<p>Take a look at <a href="http://bippy.org" rel="nofollow">http://bippy.org</a>.</p>

<p>The main potential issue I see with using a vanity address for cold storage is in spending from the address multiple times. If the wallet software you use isn't properly crafted (i.e., by using <a href="http://tools.ietf.org/rfc/rfc6979.txt" rel="nofollow">RFC 6979</a>) there's a possibility that it will use the same <code>k</code> value during <a href="http://en.wikipedia.org/wiki/Elliptic_Curve_Digital_Signature_Algorithm" rel="nofollow">ECDSA</a> on the transaction, which will make it possible to recover your private key (see <a href="http://rdist.root.org/2010/11/19/dsa-requirements-for-random-k-value/" rel="nofollow">this</a>). Note that this potential issue applies to <em>any</em> address for which there is more than one spend, not just vanity addresses. But I bring it up in particular here since the nature of a vanity address implies a reasonable likelihood of multiple spends from the address.</p>

CC BY-SA 3.0
2014-12-18T02:46:06.940Z
Would there be a possibility of Bippy causing this? I'd more than likely only be using it for very few spends, and more long-term storage and many deposits.
skeeballassault
CC BY-SA 3.0
2014-12-18T03:33:32.543Z
Or could I just hypothetically use Vanitygen offline, and then encrypt it with Bippy? Vanitygen is tried and true, I'd assume it wouldn't have any glaring issues.
skeeballassault
CC BY-SA 3.0
2014-12-18T14:06:09.857Z
This specific issue I mentioned is relevant at the time of spending, or that is to say, after the private key has been imported into wallet software in order to retrieve funds. It is not related to how the private key or address are generated.
Chuck Batson
CC BY-SA 3.0
2014-12-18T14:08:40.613Z
In summary -- when spending, know your wallet software.  :-)
Chuck Batson
CC BY-SA 3.0
2014-12-17T23:04:14.697Z
2014-12-17T23:04:14.697Z
Chuck Batson
<p>I want to generate a vanity address with BIP-38 encryption for a cold storage paper wallet, how would I go about securely making one? From what I've found, generating a vanity address with Vanitygen does not allow me to encrypt the key. Or is a vanity address advisable at all for long-term cold storage?</p>

<paper-wallet><coldstorage><vanity-address><bip38>
How would one go about generating a BIP-38 encrypted vanity address for cold storage?
skeeballassault
# How would one go about generating a BIP-38 encrypted vanity address for cold storage?

(Asked by: username_0 on 2014-12-17)

I want to generate a vanity address with BIP-38 encryption for a cold storage paper wallet, how would I go about securely making one? From what I've found, generating a vanity address with Vanitygen does not allow me to encrypt the key. Or is a vanity address advisable at all for long-term cold storage?

**Tags:** paper-wallet, coldstorage, vanity-address, bip38


---

## 1 answers

### Answer by username_1 on 2014-12-17. Score: 1 | Accepted answer

Take a look at <http://bippy.org>.

The main potential issue I see with using a vanity address for cold storage is in spending from the address multiple times. If the wallet software you use isn't properly crafted (i.e., by using [RFC 6979](http://tools.ietf.org/rfc/rfc6979.txt)) there's a possibility that it will use the same `k` value during [ECDSA](http://en.wikipedia.org/wiki/Elliptic_Curve_Digital_Signature_Algorithm) on the transaction, which will make it possible to recover your private key (see [this](http://rdist.root.org/2010/11/19/dsa-requirements-for-random-k-value/)). Note that this potential issue applies to *any* address for which there is more than one spend, not just vanity addresses. But I bring it up in particular here since the nature of a vanity address implies a reasonable likelihood of multiple spends from the address.

> **Comments:**
> **username_0**: Would there be a possibility of Bippy causing this? I'd more than likely only be using it for very few spends, and more long-term storage and many deposits.  
> **username_0**: Or could I just hypothetically use Vanitygen offline, and then encrypt it with Bippy? Vanitygen is tried and true, I'd assume it wouldn't have any glaring issues.  
> **username_1**: This specific issue I mentioned is relevant at the time of spending, or that is to say, after the private key has been imported into wallet software in order to retrieve funds. It is not related to how the private key or address are generated.  
> **username_1**: In summary -- when spending, know your wallet software.  :-)  

---

