Topic: Tangem Card Secure Crypto Cold wallet + 10% OFF All Products (Read 379 times)

Regarding the latest on Tangem I would pay attention to the recent CEO's AMA  which reveals the  nearest comings. Most intriguing for me was their promise to implement POS terminal payment via their wallets.    It turned out that relevant Tangem cards/wallets will be issued in partnership with Visa, the wallet  interaction  with Visa will be carried out through the smart contract. In this case, the user’s funds are completely controlled by his wallet.

Tangem Wallet App Update v5.11

Improvements

Support for TON network tokens (app+swap)
Support for Radiant blockchain
Fixed issues concerning Kusama

https://tangem.com/en/blog/post/app-update/

Right, no extra security and it requires device resetting. Probably they added it because some users love to have such feature. I kinda like it .

My stash was not affected by reset  as it is on Passport 2. Tangem is used by me solely for on the go payments, largely in USDT.

But that newly added passphrase isn't going to add any extra security to the coins on your initial non-passphrase enabled wallet/addresses. Are you going to move your coins to new addresses on your Tangem that take advantage of the passphrase feature or will you leave them where they are and add extra security to addresses funded in the future?

Recently, the upgraded Tangem app  added the  passphrase support for their latest (version 2) cards that have the option to generate (or import) BIP39 SEED phrases.  Thus, i have reset my cards to factory settings  ( the procedure on how to do this can be found here) and added passphrase to my SEED. Without resetting it is not possible to do this.

Even more on that.

If you forgot your PIN you are in position to restore (actually to enter new PIN)  it on-the-fly by taping the other card which set as backup/restoration card at the  initialization of relevant Target set.

Having two/three/a-dime-a-thousand sets with the same SEED one may forget about  SEED/PIN care.

Sure, one should do all their best  to prevent  two cards from the same set   falling into the wrong hands.

One of the largest advantages of the Tangem is the tap to sign with your mobile device along with needed a pin.
For a bit more security on hot funds it works well.

And you can have multiple cards so carry one with you, leave one at the desk at work and another someplace else. This way you know you are probably able to spend funds wherever you are.

It's getting to be, at least for me, use the right tool for the job.

No I am not going use a Tangem for my long term cold storage.
And it's not going to be my mid term 'warm' storage.
But, for a hot multi coin wallet on a phone it works *really* well.

And as I have determined, I am really hard on my hardware wallets. You really can't screw these up.

-Dave

Thanks,   you have blessed my trust  

I trust VISA and use their cards for many many years, VISA trusts Tangem - the only  hardware wallet certified by them at this point - thus it supposes my Tangem trust logicality.

BTW, open source products are not always immaculate. A striking case in the point is Linux, open source OS in which backdoors are discovered  from time to  time. The latest one "targets encrypted SSH connections".

And I'm sure you know about  QR backdoor  in Electrum, discovered a year ago and existed for many years in this "open source"  wallet.


Silly because you    have wrenched  it  out of its context.

Then, I will spell it out- contrary to  Satochip,  Tangem's chip can not be accessed via card reader or any similar device.

Besides, Tangem wallet has other advantages when comparing with Satochip. Their  unique backup technique is a crucial point.

They are doing everything better.
First they are open source, that is huge advantage, and they have several option for hardware wallets, and as cold storage for seed words.
You can literally buy blank java cards and load Satochip code, it will work perfectly.

That is silly statement to say about any card, they are all very thin, there is nothing ''deep'' in them.

Ok, you go ahead and trust those companies  

According to official twit this Quarter will bring to wallet the new feature i.e. Tangem Pay.


For those who don't now what does it mean I refer to article which states that with this service "the card will allow Tangem users to make payments using their crypto assets directly at 95 million Visa terminals worldwide. "

Great, isn't it. And this is one of the reason why I have acquired Tangem cards.

But still it is not  clear for me whether my Tangem 2 cards will be eligible to be   used by the  upcoming Tangem Pay or they will release the new cards (something like Tangem 3) that fit that service. All I really know for sure is that should I need Tangem 3 I buy it.

Once again it comes back to the convenience vs. security vs. ease of use.

I am not a fan of Tangem but I do recommend them to people who want a little more security for their hot wallet while understanding that the card is not open source.

1) It's cheap.
2) It is credit card sized and shaped so it fits neatly in your wallet.
3) No battery / usb / anything just tap to phone.

So if you want a wallet on your phone with a bit more security it's not a bad option.

That is it's main selling point IMO.

Satodime is the same but it is a bit more expensive.

BUT at least for me Tangem is available from Amazon.
So it's shipped from the US and if there is an issue you can just send it back.

-Dave

Sorry, but what Satochip is doing better? It is not problem for the back up technique used by Tangem cards   to  provide  me the access to  my stash in the case when the relevant SEED/PIN is completely forgotten/lost  but what about Satochip  cards?

I don't like the fact that Satochip can be accessed via card reader. The Tangem's chip of 1x1 mm size is deep inside card.  


