Lifeboat Foundation: Safeguarding Humanity
Toggle light / dark theme

Blog

Tag: hosted wallet

This post is structured as a question-&-answer. That’s because it was originally an answer at Quora, a Q&A site at which I am a Bitcoin columnist.

What is a ‘Paper Wallet’

A paper wallet is the ultimate offline wallet. It simply means that the private address to your crypto wallet is printed on paper — either as a string of characters, a QR code, or a series of seed recovery words.

If you destroy any electronic copy of your original wallet (e.g. the private keys that give you access to your wealth), then hiding this piece of paper is very similar to hiding a bar of gold. The only way that someone can steal it or know the amount it represents is to get their eyes and hands on something physical. They would need to know that you tucked it into your mattress or behind a secret panel of your cellar wall.

Continue reading “What is a ‘paper wallet?’ Do I need one?” | >

This update is an adaptation of my recent answer to a Quora reader who was in a panic. She asked:

“What can I do after a hard drive crash?
How can I recover my cryptocurrency?”

In the past, I would address the immediate problem of course. (My answer is below). But to prepare for the next unfortunate event, I recommended a wallet type based on a user’s unique experience, expertise and comfort zone. I guided the reader to weigh trade-offs of important criteria: Security, portability, convenience, and quick access to assets).

I had believed that some types of wallets were better for some individuals, but that they required a background in cryptography—or at least a discipline for meticulous practices. As CEO of the Cryptocurrency Standards Association, I had also believed that simple, unified, and popular standards would emerge very soon. I figured that this would enable users to practice safe-wallet maintenance in their own homes.

I was wrong. Most crypto wallets have not sufficiently evolved to counter the risks and complexities of everyday scenarios —not even for expert users. The problem isn’t the fault of any one vendor or hosted online service. It is that all of these gadgets, apps and services have not gotten together behind a single set of risk standards to a point where they become simple, standardized and compliant-friendly in the real world.

The lack of comprehensive standards and best practices dealing with total loss of access can bite anyone in the tush. Expertise and experience be d*mned. Today, I recommend only two types of wallets. All others are simply too risky to play a role in any financial portfolio. They set the stage for losing your wealth and health in so many plausible scenarios:

  • If your electronic device is lost, hacked, stolen or run over by a truck
  • If you become incapacitated or die
  • If you forget a secret, or where you stored it
  • If you have no idea what is “multisig” and don’t care to learn strange new practices
  • If an online cloud service or exchange goes dark or mysteriously disappears

Here is my answer to the reader who urgently needs to recover from a disk drive crash. After dealing with that crisis (it’s not at all pretty), I explain what do do in the future…

Question: “How can I recover my cryptocurrency after a hard drive crash?”

Bear in mind that your digital wallet doesn’t really hold wealth or coins. It holds a private key that lets you access your wealth on the blockchain. The key is like a password, but you cannot choose your own and it is too complex to remember. And so, you need a place to store it. That’s all a wallet really is.

If you stored this key on an electronic device (or in a software app or even on paper), but with no way to recover it—in case the device is lost, broken, hacked or stolen—then you are screwed! Your bitcoin still exists, but access to it has been lost forever.

Let’s be extra clear: If the device cannot be repaired or recovered, there is absolutely nothing you can do except lick your wounds and learn from your experience.

Now, let’s talk about next time…

A beautiful trait of crypto is that you can back up your wallet easily. The elegant and secure way to do this is by creating a list of 11 or more common dictionary words and placing this list where you and 2 or 3 trusted friends can always find it. The ability to generate this list of words is a Bitcoin standard. It greatly reduces the risk of loss—but only if you are aware of the feature, make use of it, and periodically practice asset recovery.*

But, we’re getting ahead of ourselves. Let’s back up, and describe the way to store your keys…

There are only two ways that you should stash cryptocurrency until we reach a day when standards, best practice and multisig escrow are second nature, trivial and understood by everyone.

You can either (1) trust a custodial exchange, or (2) use a hardware wallet. In a nod to smart phones and software apps, I will describe something that they are good for in these safety tips. But your go-to wallet should never be an app.

1. Trust a custodial exchange like Coinbase or Bitstamp

Despite what your Libertarian friends have told you (“It misses the whole point of owning crypto!”, don’t dismiss this option so quickly. A traditional bank/brokerage model offers several benefits which are important to some individuals. We’ll get to those in the bulleted list below.

