Pages:
Author

Topic: Tutorial: Compiling Armory and getting it onto an offline computer (Read 2294 times)

legendary
Activity: 1358
Merit: 1001
https://gliph.me/hUF
[...] Do you think it would work on Raspbian + Raspberry Pi B?

I have not used it on a Pi myself, but according to this tutorial you can build yourself the latest version of minimodem and the author claims it all works as expected:

http://www.helptouser.com/raspberrypi/14954-installing-software-with-dependencies.html
legendary
Activity: 1512
Merit: 1012
[...] I've tried the audio interface previously with another Bitcoin client, but I failed to set it up and eventually gave up on the idea.

Sorry, for the bump.

Which issues did you face in your setup? I still use successfully: https://bitcointalksearch.org/topic/tx-signing-via-minimodem-735111

I managed to get the software installed but after that I simply could not execute it. I was using amodem with its Electrum plugin. Couldn't get Electrum to detect it either. Tried it in Ubuntu and Raspbian...

Never saw your tutorial around here, thanks for linking it! I'll see if someday I give it a try... Do you think it would work on Raspbian + Raspberry Pi B?
legendary
Activity: 1358
Merit: 1001
https://gliph.me/hUF
[...] I've tried the audio interface previously with another Bitcoin client, but I failed to set it up and eventually gave up on the idea.

Sorry, for the bump.

Which issues did you face in your setup? I still use successfully: https://bitcointalksearch.org/topic/tx-signing-via-minimodem-735111


[...] All types of visitors to your household (friends and ostensible friends alike) could interpret the sophisticated physical setup to mean "Is it possible he/she might have large stacks of BTC?". Keeping the hardware somewhere secure (and hence out of sight) is probably not so OTT a measure also, but it's not going to be possible to keep it thoroughly secret. [...]

How do you handle your gold bars?
pf
full member
Activity: 176
Merit: 105
Interesting.

A few follow-up questions:

  • Once I have connected a read/write device to my USB or SD (assuming the SD goes through USB), must I from now on assume that my offline laptop is permanently compromised, or will I be fine just reinstalling Ubuntu on it through a readonly DVD, recreating my Armory wallet with a new passphrase, and making sure that no USB/SD ever connects to the computer again?
  • Since my offline laptop doesn't have a built-in DVD drive: am I safe connecting an external DVD drive through USB if I make sure to only put into it readonly DVDs? (To install Ubuntu.)

Once I'm all set there, I wonder what I'm going to use to get the unsigned transactions onto the laptop, and the signed transactions back to the online computer. People have been talking about images and audio and whatnot. This is getting a bit heavy (although I'm all for trying it!), so one final question:

What is the probability that a brand-new Kingston or Cruzer Blade USB key will mess with my bitcoins?!!!! Smiley Sometimes I wonder whether I'm going crazy.
legendary
Activity: 1512
Merit: 1012
I use a webcam in my Raspberry setup to send transactions to the online computer. For your offline linux machine, I'd recommend qtQR, easy to use and powerful. I've tried the audio interface previously with another Bitcoin client, but I failed to set it up and eventually gave up on the idea.

I like the idea of that sort of thing, but I wonder how it could be perceived by others.

All types of visitors to your household (friends and ostensible friends alike) could interpret the sophisticated physical setup to mean "Is it possible he/she might have large stacks of BTC?". Keeping the hardware somewhere secure (and hence out of sight) is probably not so OTT a measure also, but it's not going to be possible to keep it thoroughly secret.

And I suppose the absolute worst case scenario is that you don't actually have that many bitcoins anyway, say holding onto 100,000 uBTC on the off chance that worldwide adoption takes off. Getting targeted then could be a little hairy, depending on how "worst case" your luck is.

Not wishing this on anyone! But I thought I'd throw it out there, perhaps there's a better way to keep the hardware unseen/unrecognised. Could your setup convincingly be construed as a pair of video calling devices in the same house? Without internet connections?

