Nostr Web Client

Confirmed my complicated ass, multivendor, multi key, air-gapped cold storage still works.

I trust no single vendor. No custodians. No recovery service.

This setup isn't for everyone and arguably isn't necessary, but for my situation and inheritance plan, it's the right solution for me and my family.

If you have any questions about self custody, hardware wallets or multisig feel free to ask and I'll try my best to help.

(Picture taken yesterday, all devices are back in different locations - I store nothing in my own house)

Reply to this note

Please Login to reply.

Discussion

Captain Sarahtoshi Nakamoto 2y ago

This is the way!

Diesel 2y ago

How did you confirm it works? Have to reset multiple devices and backup from seed(s)?

utxo the webmaster 🧑‍💻 2y ago

Just actually being able to broadcast a transaction. Had to get 4 keys together to do it.

Haven't tested recovery of this particular setup, but I did a test run first to confirm I can recover a multisig, then made a new one that never got tested.

Diesel 2y ago

Copy. See something new every day in this space. 4 different wallets to sign a transaction, I’m sure it was fun haha. But like you said it works for you and we have the option for setups like that or similar which is cool. Options are important and everyone will value different ones for their wants and needs, balancing ease of use and security

Canadian Progressive Bitcoiner 2y ago

2 cold card a trezor and a jade. I am jealous!

jin 🧙‍♂️ 2y ago

I’d love to hear your thoughts on #[2], and also your opinion on the Coldcard no longer being FOSS?

utxo the webmaster 🧑‍💻 2y ago

It's been some time that Coldcard wasn't Foss. Foss is obviously better for the ecosystem but they have a business to run and coinkite is not a charity, this was their choice to protect both their business while also letting us do our builds and audit everything. So makes sense to me.

Seed signer is an amazing project and helps protect your privacy but the components you buy don't dox that you're buying a Bitcoin wallet and lets you assemble your own hardware wallet which is a whole new level of don't trust, verify.

antifragilemoney 2y ago

did you have to interact with one or more other humans to successfully confirm? how many?

utxo the webmaster 🧑‍💻 2y ago

Nobody to confirm, only my node does that, but I did need to interact with humans to get my signing devices

Tom 2y ago

Thoughts on seed storage? Isn’t this in a way more vulnerable than wallets? I fear if someone found my seed plate they could just run off with it and use “recover” to bypass my wallet, right…?

My gut reaction would be… store seed plate in a separate safe than wallet, and multisig increases security, too. #wallets #bitcoin

Mark Camper 2y ago

True, seed is very sensitive. No one should ever have even an option to see it.

Adding a passphrase and storing it at different location should be the default level security, imo.

utxo the webmaster 🧑‍💻 2y ago

Cut your seed phrase in half and store in two locations, and/or use a passphrase

BTC_P2P 2y ago

I hate the complexity of multi-sig. Not that it is difficult per we but there are a lot of moving parts. Managing 3 keys, 3 signers, and their locations is tedious and obnoxious.

Tbh I think single sig plus OP_Vault will be a much better custody model. OP_Vault will be a check on hardware attacks and a really welcome fail safe for funds.

Any idea when / if OP_Vault will be merged?

ShiShi21m 2y ago

SeedSigner only multisig.

Just solved all your problems.

BTC_P2P 2y ago

Can you elaborate as to why? One seed signer for 3 keys?

ShiShi21m 2y ago

You can load Seedsigner with 3 keys at once, then sign the transaction.

Power it down, it wipes itself.

Basically all you need to store safely are the seeds.

The user experience is fantastic & makes multisig convenient.

3of5 is ideal btw.

ShiShi21m 2y ago

If you wanted to add in multi vendor security,

Id just buy a Foundation or Jade along with it or build a Specter DiY.

Anything that can handle QR PSBT & SeedQR.

Foundation should be adding SeedQR in it's next release 🤞.

SeedSigner only multisig > SingleSig w PP

Two vendor Multisig > over complicated setups

Just my 1nak.

snowflake 2y ago

I have a different and also complicated setup. Every couple of months I do full private key access flow just to refresh memory and to check if everything where it is planned to be.

Normally nothing kept / hidden is at my home

77fee23e... 2y ago

I am waiting for my seed hammer to arrive. I have a couple seed signers, a couple of jades, and a trezor. Going to try my first multisig setup.