Lifeboat Foundation: Safeguarding Humanity
Toggle light / dark theme

Blog

Tag: protecting your wallet

This update is an adaptation of my recent answer to a Quora reader who was in a panic. She asked:

“What can I do after a hard drive crash?
How can I recover my cryptocurrency?”

In the past, I would address the immediate problem of course. (My answer is below). But to prepare for the next unfortunate event, I recommended a wallet type based on a user’s unique experience, expertise and comfort zone. I guided the reader to weigh trade-offs of important criteria: Security, portability, convenience, and quick access to assets).

I had believed that some types of wallets were better for some individuals, but that they required a background in cryptography—or at least a discipline for meticulous practices. As CEO of the Cryptocurrency Standards Association, I had also believed that simple, unified, and popular standards would emerge very soon. I figured that this would enable users to practice safe-wallet maintenance in their own homes.

I was wrong. Most crypto wallets have not sufficiently evolved to counter the risks and complexities of everyday scenarios —not even for expert users. The problem isn’t the fault of any one vendor or hosted online service. It is that all of these gadgets, apps and services have not gotten together behind a single set of risk standards to a point where they become simple, standardized and compliant-friendly in the real world.

The lack of comprehensive standards and best practices dealing with total loss of access can bite anyone in the tush. Expertise and experience be d*mned. Today, I recommend only two types of wallets. All others are simply too risky to play a role in any financial portfolio. They set the stage for losing your wealth and health in so many plausible scenarios:

  • If your electronic device is lost, hacked, stolen or run over by a truck
  • If you become incapacitated or die
  • If you forget a secret, or where you stored it
  • If you have no idea what is “multisig” and don’t care to learn strange new practices
  • If an online cloud service or exchange goes dark or mysteriously disappears

Here is my answer to the reader who urgently needs to recover from a disk drive crash. After dealing with that crisis (it’s not at all pretty), I explain what do do in the future…

Question: “How can I recover my cryptocurrency after a hard drive crash?”

Continue reading “Lack of standards leads to new Bitcoin wallet advice” | >

3½ years ago, I wrote a Bitcoin wallet safety primer for Naked Security, a newsletter by Sophos, the European antivirus lab. Articles are limited to just 500 hundred words, and so my primer barely conveyed a mindset—It outlined broad steps for protecting a Bitcoin wallet.

In retrospect, that article may have been a disservice to digital currency novices. For example, did you know that a mobile text message is not a good form of two-factor authentication? Relying on SMS can get your life savings wiped out. Who knew?!

With a tip of the hat to Cody Brown, here is an online wallet security narrative that beats my article by a mile. Actually, it is more of a warning than a tutorial. But, read it closely. Learn from Cody’s misfortune. Practice safe storage. If you glean anything from the article, at least do this:

  • Install Google Authenticator. Require it for any online account with stored value. If someone hijacks your phone account, they cannot authenticate an exchange or wallet transaction—even with Authenticator.
  • Many exchanges (like Coinbase) offer a “vault”. Sweep most of your savings into the vault instead of the daily-use wallet. This gives you time to detect a scam or intrusion and to halt withdrawals. What is a vault? In my opinion, it is better than a paper wallet! Like a bank account, it is a wallet administered by a trusted vendor, but with no internet connection and forced access delay.

Exchange and cloud users want instant response. They want to purchase things without delay and they want quick settlement of currency exchange. But online wallets come with great risk. They can be emptied in an instant. It is not as difficult to spoof your identity as you may think (Again: Read Cody’s article below!)

Some privacy and security advocates insist on taking possession and control of their wallet. They want wealth printed out and tucked under the mattress. Personally, I think this ‘total-control’ methodology yields greater risk than a trusted, audited custodial relationship with constant updates and best practice reviews.

In case you want just the basics, here is my original wallet security primer. It won’t give you everything that you need, but it sets a tone for discipline, safety and a healthy dollop of fear.

Philip Raymond co-chairs Crypsa & Bitcoin Event, columnist & board member at Lifeboat, editor
at WildDuck and will deliver the keynote address at Digital Currency Summit in Johannesburg.