It can be perceived by others if you're using the system in front of others, which I don't. And the awareness of Bitcoin is really low here, if someone, somehow intercepted all the physical parts needed to run my system they probably wouldn't know how to use it, and if they did, they would need my password to do so (system + Armory password)

And things are indeed hidden out of sight for visitors and the people I live with, but there are ways to hide things "in plain sight" by making them look irrelevant/not the sort of thing that can hold cash Cheesy As I said, the system is a Raspberry. As an example, I have the machine in one place and the SD card in another.

One also has to consider methods to make sure others can retrieve the funds in case something happens to you, but that's a story for another topic.

I don't think it's relevant to have a video calling device system without internet connection... I mean, I only use the storage for a few minutes, when I really need to retrieve funds. I usually have enough online for urgent needs. It's not really cumbersome to setup the system when you need to use it and keep it hidden meanwhile, all in name of privacy. The system has far more funds coming in than out.

For the amount of coins usually on my storage, I think the physical and virtual security measures I have in practice are good enough, and as I've said, they're a good compromise between security and safety. One thing is for sure, it's not the best system. But it's one I'm happy with.


Here's a suggestion to the OP: drop the SD's and the USB's on your offline system and use a webcam (easy way) or the audio interface (hard way). I use a webcam in my Raspberry setup to send transactions to the online computer. For your offline linux machine, I'd recommend qtQR, easy to use and powerful. I've tried the audio interface previously with another Bitcoin client, but I failed to set it up and eventually gave up on the idea.
Well, somehow I have to boot from Ubuntu and install it on my low-end laptop. So far I've been using USB. It doesn't have a CD drive. I guess I could use my external USB CD drive, but then we're back on USB again.

And no, SD connecting through the USB only gives and illusion of safety.
But why? Doesn't the device itself have to support the hackery in the first place? An SD card is an SD card, not a USB key. Different device, even if it's connecting to a USB on the computer internally. The malware we've been talking about regarding USB keys, can malware of the same kind also be placed on an SD card?

Any USB device comes with a firmware and class negotiation, even a plain hub. These manufacturers don't come up with their own MCUs, they buy generic MCUs from large manufacturers like TI, Microchip and FTDI. They upload a USB firmware in the MCU's NVRAM and this the vulnerability root kits target to survive a power cycle.

There you go, pf Smiley The SD card cannot contain the malware. But you've got to make sure that, as an example, your laptop's SD card reader isn't just a simple USB reader to be safe with SD's
legendary
Activity: 3738
Merit: 1360
Armory Developer
Any USB device comes with a firmware and class negotiation, even a plain hub. These manufacturers don't come up with their own MCUs, they buy generic MCUs from large manufacturers like TI, Microchip and FTDI. They upload a USB firmware in the MCU's NVRAM and this the vulnerability root kits target to survive a power cycle.
pf
full member
Activity: 176
Merit: 105
Here's a suggestion to the OP: drop the SD's and the USB's on your offline system and use a webcam (easy way) or the audio interface (hard way). I use a webcam in my Raspberry setup to send transactions to the online computer. For your offline linux machine, I'd recommend qtQR, easy to use and powerful. I've tried the audio interface previously with another Bitcoin client, but I failed to set it up and eventually gave up on the idea.
Well, somehow I have to boot from Ubuntu and install it on my low-end laptop. So far I've been using USB. It doesn't have a CD drive. I guess I could use my external USB CD drive, but then we're back on USB again.

And no, SD connecting through the USB only gives and illusion of safety.
But why? Doesn't the device itself have to support the hackery in the first place? An SD card is an SD card, not a USB key. Different device, even if it's connecting to a USB on the computer internally. The malware we've been talking about regarding USB keys, can malware of the same kind also be placed on an SD card?
legendary
Activity: 3430
Merit: 3080
I use a webcam in my Raspberry setup to send transactions to the online computer. For your offline linux machine, I'd recommend qtQR, easy to use and powerful. I've tried the audio interface previously with another Bitcoin client, but I failed to set it up and eventually gave up on the idea.

