Kuidas Bitcoinerid peaksid kasutama oma riistvaralisi rahakotte täiustatud turvalisuse tagamiseks

Allikasõlm: 1554486

Riistvaralised rahakotid võivad kaitsta teie põlvkondade rikkust. Kasutage neid kõrgeima turvalisuse ja privaatsuse saavutamiseks.

See on SatoshiLabsi Trezori kaubamärgisaadiku Josef Těteki arvamustoimetus.

Whether you’re just contemplating buying your first hardware Bitcoin wallet or have already had one for years, it’s always a good idea to refresh on the basics of these marvelous devices. Contrary to popular belief, a hardware wallet isn’t a “set it and forget it” tool that will take care of your bitcoin for you. Instead, a hardware wallet can help you with your ongoing bitcoin security.

Millal ja miks peaksin riistvaralise rahakoti ostma?

Since hardware wallets start around $70, it’s obviously not an attractive idea to buy one if you’re just dipping your toes into Bitcoin. There is no clear cutting-off point after which it is imperative that you buy yourself a hardware wallet, but a good rule of thumb is to get one once you have around $1,000 worth of bitcoin to protect. When you stack regularly and bitcoin appreciates in the meantime, chances are you’ll cross the $1,000 threshold quickly, so don’t put it off for too long.

Mõned inimesed on seisukohal, et riistvaralised rahakotid on üleliigsed ja vana telefon/sülearvuti töötab nende asemel suurepäraselt. Selliste üldotstarbeliste seadmete probleem seisneb selles, et sellise riistvaraga saab töötada praktiliselt kõike ja kui te pole kogenud turbeekspert, ei tea te, kas seade on tõesti turvaline, isegi kui see on Interneti-ühendusest lahti ühendatud (ja ausalt, turvalisus eksperdid eeldavad pigem, et see pole esiteks ohutu). Riistvaralised rahakotid on eriotstarbelised püsivaraga seadmed, mis teostavad piiratud hulga protsesse, nimelt võtmete genereerimist ja nende võtmetega krüptograafiliselt allkirjastamist – seda kõike rangelt võrguühenduseta keskkonnas.

Taastusseemne üleskirjutamine ja kaitsmine

When you’re setting up your hardware wallet, one of the first things the wallet does for you is that it generates your private keys. To ensure you will hold on to your bitcoin even if the particular device is lost or breaks down, you will be prompted to write down your recovery seed: a human-readable secret that can be used to recover your private keys in other compatible wallets.

Writing down the 12 or 24 words that make up the recovery seed is one of the most important things you need to do in order to protect your bitcoin. Hardware wallets typically do not show the recovery seed again — you need to write it down and keep it safe during the setup process.

Siin on mõned põhilised näpunäited oma seemne kaitsmiseks:

  • Write the words down with your own hand on a piece of paper
  • Alternatively, you can use a more robust solution such as Krüptoterasest kapslid or other metal solutions
  • Never take a photo or keep a digital copy of the seed — hackers are actively looking for such data
  • Store your recovery seed in a location with controlled access away from water, fire hazard, etc.
  • Arvestama Shamiri varukoopia seadistamine — mitu taaskasutusseemnete jagamist, mis suurendavad teie seemne ohutust

Taastamisseemne kontrollimine

Once you have your recovery seed written down, it’s advisable to verify that it really works to restore your wallet. You want to check the integrity of your seed before there’s any bitcoin attached to it, not after.

Parim tava on lähtestada oma riistvarakott tehaseseadetele ja seejärel taastada rahakott seemnest. Teise võimalusena pakuvad mõned riistvaralised rahakotid kuivkäigu taastumine — this option will make you more comfortable if you already have some bitcoin stored on the device. To perform the dry-run recovery in the Trezor Suite, for instance, navigate to settings, select “Check Backup” and follow the prompts (note that the connected Trezor device should respond in the third step — never input the seed words into a computer if the device doesn’t respond!)

Vaadake selle galerii 3 pilti saidil algse artikli

Hea mõte on oma seemnevaru regulaarselt kontrollida. Kui teie turbeseadistus hõlmab mitut Shamir Backupi jagamist, kontrollige neid vähemalt iga 12 kuu järel, et veenduda, et jagamised on endiselt terved ja vajadusel kasutamiseks valmis.

PIN-koodi ja parooli seadistamine

Most hardware wallets can be secured with a PIN. A good PIN can keep an attacker from stealing your funds if they discover your device, but note that a PIN only protects the device, not the recovery seed. So if the attacker were to discover both your device (protected by the PIN) and your recovery seed, they might steal all your bitcoin, as with a recovery seed in their hand, they don’t actually need the device itself.

Õnneks on olemas võimalus leevendada ohtu, et ründaja leiab ka teie taastumisseemne. Mõned riistvarakotid, näiteks Trezori seadmed, pakuvad võimalust kaitsta oma seemet a parool. Parool aitab teil luua täiesti uue rahakottide komplekti, mis saadakse taastamise seemne ja konkreetse parooli kombineerimisel. See tähendab, et seeme ise muutub ründaja jaoks kasutuks, kuna ainuüksi taastamisseemnega ei saaks ta õiget rahakottide komplekti tuletada. 

Parooli otse seadmesse sisestamine välistab parooli klahvilogijasse lekkimise ohu.

Kui teil on raske PIN-koodil ja paroolil vahet teha, pidage meeles: PIN-kood kaitseb seadet, parool kaitseb seemet. 