Choose an exchange that is compliant (fully licensed and follows regulations for all activities). They must be well capitalized by reputable investors and subject to random, outside audit. The two mentioned above belong to this very small class of exchange-wallet services.

The exchange holds your crypto in their own offline vault and gives you access on demand through an account user interface using two-factor authentication. The process can be frustrating, if you lose your smart phone and haven’t prepared or practiced for such an inevitability. That’s because they must be absolutely certain that access is being made by you or someone that you have authorized

Why would anyone want a service to control their assets? There are good reasons:

  • Since their main business is acting as an exchange, broker or market maker, you can quickly shift assets into Fiat or other cryptocurrencies
  • Their meticulous record-keeping aids your own end-of-year tax reporting
  • A real person can help with confusing or unexpected circumstances
  • Just as with a bank or stockbroker, you can designate heirs, a spouse or co-owner, and your anticipated executor or a relative with power of attorney
  • A reputable custodian makes it difficult to accidentally lose access to wealth

But what about security standards? With all of the exchange failures, the lack of an insurance framework, and many that have simply lost or fled with customer assets, can you trust an exchange to implement security in the very best way?

Ultimately, a reputable exchange that practices security drills, subjects itself to outside audits and has investors with lots to loose is more likely than you to implement, update and rigorously practice safe methodology. This may change in the future, as standards and practices become more clear, unified and easier to follow. But for now, the traditional bank model makes sense for a great many users. I have owned Bitcoin for ten years, and I have only switched from Coinbase to method #2, below, in the last month.

Continue reading “Lack of standards leads to new Bitcoin wallet advice” | >

The question asked in the title has been edited from what was asked today at Quora, the Q&A forum at which I participate as expert columnist. The original question was a bit more ambiguous: “Which is better? — a digital bitcoin wallet or a physical one?” I have included the original question, to better distinguish products and terms. All bitcoin wallets are all digital—even a paper wallet, whether a character string or a QR code. Conversely, an exchange may use “physical” wallets to host client assets, individual application wallets, or they may simply keep records of client assets that are stored, collectively, in their own master wallet. To complicate matters, Bitcoin is never really “stored” by you or an exchange service. It is stored on a public blockchain, where assets and transaction history can be traced through time by anyone. Therefore, all forms of user access are “digital”. What the reader really wants to know is “Which form of access control is better? — custodial or personal?” Type 1: Custodial Wallets are Managed by a Trusted Party They hold your assets. You view a statement balance—just like a bank account.

The reader uses the term “digital wallet” to mean a hosted wallet in which a trusted 3rd party holds the private keys, or aggregates the assets of many customers and tracks their individual ownership in their own accounting system, like a traditional bank or broker. In this case, the 3rd party is trusted to maintain security, privacy, and constant, robust user access.

It is possible that the reader may have used the term “digital wallet” to additionally refer to PC and smartphone applications, such as Bitcoin Core, Armory or Electrum. But, these are really personal and private wallets — because they are created and configured by the owner, and only the owner has the private keys. And so, we classify device wallet applications as “personal/private” along with hardware or paper wallets. Type 2: Personal Wallets are Private —but with privacy comes risk!

Wallets are personal if the private keys are generated and stored by the user, either on paper, in their PC or smart phone, on a thumbdrive, in a hardware wallet, or even uploaded to cloud storage. As long as the asset owner holds the keys and securely encrypted any uploaded file that contains the keys, the assets are accessible only with his consent.

