<p>Yes for all your questions.</p>

<p>Suppose you don't encrypt wallet, if someone access your computer with unlocked bitcoin directory (such directory must be readable for running bitcoin) he can steal your BTC.</p>

<p>It might be better just to encrypt wallet and leave unencrypted directory. He can steal encrypted wallet.dat, which isn't useful.</p>

CC BY-SA 3.0
2013-08-01T06:31:00.977Z
When encrypting my wallet using encryptwallet the following API calls fail until I run walletpassphrase:

settxfee
sendtoaddress

Which are essential for my web app.

How would this be done? Every time a user wants to send Bitcoins to another address I will need to call the walletpassphrase function, which requires to enter the passphrase and leaves the wallet.dat file unencrypted for N seconds.
Antoni
CC BY-SA 3.0
2013-08-01T06:56:43.883Z
Yes, you are right
ripazha
CC BY-SA 3.0
2013-07-30T19:28:13.303Z
2013-07-30T19:28:13.303Z
ripazha
<p>I'm building a web app making JSON-RPC calls to the bitcoind server. I have security concerns on how to protect the wallet.dat file.</p>

<p>I'm encrypting the directory where wallet.dat will be. 
Should I also use the bitcoind encryptwallet command? 
When using Bitcoin client wallets like Electrum every time I send BTC it asks me for my password. Building a web app where users will have their own account (and addresses) should a bitcoind password be used? Does bitcoind store the private keys for every public address generated?</p>

<p>Thanks</p>

<ubuntu><wallet.dat>
Securing web app wallet.dat (Ubuntu)
Antoni
# Securing web app wallet.dat (Ubuntu)

(Asked by: username_0 on 2013-07-30)

I'm building a web app making JSON-RPC calls to the bitcoind server. I have security concerns on how to protect the wallet.dat file.

I'm encrypting the directory where wallet.dat will be.
Should I also use the bitcoind encryptwallet command?
When using Bitcoin client wallets like Electrum every time I send BTC it asks me for my password. Building a web app where users will have their own account (and addresses) should a bitcoind password be used? Does bitcoind store the private keys for every public address generated?

Thanks

**Tags:** ubuntu, wallet.dat


---

## 1 answers

### Answer by username_1 on 2013-07-30. Score: 0 | Accepted answer

Yes for all your questions.

Suppose you don't encrypt wallet, if someone access your computer with unlocked bitcoin directory (such directory must be readable for running bitcoin) he can steal your BTC.

It might be better just to encrypt wallet and leave unencrypted directory. He can steal encrypted wallet.dat, which isn't useful.

> **Comments:**
> **username_0**: When encrypting my wallet using encryptwallet the following API calls fail until I run walletpassphrase:  settxfee sendtoaddress  Which are essential for my web app.  How would this be done? Every time a user wants to send Bitcoins to another address I will need to call the walletpassphrase function, which requires to enter the passphrase and leaves the wallet.dat file unencrypted for N seconds.  
> **username_1**: Yes, you are right  

---

