Blog

Archive for the ‘protecting your wallet’ tag

Jul 10, 2019

Lack of standards leads to new Bitcoin wallet advice

Posted by in categories: bitcoin, cryptocurrencies, economics

This update is an adaptation of my recent answer to a Quora reader who was in a panic. She asked:

What can I do after a hard drive crash?
How can I recover my cryptocurrency?

In the past, I would address the immediate problem of course. (My answer is below). But to prepare for the next unfortunate event, I recommended a wallet type based on a user’s unique experience, expertise and comfort zone. I guided the reader to weigh trade-offs of important criteria: Security, portability, convenience, and quick access to assets).

I had believed that some types of wallets were better for some individuals, but that they required a background in cryptography—or at least a discipline for meticulous practices. As CEO of the Cryptocurrency Standards Association, I had also believed that simple, unified, and popular standards would emerge very soon. I figured that this would enable users to practice safe-wallet maintenance in their own homes.

Continue reading “Lack of standards leads to new Bitcoin wallet advice” »

Jun 2, 2017

Wallet Security: Cloud/Exchange Services

Posted by in categories: bitcoin, cryptocurrencies, finance, hacking

3½ years ago, I wrote a Bitcoin wallet safety primer for Naked Security, a newsletter by Sophos, the European antivirus lab. Articles are limited to just 500 hundred words, and so my primer barely conveyed a mindset—It outlined broad steps for protecting a Bitcoin wallet.

In retrospect, that article may have been a disservice to digital currency novices. For example, did you know that a mobile text message is not a good form of two-factor authentication? Relying on SMS can get your life savings wiped out. Who knew?!

With a tip of the hat to Cody Brown, here is an online wallet security narrative that beats my article by a mile. Actually, it is more of a warning than a tutorial. But, read it closely. Learn from Cody’s misfortune. Practice safe storage. If you glean anything from the article, at least do this:

  • Install Google Authenticator. Require it for any online account with stored value. If someone hijacks your phone account, they cannot authenticate an exchange or wallet transaction—even with Authenticator.
  • Many exchanges (like Coinbase) offer a “vault”. Sweep most of your savings into the vault instead of the daily-use wallet. This gives you time to detect a scam or intrusion and to halt withdrawals. What is a vault? In my opinion, it is better than a paper wallet! Like a bank account, it is a wallet administered by a trusted vendor, but with no internet connection and forced access delay.

Exchange and cloud users want instant response. They want to purchase things without delay and they want quick settlement of currency exchange. But online wallets come with great risk. They can be emptied in an instant. It is not as difficult to spoof your identity as you may think (Again: Read Cody’s article below!)

Continue reading “Wallet Security: Cloud/Exchange Services” »