Bitcoin Q&A: Are Hardware Wallets Secure Enough?

Подписаться 334 тыс.

Просмотров 88 тыс.

50% 1

Are hardware wallets really secure enough? Is the complexity of the setup and execution part of the risk model? What are the most likely ways that you will lose your bitcoin? What is the best way to store your mnemonic seed and passphrase?
If you want to see more about key management practices, check out this playlist: • Key Management: How to...
More on Trace Mayer's monetary sovereignty initiative: www.proofofkeys.com/
CORRECTION: At 9:13, I referred to paper as "Stone Age technology." While I was trying to convey the simplicity of the tool with such a phrase, this is not historically accurate as paper-making is not generally thought to have begun until thousands of years after the Stone Age.
Chapters
0:00 What is the gold standard for storing crypto, for non-technical people? Is a hardware wallet good enough? If my crypto has been on my hardware wallet for a year, is it more or less likely to be hacked over time?
1:50 There is no gold standard that applies for everyone
5:00 What can you do that is practical?
9:35 Pushing people to overextend their technical skill
10:42 We have an intermediate level that people can use
This question is from the January monthly subscriber session, which took place on January 26th 2019. If you want early-access to talks and a chance to participate in the monthly live Q&As with Andreas, become a patron: / aantonop
RELATED:
How do I choose a wallet? - • Bitcoin Q&A: How Do I ...
Secure, tiered storage system - • Bitcoin Q&A: Secure, T...
Hardware wallets and attack surface - • Bitcoin Q&A: Hardware ...
Setting up secure storage devices - • Bitcoin Q&A: Setting U...
What is a private key? - • Bitcoin Q&A: What is a...
How do mneomonic seeds work? - • Bitcoin Q&A: How Do Mn...
Using paper wallets - • Bitcoin Q&A: Using Pap...
Wallet design and mass adoption - • Bitcoin Q&A: Wallet De...
Cryptographic primitives - • Bitcoin Q&A: Cryptogra...
Public keys vs. addresses - • Bitcoin Q&A: Public Ke...
Re-using addresses - • Bitcoin Q&A: Re-using ...
Passphrases and seed storage - • Bitcoin Q&A: Optional ...
Coin selection and privacy - • Bitcoin Q&A: Coin Sele...
Multi-signature and distributed storage - • Bitcoin Q&A: Multi-sig...
Nonces, mining, and quantum computing - • Bitcoin Q&A: Nonces, M...
Is quantum computing a threat? - • Bitcoin Q&A: Is Quantu...
Spam transactions and Child Pays For Parent - • Bitcoin Q&A: Spam Tran...
Orphan blocks and stuck transactions - • Bitcoin Q&A: Orphaned ...
Miners, pools, and consensus - • Bitcoin Q&A: Miners, P...
Software distribution security - • Bitcoin Q&A: Software ...
Protocol development security - • Bitcoin Q&A: Protocol ...
Geopolitics and state-sponsored attacks - • Bitcoin Q&A: Geopoliti...
Sanctions and censorship resistance - • Bitcoin Q&A: Sanctions...
How to get people to care about security - • Bitcoin Q&A: How to Ge...
Honest nodes and consensus - • Bitcoin Q&A: Honest No...
Why running a node is important - • Bitcoin Q&A: Why Runni...
Wallets, nodes, and monetary sovereignty - • Bitcoin Q&A: Wallets, ...
Andreas M. Antonopoulos is a technologist and serial entrepreneur who has become one of the most well-known and respected figures in bitcoin.
Follow on Twitter: @aantonop / aantonop
Website: antonopoulos.com/
He is the author of two books: “Mastering Bitcoin,” published by O’Reilly Media and considered the best technical guide to bitcoin; “The Internet of Money,” a book about why bitcoin matters.
Subscribe to the channel to learn more about Bitcoin & open blockchains; click on the red bell to enable notifications about new videos!
Would you like to help me translate these videos into other languages? Follow this link for instructions on subtitling: antonopoulos.com/video-transl...
MASTERING BITCOIN, 2nd Edition: amzn.to/2xcdsY9
Translations of MASTERING BITCOIN: bitcoinbook.info/translations...
THE INTERNET OF MONEY, v1: amzn.to/2ykmXFs
THE INTERNET OF MONEY, v2: amzn.to/2IIG5BJ
Translations of THE INTERNET OF MONEY:
Spanish, 'Internet del Dinero' (v1) - amzn.to/2yoaTTq
French, 'L'internet de l'argent' (v1) - www.amazon.fr/Linternet-large...
Russian, 'Интернет денег' (v1) - www.olbuss.ru/catalog/ekonomi...
Vietnamese, 'Internet Của Tiền Tệ' (v1) - alphabooks.vn/khi-tien-len-mang
MASTERING ETHEREUM (Q4): amzn.to/2xdxmlK
Music: "Unbounded" by Orfan ( / orfan )
Outro Graphics: Phneep (www.phneep.com/)
Outro Art: Rock Barcellos (www.rockincomics.com.br/)
Join the aantonop Channel: aantonop.io/joinaantonopyt

