<p>If the computer that holds your wallet.dat file is ever connected to the internet (which it surely must be) then every second that it is turned on it is being probed by thieves attempting to break into it. If any succeed, your wallet.dat file is unprotected and will be copied and used.</p>
<p>If you use email or a web-browser on that same computer then every message you look at, every page you read, creates a very real additional risk that your wallet.dat will be copied and used.</p>
<p>You could buy a cheap letter-punch and stamp your password into a sheet of metal and store it in a very safe place. Don't store important passwords in tiny weak magnetic fields.</p>

CC BY-SA 4.0
2021-01-14T03:28:43.373Z
RedGrittyBrick: "every second that it is turned on it is being probed by thieves attempting to break into it" reads to me like utter nonsense. And even if they do (automated), it takes there being some kind of horrible remote exploit for it to actually do anything whatsoever.
Explainer
CC BY-SA 4.0
2021-01-14T18:05:02.957Z
@Explainer: This is based on looking at the logfiles of my computers that act as servers. I see pretty continuous attacks on any ports exposed through firewall rules and this must mean the router's external interface is continually being probed. Simple desktop machines may a lower exposure but any full-node Bitcoin application has the possibility of being contacted by other bitcoin nodes and some of those may be hostile.
RedGrittyBrick
CC BY-SA 4.0
2021-01-13T12:18:57.920Z
2021-01-13T14:31:31.573Z
2021-01-13T14:31:31.573Z
RedGrittyBrick
<p>If we use bitcoin in the default way then its not much secure. We experienced this hack recently.
One of our client's server get hacked but the hacker unable to transfer the bitcoins from the node, because the wallet was encrypted and the wallet passphrase/password was with client only. So encryption saved the client assets.</p>
<p>Few suggestions:</p>
<ul>
<li>Always clear terminal history if encrypting btc wallet using bitcoin cli</li>
</ul>

CC BY-SA 4.0
2021-01-14T13:09:41.983Z
2021-01-14T13:09:41.983Z
Antier Solutions
<p>All my wallet.dats have no password. However, the internal hard disk where the &quot;live&quot; one is located is encrypted, and so are the offline storage devices where I have my &quot;cold&quot; wallet.dat.</p>
<p>I have known about the feature to encrypt your wallet.dat in Bitcoin Core for a long time, but never dared to do it. It feels like I will become one of those who forgot their password, even if I store it in multiple text documents on those redundant, encrypted, offline backups. I've had text files randomly get garbled many times for seemingly no reason. And it just makes my skin crawl to think of the possibility that I will one day have a wallet.dat but not be able to ever access it!</p>
<p>Plus, if I encrypt the &quot;live&quot; one, I can say &quot;good bye&quot; to any automation through the RPC API, which is obviously a requirement to run a Bitcoin-accepting service.</p>
<p>But the cold one? I feel extremely scared of it flying through my network cable away from my control. I wish I would dare to encrypt it, but I just don't. It's too scary. I'm already more than scared enough that my backup disks will fail or that I will forget the password to decrypt those! Or that they are all seized and broken into with their quantum computers.</p>
<p>I've spent a ridiculous amount of time worrying and thinking about my security, especially as the Bitcoin value has increased so much. Still, it feels like I'm not at all safe enough and that it's not even possible to be secure without going to such ridiculous lengths that life becomes one long ordeal.</p>
<p>And I don't even own lots of BTC. I can imagine how paranoid people with like 100 or 1,000 BTC feel now...</p>

<bitcoin-core><security><privacy><encryption><coldstorage>
Should I be using the "encrypt wallet" feature in Bitcoin Core?
G Havili
# Should I be using the "encrypt wallet" feature in Bitcoin Core?

(Asked by: username_0 on 2021-01-13)

All my wallet.dats have no password. However, the internal hard disk where the "live" one is located is encrypted, and so are the offline storage devices where I have my "cold" wallet.dat.

I have known about the feature to encrypt your wallet.dat in Bitcoin Core for a long time, but never dared to do it. It feels like I will become one of those who forgot their password, even if I store it in multiple text documents on those redundant, encrypted, offline backups. I've had text files randomly get garbled many times for seemingly no reason. And it just makes my skin crawl to think of the possibility that I will one day have a wallet.dat but not be able to ever access it!

Plus, if I encrypt the "live" one, I can say "good bye" to any automation through the RPC API, which is obviously a requirement to run a Bitcoin-accepting service.

But the cold one? I feel extremely scared of it flying through my network cable away from my control. I wish I would dare to encrypt it, but I just don't. It's too scary. I'm already more than scared enough that my backup disks will fail or that I will forget the password to decrypt those! Or that they are all seized and broken into with their quantum computers.

I've spent a ridiculous amount of time worrying and thinking about my security, especially as the Bitcoin value has increased so much. Still, it feels like I'm not at all safe enough and that it's not even possible to be secure without going to such ridiculous lengths that life becomes one long ordeal.

And I don't even own lots of BTC. I can imagine how paranoid people with like 100 or 1,000 BTC feel now...

**Tags:** bitcoin-core, security, privacy, encryption, coldstorage


---

## 2 answers

### Answer by username_1 on 2021-01-13. Score: 1

If the computer that holds your wallet.dat file is ever connected to the internet (which it surely must be) then every second that it is turned on it is being probed by thieves attempting to break into it. If any succeed, your wallet.dat file is unprotected and will be copied and used.

If you use email or a web-browser on that same computer then every message you look at, every page you read, creates a very real additional risk that your wallet.dat will be copied and used.

You could buy a cheap letter-punch and stamp your password into a sheet of metal and store it in a very safe place. Don't store important passwords in tiny weak magnetic fields.

> **Comments:**
> **username_2**: username_1: "every second that it is turned on it is being probed by thieves attempting to break into it" reads to me like utter nonsense. And even if they do (automated), it takes there being some kind of horrible remote exploit for it to actually do anything whatsoever.  
> **username_1**: @username_2: This is based on looking at the logfiles of my computers that act as servers. I see pretty continuous attacks on any ports exposed through firewall rules and this must mean the router's external interface is continually being probed. Simple desktop machines may a lower exposure but any full-node Bitcoin application has the possibility of being contacted by other bitcoin nodes and some of those may be hostile.  

---

### Answer by username_3 on 2021-01-14. Score: -1

If we use bitcoin in the default way then its not much secure. We experienced this hack recently.
One of our client's server get hacked but the hacker unable to transfer the bitcoins from the node, because the wallet was encrypted and the wallet passphrase/password was with client only. So encryption saved the client assets.

Few suggestions:

* Always clear terminal history if encrypting btc wallet using bitcoin cli


---

