Bitcoin Q&A: Are Hardware Wallets Secure Enough?

[@Belowtheradars]

You, dear Sir, are the Buddha of Cryptocurrencies.

[@guggnermalhii]

Amitofo and Amen to that

[@pj6299]

Buddha? 🤣

[@SuperWarriorPoet]

Perfectly answered, what a legend

[@jorjiang1]

i repeat that 24 words silently in my mind every night before i go to sleep

[@cryptocap3383]

Great if u don't to have heirs!

[@vakeone]

It's actually a bad idea to memorize all 24 words. If someone kidnaps you, they can torture you for those words. You can't give it up if you don't know them. That's also why I don't keep my hardware wallet where I live.

[@coromboshan1212hh5]

Sleep talking the seed is also a potential risk

[@StakedWealth369]

Just get yourself Bitfi

[@cacoolkid1]

@Я не знаю как говорить по-русски Not if you announce it publicly in KZbin comments lol

[@mulimotola44]

More important to have more than one wallet (more than one seed), each one backed up in different locations. So even if the worst happens, u never lose all your coins.

[@MrHowzaa]

The biggest threat to having crypto are big mouths. as in rich people who own expensive artworks and like to show it off so can bragging about how many bitcoins you own can get you a visit from not so savory characters.

[@cramsa]

yup... it's like telling them you have expensive jewlry etc at home... just stay humble and stack sats and keep quite.

[@GovernYourself]

Always great to have the basics reinforced, thank you Andreas for all that you do for crypto!

[@frustratedmajority851]

For me, it's a trezor model T with the passphrase feature enabled. The passphrase just protects me in case someone managed to stumble upon my 12 word mnemonic. 12 words instead of 24 because I can effortlessly memorize them, and even though the 12 word mnemonic is only 128 bits of entropy... according to several entropy calculators, my passphrase bumps up my total entropy to 298 bits. Add two backup Trezor One's to the mix for redundancy and that's about as secure as I ever care to have

[@velezmusic4350]

When you say backup - you mean each subsequent Trezor also was set up with the same wallet ? Your system seems comprehensive but simple I like it. Thank you

[@dj1jesus375]

Short answer: Yes! (11:35) It's worth watching the whole video though.

[@StakedWealth369]

430 stainless steel sheet and metal punch set for stamping the phrase is perfect against corrosion or fire.

[@EntropyBeater]

And make sure the embossed side is covered by another stainless steel sheet and store it in tempered-evident sealed envelope, to prevent people 'feel' the emboss without opening the envelope.

[@TheHonestFoodTeller]

Плюс гумена боя отгоре и сигурна парола (passphrase)

[@cryptocap3383]

Every single crypto investor needs to see this

[@rjmiller2553]

Gratitude for everything you have contributed to Bitcoin awareness and educationa over the years.

[@gavinbrinck]

thanks Andreas ! You have been my greatest Bitcoin guru since 2014. bless !

[@bitfinger]

simplicity is the hallmark of genius

[@sango73]

I do appreciate a lot your content Andreas. Thank you a lot ! BUT PLEASE FIX YOUR MIC / audio is oversaturated and not crystal clear...

[@scorch4299]

I suggest you pick a day of the year to check on your backups...make sure theyre still there, undamaged, you still remember everything. This is something practical you can do, once per year to ensure its safety. Also, make sure you have a method of passing on in the event of your death, if thats important to you.

[@ncflg7667]

Isn't there also the risk that Trezor or Ledger releases a malicious firmware update?

[@cxMLG]

Yep, the only insurance is us knowing the owners of trezor/ledger.

[@Tapepusher]

This is such a shame that you'd be dependant on that. We'll get to trustless eventually as it should be, but it's lots of hard work and time.

[@Sadrx]

No. Updates are open source. You can review the update yourself or lean on the technical expertise of the entire bitcoin community to review the firmware updates.

[@morehumanity]

Seen this topic covered in many of your longer videos/lectures, but this video is really great as a standalone.

[@casuarinagirl8067]

Perfection - doing all of this already and did this right from day 1 (even with my tiny amount of crypto) - if I didn't want to lose this amount in a wallet or bank account then I felt I needed to protect it here in this space, and I have one of the copies in a fireproof, waterproof lockbox that only my trusted people know about in case something happens to me! No regrets in the worst case scenario of any type.

[@ronatola]

Perfect statement @1:00 - @1:45

[@citadelgang9171]

thank you Andreas! And thanks to Adam Meister for bringing me here!

[@vic9380]

Hi Andreas. I have a question for HD wallets. User remembers the mnemonic phrase. On computerA he generated 10 addresses sequentially, let's call them key1, key2... to key10. Out of these 10, he put only funds into key1 and key9, and left the other 8 keys empty (no tx activities on the 8 at all). Now if he lost computerA, and restores his HD wallet on new computerB. Since user typically does not indicate to computerB the "number of key pairs" he had, computerB must try to guess how many addresses that wallet had. So computerB after seeing key2 has 0 balance, wouldn't computerB stop checking further, and tells the user "you only have money in key1, that's all", accidentally ignoring key9?

[@CanesFan65]

THANKS YOU for addressing this issue. I had the exact same question/complaint about Trace's assessment. I thought Trace's opinion was WAY TOO COMPLEX for the AVERAGE person and that he was being quite pompous to not address how THE AVERAGE PERSON should handle security. While it is OBVIOUS that it will differ depending on the level of expertise - Trace makes it should as though - his suggestion was the only suggestion and if you don't use that COMPLEXITY - you are at risk. I agree with you 100%. You are AT RISK if you don't understand how YOU can best secure YOUR keys. Simply put - If you try to do something you don't understand - You are at GREATER RISK.

[@mikemcdonald3585]

Great questions and answered, liked the one about whether security lessens over time. I have a tendency to think i need to keep doing something to preserve security.

[@TalesFromTheBooth]

The teacher has spoken!

[@fracsorg]

Hi Andreas, great answer. Thank you ! Did you manually edit the google subtitles? Some words have been added in square brackets like "Ledger" becomes "Ledger [Hardware Wallet]". Some things have been removed like "Umm so here's the thing." --> "Here's the thing:" and phrases changed. "The different audiences, different groups of people are going to have different risk models and they're also going to have difference ahh tolerances for technical complexity" --> "Different groups of people will have different risk models and tolerance for technical complexity". Just curious as to whether you uploaded the subtitle script, or whether google AI made the modified script from the audio.

[@aantonop]

I have subtitles manually edited, yes. The subtitles that KZbin auto-generates are usually awful.

[@cramsa]

Even a bitcoin core dev messed himself up putting his seed phrases in an internet connected device but he thought he was safe because he encrypted it in a file BUT he put his password manager on the cloud or something like that and the attackers got to it…. Your keys in an hardware wallet with updated firmware IS SUBSTANTIALLY BETTER than some crazy setup some of these “experts” suggest.

[@InvestimentosDigitais]

Perfect

[@bhushanstake3788]

Perfectly perfect....experience, knowledge, Skills all together at one place...thanks

[@billyjean9484]

No. Ledger taught us (by accident) that they easily have access to our private keys. They originally swore that it was impossible.

[@pomp4401]

Delusional

[@billyjean9484]

@pomp4401 only multi sig using different hardware wallets will survive.

[@GaiasFleas]

This is great. Thanks Andreas for your great work in the space!

[@christine2027]

Thank you Andreas! I was just wanting this question answered! You’re answer makes perfect sense and is exactly what I am going to do!!

[@cebas7]

I smiled like an idiot with your explanation, you explain it BRILLIANTLY! THANK YOU!!!!

[@jpp59]

Good explanation. Even high technical and professionals fucked up. Look at what happened to quadrigacx. The ceo died and he was the only one who knew how to retrieve fund from their cold storage, 190millions usd lost... Keep it simple and make sure your siblings knows how to retrieve the funds when you are gone.

[@MatCendana]

Thanks for mentioning this here. I did a search and found out this is very new. cointelegraph.com/news/crypto-exchange-quadrigacx-missing-145-mln-after-death-of-founder

[@whyask8044]

stop saying he died. he stole the money and ran away.

[@MatCendana]

@@whyask8044 Based on the latest reports, that reported 'death' is very suspicious. At that very young age (like this is the Middle Ages), and dying in India where certificates aren't too difficult to obtain. Then him being the only one who has access to the private keys, which isn't the norm when it concerns exchanges' cryptos. On the other hand he had been very thorough making plans for his family. I suspect the wife is likely also a conspirator. Maybe others at the exchange too. Looks like an exit scam with scumbags running off with customers' fund.

[@b.griffin317]

if it's a scam, wouldn't it be obvious if those addresses start getting drained at some point?

[@stevesmith4166]

Morning Andreas. I have an absolute noob question. I have EOS accounts, and over the last few months started looking at Bitcoin. I seem to be confused whereby Bitcoin keys seem to be different to EOS accounts. In short, I bought a ledger to hold cold storage, but am unsure how it works. I have set it up with recovery seed etc, and then installed the Bitcoin APP, but am hesitant because I have not associated any private keys to it. Am I merely being a numpty? Are the keys already in it? Can I just send my exchange based BTC to it now? I feel this is probably far simpler than I imagine it. Chuck me a bone please LOL

[@horrificpleasantry9474]

Kraken directs users directly to this video for an explanation of why they're not a wallet service and why we should consider a 'hardware wallet.' I haven't watched the video yet. I've been learning about crypto for less than a week, and here to learn. Just thought someone might appreciate knowing.

[@lilbean_eth]

As always, AA has the answer. Thank you.

[@PaulTheadra]

Thank you for the explanation, I have the hardest time explaining to others levels of security one would use

[@danmatiesanu6823]

What the hell is that 4-6 pass phrase that goes t protect the seed? How do you create that?

[@ChiefEngineeringOfficer]

how secure is a bluetooth hardware wallet like this nano x for example?

[@Decentralized_World1]

Wise words from a wise man. Andreas always makes me feel better about owning crypto

[@TrichsRUs]

I have ledger and don’t recall being given an additional “pass phrase” with my 24 word seed.

[@cryptoinsider9305]

This is a Valid Question. How do we get the Pass Phrase?

[@susmitasinha019]

You are not GIVEN a passphrase but you have to choose one on top of the seed phrase that's generated by the hardware wallet. Seed phrase alone = access to a set of addresses & corresponding private keys of a hierarchical deterministic wallet. Seed phrase + passphrase = access to a completely different set of addresses & corresponding private keys of another hierarchical deterministic wallet.

[@cryptoinsider9305]

@@susmitasinha019 Thank you for the explaination, I have more understanding now.

[@RL-hh2tb]

@@susmitasinha019 so where are you prompted for the passphrase? Will the ledger device for instance, prompt you? Thank you

[@YnotHro]

Ty for increasing the volume on your videos.

[@jonathancampbell9539]

Concise nonbiased information

[@user-dn5bx2iu3e]

And telling the truth gets you a sub.

[@TheHonestFoodTeller]

Polymer paper + lamination + tamper proofing.

[@NinoGuariscoJR]

Thanks again for all you! You’re helping thousands of us.

[@lourdusamy5232]

Excellent project

[@donwood8741]

Anton, another great video. I have a question for you, if you or others on the thread could answer. I have 95% of my bitcoin on a Ledger. It has a 24 word seed phrase, which I have memorized. However, I don't know how to test it it works! I don't want to buy another Ledger and enter it in that. I'm hesitant to enter that phrase into a different wallet (Enjin etc.). What is the 'best' (compromise between convenience, security, cost?) way to test if a seed phrase backup works? Thanks!

