<p>One method commonly in use is an "offline wallet."</p>

<p>To generate an offline wallet, launch a bitcoin client on a known clean computer, virtual machine, or use a bootable Linux distribution like LinuxCoin. <strong>Make sure this system is NOT connected to the internet for this process.</strong> When the bitcoin client is first launched, it generates a brand new wallet.dat file with one address. Save that wallet.dat file to a thumb drive along with a text file containing your new bitcoin address. Delete the wallet.dat from the machine once you've copied it.</p>

<p>Any coins sent to that address are only accessible to someone holding the wallet.dat file on your thumb drive and since the computer which generated that thumb drive has never seen the internet so it's a pretty fair bet that your copy is the only copy. Send any coins you want to secure to your "offline" wallet's address and use your thumb drive to recover the coins when needed. Remember that once you've used the wallet on the thumb drive, it is now "burned" and a new one must be generated.</p>

<p><strong>Edit:</strong> <em>There is an excellent resource for wallet-securing techniques available on <a href="https://en.bitcoin.it/wiki/Securing_your_wallet">the Bitcoin wiki</a> which also covers backup methods, encryption and many other topics at far too great a length to cover in a single answer.</em></p>

CC BY-SA 3.0
2011-08-30T21:37:35.083Z
2011-09-01T20:55:15.697Z
2011-09-01T20:55:15.697Z
David Perry
<p>The upcoming Bitcoin client v0.4 will have encryption on wallet.dat if you choose to set password on wallet.</p>

CC BY-SA 3.0
2011-10-05T06:10:50.717Z
v0.4 has been released now. Voted up.
Highly Irregular
CC BY-SA 3.0
2011-08-30T22:03:42.857Z
2011-08-30T22:03:42.857Z
Codler
<p>I use virtual machine with encrypted home folder. It's a bit geeky, but is very secure and I am able to send money with no hassle of repeating the process (David Perry's advice). Don't forget to encrypt and backup your wallet.dat regularly.</p>

<p>With time there will be many reputable online wallet services available, though I would recommend diversifying your bitcoins in multiple places, just in case.</p>

CC BY-SA 3.0
2011-08-30T22:13:56.973Z
2011-08-30T22:13:56.973Z
klemen
<p>This is an involved topic and the answer will change as bitcoin clients improve.  Here is what works for me...use a drive encryption solution (i.e. truecrypt) and keep your wallet.dat file on it (you'll need to read the docs about how to relocate the wallet.dat file to a different location).  I recommend using aes256 encryption.  Make sure you remember your password used to encrypt the drive.</p>

<p>After creating a wallet on the encrypted drive, shut down bitcoin and unmount the encrypted drive (important to avoid data corruption).  For backup, just copy the <em>encrypted</em> drive to other devices both inside and outside your home (i.e. online storage provider).  Since the volume is encrypted with strong encryption, it will be unusable for anyone that obtains a copy and you will have multiple copies in case your hard drive crashes (just don't lose your password!).  Anytime you spend coins out of your wallet or generate new addresses, you should update your backups.</p>

<p>Note, this solution may not protect you from viruses...you should never handle your unencrypted wallet.dat file on a computer you suspect may be infected with viruses.  There are wallet stealing viruses in the wild.  There are more advanced measures that can be taken that further mitigate the threat posed by viruses.</p>

CC BY-SA 3.0
2011-08-30T21:42:05.287Z
2011-08-30T21:42:05.287Z
Stephen
<p>To avoid heavy coin losses I advise you <strong>not to keep all your money in one place</strong>. You can, for example, create one wallet for everyday payments and another wallet for savings.</p>

<p>The savings wallet is rarely used and usually contains more coins, so you should enforce its security by keeping it offline most of the time. You can save this wallet inside an encrypted USB stick, write its private key in a piece of paper or use any other method that you feel comfortable with.</p>

<p>The everyday wallet should contain less money (enough for day to day transactions) and be more accessible. You can keep it encrypted in your computer/phone or take an USB stick with you everywhere. Usability and security come hand in hand here so you should choose a solution that fits your needs.</p>

<p>You can obviously spread your money through many other places (multiple offline/online wallets, ewallets, exchange sites, etc.). This will reduce the probability of loosing a lot of money.</p>

CC BY-SA 3.0
2011-08-30T22:46:59.037Z
2011-08-30T22:46:59.037Z
nmat
<p>There are a few options available. Here are a couple:</p>

<p>Encryption with Winrar is secure if you use a long password with no dictionary words, both upper case and lower case letters, numbers and special characters in it.</p>

