<p>Backing up the encrypted wallet file and saving the password elsewhere is basically equivalent to encrypting the seed itself and saving the encrypted seed in a different location to the encryption key. But indeed, that would require both parts to be used so would be more secure than just backing up an unencrypted seed itself</p>

CC BY-SA 3.0
2017-10-16T16:06:06.797Z
Then shouldn't we stop suggesting people to use the seed for securing their coins? All major wallets tend to suggest using it even though it's significantly less secure compared to the simple encrypted wallet file with a password method.
Pineapple29
CC BY-SA 3.0
2017-10-16T19:29:51.650Z
They do normally suggest backing up the seed in a secure place, and a paper copy of it in a safe place in your house should be pretty secure even if it's not encrypted
meshcollider
CC BY-SA 3.0
2017-10-16T19:34:06.523Z
If the cleaning lady stumbles upon this safe place then the wallet is gone.. Think 5-10 years from now when people will be actively looking for those 12 words everywhere they look. It will become common knowledge that if you see a piece of paper with 12 random words on it, you found gold. We should go back to the method of 2 step authentication that exists when encrypting and backing up the wallet file. Just need to create a strong password that can't be brute forced.
Pineapple29
CC BY-SA 3.0
2017-10-16T10:42:32.363Z
2017-10-16T10:42:32.363Z
meshcollider
<p>If you use the seed, and it gets compromised, then you immediately lost all your coins.
But if you only save the password safely, and backup the wallet file in several locations, then you gain a form of multi-factor authentication, because if the password gets compromised - the wallet file is still needed, and vice versa.</p>

<p>The seed may be useful for portability of the wallet, but it's a major security risk compared to just using the password and wallet file.</p>

<p>Am I missing something here?</p>

<wallet-security>
Isn't it safer to only encrypt the wallet, then back it up, and NOT save the seed?
Pineapple29
# Isn't it safer to only encrypt the wallet, then back it up, and NOT save the seed?

(Asked by: username_0 on 2017-10-16)

If you use the seed, and it gets compromised, then you immediately lost all your coins.
But if you only save the password safely, and backup the wallet file in several locations, then you gain a form of multi-factor authentication, because if the password gets compromised - the wallet file is still needed, and vice versa.

The seed may be useful for portability of the wallet, but it's a major security risk compared to just using the password and wallet file.

Am I missing something here?

**Tags:** wallet-security


---

## 1 answers

### Answer by username_1 on 2017-10-16. Score: 0 | Accepted answer

Backing up the encrypted wallet file and saving the password elsewhere is basically equivalent to encrypting the seed itself and saving the encrypted seed in a different location to the encryption key. But indeed, that would require both parts to be used so would be more secure than just backing up an unencrypted seed itself

> **Comments:**
> **username_0**: Then shouldn't we stop suggesting people to use the seed for securing their coins? All major wallets tend to suggest using it even though it's significantly less secure compared to the simple encrypted wallet file with a password method.  
> **username_1**: They do normally suggest backing up the seed in a secure place, and a paper copy of it in a safe place in your house should be pretty secure even if it's not encrypted  
> **username_0**: If the cleaning lady stumbles upon this safe place then the wallet is gone.. Think 5-10 years from now when people will be actively looking for those 12 words everywhere they look. It will become common knowledge that if you see a piece of paper with 12 random words on it, you found gold. We should go back to the method of 2 step authentication that exists when encrypting and backing up the wallet file. Just need to create a strong password that can't be brute forced.  

---