[@aantonop]

The standard procedure is to test (at least once, if not more than once) that your seed phrase works before you put any crypto on it. But both the Ledger and Trezor hardware wallet applications have menu options and instructions that will help you to test your recovery seed without wiping the device. *Do not wipe the device until you have tested that your seed works.* support.ledger.com/hc/en-us/articles/360007223753-Recovery-Check blog.trezor.io/test-your-seed-backup-dry-run-recovery-df9f2e9889 Regarding memorization: twitter.com/aantonop/status/1092201465903497217

[@donwood8741]

@@aantonop Thank you! I'll give it a go.

[@Circumnavigate]

Thank you Andreas !

[@cryptob4bc983]

Your Wealth of Knowledge Is Amazing! Thank You.

[@josepareraspintopereira7416]

Otimista

[@ipconfigearth102]

How to verify a file signature of the trezor bridge?

[@davearthur8656]

Great content. Thanks for breaking it all down for us.

[@thingsthatmake]

How would one add a passphrase to ledger nano? There is only option for a pin on the device? Would be great to do this since the 24 words might be guessed by some random person wanting to win the crypto lottery?

[@thingsthatmake]

Ok, now I see that the 24 words are chosen from a large list of 2048 words, so odds are astronomical. However, if someone figured out how the wallets create the seeds in the first place (if not totally random) then they could work backwards to re-create them from there... Hmm.. I guess the passphrase is a good idea.. maybe later I can get to it.

[@MawaMaverick]

The last part was cool. Nice one. Thanks

[@taxxxiddriver]

Excellent advices.

[@batsmasherbatsmasher3177]

where can i download the Unobatinuim Linux distro ?

[@Metacognition88]

Hands up!

[@MrTno1TrickShot]

What if the hardware wallet company goes bankrupt and you loose the hardware wallet but you have your seeds all save how can you get access to your cpbitcoin?

[@andrewgregor3692]

Simple you use the Blue Protocol wallet way way better than a trezor or ledger and has additional security features no other wallet has , basically the most secure wallet presently available

[@palipalik2011]

Perfect advice! Thanks!

[@Jay-yy5rp]

Great answer

[@AGCRetrogaming]

The most of the hard wallet the brands say even if the hard wallet is damaged or lost for some how you can restore your wallet with the passphrase in any other hard wallet. So if that's the true, my question still in place how hard wallet still secure enough? How still secure against brutal force trail and error to find out my private key?

[@marcusyeagle6523]

Know what you do not know

[@banzobeans]

kzbin.info/www/bejne/rae5gZevjsqUh7c

[@kotgc7987]

Is there a list or diagram on these processes please? After all this is setup, I'm just a noob who would like easy day to day fruit juice purchases, with my savings safe.

[@nurumusa9912]

i think the guy that ask the question probably wants to add complex security layer on top of what he has. this is dangerous as too much security without proper management is dangerous.

[@anthonywayner8734]

Answer the question!!!!

[@eyemallears2647]

Thanks

[@vagabon327]

Thanks Andreas!

[@guitarflash2049]

sure this should be secure enough

[@Jack-ny7kn]

What is he talking about by pass phrase? Like encrypting the 24 word seed???

[@topsecret1433]

Excellent advice. Thanks Andreas!

[@thebitfi9472]

Very well said, Andreas.

[@joemorgese]

Thx

[@banzobeans]

Beautiful response

[@felixgorrindo7471]

You are the man Andreas

[@cryptomaniac3327]

Brilliant answer

[@rydmerlin]

You didn’t mention invisible ink ;-)

[@hnccoin2021]

Great answer Andreas !!

[@radvladdy]

100% Security should be proportionate to amount at risk combined with your technical abilities. Use your brain. Think through possibilities.. Know features of hardware wallets available.

[@arkad7633]

seeds in metal cards

[@martinkirov3762]

Andreas for Secretary of the Treasury!!!

[@bobjones9406]

Memorize the seed?

[@paulinthailand]

this has the best likes to dislike ratio i have ever seen

[@islandbee]

AA, is there a technical analysis tool that is used to find that "sweet spot" for individuals or enterprises? Would they use something like a SWOT analysis to assess an optimal solution?

