If you enter your private key in a web application, the server will know it. This should never be done, for obvious security and privacy reasons.

This breach of security doesn't happen if you use an application that runs on your smartphone or computer and is free software, and therefore open source. This is because if that application were sending your private key to an external server, that instruction would have to be in the code, and it would be easy to discover...

Reply to this note

Please Login to reply.

Discussion

if the web app is fully JS running in the browser you could avoid the "send to the server" part...