around it, with windows I'm not certain but somehow if you aren't security conscious enough there could be some compromise such that you may not be able to handle, basically i have the Linux preference and that ahs fueled my recommendation for you. cold storage been a thing that cannot be really compromised easily because of the fact that there is little to almost no internet connection on it is a more reason you should consider a security measure that will help in getting your asset very secured than it has ever been even before now.

For Linus 2gig may be too slow to run it maybe you should get something higher if you want to dedicate a separate system to that purpose, i feel that will be the best approach for this. these are my suggestions and taught tho you may choose to try something else if you don't feel comfortable to use this information if you feel they aren't true enough or do not suite your needs on this actually.

I understand you want to keep your coins safe but still use your phone to make transactions. Using old computer as wallet is good idea but I am worried about your security. Computer has Windows and not much memory which could be problem. I think you should use Linux instead it is safer and works well on old computers. Do not worry about memory Linux can still run well. I do not think you should use Windows because you have games and other programs that could make it less secure.

Everybody's living situation is individual. You have to assess your potential loss risks yourself.

Cold, offline and analog storage of mnemonic recovery words, if you use an optional additional mnemonic passphrase and the passphrase for the storage media encryption is preferable. Mnemonic recovery words and optional additional mnemonic passphrase for the wallet need to be stored separately, never together. I would store the passphrase for the storage encryption also separately from both.

Do not try to rely on your wet brain memory. It will fail you, especially after longer periods on non-use. You should also consider how your heirs can recover your stash if something happens to you. Good planning and good documentation is key.

I'd use quality archival paper and archival document safe ink. For protection against loss by fire, I stamped all required secrets on stainless steel washers (titanium is a good option, too). Hiding the metal stuff is a bit more difficult, but messy corners or boxes with seemingly worthless stuff are a good start. Be creative...

Paper isn't difficult to hide (a thief usually doesn't spend a lot of time searching for some paper stuff). Burglars look for money (leave some bait money which is easy to find to satisfy them), precious items, stuff that can be quickly turned into money.

You should of course keep a low profile and don't brag with your crypto coins or that you're heavy into crypto. If you don't keep a low profile, you're plain stupid and shout out for trouble.

I've  not been able to reply to the comment because of time although  I did read them but I was so lazy to reply them but I think I should just do that today because I have another current ongoing issue, I will create a new thread for that
Okay, this seem to be pretty a good way to do this, I will try giving it a shot once I get the PC, thanks for the YouTube video.
I will also go through this too , thank you for the links.
So I will have to keep both passphrase and mnemonic word cold too, any suggestion of a safe way to do that.

Just use Explorer with your address and bookmark it, or add to your homepage on phone.

The convenience is you have offline keys that you can store any way you like. If an unauthorized person can find your keys, they can also find your pass phrases, normal wallet, cold storage, etc....

Chikito and Dragonfund have guide threads on Tails OS too.

• How to Install Tails OS on USB flash drive for Wallet Purpose
• [Tutorial] How to make a cold storage Bitcoin wallet with TailsOS and USB Flash

My Tails topic: https://bitcointalksearch.org/topic/m.63685294
2GB is enough.

Use Bluewallet watch-only to view balance on mobile.

Please, don't recommend paperwallets to newbies, I don't think that's a good idea. They don't offer any of the convenience of a normal wallet, even when the normal wallet is split into a hot watch-only and an offline cold part.

If any unauthorized subject finds your plain paperwallet, your coins are gone, unless you use special precautions. Truely safe creation of paperwallets isn't too easy, either. The wallet generator has to be used on a disposable offline system and you need to be sure that the wallet generator isn't rigged in any way. As most use Javascript code shit, goog luck with cryptographically safe and strong entropy as it heavily depends on the used Javascript engine.

I don't see any advantage of merely obsolete paperwallets over proper cold wallet storage.

I generally don't recommend doing this if you are a newbie and if you are not experienced in installing operating systems from scratch.
In case you have some basic knowledge that you can proceed with formatting hard drive and installing Linux OS like Debian, Fedora or Linux Mint.
After that it's easy to install Electrum wallet and remove all cards for internet connections from your laptop computer.
If you want easier and safer (for newbies) solution than I would recommend using open source hardware wallet instead.

Just generate and print a Paper Wallet offline. It's pretty much that simple.

You can use an open source paper wallet generator:

https://www.walletgenerator.com/

Nothing more secure than having an offline paper wallet. You can backup your keys after that however you wish.

It's not just anyone who has the knowledge of browsing can set up proper cold storage so asking for all the necessary steps is a valid question.

To answer his question yes 2GB is enough to run Linux but if it has more ram slots than adding another 2GB can be better. People already given the necessary details about how to setup the cold storage while the alternative can be HW.

Here one of it : BlockStream Jade which is definitely cheaper than most of the HW but it supports only BItcoin and I guess OP is looking for Bitcoin only wallet so if he can buy from the official site from his place then it can be a good choice.

This is not a bad solution if you take a few precautions, such as not having internet access on your PC.

It will be as safe as you make it in terms of computer security (OS, internet access, passwords, etc.).