[@michael4383]

why people always overcomplicate things? you have a hardware wallet? thats fine.

[@islandbee]

@@michael4383 - Falco, because humans are complicated. And I don't have a HW wallet. Rock me Amedeus!

[@napoleon2564]

If you have less than 100 btc a trezor is fine.

[@islandbee]

@@napoleon2564 - In my hometown, there was a flyer posted up for a $500 reward from someone who lost their Trezor out in the streets. This tells me that that there needs to be more training and guidance when it comes to storing and managing cryptos. Feel bad for the guy. Yikes! 😱

[@napoleon2564]

@@islandbee thats kinda dumb. If you have the paper backup you can just sweep the funds into a hot wallet and send them to a new trezor. They're like $80.

[@IRONBBB]

Crypto Legend

[@lakemckenzie]

He talking about that sweet spot. Sounds like some good......... Nevermind.

[@philhellmuff]

I don't like paper. I wrote my backup on a thin metal sheet with a permanent marker. I made 3 of them and cut them in half so I got 6 pieces. I have 2 pieces. 1 at home and the other in a bank. The other 4 I gave to different family members.

[@aantonop]

We do not recommend seed splitting schemes. If you really feel the need to do so, you should consider using a multi-signature setup instead. kzbin.info/www/bejne/oIGaoXidd9WUhZI kzbin.info/www/bejne/mXKzY6hsrMRkY80 en.bitcoin.it/wiki/Seed_phrase

[@32brookse]

The key reality is that most people simply will not take all of these extremely onerous steps of writing seeds and phrases on separate pieces of paper, in triplicate, to then store them in multiple locations, in order to protect their cryptocurrency. This whole process needs to be made much simpler or crypto will never achieve mass adoption. There must be a way to combine cryptographic protection with 2 factor authentication to so that there can be one electronic storage space to back up what the user also writes down and stores in their home, or another secure location.

[@daireBTC123]

There will be centralised bitcoin banks. I think it's a utopia to think everyone using bitcoin will do the above as stated. I think people will just use centralised bitcoin banks

[@32brookse]

I got my parents, who are in their 80s, to buy and store Bitcoin on an exchange, and even that was (and remains) a *huge* challenge. Trying to show them how to use a wallet and securely store seed phrases is unimaginable.

[@daireBTC123]

@@32brookse lol man the fact you got them to buy it is insane 😂 80 is next level. My parents in their 60s are at the same stage In 50 years time though basically everyone on earth will be technologically literal so there's that I guess I'm just currently researching if multisig is worthwhile like right now I just have Trezor on its own and I do have it well secured. Just in limbo about taking it to the next level and that includes getting a coldcard and what not too. When whatever economic apocalypse is coming I hope my Trezor is enough 😂

[@jhoanrivero7885]

Hi from Venezuela. Buy Bitcoin.

[@MatejKesan]

Lol the ending!

[@goodvibes9821]

love this guy

[@amyhoang9140]

Can the person who has the seeds gain access to your cryptos without the hard wallet if needed?

[@aantonop]

Yes.

[@amyhoang9140]

@@aantonop Great! Thanks. So this means I still can get my cryptos without my wallet (I actually lost my usb cable to trezor one and have not been able to find a compatable usb cable to use). Can you please explain how or do a video on this? It's my understanding that if you lost your wallet, you can only use the seeds to transfer cryptos into another same type of wallet. Is it true?

[@JuanRodriguez-km9hl]

Great video

[@johnnys2714]

Really well stated, well done 👍

[@sukandalangley3734]

lolol me all day... def an intermediary in storage techniques and many times have I put my hands up and left it on Coinbase lol

[@TheVincent0268]

summary: 10:43

[@LanguageUnlimited]

Great stuff as always. Legend!

[@user-gh5he6sm5t]

Anton's crypto is more secure than Fort Knox.

[@mostsacredangel]

So hardware wallets are secure or not?

[@frodev728]

yes

[@paudelamarianaoancea3761]

yes