BitcoinPaperWallet - Revision history

NotATether: Add new evidence implying that offline usage is unsafe. Details available at

2021-03-15T09:23:04Z

Add new evidence implying that offline usage is unsafe. Details available at

← Older revision		Revision as of 09:23, 15 March 2021
Line 8:		Line 8:
	At the end of April 2018, Canton Becker, the owner of BitcoinPaperWallet.com at the time, announced via a signed PGP message that he had sold the website to an unknown owner,<ref>[https://bitcointalk.org/index.php?topic=169836.msg46727114#msg46727114 The official BitcoinPaperWallet.com thread -- updates and news.]</ref> later revealed to be Sarkis Sarkissian.<ref>[https://news.bitcoin.com/crypto-users-claim-popular-bitcoin-paper-wallet-generator-is-compromised-millions-allegedly-stolen/ Crypto Users Claim Popular Bitcoin Paper Wallet Generator Is Compromised, Millions Allegedly Stolen - news.bitcoin.com]</ref> Since then, there have been multiple accusations of BitcoinPaperWallet.com generating used private keys<ref>[https://bitcointalk.org/index.php?topic=5247201.msg54398322#msg54398322 Why has my newly created Bitcoin address already been used? - Bitcointalk.org]</ref> and private keys created from it being stolen.<ref>[https://bitcoin.stackexchange.com/questions/85038/what-did-i-do-wrong-that-caused-me-to-lose-bitcoin What did I do wrong that caused me to lose bitcoin? - Bitcoin Stack Exchange]</ref><ref>[https://www.reddit.com/r/Bitcoin/comments/cs68ri/my_paper_wallet_generated_on/ My paper wallet generated on bitcoinpaperwallet.com was hacked! - Reddit]</ref> Sarkissian has denied these allegations.		At the end of April 2018, Canton Becker, the owner of BitcoinPaperWallet.com at the time, announced via a signed PGP message that he had sold the website to an unknown owner,<ref>[https://bitcointalk.org/index.php?topic=169836.msg46727114#msg46727114 The official BitcoinPaperWallet.com thread -- updates and news.]</ref> later revealed to be Sarkis Sarkissian.<ref>[https://news.bitcoin.com/crypto-users-claim-popular-bitcoin-paper-wallet-generator-is-compromised-millions-allegedly-stolen/ Crypto Users Claim Popular Bitcoin Paper Wallet Generator Is Compromised, Millions Allegedly Stolen - news.bitcoin.com]</ref> Since then, there have been multiple accusations of BitcoinPaperWallet.com generating used private keys<ref>[https://bitcointalk.org/index.php?topic=5247201.msg54398322#msg54398322 Why has my newly created Bitcoin address already been used? - Bitcointalk.org]</ref> and private keys created from it being stolen.<ref>[https://bitcoin.stackexchange.com/questions/85038/what-did-i-do-wrong-that-caused-me-to-lose-bitcoin What did I do wrong that caused me to lose bitcoin? - Bitcoin Stack Exchange]</ref><ref>[https://www.reddit.com/r/Bitcoin/comments/cs68ri/my_paper_wallet_generated_on/ My paper wallet generated on bitcoinpaperwallet.com was hacked! - Reddit]</ref> Sarkissian has denied these allegations.

	~~It is reported that~~ the ~~website~~'s ~~backend~~ has ~~a backdoor~~ that ~~sends the~~ private ~~keys generated across~~ the ~~Internet to its servers~~.<ref>[https://~~www~~.~~coindesk~~.~~com~~/~~bitcoinpaperwallet-back-door-missing-funds-research BitcoinPaperWallet ‘Back Door’ Responsible~~ for ~~Millions in Missing Funds, Research Suggests - Coindesk]~~</~~ref~~>		== Backdoor ==

			The new version of BitcoinPaperWallet.com includes a backdoor hidden inside the site's JavaScript code in a function called ''sha256_test''. This function attempts to disguise itself as a unit test, however, it has been discovered that this function actually contains 60 pre-generated public/private keypairs encoded in base64 which are returned to the user. <ref>https://bitcointalk.org/index.php?topic=5322560.msg56568297#msg56568297</ref>. Therefore, '''it is no longer safe to download the webpage source and run it offline, as the private keys have already been exposed to the internet.'''