If you opt to use the passphrase, do not rely on your memory. If you forgot the passphrase, there will be no way to access your funds. It’s imperative that you create a backup of your passphrase, similar to what you’ve done for your seed. Keep the seed and the passphrase separate and you will make it impossible for attackers to steal your funds if they accidentally find either of those.

Seadme ekraanil on põhjus: kontrollige alati oma aadresse!

Hardware wallets are useful beyond simple HODLing. One of the main benefits of these devices is the ability to receive and send bitcoin in a very secure manner.

Ühine lõikelaua pahavara saab muuta aadressi, mida kopeerite/kleepite arvutisse. Kui teie arvuti on sellise viirusega nakatunud, on ainus kaitseliin võrrelda seadmel näidatud aadressi saatva/vastuvõtva vastaspoolega (börsi veebisait, sõbra telefoni rahakott, signaaliteade jne). See on üks põhjusi, miks kõik oma nime väärt riistvaralised rahakotid peavad olema oma ekraanidega ja miks mõned külmkambrilahendused, nagu näiteks lähiväljaside (NFC) kaardid ilma ekraanideta, ei ole head disainivalikud.

When receiving bitcoin, the device will show the full address on its display, so that you can independently verify that the address shown in the companion app is the correct one (i.e., generated by the device). After you verify the address and give it to your counterparty (either as a scanned QR code or copy/pasted string), verify it again to make sure it wasn’t modified by the clipboard malware.

Kontrollige alati oma vastuvõtuaadressi seadme ekraanilt!

When sending bitcoin, the process involves multiple checks: verifying the address you’re sending to, the associated fee, and the total amount to be sent. Be sure to double check everything!

Ärge kiirustage kõike kontrollides. Ainult seadme ekraan näitab teile, mis riistvaralises rahakotis tegelikult toimub, seega veenduge, et saadate või võtate raha vastu tõesti sinna, kuhu peaksite.

Ettevaatust kalameeste eest!

There are many bad people out there who would like to steal your bitcoin. Some choose to spread their tentacles through malware like the one described above, others try to take your coins through social engineering techniques — fake websites, e-mails or apps that try to make you type your seed along with the passphrase are widespread.

Parim kaitse on meeles pidada üht lihtsat reeglit: Ärge kunagi sisestage oma seemet veebisaidile või rakendusse ilma riistvaralise rahakoti juhisteta. When recovering your bitcoin with a hardware wallet such as a Trezor, you either type the seed words on the device itself (possible with the Trezor Model T), or the device tells you the order in which you have to type the words (like the Trezor Model One), so as not to leak the correct order to possible keyloggers or other spying techniques.

Marsruutimine läbi Tori, teie täieliku sõlme ühendamine

To improve user privacy and prevent IP address leakage, it’s advisable to route all the bitcoin-related traffic through the Tor network. Tor is better than a virtual private network (VPN), as VPNs often keep logs of customer traffic that can leak or be handed over to authorities if requested. With Tor, your IP address is truly hidden, so your bitcoin transactions remain private (although keep in mind that Tor by itself won’t protect you if your bitcoin addresses are linked to you because you bought bitcoin on a centralized exchange that knows your identity). You can route your Bitcoin transactions originating from your hardware wallet with Bitcoin Core (vaadake seda juhendit) või muu ühilduva rahakotiga.

To further strengthen your privacy and sovereignty, you can connect your hardware wallet to a full node. When running your own full node, you don’t have to rely on any third party to broadcast your transactions and to give you the latest state of the Bitcoin ledger. You can run a Bitcoin full node on your home computer, laptop or a Raspberry Pi device, and connect your hardware wallet through a Bitcoin Core HWI or Electrum.

Valmistuge tõelisteks riskideks

The most common risk when handling bitcoin is accidental loss. Throwing out the recovery seed, sending or receiving funds to a wrong address, falling for a phishing scam, forgetting a passphrase, or failing to take self custody and keeping coins on an exchange that’s later hacked — these are much more probable risk vectors than any government seizure. The inconvenient truth is that Gitcoiners are their own worst enemies.

Hea reegel, mida meeles pidada, on katsetada kõike. Pärast uue riistvaralise rahakoti seadistamist kontrollige, kas teie taastamise seeme tõesti töötab, pühkides seadet või teostades kuivkäivituse taastamise. Kui saadate oma esimese tehingu riistvaralise rahakoti abil, saatke kõigepealt paar dollarit, et saada ülevaade, kuidas kõik toimib. Kui seemne kontrollimisest on möödas mõnda aega, veenduge, et see on ikka alles. Kui kaalute parooli kasutamist, proovige uude rahakotti saata vaid mõned satsid ja seejärel paar korda parooliga ja ilma selleta sisse ja välja logida. Kui olete kunagi stressirohkes olukorras, on teile kasuks teadmine, kuidas riistvarakott peaks reageerima.

Samuti pidage meeles, et kõik suuremad riistvararahakotitootjad kasutavad vastastikku ühilduvat taastamise seemnestandardit (BIP39 tavalisele seemnele või SLIP39 for Shamir Backup), so even if a particular manufacturer went bankrupt, your coins will always be safe and you’ll be able to recover your bitcoin in a multitude of open-source wallets, hardware of software.

See on Josef Těteki külalispostitus. Avaldatud arvamused on täielikult nende omad ja ei pruugi kajastada BTC Inc või Bitcoin Magazine'i arvamusi.

Ajatempel:

Veel alates Bitcoin ajakiri