That would be a good solution, since you mentioned it, I think you should first learn more about the new OS (settings, management).

Technically, this may have limitations, but even so, you can get a slightly more modern PC for very little money. If you have money to invest, then finding it to upgrade your PC should not be a problem.

It will, because there are Linux distributions that are not demanding on the PC power, created specifically for weak (old) devices.

Do you know how to use the Internet?

Hardware wallets are good to use but there are open source and close source hardware wallets and we should pick open source hardware wallets only.

Newbies are welcome to check my thread for Open source hardware wallet list and more.
Mega resources for newbies
LIST Open Source Hardware Wallets
[GUIDE] How to buy a Hardware Wallet the right way

Watch only idea requires your wallet address only, you can use trust wallet for this, you will see watch only option available.

The cold wallet idea sounds like something I am not liking, because I don't know the level of your IQ to tell you to go ahead with the idea, I know two friends who have messed up creating a cold storage so in the end they had to order for a hardware wallet.

To avoid unnecessary issues in the future it's best if you find some money and buy a hardware wallet, you will have confidence to sleep at night and stop worrying not to do something wrong.

I know that people creates and use cold storage they made themselves, but I can only trust myself, I won't recommend the same for beginners, because this idea isn't for everyone.

I don't see the necessity to use a Linux distro heavyweight like Ubuntu for cold storage. Better suggestions have been given here already. Remember that cold storage of a wallet containing private keys means it is offline and stays offline basically forever.

You don't need fancy stuff installed. You need the bare minimum to operate und use the wallet of your choice to sign PSBTs transfered from your watch-only wallet. Only the watch-only wallet on your mobile or other online device(s) communicates and touches the evil internet.

Proper, safe and redundant backup of your mnemonic recovery words and what other details about your wallet are helpful for any later recovery is mandatory. Personally, I would also setup a fully encrypted filesystem for the cold storage, so that a possible theft of the cold storage device doesn't compromise your private keys. Of course, don't ever loose the filesystem's encryption passphrase. Redundant and safe backup for it is key, too!

2GB of RAM is too small to use even though it can still be used. My advice, delete all files that were previously installed on the PC. Leave everything for the intended storage.
For a wallet that you can control on your phone, use Electrum. There is a link provided on how to create a cold storage wallet on Electrum and I think it will be useful for you.

I did this a long time ago with my old laptop before it broke down and while I'm contemplating buying a hardware wallet. Aside from the tips above OP, make sure that it is only you that have access to your laptop. Don't install any unnecessary software or program or pretty much stick to electrum as the only software(wallet) that's installed there. As you save the seeds/private keys, do not forget to write a back up for it that you'll keep on a place that's not reachable by anybody but only you.

You do not need the private keys to broadcast a transaction, you need them to sign it, what you need to broadcast transactions is internet connection which the watch-only wallet has.

They both complement each other;
• You create transactions with the watch only wallet,
• Take the raw tx file to the cold wallet and sign it,
• Return the signed tx to the watch-only wallet and broadcast it.

With this the private keys never go online.

If it is an online wallet, open source operating system would have been better but it is a an airgapped device which is not online. To be airgapped means the WiFi and Bluetooth would have been removed. No means to go online with the device. So to be open source like Linux or close source like Windows does not matter as long as the device is airgapped. But use open source wallet like Electrum or Sparrow for it.

A cold wallet and a watch only wallet is different.

With a watch only wallet, you only can watch its balance and transaction history but you don't have access to its private keys so you can not broadcast any transactions from that Watch-only wallet.

With a cold wallet, you have access to private keys and you can make transactions from it.

Creating a watch-only wallet with Electrum
Creating a cold storage wallet in Electrum

Debian or Xfce or Tails are the options that will work for you on that old computer and it is better to use Tails.

 - Delete everything on the memory, delete Windows and make sure to format everything.
 -  Remove all the connecting parts from the network cable to the Bluetooth.
 - burn Tails on your computer and use electrum to generate the addresses and MPK.
 - Save the wallet seed on a piece of paper or a metal piece.
 - import the MPK to the wallet on your phone.

You can find more information here or by searching on Google for tails electrum cold storage

https://electrum.readthedocs.io/en/latest/tails.html
https://www.youtube.com/watch?v=1e6IDTP3g5o

first what flavors are you going to use, if you want to use ubuntu 4GB or ram is needed as a minimum requirement although you can run with 2GB of ram that would be only for terminal , but have not try that.
Try this link if this flavors are okay with you:
https://itsfoss.com/super-lightweight-distros/
Can you provide the model of the motherboard so that we can check if you can upgrade or add another 2gb of ram, since my best recommendation would be ubuntu, if you have better in mind you can also share it here so that we can give you feedback's.

I've been planning on switching to a cold storage format to keep my coins but I want it to be in a way of watch only wallet from my mobile where I can initiate my transactions . I'm  currently thinking of using my old PC apart from the one I'm currently using, but I don't know how safe it is maybe I should just switch to Linux becaus it's windows , the Pc is around 2GB Ram I don't think I can upgrade that don't know if it will work for Linux or can I just use the Windows just that I've installed alot of games you know still so small to realise all those shit
In short, I need complete guide towards the set up