Tangem app is open source. All codes are in their repositories.

The closed source is their firmware but it is flashed only once (during cards production) and checked twice  by  Kudelski Security  and Riscure companies. Any other upgrade/update is not possible.

The competence of those companies in the field of security is  generally recognized. I don't think anyone here has the qualification which would allow him to dispute with the security conclusions produced by those two companies.

This is even more concerning if Tangem app is also closed source, than you really can't confirm anything.
Better alternative is to use Satochip cards that are open source, same as their app for confirming addresses and transactions.
Another cool thing about Satochip is that you can make them as DIY project, and there are java cards with screen included, they are not cheap, but they do exist.

IMO Satochip HW is doing this better with their cards, and you can combine them with other hardware wallets.

True.

---

While having Passport 2, I (with that) use Tangem  for on-the-go transactions during my business trips relying on its It's unique  recovery mechanism which allows me to not worry about my SEED, PIN codes etc.

I have three cards bundled in one set (A1, A2,A3). Any  card from the two in this  set  serves as a backup for the remaining third. Cards from the same set can be assigned the different access codes. For simplicity, the same PIN is set up for all cards. Suppose I completely forgot this PIN. I take any card (for example A1) and when asked for a PIN,  answer that I don’t remember. I  asked to enter a new PIN and, after entering it, bring any of the two remaining cards to the mobile. Let's use A2 for example. After this, they ask me to bring A1 again and the new PIN (entered before) is recorded on it. I repeat the same procedure with card A2 (restored using A3 or A1) and card A3 (restored using A2 or A1).

As simple as that.

---

---

1. This is applicable to any hardware wallet. You need to trust even the dice rolling or coin flipping if using them to generate SEED.

2.  See the nice Yamane_Keto answer to that.

3. Almost impossible (for malware, if any)  to substitute those data unless you have rooted jailbroken mobile.

Why to bring  the other persons'  biased thoughts here? Do you have you own ones?

1. By using TANGEM 2.0 you can insert BIP39 compatible seed.
2. This applies to many HW, you need to have a separate phone and their prices are cheap.
3. You are looking for an airgapped wallet but it is still considered cold storage as long as transactions are signed offline.

TANGEM 2.0 is far from perfect or acceptable, but it's not that bad.

Nice additions from igor72:
"This wallet has the following disadvantages:
1. If you use entropy generated by a wallet, you have to trust the manufacturer. For example, this does not suit me.
2. When using your seed, you have to enter it into your online phone, which means potentially compromising the seed. The solution is to use an offline phone to enter the seed with a full reset after the procedure. Inconvenient, but basically acceptable.
3. Since this card does not have a display, it is not possible to reliably verify the authenticity of addresses and amounts; you have to trust the software on your online smartphone. Therefore, I cannot call such a wallet a cold wallet - it may be somewhat more reliable than a simple hot mobile wallet, but I would not be able to safely store a significant amount on it. And for small amounts, a hot wallet without any cards would suit me."
https://bitcointalksearch.org/topic/m.63883677

Tangem Q2 2024 Roadmap
We've got some exciting updates for you this quarter! Our team has been working hard to bring you Tangem Ring, Tangem Pay, new cards, new networks, and superb new additions to our app.
https://twitter.com/Tangem/status/1778082129378701674

Buy two Tangem Wallets now and enjoy FREE shipping. Offer lasts till April 30. Don't miss out!
https://twitter.com/Tangem/status/1778385906266730717

Regarding SEED phrase. Tangem 2.0 allows either generate or import BIP39 compatible SEED phrase.

I have imported into my Tangem 2.0 the BIP85 child SEED phrase generated  by my Passport 2 simply  because the source of entropy inspires my confidence. Besides it makes backup to be  more simple for me as I need to care only on master seed of my Passport2.

Someone may use coin flipping or dice rolling to produce entropy for their SEED,  

Thus, I believe that  "importing seed" opt implemented by Tangem makes a big sense.

They implemented this as the opt for those who still want to use SEED instead of private key,


Which is not bad, because using for instance one of  child-seeds generated from master SEED on BIP85 compatible Passport 2 (which has a robust source of entropy) one can  import it into new Tangem and use the latter for routine every day  payment on-the-go, while keeping the main stash untouched on Passport 2.

Pros of Tangem (at least as I can see it) is that its memory is flashed with firmware only once i.e.  during production.
Cons -  right now,  it is not capable to generate multiple addresses and it has no display to reveal the data to be signed by user.


However, as  I got it,  the address limitation is due to their mobile app rather than hardware itself.

The main purpose of hardware wallets is to ensure that the private key is generated randomly enough and that it will not leave the device or connect to the Internet. Therefore, inserting a wallet seed from the hardware wallet into any other wallet reduces the security of your coins. So how is TANGEM 2.0 based on that?

AFAIK, Tangem Wallet generates a private key which is encrypted up to three Tangem cards, and they have the seed phrase is optional so why did the change happen in V2.0.