Наука

Опубликовано:

11 июл 2024

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 210

@Belowtheradars 5 лет назад

You, dear Sir, are the Buddha of Cryptocurrencies.

@guggnermalhii 5 лет назад

Amitofo and Amen to that

@pj6299 2 месяца назад

Buddha? 🤣

@SuperWarriorPoet 5 лет назад

Perfectly answered, what a legend

@jorjiang1 5 лет назад

i repeat that 24 words silently in my mind every night before i go to sleep

@cryptocap3383 5 лет назад

Great if u don't to have heirs!

@vakeone 5 лет назад

It's actually a bad idea to memorize all 24 words. If someone kidnaps you, they can torture you for those words. You can't give it up if you don't know them. That's also why I don't keep my hardware wallet where I live.

@coromboshan1212hh5 4 года назад

Sleep talking the seed is also a potential risk

@StakedWealth369 4 года назад

Just get yourself Bitfi

@cacoolkid1 3 года назад

@Я не знаю как говорить по-русски Not if you announce it publicly in RU-vid comments lol

@mulimotola44 5 лет назад

More important to have more than one wallet (more than one seed), each one backed up in different locations. So even if the worst happens, u never lose all your coins.

@GovernYourself 5 лет назад

Always great to have the basics reinforced, thank you Andreas for all that you do for crypto!

@morehumanity 5 лет назад

Seen this topic covered in many of your longer videos/lectures, but this video is really great as a standalone.

@GaiasFleas 5 лет назад

This is great. Thanks Andreas for your great work in the space!

@rjmiller2553 5 лет назад

Gratitude for everything you have contributed to Bitcoin awareness and educationa over the years.

@christine2027 5 лет назад

Thank you Andreas! I was just wanting this question answered! You’re answer makes perfect sense and is exactly what I am going to do!!

@gavinbrinck 2 месяца назад

thanks Andreas ! You have been my greatest Bitcoin guru since 2014. bless !

@YnotHro 5 лет назад

Ty for increasing the volume on your videos.

@bhushanstake3788 5 лет назад

Perfectly perfect....experience, knowledge, Skills all together at one place...thanks

@NinoGuariscoJR 5 лет назад

Thanks again for all you! You’re helping thousands of us.

@citadelgang9171 4 года назад

thank you Andreas! And thanks to Adam Meister for bringing me here!

@MawaMaverick 4 года назад

The last part was cool. Nice one. Thanks

@cryptob4bc983 5 лет назад

Your Wealth of Knowledge Is Amazing! Thank You.

@davearthur8656 2 года назад

Great content. Thanks for breaking it all down for us.

@MrHowzaa 5 лет назад

The biggest threat to having crypto are big mouths. as in rich people who own expensive artworks and like to show it off so can bragging about how many bitcoins you own can get you a visit from not so savory characters.

@cramsa Год назад

yup... it's like telling them you have expensive jewlry etc at home... just stay humble and stack sats and keep quite.