So, which wallet class is better for securing cryptocurrency access credentials? Custodial or Personal? Which of these models best fits your needs?
  • A custodial wallet is like a bank a statement. Your assets are maintained by an exchange, rather than tucked into your mattress. The wallet and keys are not under your control, but the process that governs backup and security is rigorous & standardized. Availability to your heirs is governed by documents and laws.
—OR—
  • A personal wallet is completely controlled by you. The private keys must be stored where you will always find them (in your head, a lock box or an encrypted file that is distributed to family in a way that they will always be able to unlock it!). Ensuring future availability, swift transactions or passing wealth after death requires careful attention to tools, process and a secret.
A crypto purist or Libertarian might insist on taking full control of the assets. That is, storing them locally and with only the owner having the private keys. This is analogous to storing bars of gold in a safe and then burying the safe in a deep, covered hole in your yard—and in a spot that only you can find. Even if your children can find the safe after you die, it is equipped with explosives that will completely obliterate the gold, if it is unearthed without the correct password. I am privacy zealot. And yet, to the dismay of some followers, I believe that—for most cryptocoin owners—a hosted, custodial wallet is better than taking possession of a hardware wallet, paper wallet or digital wallet (anything that the user personally stores in a PC, phone, on paper or in a personally encrypted cloud account). To explain, I shall call out [1] a critical requirement, and [2] the deciding factor in determining this advice applies to you. 1. Critical Requirement The host must have impeccable credentials, a solid and ongoing regimen of security reviews and unscheduled audits — and they must be sufficiently capitalized by large, respected organizations, such that widely recognized individuals and organizations are at substantial risk if anything were to go wrong. Trust among strangers is easily scammed. So let me be clear. Regarding the investors, board, executives and security auditors of a custodial wallet service, both their reputations must be at risk as well as their worldwide assets across other business areas. Coinbase in San Francisco is such an exchange and hosting service. Currently, there are only two others that meet this extreme level of vetting. If Fidelity Investments enters the market as a crypto-hosting service, they would likely meet this bar. 2. Deciding Factor There are few individuals for whom direct and private ownership makes sense. In fact, until this month, it did not make sense for me. I am only now configuring my first hardware wallet. I still trust Coinbase to host and control most of my assets. The reasons boil down to security, forgetfulness, errors, legacy ownership and instant access. The ONLY factor that is arguably better with personal custody & control is privacy. Due to a lack of education, standards, and definitive best practices, this option makes sense for fewer than 5% of Bitcoin owners. Take me, for example… I have been involved with Bitcoin since the first years of its existence, and have been a Bitcoin educator since shortly after Satoshi’s original bombshell. Today, I am a keynote presenter at blockchain and cryptocurrency conferences. I teach blockchain seminars, design courseware for colleges, and am co-chair of the Cryptocurrency Standards Association and partner in Blockchain Research Council. Yet, I am only now configuring my first hardware wallet. I still trust Coinbase to host and control most of my cryptocurrency. How do I know if I am a candidate for full / private control? Using an exchange hosted wallet service is best for most individuals. But, for some, it makes sense to maintain private, local control of blockchain assets. If all criteria in the bulleted list below applies to you, then local and private ownership might make sense. But if you fail even one criteria, then WAIT! Wait until multisig becomes uniform and ubiquitous — and wait until a larger fraction of society is comfortable with the concept and practice of managing private keys. These are gradually becoming new norms. But, it will take a few more years for the world to become comfortable with an unfamiliar concept: personal control of a decentralized asset. You are a candidate for using a personal wallet if you plan to control and secure your own private keys, and if you meet all conditions listed below. The technical criteria will not be requisite in the future—but they are necessary today, because the market currently lacks simple, standardized, widespread tools and uniform practices for safely securing, accessing and passing on these credentials to your heirs. Do all of these criteria apply to you?
  • You have a comprehensive understanding of cryptography, including the principals of RSA public-key crypto.
  • You have practiced multisig decryption for at least a year. For now, you will need to roll-your-own multisig, to ensure that your heirs or executor can access your wealth in the event of death, forgetfulness or incapacitation.
  • You have experience and a clear, documented and standardized plan for separately encrypting and distributing your private keys.
  • You understand how to implement a hard fork and have the time to do it after any hard fork split.
  • You have an exceptional need for privacy or anonymity, and you feel that a custodian is more likely to “sing” in the event of an audit or court order.
  • You have a rehearsal plan for testing your multisig recovery and a willing group of trusted friends (most of them younger than you) who can combine their keys to access your wealth.
  • After ensuring that encrypted wallet works, is completely secure and is accessible to your heirs, you have replicated it in a sufficient number of places, that you are certain that your heirs will find it after you die, even if it is 90 years in the future.It must not only survive your lifetime, but the knowledge of where to look and *IF* to look, must be certain, even if your home burns down, your cloud accounts have been deleted and/or Google, Amazon, Microsoft & Apple are no longer in business.
If all conditions apply to you (and only if they apply), then you may be among the 5% of enthusiasts for whom a personal hardware wallet makes sense. At some time in the next few years, it will make sense for a far greater fraction of cryptocurrency holders, rather than just the most disciplined and knowledgeable Geek-enthusiasts.

Philip Raymond co-chairs CRYPSA, hosts the Bitcoin Event and is keynote speaker at Cryptocurrency Conferences. He advises The Disruption Experience in Singapore, sits on the New Money Systems board of Lifeboat Foundation and is a top writer at Quora. Book a presentation or consulting engagement.