			<span style="color:red">The conclusion is that using keys generated from this website will cause any money sent to them to get stolen. The information in the sections below is therefore for historical reference only.</span>

	== Secure usage ==		== Secure usage ==

NotATether: Adjust a reference to state it's from Coindesk

2021-03-09T16:51:00Z

Adjust a reference to state it's from Coindesk

← Older revision		Revision as of 16:51, 9 March 2021
Line 8:		Line 8:
	At the end of April 2018, Canton Becker, the owner of BitcoinPaperWallet.com at the time, announced via a signed PGP message that he had sold the website to an unknown owner,<ref>[https://bitcointalk.org/index.php?topic=169836.msg46727114#msg46727114 The official BitcoinPaperWallet.com thread -- updates and news.]</ref> later revealed to be Sarkis Sarkissian.<ref>[https://news.bitcoin.com/crypto-users-claim-popular-bitcoin-paper-wallet-generator-is-compromised-millions-allegedly-stolen/ Crypto Users Claim Popular Bitcoin Paper Wallet Generator Is Compromised, Millions Allegedly Stolen - news.bitcoin.com]</ref> Since then, there have been multiple accusations of BitcoinPaperWallet.com generating used private keys<ref>[https://bitcointalk.org/index.php?topic=5247201.msg54398322#msg54398322 Why has my newly created Bitcoin address already been used? - Bitcointalk.org]</ref> and private keys created from it being stolen.<ref>[https://bitcoin.stackexchange.com/questions/85038/what-did-i-do-wrong-that-caused-me-to-lose-bitcoin What did I do wrong that caused me to lose bitcoin? - Bitcoin Stack Exchange]</ref><ref>[https://www.reddit.com/r/Bitcoin/comments/cs68ri/my_paper_wallet_generated_on/ My paper wallet generated on bitcoinpaperwallet.com was hacked! - Reddit]</ref> Sarkissian has denied these allegations.		At the end of April 2018, Canton Becker, the owner of BitcoinPaperWallet.com at the time, announced via a signed PGP message that he had sold the website to an unknown owner,<ref>[https://bitcointalk.org/index.php?topic=169836.msg46727114#msg46727114 The official BitcoinPaperWallet.com thread -- updates and news.]</ref> later revealed to be Sarkis Sarkissian.<ref>[https://news.bitcoin.com/crypto-users-claim-popular-bitcoin-paper-wallet-generator-is-compromised-millions-allegedly-stolen/ Crypto Users Claim Popular Bitcoin Paper Wallet Generator Is Compromised, Millions Allegedly Stolen - news.bitcoin.com]</ref> Since then, there have been multiple accusations of BitcoinPaperWallet.com generating used private keys<ref>[https://bitcointalk.org/index.php?topic=5247201.msg54398322#msg54398322 Why has my newly created Bitcoin address already been used? - Bitcointalk.org]</ref> and private keys created from it being stolen.<ref>[https://bitcoin.stackexchange.com/questions/85038/what-did-i-do-wrong-that-caused-me-to-lose-bitcoin What did I do wrong that caused me to lose bitcoin? - Bitcoin Stack Exchange]</ref><ref>[https://www.reddit.com/r/Bitcoin/comments/cs68ri/my_paper_wallet_generated_on/ My paper wallet generated on bitcoinpaperwallet.com was hacked! - Reddit]</ref> Sarkissian has denied these allegations.

	It is reported that the website's backend has a backdoor that sends the private keys generated across the Internet to its servers.<ref>[https://www.coindesk.com/bitcoinpaperwallet-back-door-missing-funds-research BitcoinPaperWallet ‘Back Door’ Responsible for Millions in Missing Funds, Research Suggests]</ref>		It is reported that the website's backend has a backdoor that sends the private keys generated across the Internet to its servers.<ref>[https://www.coindesk.com/bitcoinpaperwallet-back-door-missing-funds-research BitcoinPaperWallet ‘Back Door’ Responsible for Millions in Missing Funds, Research Suggests - Coindesk]</ref>

	== Secure usage ==		== Secure usage ==

NotATether: Reflect ongoing developments of bitcoinpaperwallet.com credibility. See https://bitcointalk.org/index.php?topic=5322560.msg56522876#msg56522876 for details.