@PaulTheadra 3 года назад

Thank you for the explanation, I have the hardest time explaining to others levels of security one would use

@Circumnavigate 5 лет назад

Thank you Andreas !

@bitfinger 5 лет назад

simplicity is the hallmark of genius

@topsecret1433 5 лет назад

Excellent advice. Thanks Andreas!

@casuarinagirl8067 5 лет назад

Perfection - doing all of this already and did this right from day 1 (even with my tiny amount of crypto) - if I didn't want to lose this amount in a wallet or bank account then I felt I needed to protect it here in this space, and I have one of the copies in a fireproof, waterproof lockbox that only my trusted people know about in case something happens to me! No regrets in the worst case scenario of any type.

@jonathancampbell9539 3 года назад

Concise nonbiased information

@mikemcdonald3585 3 года назад

Great questions and answered, liked the one about whether security lessens over time. I have a tendency to think i need to keep doing something to preserve security.

@LanguageUnlimited 3 года назад

Great stuff as always. Legend!

@TalesFromTheBooth 5 лет назад

The teacher has spoken!

@thebitfi9472 5 лет назад

Very well said, Andreas.

@dj1jesus375 2 года назад

Short answer: Yes! (11:35) It's worth watching the whole video though.

@hnccoin2021 5 лет назад

Great answer Andreas !!

@InvestimentosDigitais 2 года назад

Perfect

@ronatola 3 года назад

Perfect statement @1:00 - @1:45

@palipalik2011 Год назад

Perfect advice! Thanks!

@vagabon327 5 лет назад

Thanks Andreas!

@frustratedmajority851 Год назад

For me, it's a trezor model T with the passphrase feature enabled. The passphrase just protects me in case someone managed to stumble upon my 12 word mnemonic. 12 words instead of 24 because I can effortlessly memorize them, and even though the 12 word mnemonic is only 128 bits of entropy... according to several entropy calculators, my passphrase bumps up my total entropy to 298 bits. Add two backup Trezor One's to the mix for redundancy and that's about as secure as I ever care to have

@velezmusic4350 2 месяца назад

When you say backup - you mean each subsequent Trezor also was set up with the same wallet ? Your system seems comprehensive but simple I like it. Thank you

@banzobeans 5 лет назад

Beautiful response

@cryptocap3383 5 лет назад

Every single crypto investor needs to see this

@johnnys2714 5 лет назад

Really well stated, well done 👍

@taxxxiddriver Год назад

Excellent advices.

@Jay-yy5rp 5 лет назад

Great answer

@felixgorrindo7471 5 лет назад

You are the man Andreas

@TheCryptocurrencyPortal 5 лет назад

Love your channel!

@cryptomaniac3327 5 лет назад

Brilliant answer

@goodvibes9821 5 лет назад

love this guy

@Decentralized_World1 3 года назад

Wise words from a wise man. Andreas always makes me feel better about owning crypto

@lilbean_eth 3 года назад

As always, AA has the answer. Thank you.

@StakedWealth369 5 лет назад

430 stainless steel sheet and metal punch set for stamping the phrase is perfect against corrosion or fire.

@EntropyBeater 5 лет назад

And make sure the embossed side is covered by another stainless steel sheet and store it in tempered-evident sealed envelope, to prevent people 'feel' the emboss without opening the envelope.

@TheHonestFoodTeller 4 года назад

Плюс гумена боя отгоре и сигурна парола (passphrase)

@CanesFan65 5 лет назад

THANKS YOU for addressing this issue. I had the exact same question/complaint about Trace's assessment. I thought Trace's opinion was WAY TOO COMPLEX for the AVERAGE person and that he was being quite pompous to not address how THE AVERAGE PERSON should handle security. While it is OBVIOUS that it will differ depending on the level of expertise - Trace makes it should as though - his suggestion was the only suggestion and if you don't use that COMPLEXITY - you are at risk. I agree with you 100%. You are AT RISK if you don't understand how YOU can best secure YOUR keys. Simply put - If you try to do something you don't understand - You are at GREATER RISK.