<p>Truecrypt is more secure but most people don't have it already installed, so it's little more time to get it setup.</p>

<p>Whatever password you use to encrypt, make sure to record it on paper, and physically store it in a couple of easy to remember and secure locations that you will not forget. Without it, you won't be able to decrypt and access your bitcoin wallet.</p>

CC BY-SA 3.0
2011-08-30T21:47:06.577Z
2011-08-30T21:52:59.833Z
2011-08-30T21:52:59.833Z
Amin
<p>The paper is most secure, because it will be readable after 20 years. If you need long time secure, I suggest following</p>

<ol>
<li>Disconnect from internet (or you can boot from CD).</li>
<li>Run multibit and create a new wallet</li>
<li>Copy you public bitcoin address to some txt file or your email</li>
<li>Export your private key as plain text myprivatekey.txt (no password, no crypt)</li>
<li>Close multibit</li>
<li>Print file myprivatekey.txt on the printer in two copies</li>
<li>Delete the entire multibit data folder, it should be in C:\Users\YourUserName\AppData\Roaming\MultiBit\</li>
<li>Take scissors and cut every copy of the private key in half.</li>
<li>Hide the halves separately into waterproof case and hide the copy in different place/building (for the case of fire).</li>
<li>Remember your hiding place.</li>
</ol>

<p>If you do mistake, you will loose all your bitcoins!</p>

<p>Before you do this, try this with empty wallet. And ensure yourself that you are able to recover the wallet from the private keys from the printed and cut paper on another computer.</p>

<p>This will work, even if all clouds, email, computers, dropboxes and hardisks vanish/destroy and your house burn.</p>

CC BY-SA 3.0
2013-12-02T21:43:43.037Z
2013-12-02T21:59:06.767Z
2013-12-02T21:59:06.767Z
Tomas Kubes
<p><a href="https://bitcointalk.org/index.php?topic=17240.0" rel="nofollow">https://bitcointalk.org/index.php?topic=17240.0</a></p>

<p>This link will show you how to create a secure wallet.</p>

CC BY-SA 3.0
2011-08-30T21:49:29.573Z
posting back to the forum is no good.
Buckhead_Comp_Ser_Co
CC BY-SA 3.0
2011-08-31T08:30:46.560Z
@tysat You should include the relevant section from the forum to make your answer more resilient to loss of the link
Gary
CC BY-SA 3.0
2011-08-30T21:37:12.003Z
2011-08-30T21:37:12.003Z
tysat
<p>The best advise is to back up your wallet account and have the seed phrase securely saved somewhere. Make sure not to disclose this seed phrase bc who ever has it can steal your money within minutes.  Encrypt your wallet also, just be patient enough to find the best encryption platform. </p>

CC BY-SA 4.0
2019-11-28T10:03:00.120Z
2019-11-28T10:03:00.120Z
Vincent Wong
<p>The "offline wallet" method described by David Perry is a good way to securely <em>generate</em> a bitcoin address/wallet.dat but in order to be secure from both loss and theft the first thing you will want to do is encrypt that wallet, and then make <strong>many</strong> different copies of it.</p>

<p>One easy way to do this is using the program <a href="http://www.truecrypt.org/">TrueCrypt</a> as explained <a href="http://bitcointalk.org/?topic=5194.0">here</a>.  To summarise the contents of the link, you will use the default options in the software to create an encrypted volume, then move your "wallet.dat" file into it as soon as you create it on the trusted, offline computer.  This will create an encrypted copy that can be placed on a thumbdrive and then saved in multiple locations such as <a href="http://mail.google.com">gmail</a>, <a href="http://db.tt/NXE7TIX">dropbox</a>, a physical safe, etc.</p>

<p>I would also <em>highly</em> recommend testing the file once with a small amount before copying any substantial sum of bitcoins to your newly created address.  If you are satisfied with both the test and all the precautions you have taken, then transfer the rest.  You can keep your wallet secure by not accessing it frequently, so this should be used as a savings wallet and not for regular transactions.  Hope this helps!  Also, you can find an excellent overview of good wallet practices and security methods at <a href="https://en.bitcoin.it/wiki/Securing_your_wallet">https://en.bitcoin.it/wiki/Securing_your_wallet</a></p>

CC BY-SA 3.0
2013-12-02T21:57:55.687Z
That is not secure for me, because I would forgot/lost the password after several years.
Tomas Kubes
CC BY-SA 4.0
2018-11-15T21:00:40.593Z
update: TrueCrypt is deprecated. BitLocker is also broken according to https://ieeexplore.ieee.org/document/7467359 and other sources. I recommend https://cryptomator.org/ or PGP
Tudor
CC BY-SA 3.0
2011-08-30T21:47:44.180Z
2011-08-30T22:55:02.700Z
2011-08-30T22:55:02.700Z
eMansipater
<p>The standard Bitcoin client does not encrypt wallet files, so any malicious user that gains access to this file will be able to transfer all the coins to their own wallet.  Furthermore, if I lose the wallet file then I lose access to those coins.  What steps must I take to prevent loss of coins like this?</p>

CC BY-SA 3.0
2011-10-05T06:15:52.847Z
Note that the latest version of the client does encrypt wallet files now (v0.4 at the time of writing)
Highly Irregular
CC BY-SA 3.0
2011-08-30T22:50:04.020Z
Any answer to this question should include this link: https://en.bitcoin.it/wiki/Securing_your_wallet
ripper234
<wallet><backup><security><encryption>
How can I keep my wallet secure?
Michael McGowan
# How can I keep my wallet secure?

(Asked by: username_0 on 2011-08-30)

The standard Bitcoin client does not encrypt wallet files, so any malicious user that gains access to this file will be able to transfer all the coins to their own wallet. Furthermore, if I lose the wallet file then I lose access to those coins. What steps must I take to prevent loss of coins like this?

**Tags:** wallet, backup, security, encryption

> **Comments:**
> **username_2**: Any answer to this question should include this link: https://en.bitcoin.it/wiki/Securing_your_wallet  
> **username_1**: Note that the latest version of the client does encrypt wallet files now (v0.4 at the time of writing)  

---

## 10 answers

### Answer by username_14 on 2011-08-30. Score: 17 | Accepted answer

The "offline wallet" method described by username_3 username_3 is a good way to securely *generate* a bitcoin address/wallet.dat but in order to be secure from both loss and theft the first thing you will want to do is encrypt that wallet, and then make **many** different copies of it.

One easy way to do this is using the program [TrueCrypt](http://www.truecrypt.org/) as explained [here](http://bitcointalk.org/?topic=5194.0). To summarise the contents of the link, you will use the default options in the software to create an encrypted volume, then move your "wallet.dat" file into it as soon as you create it on the trusted, offline computer. This will create an encrypted copy that can be placed on a thumbdrive and then saved in multiple locations such as [gmail](http://mail.google.com), [dropbox](http://db.tt/NXE7TIX), a physical safe, etc.

I would also *username_1* recommend testing the file once with a small amount before copying any substantial sum of bitcoins to your newly created address. If you are satisfied with both the test and all the precautions you have taken, then transfer the rest. You can keep your wallet secure by not accessing it frequently, so this should be used as a savings wallet and not for regular transactions. Hope this helps! Also, you can find an excellent overview of good wallet practices and security methods at <https://en.bitcoin.it/wiki/Securing_your_wallet>

> **Comments:**
> **username_9**: That is not secure for me, because I would forgot/lost the password after several years.  
> **username_15**: update: TrueCrypt is deprecated. BitLocker is also broken according to https://ieeexplore.ieee.org/document/7467359 and other sources. I recommend https://cryptomator.org/ or PGP  

---

### Answer by username_3 on 2011-08-30. Score: 20

One method commonly in use is an "offline wallet."

To generate an offline wallet, launch a bitcoin client on a known clean computer, virtual machine, or use a bootable Linux distribution like LinuxCoin. **Make sure this system is NOT connected to the internet for this process.** When the bitcoin client is first launched, it generates a brand new wallet.dat file with one address. Save that wallet.dat file to a thumb drive along with a text file containing your new bitcoin address. Delete the wallet.dat from the machine once you've copied it.

Any coins sent to that address are only accessible to someone holding the wallet.dat file on your thumb drive and since the computer which generated that thumb drive has never seen the internet so it's a pretty fair bet that your copy is the only copy. Send any coins you want to secure to your "offline" wallet's address and use your thumb drive to recover the coins when needed. Remember that once you've used the wallet on the thumb drive, it is now "burned" and a new one must be generated.

**Edit:** *There is an excellent resource for wallet-securing techniques available on [the Bitcoin wiki](https://en.bitcoin.it/wiki/Securing_your_wallet) which also covers backup methods, encryption and many other topics at far too great a length to cover in a single answer.*


---

### Answer by username_4 on 2011-08-30. Score: 5

The upcoming Bitcoin client v0.4 will have encryption on wallet.dat if you choose to set password on wallet.

> **Comments:**
> **username_1**: v0.4 has been released now. Voted up.  

---

### Answer by username_5 on 2011-08-30. Score: 3

I use virtual machine with encrypted home folder. It's a bit geeky, but is very secure and I am able to send money with no hassle of repeating the process (username_3 username_3's advice). Don't forget to encrypt and backup your wallet.dat regularly.

With time there will be many reputable online wallet services available, though I would recommend diversifying your bitcoins in multiple places, just in case.


---

### Answer by username_6 on 2011-08-30. Score: 3

This is an involved topic and the answer will change as bitcoin clients improve. Here is what works for me...use a drive encryption solution (i.e. truecrypt) and keep your wallet.dat file on it (you'll need to read the docs about how to relocate the wallet.dat file to a different location). I recommend using aes256 encryption. Make sure you remember your password used to encrypt the drive.

After creating a wallet on the encrypted drive, shut down bitcoin and unmount the encrypted drive (important to avoid data corruption). For backup, just copy the *encrypted* drive to other devices both inside and outside your home (i.e. online storage provider). Since the volume is encrypted with strong encryption, it will be unusable for anyone that obtains a copy and you will have multiple copies in case your hard drive crashes (just don't lose your password!). Anytime you spend coins out of your wallet or generate new addresses, you should update your backups.

Note, this solution may not protect you from viruses...you should never handle your unencrypted wallet.dat file on a computer you suspect may be infected with viruses. There are wallet stealing viruses in the wild. There are more advanced measures that can be taken that further mitigate the threat posed by viruses.


---

### Answer by username_7 on 2011-08-30. Score: 2

To avoid heavy coin losses I advise you **not to keep all your money in one place**. You can, for example, create one wallet for everyday payments and another wallet for savings.

The savings wallet is rarely used and usually contains more coins, so you should enforce its security by keeping it offline most of the time. You can save this wallet inside an encrypted USB stick, write its private key in a piece of paper or use any other method that you feel comfortable with.

The everyday wallet should contain less money (enough for day to day transactions) and be more accessible. You can keep it encrypted in your computer/phone or take an USB stick with you everywhere. Usability and security come hand in hand here so you should choose a solution that fits your needs.

You can obviously spread your money through many other places (multiple offline/online wallets, ewallets, exchange sites, etc.). This will reduce the probability of loosing a lot of money.


---

### Answer by username_8 on 2011-08-30. Score: 2

There are a few options available. Here are a couple:

Encryption with Winrar is secure if you use a long password with no dictionary words, both upper case and lower case letters, numbers and special characters in it.

Truecrypt is more secure but most people don't have it already installed, so it's little more time to get it setup.

Whatever password you use to encrypt, make sure to record it on paper, and physically store it in a couple of easy to remember and secure locations that you will not forget. Without it, you won't be able to decrypt and access your bitcoin wallet.


---

### Answer by username_9 on 2013-12-02. Score: 1

The paper is most secure, because it will be readable after 20 years. If you need long time secure, I suggest following

1. Disconnect from internet (or you can boot from CD).
2. Run multibit and create a new wallet
3. Copy you public bitcoin address to some txt file or your email
4. Export your private key as plain text myprivatekey.txt (no password, no crypt)
5. Close multibit
6. Print file myprivatekey.txt on the printer in two copies
7. Delete the entire multibit data folder, it should be in C:\Users\YourUserName\AppData\Roaming\MultiBit\
8. Take scissors and cut every copy of the private key in half.
9. Hide the halves separately into waterproof case and hide the copy in different place/building (for the case of fire).
10. Remember your hiding place.

If you do mistake, you will loose all your bitcoins!

Before you do this, try this with empty wallet. And ensure yourself that you are able to recover the wallet from the private keys from the printed and cut paper on another computer.

This will work, even if all clouds, email, computers, dropboxes and hardisks vanish/destroy and your house burn.


---

### Answer by username_10 on 2011-08-30. Score: 1

<https://bitcointalk.org/index.php?topic=17240.0>

This link will show you how to create a secure wallet.

> **Comments:**
> **username_11**: posting back to the forum is no good.  
> **username_12**: @username_10 You should include the relevant section from the forum to make your answer more resilient to loss of the link  

---

### Answer by username_13 on 2019-11-28. Score: 0

The best advise is to back up your wallet account and have the seed phrase securely saved somewhere. Make sure not to disclose this seed phrase bc who ever has it can steal your money within minutes. Encrypt your wallet also, just be patient enough to find the best encryption platform.


---

