If you hodl your bitcoin on a signing device and haven't given it much thought, you're not alone, but bitcoin hardware wallets aren't all a perfect solution and have their flaws thanks to #[0]

https://thebitcoinmanual.com/articles/achilles-heel-btc-hardware-wallets/

Reply to this note

Please Login to reply.

Discussion

Good piece. A lot of thought must be put into the perfect mix for a multisig quorum. Another consideration, do you trust each device to generate seeds on its own or do you add an additional layer by rolling your own for all or some?

When we don't have oversight over the source code or the supply chain, before the device gets to us we should be cautious. The incentive to backdoor a device only increases with time.

No hate on the wallet manufacturers there are some great devices out there,

I do think adding your own entropy into the seed creation process does provide some extra protection since you're not fully trusting the chip on the device and code to generate randomly.

You could also have 1 of your multi-sig created using an open source device like your seed signer or use Tails OS/Glacier Protocol to spin up a 3rd on a virtual machine

No 100% perfect solution, but you have options, its all about how much time and effort you're willing to commit to secure your stack

Again an excellent write-up from The Bitcoin Manual.

This time a good explanation about Hardware wallets security.

#[1]