Difference between revisions of "Wallet Security Dos and Don'ts"

From Bitcoin Wiki
Jump to: navigation, search
m (Do)
(Remove bad advice)
 
(One intermediate revision by one other user not shown)
Line 4: Line 4:
  
 
* DO seek to understand what you are doing, before you do it
 
* DO seek to understand what you are doing, before you do it
* DO verify understanding by testing with small low value transactions
+
* DO verify understanding by testing with [[testnet]]
 
* DO encrypt your wallet with a strong passphrase
 
* DO encrypt your wallet with a strong passphrase
 
* DO use recommended software from the list at https://bitcoin.org/en/choose-your-wallet
 
* DO use recommended software from the list at https://bitcoin.org/en/choose-your-wallet
 
* DO make multiple redundant backups of your wallet
 
* DO make multiple redundant backups of your wallet
 
* DO keep your OS up to date and run a virus scanner
 
* DO keep your OS up to date and run a virus scanner
* DO manage significant amounts in offline wallets (cold/paper/hardware)
+
* DO manage significant amounts in offline wallets
 
* DO prepare for black swan disaster scenarios when dealing with large sums (e.g., fire & water damage, theft, head injury and death)
 
* DO prepare for black swan disaster scenarios when dealing with large sums (e.g., fire & water damage, theft, head injury and death)
  
Line 19: Line 19:
 
* DO NOT reuse a wallet encryption passphrases with online services
 
* DO NOT reuse a wallet encryption passphrases with online services
 
* DO NOT store your wallet on cloud storage (Dropbox, etc.)
 
* DO NOT store your wallet on cloud storage (Dropbox, etc.)
* DO NOT re-use addresses (including paper wallet addresses) if you care about privacy
+
* DO NOT re-use addresses
  
 
== See also ==
 
== See also ==
Line 25: Line 25:
 
* [[Securing your wallet]]
 
* [[Securing your wallet]]
 
* [[Hardware wallet]]
 
* [[Hardware wallet]]
* [[Brainwallet]]
+
* [[Cold storage]]
* [[Paper wallet]]
 
 
* [[How to set up a secure offline savings wallet]]
 
* [[How to set up a secure offline savings wallet]]
* [[Paper ECDSA private keys]]
 

Latest revision as of 20:29, 23 January 2017

This article should not be considered as a replacement for the more in-depth articles on best practices, however key points in wallet security:

Do

  • DO seek to understand what you are doing, before you do it
  • DO verify understanding by testing with testnet
  • DO encrypt your wallet with a strong passphrase
  • DO use recommended software from the list at https://bitcoin.org/en/choose-your-wallet
  • DO make multiple redundant backups of your wallet
  • DO keep your OS up to date and run a virus scanner
  • DO manage significant amounts in offline wallets
  • DO prepare for black swan disaster scenarios when dealing with large sums (e.g., fire & water damage, theft, head injury and death)

Don't

  • DO NOT trust an untrustworthy device or program to generate your wallet keys
  • DO NOT generate cold storage keys on Internet-connected machines.
  • DO NOT reconnect to the Internet a machine that has had access to cold storage keys.
  • DO NOT reuse a wallet encryption passphrases with online services
  • DO NOT store your wallet on cloud storage (Dropbox, etc.)
  • DO NOT re-use addresses

See also