@eyemallears2647 5 лет назад

Thanks

@lourdusamy5232 Год назад

Excellent project

@JuanRodriguez-km9hl 3 года назад

Great video

@scorch4299 Год назад

I suggest you pick a day of the year to check on your backups...make sure theyre still there, undamaged, you still remember everything. This is something practical you can do, once per year to ensure its safety. Also, make sure you have a method of passing on in the event of your death, if thats important to you.

@cebas7 8 месяцев назад

I smiled like an idiot with your explanation, you explain it BRILLIANTLY! THANK YOU!!!!

@user-dn5bx2iu3e 2 года назад

And telling the truth gets you a sub.

@stevesmith4166 5 лет назад

Morning Andreas. I have an absolute noob question. I have EOS accounts, and over the last few months started looking at Bitcoin. I seem to be confused whereby Bitcoin keys seem to be different to EOS accounts. In short, I bought a ledger to hold cold storage, but am unsure how it works. I have set it up with recovery seed etc, and then installed the Bitcoin APP, but am hesitant because I have not associated any private keys to it. Am I merely being a numpty? Are the keys already in it? Can I just send my exchange based BTC to it now? I feel this is probably far simpler than I imagine it. Chuck me a bone please LOL

@sango73 5 лет назад

I do appreciate a lot your content Andreas. Thank you a lot ! BUT PLEASE FIX YOUR MIC / audio is oversaturated and not crystal clear...

@danmatiesanu6823 3 года назад

What the hell is that 4-6 pass phrase that goes t protect the seed? How do you create that?

@reshmab1226 4 года назад

Wow... Great vid

@ChiefEngineeringOfficer 3 года назад

how secure is a bluetooth hardware wallet like this nano x for example?

@Metacognition88 3 года назад

Hands up!

@joemorgese 4 года назад

Thx

$@fracsorg$

@fracsorg 5 лет назад

Hi Andreas, great answer. Thank you ! Did you manually edit the google subtitles? Some words have been added in square brackets like "Ledger" becomes "Ledger [Hardware Wallet]". Some things have been removed like "Umm so here's the thing." --> "Here's the thing:" and phrases changed. "The different audiences, different groups of people are going to have different risk models and they're also going to have difference ahh tolerances for technical complexity" --> "Different groups of people will have different risk models and tolerance for technical complexity". Just curious as to whether you uploaded the subtitle script, or whether google AI made the modified script from the audio.

@aantonop 5 лет назад

I have subtitles manually edited, yes. The subtitles that RU-vid auto-generates are usually awful.

@batsmasherbatsmasher3177 5 лет назад

where can i download the Unobatinuim Linux distro ?

@ipconfigearth102 3 года назад

How to verify a file signature of the trezor bridge?

@nion456789 5 лет назад

Smashed the like

@cramsa Год назад

Even a bitcoin core dev messed himself up putting his seed phrases in an internet connected device but he thought he was safe because he encrypted it in a file BUT he put his password manager on the cloud or something like that and the attackers got to it…. Your keys in an hardware wallet with updated firmware IS SUBSTANTIALLY BETTER than some crazy setup some of these “experts” suggest.

@MatejKesan 3 года назад

Lol the ending!

@ncflg7667 5 лет назад

Isn't there also the risk that Trezor or Ledger releases a malicious firmware update?

@cxMLG 5 лет назад

Yep, the only insurance is us knowing the owners of trezor/ledger.

@Tapepusher 5 лет назад

This is such a shame that you'd be dependant on that. We'll get to trustless eventually as it should be, but it's lots of hard work and time.

@Sadrx 3 года назад

No. Updates are open source. You can review the update yourself or lean on the technical expertise of the entire bitcoin community to review the firmware updates.

@kotgc7987 3 года назад

Is there a list or diagram on these processes please? After all this is setup, I'm just a noob who would like easy day to day fruit juice purchases, with my savings safe.

@thingsthatmake 2 года назад

How would one add a passphrase to ledger nano? There is only option for a pin on the device? Would be great to do this since the 24 words might be guessed by some random person wanting to win the crypto lottery?

