Can malware capture your recovery seed?

19 replies 106 views
Posts: 83 · Reputation: 179
#1Aug 14, 2023, 04:19 AM
When you set up a crypto wallet, you get this mnemonic code. You need this to restore your wallet later if something goes wrong. But if someone has access to those words, they have your entire wallet. Think about it, what if a Trojan on your device is designed to find recovery seeds or private keys? That's a serious risk.
4 Reply Quote Share
Posts: 154 · Reputation: 163
#2Aug 14, 2023, 02:00 PM
Honestly, I’m not sure why this is a concern. Isn’t everyone here aware of clipboard viruses and Trojans? We all know these risks, right? It's super important for Bitcoin users to prioritize security since we handle our funds directly without middlemen. These malware types have been around for a while, and many have lost money because of them.
2 Reply Quote Share
Posts: 124 · Reputation: 3
#3Aug 14, 2023, 04:24 PM
True, exposing private keys to keyloggers or screen capture malware is a real worry. I usually disconnect from the internet when I create a new wallet to avoid sending any data out. I jot down my mnemonic on paper instead of copying it. Using the auto-complete feature for verification is way safer than typing it all out. But honestly, no matter what you do, there’s always a risk.
4 Reply Quote Share
mr_apeNewbie
Posts: 401 · Reputation: 35
#4Aug 14, 2023, 04:56 PM
That's why air-gapped systems are a thing, especially in cold storage. If you’re on a clean machine that’s not connected to the web, you significantly reduce the risk of getting infected by malware that could steal your seed phrase. But even then, if your device can get infected, a malware could access your wallet file too.
5 Reply Quote Share
0x4lphaFull Member
Posts: 519 · Reputation: 509
#5Aug 14, 2023, 10:40 PM
Avoiding malware is key. Using a cold wallet on an air-gapped device, as someone mentioned, is smart. If you keep your wallet on such a device, malware can't touch it as long as it stays disconnected. It’s highly advisable for anyone wanting to hold Bitcoin securely.
3 Reply Quote Share
bear100Hero Member
Posts: 123 · Reputation: 2026
#6Aug 15, 2023, 01:26 AM
Exactly, don’t backup your seed phrases online! That’s asking for trouble. Any online backup poses a risk, especially since hackers are getting smarter every day. Using air-gapped devices is one way to enhance security, just remember to disable all connections to the internet.
5 Reply Quote Share
0x4lphaFull Member
Posts: 519 · Reputation: 509
#7Aug 15, 2023, 01:36 AM
Some alternative methods can boost your backup security too. You could use word extensions for mnemonics or encrypt seed phrases onto a USB drive. There are many routes to take if you want to secure Bitcoin, just gotta choose the right one.
3 Reply Quote Share
dan.protoNewbie
Posts: 11 · Reputation: 5
#8Aug 15, 2023, 03:25 AM
Believe it or not, keyloggers exist out there. Trust me, I learned the hard way. For regular users, all these precautions can feel overwhelming. It’s easy to misplace or lose a file on a USB stick... Maybe starting with a solid hardware wallet should be the go-to recommendation.
4 Reply Quote Share
laseryesSenior Member
Posts: 190 · Reputation: 1504
#9Aug 15, 2023, 09:01 AM
Yeah, malware isn’t just malware. There are hardware backdoors too, and even weird sounds from your hard drive could potentially steal data off your PC. It's all situational. Air-gapping is powerful since malware can’t do much if it can’t reach your computer.
2 Reply Quote Share
serHero Member
Posts: 580 · Reputation: 2321
#10Aug 15, 2023, 02:37 PM
If you notice weird stuff like high RAM usage or programs opening on their own, your device might be infected. The real kicker is, if your wallet is compromised, you might not even realize it until it's too late. Sometimes, malware is programmed to steal small amounts over time.
4 Reply Quote Share
dave.forkMember
Posts: 375 · Reputation: 185
#11Aug 15, 2023, 03:24 PM
If screen recording malware and keyloggers are your worries, just go with an air-gapped device. I don’t see seed phrases being any less secure when stored online than a compromised Bitcoin Core wallet file. Overcomplicating this is unnecessary.
4 Reply Quote Share
yield2016Full Member
Posts: 34 · Reputation: 538
#12Aug 15, 2023, 06:15 PM
I think the safest approach is using Linux. It’s more secure for sensitive info. Unlike Windows, it asks for root access to install programs, making it feel more secure overall.
4 Reply Quote Share
Posts: 83 · Reputation: 179
#13Aug 15, 2023, 09:58 PM
So, about encrypting mnemonics. Is it still safe with AES-256-CBC on Linux? I stopped doing this before, but I wonder if using a BIP39 passphrase might be better.
0 Reply Quote Share
0xNodeMember
Posts: 671 · Reputation: 80
#14Aug 16, 2023, 01:07 AM
Why even bother encrypting them? They belong on paper. Anything stored digitally, even encrypted, seems risky since you’ll eventually need to access the mnemonic.
2 Reply Quote Share
dave.forkMember
Posts: 375 · Reputation: 185
#15Aug 16, 2023, 03:30 AM
Sure, it’s secure, but it’s not better than writing it down. AES-256 is strong, but it gives no real advantage since you’ll still need to manage that encryption key.
4 Reply Quote Share
gang2015Member
Posts: 682 · Reputation: 62
#16Aug 16, 2023, 08:23 AM
Totally. But if you encrypt mnemonics with AES-256, your device better be secure. If malware's lurking, your mnemonic could be compromised during the generation or encryption processes.
4 Reply Quote Share
Posts: 83 · Reputation: 179
#17Aug 16, 2023, 10:49 AM
Right now, I don’t see the need for AES-256 encryption for mnemonics, but some wallets back up using that standard. Would be nice if others did too.
3 Reply Quote Share
LoneChadFull Member
Posts: 3 · Reputation: 478
#18Aug 16, 2023, 02:38 PM
I’d grab a cheap laptop, install only Bitcoin software from a USB stick, and connect it when needed. No browsing or installing additional stuff would keep my risks low.
3 Reply Quote Share
CryptoBitNewbie
Posts: 158 · Reputation: 28
#19Aug 16, 2023, 08:41 PM
If you pick an air-gapped wallet, ensure it stays completely offline. If you connect it even once, it’s not truly air-gapped. You can handle transactions with a separate online watch-only wallet that just signs on the air-gapped one.
4 Reply Quote Share
LoneChadFull Member
Posts: 3 · Reputation: 478
#20Aug 17, 2023, 02:19 PM
Got it, thanks for clarifying. So, I need to transfer signing data to an online device to get it on the blockchain. To stay safe, using CD-Rs might be smarter than USB sticks. A blank DVD is cheaper and less likely to be infected.
4 Reply Quote Share

Related topics