I like the idea of that sort of thing, but I wonder how it could be perceived by others.

All types of visitors to your household (friends and ostensible friends alike) could interpret the sophisticated physical setup to mean "Is it possible he/she might have large stacks of BTC?". Keeping the hardware somewhere secure (and hence out of sight) is probably not so OTT a measure also, but it's not going to be possible to keep it thoroughly secret.

And I suppose the absolute worst case scenario is that you don't actually have that many bitcoins anyway, say holding onto 100,000 uBTC on the off chance that worldwide adoption takes off. Getting targeted then could be a little hairy, depending on how "worst case" your luck is.

Not wishing this on anyone! But I thought I'd throw it out there, perhaps there's a better way to keep the hardware unseen/unrecognised. Could your setup convincingly be construed as a pair of video calling devices in the same house? Without internet connections?
legendary
Activity: 1512
Merit: 1012
Well, I guess we've got a pretty interesting topic going on here. To start off my post I'd like to say I don't consider myself an expert user. I'd also like to say that I'm using Armory as my offline/cold storage, after a period of testing with very small quantities of Bitcoin and getting used to different wallets in offline mode, I found Armory very useful and it's the one I feel better with.

That being said, back on topic. This has actually made me see the USB issue in a different way. For example, I wasn't aware of the illusion created by USB SD card readers Wink As I wasn't aware of the fact that some laptop readers are connected via USB too.

I know there is a high improbability of me or anyone else (especially people with low amounts of Bitcoin) to be targeted by such hardware attacks. But I do not use USB in my offline machine (Raspberry Pi) just in case. I now also realize my system may be compromised, as I flashed Raspbian on my SD using my laptop's SD reader.

Here's a suggestion to the OP: drop the SD's and the USB's on your offline system and use a webcam (easy way) or the audio interface (hard way). I use a webcam in my Raspberry setup to send transactions to the online computer. For your offline linux machine, I'd recommend qtQR, easy to use and powerful. I've tried the audio interface previously with another Bitcoin client, but I failed to set it up and eventually gave up on the idea.

My system may have flaws, but I think the ease of use of what I have is pretty well balanced with the security of the system (which I think it is secure enough)

The issue with presenting SD to our users as a better alternative to USB is how the SD card itself is plugged into your PC. Most SD readers for PC are SD to USB adapters, and even some laptop built-in SD readers are hardware USB wrappers. In this situation, you are not getting extra security, rather you are getting the illusion of better security, which is much worse. Our expert users are aware of the intricacies of their hardware stack and what to expect from them.

I have another question about this actually. The malware has to be installed on the device in first place. So the question is, do SD cards themselves actually have the same capability as USB devices for malware installations in the first place? (If not, even if on the computer the SD card connects through the USB interface, wouldn't I still be safer with an SD card?)

As far as I understood SD's are more secure, as they do not rely on the HID class (correct me if I'm wrong), which is a vector used for attacks. And no, SD connecting through the USB only gives and illusion of safety.
pf
full member
Activity: 176
Merit: 105
The issue with presenting SD to our users as a better alternative to USB is how the SD card itself is plugged into your PC. Most SD readers for PC are SD to USB adapters, and even some laptop built-in SD readers are hardware USB wrappers. In this situation, you are not getting extra security, rather you are getting the illusion of better security, which is much worse. Our expert users are aware of the intricacies of their hardware stack and what to expect from them.

I have another question about this actually. The malware has to be installed on the device in first place. So the question is, do SD cards themselves actually have the same capability as USB devices for malware installations in the first place? (If not, even if on the computer the SD card connects through the USB interface, wouldn't I still be safer with an SD card?)
pf
full member
Activity: 176
Merit: 105
Ok, so it turns out my low-end offline laptop (Linux) has an SD card slot. My online computer (Mac) has an SDXC card slot. This means I have to buy an ordinary SD flash card (max 2GB) don't I? That would work since the Ubuntu disk image only requires 2GB.

