132 sats \ 21 replies \ @quark 17 Dec 2023 \ parent \ on: How to secure backup seed at the airport? bitcoin
no no no, don't memorize the 24 words. You will forget them. That technique, while it is good, it is not 100% safe. The brain changes with age, and for the worst, and also, you could have an accident, some head trauma, that can make you forget everything.
Memorize your passphrase which is like the 25th word. The passphrase can be something more easy to remember for you than the 24 random words because you make it, and still be secure just to cross the border and airports.
Who said I memorized 24 words?
reply
oh it is true
I thought you were, because the way you described the technique adding 2-4 words each time. But you didn't say this was to memorize the 24 words.
reply
How to use passpharse to recover 24 words? Do you mean simply encrypt them using some algorithm and passpharse?
reply
Download Sparrow Wallet on your desktop computer and you'll see that when you create new wallet, not only can you select 12/24 words, but you can select an option to add an additional word or set of characters of your own choosing. This word or set of characters does not have to be part of the BIP39 word bank.
reply
the passphrase is your 25th word or 13th word depending if you use 24 or 12 for the seed. It is created when you create your wallet. If your wallet doesn't provide you with a way to enter the passphrase, change your wallet. Memorize your passphrase just to cross the airport.
You were worried that they can scan your 24 words at the airport. If they enter those 24 words without your passphrase, they would only see an empty wallet. They can't do anything with it. They would need the 25 words in order to access your sats.
reply
You simply mean a wallet that additionally requires an additional password to recreate the wallet?
reply
A passphrase is optional. It's just a new word, of your choice, added to the end of your 12 or 24 word seedphrase.
A specific 12/24 word seedphrase is for a particular wallet. If you add a passphrase to the end of that, it's a completely different wallet. One person could have a seedphrase with 12 of the same words and another person could have those same 12 words + a passphrase and it would be a completely different wallet. Those two wallets would not be connected in any way whatsoever, even though their private key is almost exactly the same.
I have setup my passphrase to be very long and memorable, but easily reconfigurable (for me) so that if I want a completely new wallet, I just reorganize my passphrase, but still use the same seedphrase.
Example:
Let's say your 12 words are all the same:
goat goat goat goat goat goat goat goat goat goat goat goat
That's one wallet
Now lets create a new wallet:
goat goat goat goat goat goat goat goat goat goat goat goat + janfebmaraprmayjunjulaugsepoctnovdec [this last bit is your passphrase]
This is a completely different wallet and private key
This passphrase is similar to how I've done my own passphrase, but I use something else that is memorable to me. If I used the passphrase above and wanted to reorganize it, I could do something like:
febmaraprmayjunjulaugsepoctnovdecjan
or
decnovoctsepaugjuljunmayaprmarfebjan
and each of those would create ANOTHER completely different wallet/private key
reply
maybe it is interesting to use the goat example part as a passphrase too. You did the goat as representing the seed phrase part right? But we could use that in the passphrase too, it increases the length of the passphrase a lot while you only have to memorize the word goat and the number of times. low cost complexity added. should be always used with a more random string after it.
reply
Yes I guess you could
reply
yes. like sparrow wallet for example
it is not required. it is optional.
reply
okay
reply
deleted by author
reply
deleted by author
reply
Bad advice.
If the passphrase is chosen by an human to be easy to remember, chances are that it will be pretty easy to bruteforce given the seed phrase, since there is no rate limits besides the computing power to create a wallet.
The entire deal about password managers we use (or should use) today is to create secure passwords because humans suck at it.
reply
My passphrase is >25 characters long, but very easy for me to remember because of how I've structured it.
Good luck cracking that.
reply
There is absolute no way with the current technology to bruteforce a 25+ character passphrase that contain no known words or meaning.
The only question is if the way you structured it undermines these assumptions.
reply
You cannot effectively brute force attack a passphrase, can you? You need to contact the node and to check balance each time.
In any case, this was just to pass the airport, and then you could move the funds again to a more secure and backed up passphrase.
reply
You cannot effectively brute force attack a passphrase, can you? You need to contact the node and to check balance each time.
Why wouldn't it be effective if you are using one or more local nodes? It is just a database after all. And i think you don't even need to contact a node if you know at least one public address of the wallet.
reply
I don't know. Maybe. I'm not a hacker 😅
reply
There are plenty of ways to make things easy to remember AND secure. Don't let someone else's fear persuade you.
reply
indeed, 12/24 words seeds are easy to remember and secure.
reply