@thingsthatmake 2 года назад

Ok, now I see that the 24 words are chosen from a large list of 2048 words, so odds are astronomical. However, if someone figured out how the wallets create the seeds in the first place (if not totally random) then they could work backwards to re-create them from there... Hmm.. I guess the passphrase is a good idea.. maybe later I can get to it.

@josepareraspintopereira7416 8 месяцев назад

Otimista

@TheHonestFoodTeller 4 года назад

Polymer paper + lamination + tamper proofing.

@MawaMaverick 4 года назад

Hey Andreas thanks for this. Is it safe to use online password managers like LastPass and Keeper security?

@martinkirov3762 5 лет назад

Andreas for Secretary of the Treasury!!!

@jpp59 5 лет назад

Good explanation. Even high technical and professionals fucked up. Look at what happened to quadrigacx. The ceo died and he was the only one who knew how to retrieve fund from their cold storage, 190millions usd lost... Keep it simple and make sure your siblings knows how to retrieve the funds when you are gone.

@MatCendana 5 лет назад

Thanks for mentioning this here. I did a search and found out this is very new. cointelegraph.com/news/crypto-exchange-quadrigacx-missing-145-mln-after-death-of-founder

@whyask8044 5 лет назад

stop saying he died. he stole the money and ran away.

@MatCendana 5 лет назад

@@whyask8044 Based on the latest reports, that reported 'death' is very suspicious. At that very young age (like this is the Middle Ages), and dying in India where certificates aren't too difficult to obtain. Then him being the only one who has access to the private keys, which isn't the norm when it concerns exchanges' cryptos. On the other hand he had been very thorough making plans for his family. I suspect the wife is likely also a conspirator. Maybe others at the exchange too. Looks like an exit scam with scumbags running off with customers' fund.

@b.griffin317 5 лет назад

if it's a scam, wouldn't it be obvious if those addresses start getting drained at some point?

@AGCRetrogaming 2 года назад

The most of the hard wallet the brands say even if the hard wallet is damaged or lost for some how you can restore your wallet with the passphrase in any other hard wallet. So if that's the true, my question still in place how hard wallet still secure enough? How still secure against brutal force trail and error to find out my private key?

@TrichsRUs 5 лет назад

I have ledger and don’t recall being given an additional “pass phrase” with my 24 word seed.

@cryptoinsider9305 3 года назад

This is a Valid Question. How do we get the Pass Phrase?

@susmitasinha019 3 года назад

You are not GIVEN a passphrase but you have to choose one on top of the seed phrase that's generated by the hardware wallet. Seed phrase alone = access to a set of addresses & corresponding private keys of a hierarchical deterministic wallet. Seed phrase + passphrase = access to a completely different set of addresses & corresponding private keys of another hierarchical deterministic wallet.

@cryptoinsider9305 3 года назад

@@susmitasinha019 Thank you for the explaination, I have more understanding now.

@RL-hh2tb 3 года назад

@@susmitasinha019 so where are you prompted for the passphrase? Will the ledger device for instance, prompt you? Thank you

@MrTno1TrickShot 2 года назад

What if the hardware wallet company goes bankrupt and you loose the hardware wallet but you have your seeds all save how can you get access to your cpbitcoin?

@horrificpleasantry9474 3 года назад

Kraken directs users directly to this video for an explanation of why they're not a wallet service and why we should consider a 'hardware wallet.' I haven't watched the video yet. I've been learning about crypto for less than a week, and here to learn. Just thought someone might appreciate knowing.

@anthonywayner8734 3 месяца назад

Answer the question!!!!

@billyjean9484 11 месяцев назад

No. Ledger taught us (by accident) that they easily have access to our private keys. They originally swore that it was impossible.

@pomp4401 3 месяца назад

Delusional

@billyjean9484 3 месяца назад

@pomp4401 only multi sig using different hardware wallets will survive.

@bobjones9406 3 года назад

Memorize the seed?

@arkad7633 5 лет назад

seeds in metal cards

@lakemckenzie 5 лет назад

He talking about that sweet spot. Sounds like some good......... Nevermind.

@rydmerlin 2 года назад

You didn’t mention invisible ink ;-)

@sukandalangley3734 5 лет назад

lolol me all day... def an intermediary in storage techniques and many times have I put my hands up and left it on Coinbase lol

@andrewgregor3692 5 лет назад

Simple you use the Blue Protocol wallet way way better than a trezor or ledger and has additional security features no other wallet has , basically the most secure wallet presently available

@IRONBBB 3 года назад

Crypto Legend

@climbers1376 5 лет назад

I love you

@nurumusa9912 5 лет назад

i think the guy that ask the question probably wants to add complex security layer on top of what he has. this is dangerous as too much security without proper management is dangerous.

@paulinthailand 5 лет назад

this has the best likes to dislike ratio i have ever seen

@2_Maggy 3 года назад

Hi, you are absolutely Genius, happen exactly to me I lost my crypto I don’t know even how I send but I didn’t receive on my wallet and no customer service from ledger nano x.

@Jack-ny7kn 3 года назад

What is he talking about by pass phrase? Like encrypting the 24 word seed???

@islandbee 5 лет назад

AA, is there a technical analysis tool that is used to find that "sweet spot" for individuals or enterprises? Would they use something like a SWOT analysis to assess an optimal solution?

@michael4383 5 лет назад

why people always overcomplicate things? you have a hardware wallet? thats fine.

@islandbee 5 лет назад

@@michael4383 - Falco, because humans are complicated. And I don't have a HW wallet. Rock me Amedeus!

@napoleon2564 5 лет назад

If you have less than 100 btc a trezor is fine.

@islandbee 5 лет назад

@@napoleon2564 - In my hometown, there was a flyer posted up for a $500 reward from someone who lost their Trezor out in the streets. This tells me that that there needs to be more training and guidance when it comes to storing and managing cryptos. Feel bad for the guy. Yikes! 😱

@napoleon2564 5 лет назад

@@islandbee thats kinda dumb. If you have the paper backup you can just sweep the funds into a hot wallet and send them to a new trezor. They're like $80.

@guitarflash2049 3 года назад

sure this should be secure enough

@sommi888 5 лет назад

*MIKE* asks *MIKE* asks *MIKE* 🎙

@marcusyeagle6523 5 лет назад

Know what you do not know

@banzobeans 5 лет назад

ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-wvVPdyYeaQU.html

@donwood8741 5 лет назад

Anton, another great video. I have a question for you, if you or others on the thread could answer. I have 95% of my bitcoin on a Ledger. It has a 24 word seed phrase, which I have memorized. However, I don't know how to test it it works! I don't want to buy another Ledger and enter it in that. I'm hesitant to enter that phrase into a different wallet (Enjin etc.). What is the 'best' (compromise between convenience, security, cost?) way to test if a seed phrase backup works? Thanks!

@aantonop 5 лет назад

The standard procedure is to test (at least once, if not more than once) that your seed phrase works before you put any crypto on it. But both the Ledger and Trezor hardware wallet applications have menu options and instructions that will help you to test your recovery seed without wiping the device. *Do not wipe the device until you have tested that your seed works.* support.ledger.com/hc/en-us/articles/360007223753-Recovery-Check blog.trezor.io/test-your-seed-backup-dry-run-recovery-df9f2e9889 Regarding memorization: twitter.com/aantonop/status/1092201465903497217

@donwood8741 5 лет назад

@@aantonop Thank you! I'll give it a go.

@michael30000 3 года назад

Create a riddle that can only be answered and unlocked by your family lol

@amyhoang9140 3 года назад

Can the person who has the seeds gain access to your cryptos without the hard wallet if needed?

@aantonop 3 года назад

Yes.

@amyhoang9140 3 года назад

@@aantonop Great! Thanks. So this means I still can get my cryptos without my wallet (I actually lost my usb cable to trezor one and have not been able to find a compatable usb cable to use). Can you please explain how or do a video on this? It's my understanding that if you lost your wallet, you can only use the seeds to transfer cryptos into another same type of wallet. Is it true?