Now the question is, if I do everything over again: format hard drive & install Ubuntu on the offline machine from the SD card, and create a new armory wallet from scratch using a new password, does this mean that my offline computer should now be safe? Or is it possible that some USB malware infected my hardware beyond recovery and I have to buy a new laptop?
legendary
Activity: 3430
Merit: 3080
Or you could try Carlton's crazy Inception style VMs inside VMs. Go deeper, friend.

No admin rights exist on the OS I use (root account does not prompt for a password, it's considered vestigial). SE Linux is set to "disabled". I am confident.
legendary
Activity: 3738
Merit: 1360
Armory Developer
I'm also wondering, is Linux really vulnerable to these kind of stuff in the first place? I don't know. Do you have thoughts on this?

You can negotiate a HID class with any piece of USB hardware. I know that for a fact because I used it to cut corners when I was integrating USB in a piece of hardware at a previous job. HID covers a lot of different utility, among which are mice, keyboards, webcams. This is not an OS specific thing, that's just the USB spec. It's not particularly hard to register a USB device as a keyboard and start running commands in the terminal in Linux.

Obviously Windows is easier to exploit. If I was to do it, I would negotiate both mass storage and keyboard, spawn the "give me admin rights" dialog for something trivial reason, but sounding serious enough that the user would ok it, then spawn a command line prompt in desktop session 0, and you sir are kebab. If I don't get admin rights, I'd register a local user service, use it to register a keyboard hook and go on from there.

It is a lot harder to get admin rights on Linux, but there are quite a few commands you can run without sudoing. After all, Armory is setup by default in a user folder, so you don't need sudo to read/write anything in there. You could very well spawn a terminal in another desktop, start a binary from there and get a bit creative.

I believe SE Linux would be a lot more resilient to this kind of attacks. We use that with our offline signing live CD. But that's really out of the scope of my expertize. I have never worked with SE Linux and I'm not a Linux guru either.

The difficulty in that attack is not to negotiate a HID class on Linux, it's to come up with a root kit that can infect the specific hardware on your USB key. If you were a DIY enthusiast, I'd suggest you buy a hobbyist MCU board like an arduino, flash their software USB stack in there, set it as a storage class, add in a random PID & VID, and physically remove the flash pins, or the commute to write pin, depending on the board's upload port (JTAG, ICSP, sometimes proprietary protocol through an auxiliary UART). That would be really resilient to remote root kit attempts. Attackers need to know the specifics of the firmware to attack it. And without the flashing pins the attacker would have to resort to memory overflows to try to execute arbitrary code.

Or you could try Carlton's crazy Inception style VMs inside VMs. Go deeper, friend.
legendary
Activity: 3430
Merit: 3080
I'm also wondering, is Linux (on my offline computer) really vulnerable to these kinds of USB attacks in the first place? I don't know. Do you have thoughts on this?

There's an entire thread in this sub on that specific subject, and little has changed since then.
legendary
Activity: 3738
Merit: 1360
Armory Developer
Before you ask why we don't just integrate with smart cards, let me answer: we are in that kind of business, but that is outside the scope of our free product.

How do you intend to distribute a commercialised product with smart card support, and remain open source? Your own smartcards? Some kind of cryptographic token that's linked to an off-the-shelf smart card?

That's a business offering, we don't really expect to market this to individual users. Businesses expect a full hardware stack specification, and would rather follow clear instructions than setup Armory on their own and deal with the unknown that is our free support channel.

In this case, we specify what hardware to buy, how to set it up, provide them with the source and generate revenue through licensing and/or support contracts.
pf
full member
Activity: 176
Merit: 105
We have a lot of internal talks about this, and have even started a best practices security group with other members of the industry, on which the first topic was SD vs USB. That security group didn't go much further but at least we tried.

The issue with presenting SD to our users as a better alternative to USB is how the SD card itself is plugged into your PC. Most SD readers for PC are SD to USB adapters, and even some laptop built-in SD readers are hardware USB wrappers. In this situation, you are not getting extra security, rather you are getting the illusion of better security, which is much worse. Our expert users are aware of the intricacies of their hardware stack and what to expect from them.

Are you? Have you done the research? If you were to read our FAQ which would say something like "SD cards are more secure than USB", would you think twice about using SD cards? Would you research the topic before taking this sentence as truth? Frankly, I expect you in particular would at least poke some questions about it. However, that won't be true for others.

At the protocol layer, SD certainly has a lot less vulnerabilities than USB, but do you have enough hardware and software expertize to benefit from that? Would you not be more exposed to malpractice if you were under the impression of higher security while in reality you are not?

Our website covers how to create and maintain your wallets securely. We believe USB is sufficient for that purpose. Think of the effort needed for an attacker to build a USB root kit that targets Armory cold storage and execute this attack on you. I'm not saying it can't be done, but compare that to the low hanging fruit that are web wallets.

If you do not want to trust the USB protocol, I would suggest you look at smart cards or analog channels rather than SD cards. They are a lot more complicated to setup and will require code on your behalf but that security model is clearly above that of USB or SD. However I can only point you in that directions. After all, Armory is an expert wallet, we expect our users to know their way around the security of their hardware stack.

Before you ask why we don't just integrate with smart cards, let me answer: we are in that kind of business, but that is outside the scope of our free product.



Thanks for this. I'll probably have to just trust my USB sticks. Here is the thing: I created the Ubuntu bootable USB key from Ubuntu's disk image on a brand new USB stick. The other USB stick that I use to store unsigned/signed/sent transaction files is pretty old - from mid-2009 or so. That's well before Bitcoin was known at all to most. So for someone to attack this setup of mine, there has to be some malware on one of these USB sticks (the new one or the mid-2009 one) that captures my keystrokes to get my wallet password or reads the memory for private keys on my offline computer, stores it on the USB key, and emits it from the network when connected to my online computer. I wonder how much I should really be worrying about this attack vector. I'm also wondering, is Linux (on my offline computer) really vulnerable to these kinds of USB attacks in the first place? I don't know. Do you have thoughts on this?
legendary
Activity: 3430
Merit: 3080
Before you ask why we don't just integrate with smart cards, let me answer: we are in that kind of business, but that is outside the scope of our free product.

How do you intend to distribute a commercialised product with smart card support, and remain open source? Your own smartcards? Some kind of cryptographic token that's linked to an off-the-shelf smart card?
legendary
Activity: 3738
Merit: 1360
Armory Developer
We have a lot of internal talks about this, and have even started a best practices security group with other members of the industry, on which the first topic was SD vs USB. That security group didn't go much further but at least we tried.

The issue with presenting SD to our users as a better alternative to USB is how the SD card itself is plugged into your PC. Most SD readers for PC are SD to USB adapters, and even some laptop built-in SD readers are hardware USB wrappers. In this situation, you are not getting extra security, rather you are getting the illusion of better security, which is much worse. Our expert users are aware of the intricacies of their hardware stack and what to expect from them.

Are you? Have you done the research? If you were to read our FAQ which would say something like "SD cards are more secure than USB", would you think twice about using SD cards? Would you research the topic before taking this sentence as truth? Frankly, I expect you in particular would at least poke some questions about it. However, that won't be true for others.

At the protocol layer, SD certainly has a lot less vulnerabilities than USB, but do you have enough hardware and software expertize to benefit from that? Would you not be more exposed to malpractice if you were under the impression of higher security while in reality you are not?

Our website covers how to create and maintain your wallets securely. We believe USB is sufficient for that purpose. Think of the effort needed for an attacker to build a USB root kit that targets Armory cold storage and execute this attack on you. I'm not saying it can't be done, but compare that to the low hanging fruit that are web wallets.

If you do not want to trust the USB protocol, I would suggest you look at smart cards or analog channels rather than SD cards. They are a lot more complicated to setup and will require code on your behalf but that security model is clearly above that of USB or SD. However I can only point you in that directions. After all, Armory is an expert wallet, we expect our users to know their way around the security of their hardware stack.

Before you ask why we don't just integrate with smart cards, let me answer: we are in that kind of business, but that is outside the scope of our free product.

legendary
Activity: 3430
Merit: 3080
Have the Armory guys even thought about this risk at all?

They have. In the top right corner of all bitcointalk.org pages, there is a textbox with magnifying glass symbol next to it and a button with the word "Search" to label it. When you type text into this box and click the button, a database query is launched that searches the sub forum for posts that contain the text you entered. Need I continue?


There's a point where Armory's responsibilities to their users end, and where your own responsibilities begin. Secure use of USB hardware is your responsibility, not theirs. They're developing software that can neither improve or deteriorate the security of USB devices, the reason being that none of the current code does anything that involves USB directly.

This is open source culture, not corporation/consumer culture. "Scratch your own itch" is the guiding principle. If you believe you could contribute a better quality of documentation to the project in respect of this issue, you are encouraged to rewrite it yourself and submit it for approval. It would benefit all if you were to do so, providing you do it well, of course.
pf
full member
Activity: 176
Merit: 105
What bothers me most is that the Armory guys themselves mention USB sticks all the time without any mention at all of this attack vector. Have the Armory guys even thought about this risk at all? I hope so. Please comment.

https://bitcoinarmory.com/tutorials/armory-advanced-features/offline-wallets/

Page contents at the time of this writing:

Quote
Offline Wallets

Note: There is no special version of Armory needed for the offline computer, and it does not need to be the same operating system as the online computer. As long as you can install Armory and use USB drives, it will work.

Note: You must be in “Advanced” or “Expert” usermode to use offline wallets. “Advanced” is the default mode when you first install Armory, but some users change to “Standard” to simplify the interface. You can switch modes from the main window menu under “User”.

First and foremost, you will need a computer that you don’t mind keeping disconnected from the internet. Such a computer does not have any particular resource requirements: pretty much any computer that boots into Windows or Linux, can run Armory in offline-mode.

Once you have Armory installed on the offline computer, you create a new wallet. Don’t forget to print or copy by hand a paper backup! Then you “create a watching-only wallet” and load it on the online computer (this part only has to be done once). The nature of Armory wallets is that the online computer will always generate the exact same addresses as the offline computer, but the online computer cannot spend any of the funds!

Load Armory on the offline computer
Create a new wallet (with or without encryption)
Important: Make a paper backup! Connect a printer via USB or copy the paper backup information by hand. Make one or two copies, and store in a secure place. This is a permanent backup of every address your wallet will ever create!
Double click on the wallet and click on Create Watching-Only Copy on the right menu
Save the file to the USB drive, eject, insert into online computer
Load Armory on online computer, and select Import Wallet in the upper-right corner of the main window. Import the wallet file on the USB drive.
In the wallet-properties dialog, click on Belongs To, and click the checkbox that says This wallet is mine. This makes sure that any funds in this wallet are part of your global balance.
Now that the wallets are setup, you can use the watching-only wallet exactly the same way as a regular wallet, except Bitcoins cannot be sent from it. Use the Receive Bitcoins button to generate addresses for receiving payments, and incoming transactions will show up in the ledger with a slightly different color than your other wallets.

