BitcoinPaperWallet

Warning: one or more users have reported that this website or utility has been compromised. Using private keys or seed phrases from compromised websites and utilities will cause you to lose your money. Exercise caution while using compromised websites and tools and do not download any data from them.

BitcoinPaperWallet.com was an open-source paper wallet generator based on the BitAddress generator. Its source code is available on Github for the version as recent as April 2018, when the website was sold to a new owner. It runs on any modern web browser and relies on JavaScript for all cryptographic functionality.

Change of ownership

At the end of April 2018, Canton Becker, the owner of BitcoinPaperWallet.com at the time, announced via a signed PGP message that he had sold the website to an unknown owner, later revealed to be Sarkis Sarkissian. Since then, there have been multiple accusations of BitcoinPaperWallet.com generating used private keys and private keys created from it being stolen. Sarkissian has denied these allegations.

Backdoor

The new version of BitcoinPaperWallet.com includes a backdoor hidden inside the site's JavaScript code in a function called sha256_test. This function attempts to disguise itself as a unit test, however, it has been discovered that this function actually contains 60 pre-generated public/private keypairs encoded in base64 which are returned to the user. . Therefore, it is no longer safe to download the webpage source and run it offline, as the private keys have already been exposed to the internet.

The conclusion is that using keys generated from this website will cause any money sent to them to get stolen. The information in the sections below is therefore for historical reference only.

Secure usage

• A safe way to use this generator is to download the generator from GitHub so that it can be run as a "local" webpage using a secure offline computer. No Internet connection is required to generate new paper wallets and Bitcoin addresses.
• For the highest level of security, install the BitcoinPaperWallet generator onto an absolutely clean (virus-free, no unnecessary applications installed) "Live CD" or bootable USB thumbdrive.

Differences from BitAddress

While BitAddress is capable of generating "brain wallets", pool-generated vanity wallets, and bulk wallets, BitcoinPaperWallet has been simplified such that its only function is to produce paper wallets. Additionally:

• Paper wallets printed using BitcoinPaperWallet feature a tri-fold design that is sealed shut so as to hide the wallet's private key and QR code from view.
• The reverse side of the design includes instructions for general use as well as a ledger for writing down deposits or other notes.
• The overall design includes a number of features to discourage casual tampering efforts that might otherwise reveal the private key without notice.
• The generator includes an option for printing a paper wallet by pasting in a self-generated private key or vanity address, bypassing the random address generator altogether.

Similarities to BitAddress

BitcoinPaperWallet is a GitHub "fork" of BitAddress and uses verifiably identical cryptographic functions and methods. Similarly:

• The generator works entirely from within a web browser.
• No Internet connection is required for the generator to work.
• The full source code can be examined via "view source" in web browser.
• Cryptographic work, random number generation, and random data seeding ("gathering entropy") is accomplished using JavaScript.
• The generator can be run offline by downloading a ZIP archive of the HTML from GitHub.

Designs

The BitcoinPaperWallet design is available in 12 different languages. Designs for special occasions are also available, for example these designs for the Christmas holiday or for giving money in red envelopes (e.g. for Chinese New Year.)