Bitcoin makes moving money across the internet incredibly easy, but that ease comes with risks.
There are plenty of ways someone can take your money, track your spending, or violate your privacy.
Fortunately, there are also some straightforward measures you can take to safeguard your digital currency and keep your spending habits private. Here are our top five tips to protect your bitcoins:
There is no limit to the number of bitcoin addresses (or wallets) that one person may have.
Therefore, you could easily have an address for spending money, an address for savings and even an address for receiving payments.
While web wallets are convenient, they should only be used like a checking/current account – as a place to store money you will be using in the near future. Thus, if you only keep a small amount of spending money in a wallet that gets hacked, your losses will be limited.
Remember, bitcoin does not work like a credit card. If you lose money fraudulently, that money is gone and there is nobody you can send a refund claim to. You can always contact the police, but it's unlikely they'll be able to get your bitcoins back.
Screenshot 2013-11-25 17.14.47
Thanks to taint analysis, it's possible to work out which bitcoin wallets are likely to be owned by the same person because of their transaction history.
If you have a 'spending' wallet and a 'savings' wallet, regular transactions between the two will provide a pretty clear signal to hackers which one is the address of your savings wallet.
Illegal activities aside, there is a legitimate reason to obscure that relationship, as it could allow someone to investigate how many bitcoins you have, which is something that should remain private. Would you reveal all of your financial details to a stranger?
The best way to obscure the relationship between your wallets is to transfer funds between them via a mixing service.
Such attacks have been reported by bitcoin users. A common solution is to keep your wallet's private key stored in an offline medium as an added layer of protection. This offline medium could simply be a QR code printed on a piece of paper or a plain text file stored on a USB key.
If you want to transfer bitcoins from an offline wallet to someone/somewhere else, you would first need to scan the QR code or enter the wallet's private key manually into an application like Blockchain. Once the application has displayed the balance of your wallet, you will be able to transfer bitcoins to the wallet address of your choice.
As an added measure, you could encrypt your private keys so that if they were discovered, they'd be useless without your encryption password – just don't forget your password!
Screenshot 2013-11-25 17.26.14
Assuming you are using a desktop client to store your bitcoin wallets, there should be an option to back up your wallet(s). Again, instructions will vary depending on your client.
By using such features, the public and private key to your wallet will be saved into a file. That's all any bitcoin wallet needs to retrieve your balance, as the actual value attached to your bitcoin addresses are stored as data on the block chain, not on your wallet application.
Once you have a file containing your wallet keys, you can put this anywhere: flash drive, optical disk, portable hard drive, on paper, etc.
You can even store these files on a cloud-based backup system like Dropbox, which offers robust data reliability. However, given that no cloud system is 100% safe, it would be wise to encrypt such data before uploading, Truecrypt is one such tool that can encrypt your wallet files.
One more thing...
Another example of a secure cold storage wallet is something called a 'brain wallet'. This is essentially a secret combination of words and numbers you carry around in your head. When you enter your passphrase into a site like brainwallet, it will unscramble it so you can obtain your private key.
David Gilson
coindesk.com