2021-03-09T14:57:59Z

Reflect ongoing developments of bitcoinpaperwallet.com credibility. See https://bitcointalk.org/index.php?topic=5322560.msg56522876#msg56522876 for details.

← Older revision		Revision as of 14:57, 9 March 2021
Line 1:		Line 1:
	[https://bitcoinpaperwallet.com BitcoinPaperWallet.com] is an open-source paper wallet generator based on the [[BitAddress]] generator. It runs on any modern web browser and relies on JavaScript for all cryptographic functionality.		{{compromised}}
			[https://bitcoinpaperwallet.com BitcoinPaperWallet.com] was an open-source paper wallet generator based on the [[BitAddress]] generator. Its source code is available on Github for the version as recent as April 2018, when the website was sold to a new owner<ref>[https://bitcointalk.org/index.php?topic=169836.msg46727114#msg46727114 The official BitcoinPaperWallet.com thread -- updates and news.] ''“At the end of April 2018, I sold the bitcoinpaperwallet.com website, service, and
			associated domain names to a new owner. This also includes related projects such as
			litecoinpaperwallet.com and ethereumpaperwallet.com.”''</ref>. It runs on any modern web browser and relies on JavaScript for all cryptographic functionality.

			== Change of ownership ==

			At the end of April 2018, Canton Becker, the owner of BitcoinPaperWallet.com at the time, announced via a signed PGP message that he had sold the website to an unknown owner,<ref>[https://bitcointalk.org/index.php?topic=169836.msg46727114#msg46727114 The official BitcoinPaperWallet.com thread -- updates and news.]</ref> later revealed to be Sarkis Sarkissian.<ref>[https://news.bitcoin.com/crypto-users-claim-popular-bitcoin-paper-wallet-generator-is-compromised-millions-allegedly-stolen/ Crypto Users Claim Popular Bitcoin Paper Wallet Generator Is Compromised, Millions Allegedly Stolen - news.bitcoin.com]</ref> Since then, there have been multiple accusations of BitcoinPaperWallet.com generating used private keys<ref>[https://bitcointalk.org/index.php?topic=5247201.msg54398322#msg54398322 Why has my newly created Bitcoin address already been used? - Bitcointalk.org]</ref> and private keys created from it being stolen.<ref>[https://bitcoin.stackexchange.com/questions/85038/what-did-i-do-wrong-that-caused-me-to-lose-bitcoin What did I do wrong that caused me to lose bitcoin? - Bitcoin Stack Exchange]</ref><ref>[https://www.reddit.com/r/Bitcoin/comments/cs68ri/my_paper_wallet_generated_on/ My paper wallet generated on bitcoinpaperwallet.com was hacked! - Reddit]</ref> Sarkissian has denied these allegations.

			It is reported that the website's backend has a backdoor that sends the private keys generated across the Internet to its servers.<ref>[https://www.coindesk.com/bitcoinpaperwallet-back-door-missing-funds-research BitcoinPaperWallet ‘Back Door’ Responsible for Millions in Missing Funds, Research Suggests]</ref>

	== Secure usage ==		== Secure usage ==

	* ~~The easiest~~ way to use this generator ~~is [https://bitcoinpaperwallet.com/bitcoinpaperwallet/generate-wallet.html directly from the website] -- however this is also the least secure method.~~		* A safe way to use this generator is to download the [https://github.com/cantonbecker/bitcoinpaperwallet generator from GitHub] so that it can be run as a "local" webpage using a secure offline computer. No Internet connection is required to generate new paper wallets and Bitcoin addresses.
	* A more secure process is to download the [https://github.com/cantonbecker/bitcoinpaperwallet generator from GitHub] so that it can be run as a "local" webpage using a secure offline computer. No Internet connection is required to generate new paper wallets and Bitcoin addresses.		* For the highest level of security, install the BitcoinPaperWallet generator onto an absolutely clean (virus-free, no unnecessary applications installed) "Live CD" or bootable USB thumbdrive.
	* For the highest level of security, install the BitcoinPaperWallet generator onto an absolutely clean (virus-free, no unnecessary applications installed) "Live CD" or bootable USB thumbdrive~~. Ubuntu LiveCDs with the BitcoinPaperWallet generator pre-installed are available from [https://bitcoinpaperwallet.com https://bitcoinpaperwallet.com]~~.

	== Differences from BitAddress ==		== Differences from BitAddress ==
Line 23:		Line 31:

	* The generator works entirely from within a web browser.		* The generator works entirely from within a web browser.
	* ~~Addresses are never transmitted over the Internet, and no~~ Internet connection is required for the generator to work.		* No Internet connection is required for the generator to work.
	* The full source code can be examined via "view source" in web browser.		* The full source code can be examined via "view source" in web browser.
	* Cryptographic work, random number generation, and random data seeding ("gathering entropy") is accomplished using JavaScript.		* Cryptographic work, random number generation, and random data seeding ("gathering entropy") is accomplished using JavaScript.
Line 35:		Line 43:

	[[Image:Bitcoinpaperwallet-chinese-new-year.jpeg‎‎]]		[[Image:Bitcoinpaperwallet-chinese-new-year.jpeg‎‎]]

			==References==
			<references />

Luke-jr: Typo

2015-03-01T02:53:54Z

Typo

← Older revision		Revision as of 02:53, 1 March 2015
Line 20:		Line 20:
	== Similarities to BitAddress ==		== Similarities to BitAddress ==

	BitcoinPaperWallet is a GitHub "fork" of ~~BidAddress~~ and uses verifiably identical cryptographic functions and methods. Similarly:		BitcoinPaperWallet is a GitHub "fork" of BitAddress and uses verifiably identical cryptographic functions and methods. Similarly:

	* The generator works entirely from within a web browser.		* The generator works entirely from within a web browser.

Canton: /* Designs */

2014-01-22T14:40:51Z

Designs

← Older revision		Revision as of 14:40, 22 January 2014
Line 30:		Line 30:
	== Designs ==		== Designs ==

	The BitcoinPaperWallet design is available in 12 different languages. Designs for special occasions are also available, for example ~~this design~~ for giving money in red envelopes (e.g. for Chinese New Year.)		The BitcoinPaperWallet design is available in 12 different languages. Designs for special occasions are also available, for example these designs for the Christmas holiday or for giving money in red envelopes (e.g. for Chinese New Year.)

			[[Image:Bitcoinpaperwallet-xmas-sample.jpg]]

	[[Image:Bitcoinpaperwallet-chinese-new-year.jpeg‎‎]]		[[Image:Bitcoinpaperwallet-chinese-new-year.jpeg‎‎]]

Canton: /* Similarities to BitAddress */

2014-01-22T14:37:07Z

Similarities to BitAddress

← Older revision		Revision as of 14:37, 22 January 2014
Line 20:		Line 20:
	== Similarities to BitAddress ==		== Similarities to BitAddress ==

	BitcoinPaperWallet is a GitHub "fork" of BidAddress and uses identical ~~cryptography~~ functions and methods. Similarly:		BitcoinPaperWallet is a GitHub "fork" of BidAddress and uses verifiably identical cryptographic functions and methods. Similarly:

	* The generator works entirely from within a web browser.		* The generator works entirely from within a web browser.
	* Addresses are never transmitted over the Internet		* Addresses are never transmitted over the Internet, and no Internet connection is required for the generator to work.
	* The full source code can be examined via "view source" in web browser.		* The full source code can be examined via "view source" in web browser.
	* Cryptographic work is ~~done~~ using ~~the the browser's built-in~~ JavaScript ~~crypto API along with open-source JavaScript libraries~~		* Cryptographic work, random number generation, and random data seeding ("gathering entropy") is accomplished using JavaScript.
	* The generator can be run offline by [https://github.com/cantonbecker/bitcoinpaperwallet downloading a ZIP archive] of the HTML from GitHub.		* The generator can be run offline by [https://github.com/cantonbecker/bitcoinpaperwallet downloading a ZIP archive] of the HTML from GitHub.

Canton: /* Differences from BitAddress */

2014-01-22T14:33:50Z

Differences from BitAddress

← Older revision		Revision as of 14:33, 22 January 2014
Line 14:		Line 14:
	* The reverse side of the design includes instructions for general use as well as a ledger for writing down deposits or other notes.		* The reverse side of the design includes instructions for general use as well as a ledger for writing down deposits or other notes.
	* The overall design includes a number of features to discourage casual tampering efforts that might otherwise reveal the private key without notice.		* The overall design includes a number of features to discourage casual tampering efforts that might otherwise reveal the private key without notice.
	* The generator includes an option for printing a paper wallet by pasting in a self-generated private key or vanity address, bypassing the random address generator altogether		* The generator includes an option for printing a paper wallet by pasting in a self-generated private key or vanity address, bypassing the random address generator altogether.

	[[Image:BitcoinPaperWallet-sample.jpg]]		[[Image:BitcoinPaperWallet-sample.jpg]]

Canton: /* Secure usage */

2014-01-22T14:32:17Z

Secure usage

← Older revision		Revision as of 14:32, 22 January 2014
Line 3:		Line 3:
	== Secure usage ==		== Secure usage ==

	* The easiest way to use this generator is ~~directly from the website at~~ [https://bitcoinpaperwallet.com/bitcoinpaperwallet/generate-wallet.html] -- however this is also the least secure method.		* The easiest way to use this generator is [https://bitcoinpaperwallet.com/bitcoinpaperwallet/generate-wallet.html directly from the website] -- however this is also the least secure method.
	* A more secure process is to download the ~~generator from GitHub at~~ [https://github.com/cantonbecker/bitcoinpaperwallet] so that it can be run as a "local" webpage using a secure offline computer. No Internet connection is required to generate new paper wallets and Bitcoin addresses.		* A more secure process is to download the [https://github.com/cantonbecker/bitcoinpaperwallet generator from GitHub] so that it can be run as a "local" webpage using a secure offline computer. No Internet connection is required to generate new paper wallets and Bitcoin addresses.
	* For the highest level of security, install the BitcoinPaperWallet generator onto an absolutely clean (virus-free, no ~~extra~~ applications) "Live CD" or bootable USB thumbdrive. Ubuntu LiveCDs with the BitcoinPaperWallet generator pre-installed are available from [https://bitcoinpaperwallet.com].		* For the highest level of security, install the BitcoinPaperWallet generator onto an absolutely clean (virus-free, no unnecessary applications installed) "Live CD" or bootable USB thumbdrive. Ubuntu LiveCDs with the BitcoinPaperWallet generator pre-installed are available from [https://bitcoinpaperwallet.com https://bitcoinpaperwallet.com].

	== Differences from BitAddress ==		== Differences from BitAddress ==

Canton at 13:24, 22 January 2014

2014-01-22T13:24:02Z

@@ Line 1: / Line 1: @@
 [https://bitcoinpaperwallet.com BitcoinPaperWallet.com] is an open-source paper wallet generator based on the [[BitAddress]] generator. It runs on any modern web browser and relies on JavaScript for all cryptographic functionality.
 == Differences from BitAddress ==
@@ Line 21: / Line 27: @@
 * Cryptographic work is done using the the browser's built-in JavaScript crypto API along with open-source JavaScript libraries
 * The generator can be run offline by [https://github.com/cantonbecker/bitcoinpaperwallet downloading a ZIP archive] of the HTML from GitHub.

Canton: /* Differences from BitAddress */

2013-10-09T21:01:21Z

Differences from BitAddress

← Older revision		Revision as of 21:01, 9 October 2013
Line 3:		Line 3:
	== Differences from BitAddress ==		== Differences from BitAddress ==

	While BitAddress is capable of generating ~~so-called~~ "brain wallets", pool-generated vanity wallets, and bulk wallets, BitcoinPaperWallet has been simplified such that its only function is to produce paper wallets. Additionally:		While BitAddress is capable of generating "brain wallets", pool-generated vanity wallets, and bulk wallets, BitcoinPaperWallet has been simplified such that its only function is to produce paper wallets. Additionally:

	* Paper wallets printed using BitcoinPaperWallet feature a tri-fold design that is sealed shut so as to hide the wallet's private key and QR code from view.		* Paper wallets printed using BitcoinPaperWallet feature a tri-fold design that is sealed shut so as to hide the wallet's private key and QR code from view.