It's a sad truth, but with millions of bitcoin users worldwide, there's billions of dollars of funds at risk right now from government, theft, hackers and general ignorance or confusion of how the various software and websites work.
Even those that think we have our bits together (such as I) are not computer security experts and simple can't know it all when it comes to cryptocurrency.
Where's the one stop shop resource? - Bitcoin.org? - Bitcoin.com? - Reddit r/bitcoin?
Why are there 1,000 cryptocurrencies? - What are the good ones? -
Bitcoin Maximalists vs Altcoin Enthusiasts
Just looking at the basic services in mass use today, there are a ton of problems and holes.
Blockchain.info Wallet
Blockchain is an online based wallet and it alone has 16 and a half Million Wallets. A lot of new bitcoiners are recommended to use blockchain.info's wallet for it's ease of use, accessibility anywhere with internet and it's familiarity and longevity.
As thus, many just create a blockchain wallet, hold their bitcoins in there and call it a day.
Hold up! - "Who controls the private keys?" you may ask.
Very astute question, congratulations. Well technically you and the site do. It is a bit confusing. Old school bitcoiners like to say, either you hold the private keys or you don't and the site does which you should never trust. (Trace Mayer says this all the time).
For blockchain wallets, if it only takes an "identifier" and a passphrase to open the wallet, where are the private keys? To me they're inside and potentially at risk. But, the bigger risk is people who never backup their wallet! - What happens if your email address is compromised, and that's the only place you stored your wallet identifier? Then you can't login. Sure, if you saved your seed phrase you could recover with that. But also, anyone who stores this seed phrase in digital form on a computer anywhere is at incredible risk if they are hacked there goes ALL your bitcoin on that wallet. As far as I know, blockchain.info is the only wallet that uses such a thing as an "identifier" to login.
So, word of advice for blockchain.info users: ALWAYS keep an encrypted backup of private keys and think about keeping most of your bits on a personal software wallet, the original QT classic wallet (now called Bitcoin Core) or a non-syncing wallet like electrum if you simply cannot stand downloading the full 130GB blockchain.
Coinbase Exchange
Back in the day (pre-2013) there were multiple operating bitcoin exchanges you could trade with within the US, usually accessible through just a regular anonymous account linked to your email address. In March 2013, that all changed:
"While many, including the FBI, speculated about how FinCEN would treat bitcoin exchanges, the mystery ended in March of 2013. Under the Bank Secrecy Act legislative framework (“BSA”), FinCEN is authorized to regulate banks and “other financial institutions.” FinCEN regulations require that such institutions keep records, file reports, and take other precautions against financial crime, money laundering, and terrorism"
SOURCE
After a number of exchanges and strangling level of regulations including differences between all 50 states for Money Transfer Business (MTB) licenses and KYC laws (Know Your Customer) may exchanges shutdown (and some were subject to "hacks" around the same time as well). Then we became left with this abomination called coinbase.
We used to have a diverse pool of exchanges to choose from. And we could trade all the altcoins on sites like Cryptsy before they gave into regulation as well. Ironically coinbase was targeted for a Class Action lawsuit that it had something to do in Cryptsy's collapse.
Coinbase is not a typical exchange like we used to know. Where you could use Dwolla or some other online money transfer services to send US dollars there, and buy on the open market. They don't even have live trading.
What's wrong with coinbase:
- No live trading
- They're heavily regulated
- You have to verify your account with your ID
- Venture Capital funded - i.e. big money has a stake in its development and it's not decentralized and free
I don't trust coinbase because I feel like they'd be tracking every transaction and store permanently and give it to the government when asked becuase otherwise they would risk being shutdown through the regulations they need to abide by for the path they picked to be a legitimate regulated exchange. So you could lose all your investment or be taxed or penalized if at any time the federal government wants to make bitcoin trading illegal or increase taxes on fiat currency's major competition. It's a threat to the status quo, very much.
I, as well as The Cryptoverse, totally recommend jumping ship from any centralized exchanges. Just use LocalBitcoins for your trades.
Users lucked out just last month when coinbase 'fought back' to keep users information private, but only for users with transactions under $20,000. You big spenders, the IRS has got your information, I guarantee it.
As always, if you find any information wrong, or you just disagree with my opinion, please do leave a comment or a response post, let's have that debate!
EDIT: Was also going to write a section 3 warning about upgrading or choosing wallets hastily, for example with the whole bitcoin cash split and people rushing to get their bitcoin cash if you install the wrong software and are hacked, then obviously you could lose bitcoin and bitcoin cash at the same time.
Keep bitcoin in a hardware wallet, which you have backed up. Then you retain control over your funds. Only transfer to an exchange to sell (if you have to use centralised exchanges). After the dramas we have had previously I can't believe people leave funds on exchanges.
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
good thinking, but still the learning curve on those confuses even me.
Perhaps a spare netbook as a software based 'hardware wallet' dedicated on that laptop?
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
Armory does a good cold wallet set up. I'm sure there will be YouTube videos on how to set it up
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
thanks I've heard of them for years
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
Great post. It's so dangerous to keep coins on exchanges, and even though they've heard this before, most will continue to do so for the convenience of it. That is until they suddenly can't access their coins because their exchange went belly up while they were sleeping. =/
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
thank you. I've been victim of closures, hacks, and government seizures all now and I maybe btce is the last straw for me to finally learn the lesson!
It's just sometimes hard to keep track of all the softwares; installing altcoin wallets for example itself sounds like a pain; so how do i diversify and maintain some semblance of ease of use and ability to access from any computer?
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
Buy a hardware wallet. I have several Trezor and can recommend them. You could also try the Ledger but I have never used this so can't comment on it.
Trezor is not expensive (around $80 I think) and is simple to set up. You can also store the main coins on it including all ethereum tokens.
It is also easy to use once coins are on it.
I don't suggest you use it if you are buying and selling coins daily as it will prob be too inconvinent but if you are not day trading it gives peace of mind that your investment is safe.
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
Everything is a trade-off between security and convenience. For my largest holdings, I personally keep a paper wallet (printed sheet of paper with my addresses and keys) as well as a Flash drive with either the same in PDF or a copy/backup of the actual
wallet.dat
or whatever it happens to be. I do have a tiny bit of coins on exchanges, so that I can speculate a bit when the markets are fluctuating. However, it's nothing I can't afford to lose. I keep up with the value of my holdings separately using MyCoinBag.Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit