<blockquote>
  <p><strong>Is there any software or organization that can verify whether wallet is secure or not?</strong></p>
</blockquote>

<ul>
<li><p>You can use an open source wallet and take the time to read and understand all the code and then compile it yourself. This would be an unfeasably large task for most ordinary people. Software developers might find it a bit easier but it is still a large amount of work.</p></li>
<li><p>You can use a network sniffer to discover where a standalone wallet on a device you own is sending data. </p></li>
<li><p>You could pay a well-known independent security consultant to perform the above analysis or more likely, arrange for an employee or associate to do this. Someone of the stature of Schneier for example. This would be very expensive.</p></li>
</ul>

<hr>

<p>You can avoid the need for this by storing your private keys, and generating transactions, on a computer that is not connected to any network. Then <em>carefully</em> move the raw transaction data to a connected machine for transmission. For example use a new clean USB stick for each transaction. The connected machine has no access to your private keys and therefore cannot surreptitiously divulge them. Some software wallets support this (Armory?) and some hardware wallets are used in this manner (Trezor, Ledger).</p>

CC BY-SA 4.0
2019-11-22T11:09:59.693Z
2019-11-22T11:15:29.770Z
2019-11-22T11:15:29.770Z
RedGrittyBrick
<p>Some day, I thought that there are may fraud wallet to steal bitcoin.</p>

<p>It is really very achieved as following:</p>

<blockquote>
  <p>User should make a keypair at first time. at this time, wallet
  software can send keypair to operator's server, but user doesn't know
  absolutely about this situation unless they capture network packets using Wireshark between wallet and destination address which is forwarded by wallet.</p>
</blockquote>

<p>Of course, well-known wallet software may be verified, but I think that we should be careful brandnew wallet software because they are not verified. </p>

<p>Okay, it was my thought so far and my question is: </p>

<ol>
<li><strong>Is there any software or organization that can verify whether wallet is secure or not?</strong></li>
<li><strong>If first question's answer is yes, what is the method?</strong></li>
</ol>

<p>Sorry for my English.</p>

<transactions><wallet><fraud>
Is Wallet softwares safe? then how verify?
Hyunsoo
# Is Wallet softwares safe? then how verify?

(Asked by: username_0 on 2019-11-20)

Some day, I thought that there are may fraud wallet to steal bitcoin.

It is really very achieved as following:

> User should make a keypair at first time. at this time, wallet
> software can send keypair to operator's server, but user doesn't know
> absolutely about this situation unless they capture network packets using Wireshark between wallet and destination address which is forwarded by wallet.

Of course, well-known wallet software may be verified, but I think that we should be careful brandnew wallet software because they are not verified.

Okay, it was my thought so far and my question is:

1. **Is there any software or organization that can verify whether wallet is secure or not?**
2. **If first question's answer is yes, what is the method?**

Sorry for my English.

**Tags:** transactions, wallet, fraud


---

## 1 answers

### Answer by username_1 on 2019-11-22. Score: 2 | Accepted answer

> **Is there any software or organization that can verify whether wallet is secure or not?**

* You can use an open source wallet and take the time to read and understand all the code and then compile it yourself. This would be an unfeasably large task for most ordinary people. Software developers might find it a bit easier but it is still a large amount of work.
* You can use a network sniffer to discover where a standalone wallet on a device you own is sending data.
* You could pay a well-known independent security consultant to perform the above analysis or more likely, arrange for an employee or associate to do this. Someone of the stature of Schneier for example. This would be very expensive.

---

You can avoid the need for this by storing your private keys, and generating transactions, on a computer that is not connected to any network. Then *carefully* move the raw transaction data to a connected machine for transmission. For example use a new clean USB stick for each transaction. The connected machine has no access to your private keys and therefore cannot surreptitiously divulge them. Some software wallets support this (Armory?) and some hardware wallets are used in this manner (Trezor, Ledger).


---

