Wallet Security Dos and Don'ts (Windows)

From Bitcoin Wiki
Revision as of 10:44, 27 June 2011 by Forever (talk | contribs)
Jump to: navigation, search
  • Don't keep all your bitcoins in one wallet.
  • Don't send bitcoins to a wallet that hasn't been backed up beforehand.
  • Don't send unencrypted copies of your wallet over the Internet.
  • Don't store unencrypted copies of your wallets on online backup/storage services.
  • Don't run or install programs from questionable sources on the system where you are running bitcoin.
  • Don't click on questionable links in your browser.
  • Don't run bitcoin on an untrusted or badly maintained machine.
  • Don't keep your computer switched on overnight.
  • Don't install unnecessary browser plugins.
  • Don't use a password for wallet encryption that you use anywhere else on the web.
  • Don't store unencrypted copies of your wallets on a USB stick that you insert into machines of friends, at work, or while traveling.

  • Do keep at least one offline savings wallet.
  • Do backup your active wallet regularly.
  • Do keep encrypted backups of all your wallets in at least 3 physically separate locations.
  • Do use strong, unique passwords to encrypt your wallets.
  • Do use keyfiles to encrypt your wallets, and keep backups of your keyfiles in at least 3 physically separate locations.
  • Do use a good antivirus and firewall, and keep them up to date.
  • Do update all your installed programs to the latest version.
  • Do update your operating system with the latest security patches.
  • Do uninstall all programs that you don't use regularly.
  • Do uninstall all browser plugins/ add-ons that you don't use regularly.
  • Do always browse in private mode.
  • Do use the NoScript plugin (or similar) in your browser and whitelist only the sites you trust.
  • Do run programs from questionable sources (eg. pirated software) inside a virtual machine.
  • Do browse questionable websites from inside a virtual machine.
  • If you own a large number of bitcoins, do invest time and money in order to secure them, just like you would with other valuables. If you lack the technical expertise, ask or pay somebody else to do it for you.
  • If you believe your computer has been compromized, do wipe your HD and perform a clean OS install.