To send Bitcoins from your offline wallet, do the following:

On the online computer, click the Offline Transactions button on the right, below the logo. Select Create New Offline Transaction. Alternatively, you can just select Send Bitcoins and select the watching-only/offline wallet.
Create the transaction as you normally would but the “Send” button will be grayed out since the watching-only wallet cannot sign transactions..
Click the button Create Unsigned Transaction on the left side.
A window will open with the unsigned version of the transaction. Press the Save to file… button to save a *.unsigned.tx to the USB key
Insert USB key in offline computer, and click Offline Transactions, then select Sign or Broadcast Tranasaction.
Load the file from the USB key, then press the Sign button. A confirmation window will appear.
Verify the confirmation details before you sign it! The benefits of an offline wallet are lost if you don’t make sure the details are correct!
Click Save to file…. It will overwrite the original *.unsigned.tx file with a *.signed.tx file.
Eject the USB key and plug it into the online computer. If the original window is still open, you can click on Next Step to get to the broadcast window. If you closed Armory since then, you can use the same Offline Transactions button on the main window, and select Sign or Broadcast Transaction. Once the file is loaded, some green text should appear telling you that the signature is valid and the Ready to Broadcast! button should become available.
Press the button and you’re done!
Guidance is given at each step within the Armory software, so you may be fine without referring back to this page. And once you do this a few times, it will become a breeze!

Note: At no point in this process is any private data exposed through the transaction data. It is perfectly safe to transfer the signed or unsigned transaction via email. The biggest threat to an offline wallet is a USB-key virus that executes when plugged in. However, such viruses would have to be highly targeted, and can be mostly mitigated by disabling USB-auto-run on the offline computer.

I'm Scared! Help!

It’s natural to be uncomfortable using new software to store your precious savings, especially with such advanced features. But you know that if you could trust it, it’s a feature you would love! So, how do you calm your nerves about using such advanced features?

Try it out with small amounts of Bitcoins. Any time you think to yourself, “Do I really trust this program?” just pull out your USB key and execute a small offline transaction to yourself (or to make a donation to Armory developers!). Whether it takes you a day or a year, you will eventually come to realize that offline transactions really do work. Every time!

Make a new wallet as described above, but you must make a backup. A paper backup is preferred, because you can visually verify that it is intact, and it’s easier to store (but it will require plugging your computer into your printer via USB cable). A digital backup is fine if you make a couple copies, just in case one becomes corrupted. Generate some addresses by clicking on Receive Bitcoins a few times. Write down the first few letters of each address generated.
DELETE YOUR WALLET. Why did we just delete it? Because you’re about to prove to yourself that your backup works! If you can restore the backup once, you can always restore the backup at any time in future. Just don’t lose it! On the main Armory window, click on Import Wallet in the upper-right corner, and select the type of backup you are restoring. If it’s a paper backup, you’ll have to type it in manually — the time it takes to enter the wallet information is completely worth the peace of mind you get out of it. Generate some addresses with the new wallet. Check that they are the same as the addresses you wrote down earlier.
Using the wallet properties menu, click on Create Watching-Only Copy and save the file to a USB key. Import the watching-only wallet on your online computer. Generate a few addresses and compare to the ones you wrote down earlier. I bet you are starting to feel better… Transfer 0.5 BTC to one of these addresses. Wait for a few confirmations.
Whenever you are near your computer, you may ask yourself “Am I ready to trust this thing?” If the answer is “No,” then get out your USB key and execute an offline transaction. Follow the directions above to create an unsigned transaction for 0.01 BTC to one of your online wallets, transfer it to the offline computer, sign it, then bring it back and broadcast it. You are now one step closer to realizing, it really does work! If the answer is “Yes, I do trust the offline wallets,” well then you’re done! Congratulations on having mastered the most secure Bitcoin wallet functionality in existence!
You'll not only calm your nerves, but you’ll learn how to use the feature efficiently. Once you get the hang of moving transactions around via USB drive, you should be able to execute an offline transaction in less than one minute!

If you do get this far, please consider sending a donation to the Armory developers (the donate button works for offline transactions, too!). This feature was the prime motivation for creating Armory, and took many months of hard work to make it available to you, for free. There are lots of new, innovative features planned, but it won’t be possible without you!

Intro to Offline Wallets
Watching Only Wallet
Send from Online to Offline Wallet
Pages:
Jump to: